Nigeria - CBN, SEC, NAICOM and PenCom perimeter

Nigeria financial permissions and regulator dossier

Nigeria allocates deposits, payments and foreign exchange to the CBN, capital markets and digital assets to the SEC, insurance to NAICOM and occupational pensions to PenCom. The legal status and operating scope must be verified authority by authority.

Talk to an advisor

Route facts

Jurisdiction facts

Regulator map

CBN for banks, payment-service providers, mobile money, bureaux de change and international transfers; SEC for capital-market operators, collective schemes, crowdfunding and digital assets.

Specialist authorities

NAICOM licenses insurers, reinsurers and insurance intermediaries. PenCom licenses and supervises pension fund administrators and custodians.

Digital-asset status

SEC registration categories and controlled incubation apply by activity. Admission or approval-in-principle under ARIP is conditional and is not a final licence.

Permission coverage

Banking, payments, mobile money, FX, securities, funds, custody, insurance, credit, crowdfunding, digital assets, fiduciary services and pensions.

Territorial reach

Nigerian status is domestic and category-specific. It creates no ECOWAS passport and does not authorise a service in another country.

Review date

Regulatory summary reviewed as of 11 July 2026.

Read the perimeter first

Four authorities and several legal statuses sit behind the word licence

The Central Bank of Nigeria licenses commercial, merchant, non-interest, microfinance and payment-service banks and regulates the payment system, mobile money, switching, processing, payment solutions, bureaux de change and international money transfer operators. The Securities and Exchange Commission registers capital-market operators such as brokers, dealers, issuing houses, investment advisers, fund and portfolio managers, trustees, custodians, exchanges and other market infrastructure. It also administers securities crowdfunding and the digital-asset perimeter under the Investments and Securities Act 2025 and SEC rules. Current SEC materials use specific digital-asset labels, including DAOP, DAC, DAX, VASP, AVASP, DAI, DAPO and RATOP; the exact legal category, current capital circular and register record must be reconciled rather than shortened to a generic crypto licence. The National Insurance Commission handles insurance and reinsurance underwriting and intermediation, while the National Pension Commission supervises pension fund administrators and pension fund custodians. A corporate registration, tax record, sandbox admission, fintech assessment, association membership or payment integration is not a substitute for the relevant operating status. A group combining wallets, lending, investments and crypto can require different legal entities or multiple permissions, with product-specific analysis of who receives funds, holds assets, gives advice, executes trades or bears risk.

Permission families

Nigeria licence, approval and registration routes

Family	Official instrument and authority	Activities and exclusions	Entry, capital and reach
Family Commercial, merchant, non-interest and microfinance banking	Official instrument and authority CBN banking licence for the chosen class under BOFIA and category-specific CBN rules; payment-service banks use their own CBN banking category	Activities and exclusions Accept deposits and conduct only the banking activities allowed for the recorded class. A microfinance bank, payment-service bank, finance company or fintech cannot assume the scope of a commercial bank.	Entry, capital and reach A Nigerian applicant must meet the class-specific legal form, minimum capital, ownership, governance, management, risk, systems, AML/CFT and deposit-insurance requirements. CBN approval and the final licence are distinct stages.
Family Payments, switching, processing and payment solutions	Official instrument and authority CBN licence for Switching and Processing, Mobile Money Operator, or the applicable Payment Solution Service category, including PSSP, PTSP or Super-Agent scope	Activities and exclusions Provide only the payment function stated in the licence. Gateway technology, terminal services, agency networks, switching and control of customer value are not interchangeable.	Entry, capital and reach CBN applies category-specific capital, Nigerian establishment, ownership, governance, safeguarding or settlement, technology, cyber security, consumer, AML/CFT and reporting criteria.
Family Mobile money, stored value and remittance	Official instrument and authority CBN Mobile Money Operator licence for mobile-money issuance and operation; CBN approval for an International Money Transfer Operator and bank settlement arrangements	Activities and exclusions Issue and manage permitted mobile-money value or conduct approved inbound or outbound transfer functions as recorded. Neither route authorises deposit banking, investment products or unrestricted FX dealing.	Entry, capital and reach The file must evidence settlement and safeguarding, agent controls, transaction limits, customer identification, systems, complaints and liquidity. Current IMTO settlement and FX rules require separate verification.
Family Foreign exchange and bureaux de change	Official instrument and authority CBN Bureau de Change licence under the 2024 revised guidelines; authorised-dealer banking status or another specific CBN approval for other FX functions	Activities and exclusions A BDC may conduct only permitted retail FX business and is not a deposit-taking bank, payment switch or IMTO. Wholesale, remittance and derivatives activities need their own legal basis.	Entry, capital and reach Tier, capital, permissible ownership, premises, management, AML/CFT, transaction channels, returns and geographic conditions follow the current CBN guidelines and licence record.
Family Securities, advice, dealing, custody and market venues	Official instrument and authority SEC registration as the relevant capital-market operator, including broker, dealer, issuing house, investment adviser, custodian, exchange, clearing house or other approved infrastructure	Activities and exclusions Carry on only registered functions and use SEC-approved market arrangements. A payment licence, company registration or technology contract does not authorise securities solicitation, execution or custody.	Entry, capital and reach The SEC tests prescribed capital, controllers, directors, sponsored individuals, competence, premises, systems, client assets, market conduct, AML/CFT and continuing returns by operator type.
Family Funds, portfolio management, trustees and administration	Official instrument and authority SEC registration as fund or portfolio manager, corporate trustee, custodian or other operator, plus approval or registration of the collective investment scheme and offering documents	Activities and exclusions Manage portfolios, operate or administer schemes, hold scheme assets or act as trustee only in the recorded capacity. Product authorisation does not replace the operator's registration.	Entry, capital and reach Operator capital, sponsored personnel, fiduciary governance, valuation, segregation, custody, disclosures, investment restrictions, audit and scheme reporting must align across all participants.
Family Insurance, reinsurance and intermediaries	Official instrument and authority NAICOM licence under current Nigerian insurance legislation for an insurer or reinsurer and the applicable NAICOM status for brokers, agents, loss adjusters and other intermediaries	Activities and exclusions Underwrite only licensed classes or intermediate and support insurance within the recorded capacity. A broker or agent cannot carry underwriting risk, and a fintech distribution interface is not itself an insurer licence.	Entry, capital and reach NAICOM examines Nigerian incorporation, category-specific capital and statutory deposit, owners, governance, management, actuarial and risk functions, reinsurance, policyholder protection, business plan and reporting.
Family Consumer credit, mortgages, leasing and factoring	Official instrument and authority CBN licence for banks, microfinance banks, mortgage banks or finance companies where applicable; state moneylender authority and federal consumer-protection requirements for non-bank lending models	Activities and exclusions Lend, lease, finance mortgages or factor receivables only through the legally available route. A payment-service provider cannot add credit merely through its technology permission.	Entry, capital and reach Map deposit funding, own-account lending, digital origination and collections before choosing the route. Capital, pricing disclosure, affordability, data use, complaints and fair collection controls apply by model.
Family Crowdfunding and online investment platforms	Official instrument and authority SEC registration as a crowdfunding intermediary or another applicable operator under the SEC crowdfunding and capital-market rules	Activities and exclusions Host qualifying investment offers within issuer, investor, instrument and platform limits. Donation or reward functionality does not permit a platform to intermediate securities or take deposits.	Entry, capital and reach SEC reviews capital, governance, due diligence, disclosures, escrow or custody, investor limits, systems, complaints, recordkeeping and default or wind-down arrangements.
Family Digital assets and virtual-asset services	Official instrument and authority SEC registration in the exact current category, including Digital Asset Offering Platform (DAOP), Digital Asset Custodian (DAC), Digital Asset Exchange (DAX), VASP, AVASP, Digital Asset Intermediary (DAI), Digital Asset Platform Operator (DAPO, including token issuers) or RATOP; ARIP where directed	Activities and exclusions Operate only the registered digital-asset function and approved products. An ARIP admission or approval-in-principle is conditional, controlled and expressly not a final licence.	Entry, capital and reach The SEC assesses Nigerian presence, owners, management, technology, wallet and client-asset controls, market integrity, cyber security, AML/CFT, disclosures and reporting. The applicable capital must be checked against the live SEC circular for the exact category.
Family Trust, company and fiduciary services	Official instrument and authority SEC corporate-trustee or fund-related registration where capital-market assets are administered; general company-secretarial and trust work follows corporate, trustee and professional law	Activities and exclusions Act for regulated schemes, securities or debenture holders only with the matching SEC status. Incorporation, nominee or bookkeeping work does not create custody, investment-management or deposit permission.	Entry, capital and reach Analyse discretion, beneficial ownership, possession of client assets, legal profession restrictions and AML obligations. General corporate registration cannot replace specialist financial authorisation.
Family Occupational pensions and retirement assets	Official instrument and authority PenCom licence as Pension Fund Administrator or Pension Fund Custodian under pension legislation; approved scheme and product arrangements where required	Activities and exclusions A PFA administers and invests pension assets while a PFC holds them under the statutory separation of roles. A bank, insurer or investment manager is not automatically a licensed pension operator.	Entry, capital and reach PenCom applies capital, ownership, governance, fit-and-proper, systems, branch, custody, investment, member-data, service, audit and reporting requirements by role.
Family Gaming, lottery and other special activities	Official instrument and authority No gaming or lottery permission is contained in a CBN, SEC, NAICOM or PenCom financial licence; a separate current federal, state and local legal analysis is required	Activities and exclusions A bank, payment, securities, crowdfunding or digital-asset status does not authorise betting, gaming or lottery activity. Payment processing cannot legalise the underlying product.	Entry, capital and reach Regulatory allocation and local availability are time-sensitive. Confirm the competent gaming authority, tax, advertising, AML and consumer rules for each state before launch.

Entry conditions

The application must reconcile the licence category with real funds and asset flows

A Nigerian market-entry file starts with a perimeter memorandum that assigns every product feature to CBN, SEC, NAICOM, PenCom or another competent authority. It identifies the Nigerian applicant, corporate objects, shareholders and ultimate beneficial owners, directors and responsible officers, physical and technical operating presence, agents, outsourced providers, settlement banks and client-asset holders. The business plan must connect customer journeys and funds flows to forecasts, the current category-specific capital requirement, liquidity or statutory deposit, safeguarding, custody, reconciliation, complaints, cyber security, business continuity and wind-down. Banks and payment firms require CBN forms and supervisory engagement; capital-market and digital-asset firms require the relevant SEC operator category and registered personnel; insurers and pension firms follow the specialist authority's process. Source of funds, fitness and propriety, AML/CFT, sanctions screening, data protection, tax and consumer safeguards must be consistent across every document. Fees, capital figures and forms change and must be taken from the current official schedule. An approval-in-principle, no-objection, sandbox or ARIP admission is not the final operating permission and does not promise a launch date.

Regulator-facing process

A Nigerian regulatory mandate, stage by stage

The sequence prevents a corporate registration, provisional decision or fintech programme from being mistaken for final operating scope.

Stage 01 - Perimeter

Allocate every activity to its authority

Separate deposits, payments, mobile money, FX, securities, funds, insurance, lending, crowdfunding, digital assets, fiduciary work and pensions.

Record whether the legal status is a licence, registration, approval, programme admission or product approval, and identify combinations that need more than one.

Stage 02 - Applicant

Build the Nigerian entity, owners and control framework

Evidence legal form, capital, controllers, directors, sponsored or key staff, local operations, AML/CFT, systems, client assets and outsourcing for the selected route.

Use the current authority forms and demonstrate that corporate objects, bank accounts, forecasts and operational contracts describe the same business.

Stage 03 - Review

Complete the authority's assessment and conditions

Answer fitness, capital, technology, custody, market-conduct, consumer and operational-readiness questions through the regulator's live channel.

Treat approval-in-principle, ARIP and other conditional stages as limited decisions. Only final status and a verifiable official record support ordinary operation.

Stage 04 - Activation

Launch only the approved services

Confirm capital, premises, officers, settlement or custody, systems, policies, reporting accounts, complaints and counterparties before serving customers.

Products, agents, branches, major outsourcing and a change of control require category-specific notification or approval analysis before implementation.

After entry

Registration and licensing create continuing supervisory duties

Nigerian regulated firms must maintain the capital, governance, fit-and-proper management, AML/CFT, sanctions, safeguarding or custody, conduct, complaints, cyber security, data, outsourcing, audit and regulatory reporting duties of their category. CBN banks, payment firms, mobile-money operators, BDCs and IMTOs do not share one prudential or reporting framework. SEC brokers, fund managers, trustees, crowdfunding intermediaries and digital-asset operators likewise have separate capital, personnel, client-asset and market-conduct obligations. NAICOM and PenCom apply specialist policyholder and pension-member safeguards. A new product, branch, agent network, material service provider or cross-border offer can require prior approval, notification or another permission. A direct or indirect change of control, merger, acquisition, new major shareholder or replacement of key personnel must be tested against the authority's approval rules. Buying shares does not move the licence to another company; it leaves the status and full supervisory history with the regulated legal entity. Diligence must verify the live CBN, SEC, NAICOM or PenCom record, conditions, capital compliance, customer assets, litigation, enforcement, reporting and technology.

Verify it yourself

Primary official sources

Central Bank of Nigeria licensed institutions and payment providers
Official CBN directories and payment-system pages identify licensed banks, payment categories and recognised providers - cbn.gov.ng.
CBN revised Bureau de Change guidelines
The official 2024 guidelines set the BDC tiers, permitted business, entry requirements and continuing controls - cbn.gov.ng.
Securities and Exchange Commission operator registers and rules
Official SEC pages explain operator registration, registered firms, capital-market rules, crowdfunding and digital-asset categories - sec.gov.ng.
SEC 2026 digital-asset and ARIP notices
Current SEC releases distinguish controlled ARIP approval-in-principle from a final licence and direct users to registered-operator records - sec.gov.ng.
National Insurance Commission licensing portal
NAICOM's official portal and legislation cover insurer, reinsurer and intermediary licensing and supervision - naicom.gov.ng.
National Pension Commission operator directories
PenCom's official pages identify pension fund administrators, custodians and the Commission's supervisory functions - pencom.gov.ng.

FAQ

Nigeria regulator dossier questions

01 Is CBN approval enough for investment or digital-asset services?

No. CBN status covers the recorded banking, payment or FX function. Securities, investment and digital-asset activities generally require the matching SEC analysis and registration.

02 Is admission to the SEC ARIP a final crypto licence?

No. The SEC states that ARIP approval-in-principle is conditional and not a final licence. Verify the admitted scope, restrictions and current registered status.

03 Can a payment provider lend from its wallet?

Not merely because it has a payment licence. Credit, deposit funding, pricing, collections and consumer-protection features need a separate CBN, state and federal perimeter analysis.

04 Who regulates insurance and pensions?

NAICOM regulates insurance and reinsurance operators and intermediaries. PenCom regulates pension fund administrators and custodians. Their permissions are separate from CBN and SEC status.

05 Does a Nigerian permission cover other West African states?

No. Nigerian licences and registrations are domestic and category-specific. A host-country legal basis is required before serving another market.

Reviewed by the SKY7 advisory team. Last reviewed: 11 July 2026. Regulatory statements are made as of July 2026. This page is general information only, not legal, regulatory, tax, investment or financial advice. Digital-asset admissions, payment directions, capital requirements and the allocation of gaming authority are time-sensitive. Verify the current legislation, official register, conditions, application forms, capital method, fee schedule and transition notices before relying on any Nigerian permission or market-access statement.

Tell us what you need

Scope a regulated route in Nigeria

Bring the products, Nigerian structure, controllers, customer locations and complete funds and asset flow. SKY7 will map CBN, SEC, NAICOM, PenCom and specialist-authority evidence. Advisory fees and entity prices are on request.