Remote VASP serving residents in Nigeria
Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.
Remote VASP is conditionally permitted in Nigeria with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- VASPs (including remote operators serving residents) must register with SEC Nigeria under the SEC Rules on Virtual Assets (2024) and ARIP Framework, paying registration fee of ₦30M (~$72K).
- Registration with NFIU/SCUML as a reporting entity on the goAML portal is mandatory; STRs must be filed within 24 hours.
- Obligation to conduct KYC/CDD, maintain risk-based compliance programs, and keep records under the Money Laundering (Prohibition and Prevention) Act (MLPPA).
- Travel Rule implementation is pending — no operational requirements yet, but operators should prepare for FATF-aligned obligations once enacted.
- National ID linkage for transactions is mandated under new (2024-2026) frameworks.
- Reporting of transaction data to FIRS (Federal Inland Revenue Service) for taxation purposes is required starting January 1, 2026.
Key Restrictions
- Operator must incorporate locally with the Corporate Affairs Commission (CAC) as a VASP — no foreign-entity-only remote operation is permitted.
- Must obtain full SEC license (not just registration) including Approval in Principle, meet minimum paid-up capital (NGN 500M for exchange, up to NGN 2B for custody), post a bond, and receive a 'No Objection' letter before commencing operations.
- CBN clearance for banking services is required if the operator needs access to the banking system.
- P2P exchanges have been targeted — new frameworks mandate delisting of naira from P2P platforms (2024-2026).
- The CBN ban on bank servicing to crypto firms (Feb 2021) was partially reversed (Dec 2023), but banking access remains constrained and subject to CBN clearance.
Key Risks
- Active enforcement: EFCC has frozen 1,146 bank accounts of crypto traders (2024) for alleged FX racketeering and naira manipulation — similar risk for unlicensed remote VASPs.
- Binance was specifically targeted in Nigeria (2024), demonstrating willingness to pursue foreign platforms serving residents without local licensing.
- SEC enforcement capacity is limited (new framework, March 2024), creating regulatory ambiguity but also risk of sudden enforcement actions.
- Currency (naira) manipulation allegations are a distinct enforcement vector beyond standard VASP licensing — remote operators pricing in naira face elevated risk.
- OFAC/EU/UN sanctions screening obligations apply if operators handle USD or have US nexus — failure to screen Nigerian users against sanctions lists creates parallel compliance risk.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
Evidence fact ng.licensing.sec-nigeria-rules-on-virtual-assets not found (may have been renamed).
VASP: VASP License from SEC Nigeria. Exchange: NGN 500M (~$320K USD). Offering Platform: NGN 100M. Custody: NGN 2B. Broker-Dealer: NGN 100M. 3-6 months. Highest crypto adoption in Africa. Framework is new — enforcement capacity limited.
EXCHANGE: Digital Asset Exchange license — NGN 500M minimum capital. Naira volatility and FX controls drive massive P2P trading. CBN launched eNaira partly as alternative to crypto.
CUSTODY: Digital Asset Custody license — NGN 2B minimum capital
Incorporate with CAC as VASP.
Apply to SEC under ARIP: Pay application fee ₦100,000 (~$240), processing fee ₦300,000 (~$722).
Receive Approval in Principle; meet conditions (capital, bond, KYC policies, officers).
Pay registration fee ₦30 million (~$72,000); obtain full license and "No Objection" letter before operations.
Obtain CBN clearance for banking services if needed.
Securities and Exchange Commission (SEC): Oversees crypto exchanges, Virtual Asset Service Providers (VASPs), and digital asset platforms as securities; enforces capital markets regulations and licensing.
CBN VASP Guidelines (Dec 2023)
NFIU's Mandate: NFIU receives mandatory reports (e.g., Suspicious Transaction Reports within 24 hours) from Financial Institutions (FIs), Other Financial Institutions (OFIs), and DNFBPs. Businesses must register as reporting entities on the NFIU's goAML portal, submitting documents like CAC registration, industry regulator licenses (e.g., CBN, SEC), and compliance officer details.
SCUML's Mandate: SCUML enforces AML/CFT rules for DNFBPs (e.g., lawyers, accountants, real estate agents), including registration (with certificate issuance), risk-based customer due diligence (CDD), internal compliance programs, record-keeping, staff training, and reporting suspicious activities to NFIU. From January 1, 2026, all DNFBP reports must use the SCUML portal exclusively.
Shared Framework: Both operate under laws like the Money Laundering (Prohibition and Prevention) Act (MLPPA). DNFBPs report to NFIU but are supervised by SCUML, while FIs report directly to NFIU via regulators like CBN or SEC. All entities must conduct KYC/CDD, risk assessments, and file timely reports to align with FATF/GIABA standards.
Nigeria is actively taking strides toward Travel Rule implementation but has not yet enacted legislation or made it operational, per 2026 global status reports.
Entity Targeted: Over 1,100 (specifically 1,146) bank accounts of crypto traders and peer-to-peer merchants. Violation Type: Foreign-exchange racketeering, currency (naira) manipulation, money laundering, terrorism financing. Penalty Amount: Not specified (accounts frozen, no fines detailed).
Date: Accounts frozen as part of an ongoing investigation starting early 2024; court order obtained by April 2024 (90-day investigation period noted)
Outcome: Accounts frozen pending investigation completion; EFCC part of interagency task force probing naira manipulation linked to platforms like Binance. Investigation ongoing with potential blocks on fund retrieval even if court-ordered
New frameworks mandate national ID linkage for transactions and naira delisting from P2P exchanges (2024-2026), with penalties like license loss for unreported transactions.
Federal Inland Revenue Service (FIRS), transitioning to Nigeria Revenue Service (NRS): Handles crypto taxation, collects taxes on trading gains, and mandates exchange transaction reporting starting January 1, 2026.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a foreign-incorporated remote VASP cannot serve Nigerian residents without first incorporating locally with the CAC, obtaining a full SEC VASP license (₦30M fee, minimum NGN 500M–2B capital depending on service type), registering with NFIU/SCUML for AML compliance, and obtaining CBN clearance for banking access; unlicensed cross-border service carries active enforcement risk (EFCC account freezes, Binance-style actions).
Questions this verdict aims to answer
- May a non-resident provider serve residents from abroad?
- Does cross-border service trigger licensing, registration, or AML obligations?
- What enforcement risk exists for unlicensed remote operators?