Self-custodial wallet / non-custodial software in Nigeria
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in Nigeria with a local entity, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- Publishing self-custodial wallet software (where the publisher never holds private keys) does not trigger SEC Nigeria VASP licensing because VASP categories (exchange, offering platform, custody, broker-dealer) assume custody or intermediation of virtual assets.
- However, if the wallet software is distributed in conjunction with any value-added service that touches fiat or involves conversion/transfer facilitation, it could be treated as a VASP requiring registration under the SEC Rules on Virtual Assets (2024).
- No AML/CFT obligations attach purely from software publishing under the NFIU/SCUML framework, since the publisher is not a financial institution, other financial institution, or DNFBP holding funds or executing transactions.
- If the wallet provider also offers non-custodial exchange/introductory services or charges fees in a way that resembles a financial service, registration as a reporting entity under SCUML/NFIU may be required.
- Money Laundering (Prohibition and Prevention) Act (MLPPA) obligations such as KYC/CDD, suspicious transaction reporting, and record-keeping only apply if the operator qualifies as a reporting entity — which software-only publishers generally do not.
Key Restrictions
- The publisher must not hold, control, or access user private keys or funds — any deviation (e.g., offering a hosted recovery service) risks reclassification as a custodian under the Digital Assets Custody (DAC) license regime, which requires NGN 2B minimum capital.
- The publisher should not facilitate fiat on/off-ramps or peer-to-peer order matching within the software without SEC Nigeria VASP licensing (exchange or broker-dealer categories).
- No CBN clearance or banking service linkage is required for pure software publishing, since no naira-denominated financial services are involved.
- Incorporation with the Corporate Affairs Commission (CAC) is advisable but not strictly required for a foreign software publisher that has no physical presence — but local entity incorporation may be prudent for enforcement risk management.
Key Risks
- EFCC enforcement risk: Nigerian authorities have frozen over 1,146 bank accounts of crypto traders and P2P merchants on foreign-exchange and money-laundering grounds. A self-custodial wallet publisher could face scrutiny if the software is used by Nigerian residents for P2P trading that regulators consider naira manipulation.
- Regulatory ambiguity risk: Nigeria's VASP framework (SEC Rules on Virtual Assets 2024) is new and does not explicitly address self-custodial/non-custodial software. Enforcement agencies may apply broad interpretations, especially if the software generates revenue from fees or token swaps.
- Tax exposure: FIRS/NRS mandates exchange transaction reporting from 2026. While software publishers may not be direct taxpayers, the software's wallet features could be deemed reportable if paired with swap functionality.
- National ID linkage mandate: New frameworks require national ID linkage for crypto transactions. A self-custodial wallet publisher could face pressure to implement geo-fencing or identity gateways for Nigerian users.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
SEC Nigeria — VASP licensing, digital asset exchange regulation
CBN — Banking restrictions (banned bank servicing Feb 2021, partially reversed Dec 2023), eNaira CBDC
SEC Rules on Issuance, Offering Platforms and Custody of Digital Assets 2022: https://sec.gov.ng/documents/8/Rules-on-Issuance-Offering-and-Custody-of-Digital-Assets.pdf
VASP: VASP License from SEC Nigeria. Exchange: NGN 500M (~$320K USD). Offering Platform: NGN 100M. Custody: NGN 2B. Broker-Dealer: NGN 100M. 3-6 months. Highest crypto adoption in Africa. Framework is new — enforcement capacity limited.
CUSTODY: Digital Asset Custody license — NGN 2B minimum capital
Digital Assets Custody (DAC): For custody providers holding virtual assets.
Payment processors or other VASPs: Covered under general VASP licensing for services like transfers or conversions, often requiring DAX or similar if involving exchanges.
Incorporate with CAC as VASP.
NFIU's Mandate: NFIU receives mandatory reports (e.g., Suspicious Transaction Reports within 24 hours) from Financial Institutions (FIs), Other Financial Institutions (OFIs), and DNFBPs. Businesses must register as reporting entities on the NFIU's goAML portal, submitting documents like CAC registration, industry regulator licenses (e.g., CBN, SEC), and compliance officer details.
SCUML's Mandate: SCUML enforces AML/CFT rules for DNFBPs (e.g., lawyers, accountants, real estate agents), including registration (with certificate issuance), risk-based customer due diligence (CDD), internal compliance programs, record-keeping, staff training, and reporting suspicious activities to NFIU. From January 1, 2026, all DNFBP reports must use the SCUML portal exclusively.
Shared Framework: Both operate under laws like the Money Laundering (Prohibition and Prevention) Act (MLPPA). DNFBPs report to NFIU but are supervised by SCUML, while FIs report directly to NFIU via regulators like CBN or SEC. All entities must conduct KYC/CDD, risk assessments, and file timely reports to align with FATF/GIABA standards.
Regulator: Economic and Financial Crimes Commission (EFCC)
Entity Targeted: Over 1,100 (specifically 1,146) bank accounts of crypto traders and peer-to-peer merchants. Violation Type: Foreign-exchange racketeering, currency (naira) manipulation, money laundering, terrorism financing. Penalty Amount: Not specified (accounts frozen, no fines detailed).
New frameworks mandate national ID linkage for transactions and naira delisting from P2P exchanges (2024-2026), with penalties like license loss for unreported transactions.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — pure self-custodial wallet software publishing (no custody, no intermediation, no fiat services) is unlikely to trigger SEC Nigeria VASP licensing or AML obligations under current Nigerian law, but any ancillary services (swap engines, fiat on/off-ramps, fee structures) or association with P2P trading activity risk reclassification, enforcement action by the EFCC, or tax reporting obligations under FIRS/NRS rules.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?