The Founder’s Roadmap to a CBN -Compliant Fintech License in Nigeria

Nigeria is one of the largest and most active fintech markets in Africa.

But operating a fintech without the correct Central Bank of Nigeria (CBN) licence exposes your business to regulatory shutdowns, fines, and account freezes.

The CBN’s licensing regime is rigorous in 2026, and getting the wrong category means starting the entire application process again. Before applying, you’ll need a registered Nigerian company. Norebase works with fintechs to identify the correct licence, structure the application correctly, and navigate CBN requirements from start to finish.

For context on what non-compliance looks like in practice, read our compliance update on the Mercury Bank account closures that affected 13 African countries in 2024.

Who Needs a CBN Fintech Licence?

• Payment gateway companies processing transactions for merchants
• Mobile money operators and e-wallet platforms
• POS terminal deployers and agent banking networks
• Payment routing and switching companies
• Digital lending platforms with fund custody
• Any fintech product that touches payments, wallets, or fund custody in any form

The 4 CBN Licence Categories — Which One Do You Need?

Getting the category wrong is the most expensive mistake a fintech can make. Here is the breakdown:

• PSSP (Payment Solution Service Provider) — for payment gateway companies processing transactions. Does NOT permit holding customer funds or issuing digital wallets
• PTSP (Payment Terminal Service Provider) — for POS terminal deployers and agent banking networks
• MMO (Mobile Money Operator) — for mobile money and e-wallet operators that hold customer funds
• Switching Licence — for payment routing and switching companies connecting banks and financial systems

2026 Capital Requirements

PSSP licence	₦5 billion minimum paid-up capital (must remain in CBN escrow)
PTSP licence	Contact Norebase for current requirement
MMO licence	Contact Norebase for current requirement
Switching licence	Contact Norebase for current requirement

Step-by-Step Process

1. Company incorporation: your company must first be registered with the CAC in Nigeria. This is a prerequisite for all CBN licensing. Timeline: 3–5 business days with NorebaseThis is a prerequisite for all CBN licensing. Timeline: 3–5 business days with Norebase
2. Identify the correct licence category: Norebase advises on the right category based on your business model
3. Prepare capital: demonstrate genuine access to the required capital. CBN scrutinises capital sources extensively. Transparency of funding is non-negotiable
4. Build technical infrastructure: IT security certifications including PCI-DSS compliance, disaster recovery setup, and data protection policies are required
5. Prepare application documents: three-year business plan with financial projections, AML/CFT framework, operational strategy, fit and proper assessment for directors. Read our full guide to AML compliance in Nigeria
6. Submit CBN escrow deposit: full lump sum deposited before application submission
7. Submit application to CBN — CBN conducts a thorough review including inspection of offices and systems
8. CBN approval and licence issuance, timeline varies based on licence category and application quality.

2026 Compliance Requirements (After Licensing)

In March 2026, the CBN issued Circular BSD/DIR/PUB/LAB/019/002 introducing mandatory Baseline Standards for Automated AML Solutions. This is one of the most significant regulatory updates for Nigerian fintechs in recent years:

• Real-time KYC validation against government databases — BVN and NIN mandatory
• Mandatory biometric checks and liveness detection technology
• Continuous, real-time transaction monitoring based on behavioural patterns
• Suspicious transaction reporting to the NFIU
• APP fraud liability — your fintech may be required to reimburse users for losses from fraud

For full details on AML obligations, read our AML compliance guide for Nigerian businesses.

Documents Required

• CAC Certificate of Incorporation — register with Norebase first
• Three-year detailed business plan and financial projections
• Proof of capital adequacy — traceable source of funds
• AML/CFT compliance framework and policies
• IT security certification — PCI-DSS compliance
• Disaster recovery and business continuity plan
• Fit and proper documentation for all directors — education, experience, integrity checks
• Customer protection and complaints handling policies

Common Pitfalls

• Applying for the wrong licence category — do this first before anything else
• Building first and fixing compliance later — the CBN’s 2026 framework has ended this approach
• Unclear capital sources — CBN will reject applications where capital origin cannot be traced
• Inadequate AML/CFT framework — the most common reason for licence revocation. See our AML compliance guide

Also operating in the digital asset space? See our guide to crypto licensing in Nigeria. Expanding to Kenya? See our Kenya fintech licence guide.

Need a fintech licence in Nigeria? Talk to our team first, getting the category right saves months.