Do you actually need registration?
The test is whether you provide a digital-asset service to other people. Trading your own money, however much of it, is not a regulated activity. Holding, trading or advising on someone else's assets for reward is.
| What you do | Registration needed? |
|---|---|
| Trade your own capital, any size | No |
| Run a P2P merchant account on an exchange | No, but you are inside the platform's rules and AML obligations |
| Buy and sell crypto for friends and family for a fee | Yes — this is brokering, however informal it feels |
| Run an OTC desk or a bureau | Yes |
| Operate an exchange or trading platform | Yes |
| Hold customer crypto | Yes — custody |
| Issue or offer a token to the Nigerian public | Yes |
| Manage crypto portfolios for clients | Yes |
| Accept crypto as payment for your ordinary business | No — see crypto for business |
| Build software for a licensed VASP | No — you are a vendor |
The trap most Nigerian operators fall into. "I just help people buy USDT and take a small cut" is brokering, and the informality is not a defence. If you hold client funds at any point — even for an hour — you are also doing custody. Volume is not the test; acting for others is.
The registration categories
The SEC's digital-asset rules define distinct categories with different requirements. Which one you need depends on function, and several businesses need more than one.
- Digital Asset Exchange — operating a venue where users trade digital assets with each other.
- Digital Asset Offering Platform — hosting the offer of digital assets to investors.
- Digital Asset Custodian — holding or safekeeping client assets or keys.
- Virtual Asset Service Provider / broker-dealer — dealing in digital assets for clients.
- Issuer — a person offering their own token to the public, which brings whitepaper and disclosure obligations.
See SEC crypto rules for how the perimeter is drawn and what each category must do on an ongoing basis.
ARIP: the realistic starting point
For most new or already-operating Nigerian businesses, the Accelerated Regulatory Incubation Programme is the practical entry. It exists because the SEC recognised that a functioning sector could not be brought inside the perimeter if the only door was full registration on day one.
The shape of it: you apply with your corporate documents, business model, AML framework and fit-and-proper information; the SEC assesses; if approved you operate under conditions and supervision, reporting regularly, while working toward full registration. Conditions commonly include limits on scope, mandatory disclosures to customers, and reporting cadence.
Do not market an ARIP approval as a full licence. Overstating regulatory status is itself a conduct problem, and it is one the SEC has publicly objected to. "Operating under the SEC's regulatory incubation programme" is accurate. "SEC licensed" is not, and users increasingly know the difference.
What you will need to have ready
A Nigerian company
CAC incorporation, with an objects clause that covers what you actually intend to do. Retrofitting this later is slower than doing it correctly at incorporation.
Paid-up capital, actually paid up
The digital-asset categories carry minimum capital requirements that were revised upward in the 2024 amendments, and for some categories a fidelity bond calculated as a proportion of that capital. Confirm current figures with the SEC or your counsel — they have changed more than once. Expect a number that excludes undercapitalised operators, because that is its purpose.
Fit and proper people
Directors, controllers and key officers are assessed on competence and probity. A prior financial-crime issue in the team is a serious obstacle.
A real AML/CFT framework
Written policy, a designated compliance officer, KYC procedures, transaction monitoring, sanctions screening, suspicious-transaction reporting, and record retention. A downloaded template with your name inserted will not survive review.
Custody and cybersecurity arrangements
How keys are held, who can move assets, segregation of client assets from your own, penetration testing, incident response. Client-asset segregation is the requirement whose absence has caused the worst failures in this sector.
Disclosure and complaints
Risk warnings, transparent fees, a documented complaints process with timelines.
Audited accounts and reporting capacity
You will report periodically. Build the capability before you are obliged to use it.
The part nobody warns you about: the bank account
Registration is necessary and not sufficient. You also need a Nigerian bank willing to hold your operating and client accounts.
The CBN's December 2023 guidelines permit banks to open designated accounts for VASPs — a defined, restricted account type rather than an ordinary current account. Permitted is not the same as eager. Each bank applies its own risk appetite, onboarding is documentation-heavy, and it commonly takes longer than founders plan for.
| What banks will ask for | Why |
|---|---|
| Your SEC registration or ARIP approval | The guidelines apply to licensed VASPs |
| AML/CFT policy and your compliance officer's details | They inherit your AML risk |
| Beneficial ownership, in full | Standard, and strictly applied here |
| Source-of-funds documentation for the capital | Standard |
| How client funds are segregated | Determines their exposure if you fail |
| Expected volumes and counterparty countries | Sets their monitoring parameters |
Plan for this in parallel, not afterwards. Begin conversations with two or three banks while your SEC application is in progress. A registered VASP with no naira account cannot operate.
Realistic cost and time
We will not publish a fee schedule that will be stale within a year — get current figures from the SEC and from counsel. What we can give you is the shape of the budget, which founders consistently underestimate:
- Paid-up capital — the largest item by a wide margin, and it must genuinely be paid up, not pledged.
- Fidelity bond where the category requires it.
- SEC application and registration fees.
- Legal and compliance advisory — for the application, the AML framework and the terms of service.
- Technology and security — custody infrastructure, penetration testing, monitoring tools.
- Ongoing compliance — a compliance officer's salary, audit, and reporting. This is a permanent operating cost, not a one-off.
On timing: incubation is faster than full registration by design, but "faster" still means months rather than weeks once you include incorporation, capital, documentation, review cycles and banking.
Three routes that avoid the licence
If the capital requirement is out of reach, the honest options are to change the business model rather than to operate unregistered.
Build for licensed operators
Software, analytics, compliance tooling and infrastructure sold to registered VASPs is not a regulated activity. See crypto APIs for developers.
Be an agent of a licensed entity
Operating within another platform's licence, on their compliance framework and under a proper agency agreement, is a legitimate structure.
Accept crypto for a non-crypto business
Taking payment in USDT for goods you actually sell is not a digital-asset service. That is a treasury and accounting question, covered in crypto payment gateways.
What operating unregistered actually costs. The SEC issues public warning notices naming unregistered operators — which ends your customer acquisition overnight. Banks close accounts on the strength of them. And if customer funds are involved, financial-crime exposure follows the individuals, not just the company. There is no version of this where staying quiet works at scale.
Primary sources: cbn.gov.ng · sec.gov.ng · firs.gov.ng. Regulation moves faster than any guide. Where a date or a figure matters to a decision you are about to make, confirm it against the official document before you act.
Frequently asked questions
Do I need a licence to run a crypto business in Nigeria?
If you provide a digital-asset service to other people — exchange, brokerage, custody, portfolio management, token issuance — yes, you need SEC registration or approval under its incubation programme. Trading your own capital is not a regulated activity, however large.
What is the minimum capital for a crypto exchange in Nigeria?
The SEC's digital-asset rules set minimum paid-up capital by category, and the figures were revised upward in the 2024 amendments, with a fidelity bond required for some categories. Because the numbers have changed more than once, confirm the current requirement with the SEC or your counsel rather than relying on any article.
Can I get a crypto licence in Nigeria as an individual?
No. Registration is granted to an incorporated entity with paid-up capital and fit-and-proper directors. You would incorporate with the CAC first, then apply.
How long does SEC crypto registration take in Nigeria?
Longer than founders plan for. Incubation is designed to be faster than full registration, but the realistic timeline runs to months once incorporation, capital, documentation, review cycles and bank onboarding are included.
Can a registered crypto business open a Nigerian bank account?
Yes — the CBN's December 2023 guidelines allow banks to open designated accounts for licensed VASPs. But banks apply their own risk appetite and the onboarding is documentation-heavy, so start those conversations in parallel with your SEC application, not after it.
Is it illegal to run an unregistered crypto business in Nigeria?
Providing regulated digital-asset services without registration exposes you to SEC enforcement and public warning notices, and banks routinely close accounts on the back of those. Where customer funds are involved, financial-crime exposure attaches to individuals as well as the company.
Related guides
Last reviewed: 2026-09-09. We update this page whenever Nigerian rules, fees or platform availability change. Nothing here is financial, tax or legal advice — see our editorial policy.
Open a CEX.IO account in 5 minutes
Licensed exchange supporting NGN, BVN/NIN KYC and instant naira-to-USDT conversion.