Operating a virtual asset service in Nigeria without the correct regulatory authorisation is not a calculated risk – it is an invitation for enforcement, account closures and an exit from the market before the business has a chance to scale. The Securities and Exchange Commission Nigeria (SEC Nigeria) now supervises virtual asset service providers (VASPs) under a formal licensing regime, and the regulator has made clear that economic substance inside Nigeria is a live requirement, not a box-ticking formality. Operators structuring around Nigeria from an offshore vehicle face a narrowing window before that approach attracts scrutiny.
This page sets out what economic substance means for a licensed VASP in Nigeria, how SEC Nigeria applies it in practice, and what an inbound or locally incorporated operator must do before committing capital or users to the market.
What Is the Nigerian VASP Licensing Regime?
SEC Nigeria administers the primary licensing regime for digital-asset businesses under its Rules on Issuance, Offering Platforms and Custody of Digital Assets, which sit beneath the broader Investments and Securities Act framework. The regime captures virtual asset service providers engaged in exchange, brokerage, custody, portfolio management and related activities. Any business offering those services to persons in Nigeria – or booking trades against Nigerian counterparties – is required to seek a licence, regardless of where the corporate entity is domiciled.
The category structure distinguishes between a Digital Assets Offering Platform (DAOP), a Digital Assets Exchange (DAX) and a Digital Assets Custodian (DAC), among others. Each category carries its own minimum capital, operational requirements and ongoing obligations. SEC Nigeria has publicly confirmed it will take enforcement action against unregistered operators targeting the Nigerian market, and the Central Bank of Nigeria (CBN) has separately issued guidance restricting commercial bank services to unlicensed crypto businesses.
The interaction between SEC Nigeria supervision and CBN banking-sector oversight defines the practical operating environment. A VASP may hold a valid SEC Nigeria licence and still be unable to open a Nigerian naira settlement account if its banking institution determines the business does not satisfy the CBN's own risk posture. In our practice, we have seen operators with technically sound licences face protracted banking delays because the substance documentation provided to the bank was inconsistent with the regulatory file. Getting those two workstreams aligned from day one avoids the gap.
For a scoped assessment of your licensing obligations in Nigeria, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the user base, the banking – change the analysis. Map your options
What Does Economic Substance Mean for a Licensed VASP in Nigeria?
Economic substance, for a Nigerian-licensed VASP, means that the business maintains genuine operational presence in Nigeria proportionate to the activities it is licensed to conduct. This goes beyond registering a local company and appointing a nominee director. SEC Nigeria expects to see decision-making, personnel, systems and records that reflect a real business actually managed from within the jurisdiction.
In practice, substance is assessed across several dimensions. First, the management and control test: board meetings must substantively occur in Nigeria, and the persons directing the business's licensed activities must be resident or demonstrably based there. A foreign parent that retains effective control while placing a local entity on the licence generates the very exposure the regime is designed to prevent.
Second, operational infrastructure: SEC Nigeria's rules require physical office premises, locally accessible customer records and Nigerian-based compliance and AML functions. The compliance officer role in particular cannot be performed from abroad under a remote arrangement without a documented delegation structure that satisfies the regulator's expectations on accountability.
Third, personnel: the VASP must employ or contractually retain persons in Nigeria with the qualifications and authority to perform the regulated functions. Staffing a Lagos office with junior administrative staff while senior personnel operate from London or Dubai is the pattern SEC Nigeria has scrutinised most closely. In our cross-border practice, we routinely advise that the substance plan must be credible at the board level, not just on the organogram.
How Does Nigeria's Substance Requirement Interact With Cross-Border Structures?
Most inbound operators arrive in Nigeria having already licensed a holding vehicle offshore – in the BVI, Cayman Islands or a European hub – and assume a local subsidiary will suffice as a pass-through for the Nigerian licence. That assumption requires stress-testing. The substance obligation attaches to the licensed entity itself, not to the group parent. So the question is whether the Nigerian entity, independently, satisfies the management-and-control, operational and personnel tests – or whether it is functionally hollow and the real business runs from the parent.
The FATF Recommendation 15 framework (covering virtual asset service providers) and the Travel Rule (the obligation to pass originator and beneficiary data with a transfer) add a further cross-border layer. A Nigerian-licensed VASP transacting with foreign exchanges must implement Travel Rule compliance within the Nigerian entity. Where the technology and compliance infrastructure sit in a parent company abroad, the Nigerian subsidiary needs a documented, auditable arrangement that demonstrates it controls – and can demonstrate control of – that process to SEC Nigeria.
Tax structuring intersects here in a way that routinely surprises operators. A Nigerian entity with genuine substance will generate taxable Nigerian income and may attract transfer-pricing obligations if it provides services to related parties. An entity structured to be thin on substance to minimise Nigerian tax exposure will fail the regulatory substance test. The two objectives are in tension, and the optimal position requires analysis of both simultaneously. In our practice, we structure the licence, banking and tax mandates as a single workstream rather than three disconnected instructions.
What Is the Application Process for a SEC Nigeria VASP Licence?
The SEC Nigeria application process follows a defined sequence, beginning with the filing of an application pack that includes the operator's business plan, governance documents, AML/CFT programme, technology documentation, financial projections and evidence of minimum capital. The regulator conducts a suitability assessment of key personnel, requiring personal questionnaires, antecedents checks and, where relevant, qualification evidence for the nominated chief compliance officer and chief executive.
There is a pre-application engagement stage: SEC Nigeria encourages prospective applicants to hold a preliminary meeting with the relevant division before formal filing. In our experience, this meeting is not optional in practice – it is the point at which the regulator signals the specific items it will scrutinise and gives the operator the opportunity to align its submission accordingly. Operators who skip this step and file cold risk a cycle of information requests that extends the timeline materially.
The overall authorisation timeline varies by category and completeness of the submission. SEC Nigeria does not publish a fixed statutory clock in the same way that some EU jurisdictions do under MiCA. A well-prepared application for a standard exchange or brokerage licence generally completes in a matter of months from formal filing, but complex structures, cross-border group arrangements or prior adverse regulatory history can extend that significantly. These are qualitative estimates drawn from practice; the live timeline should be confirmed with the regulator at the pre-application stage.
Documentation discipline is the most reliable variable the applicant controls. Submissions that arrive with complete, internally consistent documents – business plan, substance plan, compliance manual and capital evidence all telling the same story – move through review faster. Inconsistencies between what the business plan says and what the AML manual or governance structure reflects are the single most common cause of information requests in our cross-border practice.
Banking and Fiat Rails for Nigerian-Licensed VASPs
Securing a SEC Nigeria licence does not automatically open Nigerian bank accounts. The CBN's posture toward crypto businesses has oscillated, and licensed VASPs must separately satisfy commercial banks' own risk-appetite frameworks before accounts are opened. This means presenting a complete regulatory profile – the SEC Nigeria licence, the AML programme, the substance documentation and the beneficial ownership structure – to the bank's financial crime compliance team, not just its relationship management desk.
The naira settlement infrastructure for licensed VASPs operates within strict CBN parameters on foreign-exchange access and capital transfers. Operators expecting to move significant value offshore on a routine basis need to understand these parameters before they build the business model, not after. A VASP licensed for exchange activity that later discovers its naira receipts cannot be efficiently converted or repatriated faces a structural problem that is difficult to cure without a material restructuring.
International correspondents matter. Where a Nigerian VASP needs to settle in USD or stablecoins with a foreign counterparty, the correspondent banking relationship – and the Travel Rule compliance that accompanies it – must be documented and operable from the Nigerian entity. We regularly advise on this configuration: the entity must be able to demonstrate to both its Nigerian regulator and its foreign counterparty's compliance team that the flow of information and funds is clean, documented and attributable.
What Are the Most Common Mistakes Inbound Operators Make?
The most persistent mistake is treating the Nigerian licence as a market-access instrument and deferring the substance build until after authorisation. SEC Nigeria has moved toward ongoing supervision that includes post-authorisation site visits and periodic compliance reviews. An operator that obtained a licence with a credible-looking substance plan but failed to implement it faces revocation risk once a review cycle commences.
A second pattern is mischaracterising the regulatory perimeter. Operators that characterise their Nigerian activity as introducing or referral services – to avoid the licensing threshold – without a careful legal analysis of what SEC Nigeria's activity definitions actually capture are taking a position that may not hold under regulatory scrutiny. The "we're just technology providers" framing has been examined and rejected by regulators in multiple jurisdictions under equivalent provisions.
A common assumption is that a single offshore licence is enough to serve Nigerian clients from abroad. It is not. SEC Nigeria's regime, like those in Singapore (MAS), Hong Kong (SFC) and the EU (under MiCA), applies on the basis of where clients are located and where the service is marketed, not just where the operator is incorporated. An operator with a Cayman or BVI registration that actively acquires Nigerian users without a local licence is operating in breach of the Nigerian regime, with no protection from the offshore structure.
The third recurring issue is governance documentation that exists on paper but does not reflect how decisions are actually made. Where the real decision-makers sit outside Nigeria, the regulator sees through nominee arrangements quickly. The directors named on the licence must be identifiable, reachable and demonstrably the persons who manage the Nigerian licensed activity.
A Practical Illustration
In a recent matter, a payments technology company with an established VASP registration in a European hub sought to expand its exchange activity into West Africa, routing the Nigerian business through its existing EU entity while placing a thin local subsidiary on the licence application. Our review identified that the proposed governance structure left effective control of the licensed activity with the parent, that the AML manual referenced the parent entity's compliance infrastructure without a documented delegation agreement, and that the capital presented as meeting the Nigerian minimum was pledged as security for a facility in the parent group. We restructured the entity, the capital attestation and the compliance documentation before filing. The application proceeded without material information requests.
Which Operator Profile Is Best Suited to the Nigerian Market?
Profile A – a regional African exchange seeking a home-market licence: Nigeria is the natural primary licence jurisdiction. The substance build is the core task. The timeline is a matter of months for a complete application; the risk is banking access, which requires parallel engagement with a CBN-compliant institution from day one.
Profile B – a global operator entering West Africa from an existing European or Asian hub: the Nigerian entity must be genuinely operationally separate from the parent for regulatory purposes, even if economically integrated. The Tax and transfer-pricing position needs to be mapped before the structure is committed. Allied counsel in the relevant EU or Asian jurisdiction will need to coordinate on group-level AML and Travel Rule obligations.
Profile C – a stablecoin or DeFi operator testing whether Nigeria is within scope: the question is whether the protocol or service, as accessed by Nigerian users, constitutes a regulated activity under SEC Nigeria's current definitions. That analysis must be done before the product launches in Nigeria, not after user acquisition has commenced. The answer is genuinely fact-specific – the technology and the user journey both matter.
If your prior application stalled or your banking relationship was declined, a second read often surfaces the structural reason and the route back. Contact OBOLUS at info@oboluslaw.com. Map your options
Related at OBOLUS
- Licensing & Registration for Digital Asset Businesses – how OBOLUS structures multi-jurisdiction licence stacks for operators
- VARA Licence Application: What Recent Enforcement Tells Operators – enforcement signals from Dubai's VARA and what they mean for applicants
- Oracle and Data Feed Liability in Guernsey – cross-border structuring considerations for data-dependent digital-asset services
FAQ
How long does a crypto licence take to obtain?
In Nigeria, the SEC Nigeria authorisation timeline varies by licence category and the completeness of the application. A well-prepared submission for a standard exchange or brokerage licence typically completes within several months from formal filing. Complex group structures or incomplete documentation extend the process. Pre-application engagement with the regulator is a material factor: it aligns the submission to what the review team will scrutinise and reduces information-request cycles.
Which jurisdiction is best for licensing my crypto business?
There is no single best jurisdiction. The right licence depends on where your clients are located, where your banking must settle, what activities you are conducting and your entity's capacity to maintain genuine substance. Nigeria is the primary licence jurisdiction for businesses serving the West African market directly. Operators with a multi-region footprint typically need a stack: a home-market licence plus one or more hub licences covering cross-border activity. OBOLUS maps that stack before you commit capital.
Do I need a separate custody licence?
Under the SEC Nigeria regime, custody of digital assets for clients is a distinct regulated category – the Digital Assets Custodian (DAC) designation – that requires its own authorisation. An operator licensed as a Digital Assets Exchange does not automatically hold custody authorisation. If your business model involves holding client assets, the custody licence must be in scope from the outset. The same principle applies in most flagship regimes globally, including under MiCA in the EU and the VASP regime in Hong Kong.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We map the licence stack across operating, custody and payment layers before you commit – and we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. To discuss your situation, contact info@oboluslaw.com.
By Aisha Tan, Licensing & Jurisdictions Analyst – specialising in VASP authorisation strategy and economic substance requirements across African and emerging-market jurisdictions.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.