SEC Nigeria Crypto Guidelines 2025: Rules for Financial Institutions & VASPs

The landscape of digital assets in Nigeria has shifted dramatically. If you are a financial institution or a Virtual Asset Service Provider (VASP) operating in the region, the days of ambiguity are over. With the signing of the Investment and Securities Act (ISA) 2025, which defines the legal framework recognizing cryptocurrencies as securities under SEC Nigeria's authority on March 31, 2025, by President Bola Ahmed Tinubu, the regulatory environment is now concrete. This legislation marks a decisive end to the previous grey area where crypto operations existed without clear oversight. For banks, exchanges, and investors, understanding these new rules is not just about compliance; it is about survival and growth in one of the world’s most active crypto markets.

Key Takeaways

• Digital Assets Are Securities: The ISA 2025 officially classifies cryptocurrencies as securities, placing them under the direct jurisdiction of the Securities and Exchange Commission (SEC) Nigeria.
• Licensing Is Mandatory: All Virtual Asset Service Providers (VASPs) must obtain a license from the SEC to operate legally. Unlicensed platforms face suspension and heavy fines.
• Banks Can Engage Again: Following the 2023 policy reversal, licensed financial institutions can now provide banking services to regulated VASPs, reversing the strict 2021 ban.
• Heavy Penalties for Non-Compliance: Under the Nigeria Tax Administration Act (NTAA) 2025, non-compliant entities face an initial fine of ₦10 million ($6,693), with additional monthly penalties of ₦1 million.
• Multi-Agency Oversight: Regulation involves a coordinated effort between the SEC, the Central Bank of Nigeria (CBN), and the Nigerian Financial Intelligence Unit (NFIU).

Understanding the ISA 2025 Framework

To grasp what this means for your business, we first need to look at the core change: classification. Previously, cryptocurrencies occupied a legal void. They were neither fully banned nor fully accepted. The Investment and Securities Act (ISA) 2025 legislation that supersedes the ISA 2007 and grants SEC Nigeria comprehensive authority over digital asset markets changes this entirely. By defining digital assets as securities, the law brings crypto under the same rigorous standards applied to stocks and bonds.

This shift gives the SEC Nigeria the power to license, supervise, and regulate all crypto exchanges and service providers. It also introduces stricter penalties for fraudulent activities, such as Ponzi schemes, which have historically exploited the lack of regulation in the sector. Emomotimi Agama, the Director-General of the SEC, noted that this act reflects a commitment to building a dynamic and resilient capital market. In practical terms, this means that if you are offering investment contracts involving tokens, you are playing by the SEC’s rules, not just market whims.

Who Regulates What? The Multi-Agency Approach

Nigeria’s regulatory model is not siloed within one agency. Instead, it relies on a coordinated ecosystem involving three primary bodies. Understanding their distinct roles is crucial for compliance.

The Central Bank of Nigeria (CBN) monetary authority responsible for banking regulations and financial stability in Nigeria plays a critical role here. After initially banning banks from facilitating crypto transactions in 2021, the CBN reversed course in late 2023. This pivot allows banks to serve licensed VASPs, provided they adhere to strict risk management guidelines. Meanwhile, the NFIU ensures that these flows do not facilitate money laundering or terrorism financing. For a financial institution, this means you cannot just focus on the SEC; you must satisfy the CBN’s banking standards and the NFIU’s security requirements simultaneously.

Licensing Requirements for VASPs

If you are running a crypto exchange or a wallet service, a license is no longer optional. The ISA 2025 mandates that all Virtual Asset Service Providers (VASPs) secure authorization from the SEC before commencing operations. Homegrown platforms like Quidax and Busha received early authorization in 2024, setting a precedent for others to follow.

The licensing process is comprehensive. It requires proof of technical infrastructure, operational resilience, and, most importantly, investor protection mechanisms. You must demonstrate how you safeguard user funds and ensure transparency in trading practices. The SEC retains the authority to suspend or revoke licenses if operators fail to meet these standards. This creates a level playing field where only serious, compliant players remain in the market, reducing the risk of fraud for consumers.

Taxation and Financial Penalties

Compliance carries a cost, but non-compliance is far more expensive. The Nigeria Tax Administration Act (NTAA) 2025 law signed in June 2025 establishing specific tax obligations and penalties for cryptocurrency service providers, effective from 2026, introduces a stringent fiscal regime for the crypto sector. This act works in tandem with the ISA 2025 to ensure that the government captures revenue from this growing economy while penalizing those who try to evade oversight.

Here is what the numbers look like for non-compliant VASPs:

• Initial Penalty: ₦10 million (approximately $6,693) for the first month of default.
• Subsequent Penalties: An additional ₦1 million (approximately $669) for each subsequent month of non-compliance.

These fines are substantial enough to force action. Beyond monetary fines, the SEC can shut down operations entirely. The NTAA also empowers the SEC to monitor centralized exchange transactions for tax purposes, closing loopholes that previously allowed for significant tax evasion. For financial institutions, this means integrating robust tax reporting systems into your core operations starting in 2026.

Market Context: Why Nigeria Matters

Why is this regulatory clarity so important? Because the market is massive. Between July 2024 and June 2025, Nigeria recorded an estimated $92.1 billion in cryptocurrency transaction volume. This figure nearly doubles South Africa’s activity during the same period and ranks Nigeria among the largest global markets. Despite crypto not being legal tender-meaning it cannot replace the Nigerian naira for official payments-Nigerians are adopting digital assets at one of the fastest rates worldwide.

In fact, Nigeria ranks first globally in peer-to-peer (P2P) cryptocurrency transaction volume. This high engagement stems from economic pressures, including naira volatility, which drives citizens to seek alternative stores of value. The regulatory framework established by the ISA 2025 aims to harness this energy. By providing legal certainty, the government hopes to position Nigeria as a fintech innovation hub, attracting foreign investment and fostering job creation. By 2026, the country’s crypto user base is projected to reach 28.69 million users.

Comparison with Other African Markets

How does Nigeria’s approach compare to its neighbors? While countries like Kenya and South Africa introduced crypto-specific taxation earlier, Nigeria’s ISA 2025 offers one of the most detailed legal structures on the continent. Many African nations still grapple with fragmented regulations or outright bans. Nigeria’s move to explicitly define crypto as a security provides a clearer path for institutional participation than many of its peers.

This comprehensive structure reduces the regulatory arbitrage that often plagues emerging markets. Investors know exactly which body to answer to (the SEC) and what the tax implications are (via the NTAA). This clarity is likely to drive further consolidation in the market, favoring larger, well-capitalized firms that can afford the compliance overhead.

Next Steps for Financial Institutions

If you are a financial institution looking to engage with the crypto sector in Nigeria, here is your immediate checklist:

1. Audit Your Current Status: Determine if your current services classify you as a VASP under the ISA 2025 definition.
2. Apply for Licensing: Initiate the application process with the SEC Nigeria if you do not already hold a license. Prepare documentation on your AML/CFT protocols.
3. Engage with Banks: If you are a VASP, approach banks that have updated their policies post-2023 to establish custodial and payment relationships.
4. Prepare for Tax Compliance: Implement systems to track and report transactions in accordance with the NTAA 2025, ready for the 2026 effective date.
5. Monitor Regulatory Updates: Stay tuned for amendments to the licensing framework and specific guidance on tax implementation from the SEC and FIRS (Federal Inland Revenue Service).

The era of operating in the shadows is over. The ISA 2025 and NTAA 2025 provide a robust, albeit demanding, framework for growth. For those willing to adapt, the opportunity in Nigeria’s $92 billion annual market is immense.