Nigeria Rewrites the Compliance Rulebook for BDCs and Virtual Assets

• Nigeria’s financial regulators are tightening the rules around foreign exchange and digital assets. For BDCs and virtual asset businesses, the new regime means more capital, stronger controls and less room for operators that treat compliance as paperwork rather than part of the business.

 Analysis

Nigeria’s financial regulatory landscape is becoming harder to navigate, particularly for businesses operating around foreign exchange and digital assets.

The Central Bank of Nigeria has already overhauled the regulatory framework for Bureau de Change operators, while the Securities and Exchange Commission has raised the capital bar for regulated capital market operators and virtual asset businesses.

The changes are not cosmetic.

The CBN’s 2024 BDC guidelines introduced new licensing categories, revised financial requirements, governance standards and strengthened AML, counter terrorism financing and counter proliferation financing requirements. Existing BDCs were required to reapply for licences under the new framework.

The SEC has now gone further on the capital market side. Its January 2026 circular revised minimum capital requirements across regulated entities, including fintechs and Virtual Asset Service Providers. The requirements range from ₦300 million for Ancillary Virtual Asset Service Providers to ₦2 billion for digital asset exchanges and digital asset custodians.

The compliance deadline for affected SEC regulated entities is 30 June 2027, with possible regulatory sanctions, including suspension or withdrawal of registration, for firms that fail to meet the requirements.

BDCs are no longer being treated as informal FX businesses

The direction from the CBN is clear.

A BDC is part of the regulated financial system and is expected to operate accordingly.

The revised framework places greater emphasis on licensing, corporate governance, financial strength and AML controls. That means operators need to know who their customers are, understand the source and purpose of transactions and maintain systems capable of identifying suspicious activity.

This matters because foreign exchange businesses can sit directly in the path of illicit financial flows.

A customer moving large sums through a BDC may have a legitimate reason. Another may be trying to move money outside the banking system.The compliance challenge is telling the difference.

The crypto sector is facing a different kind of pressure

For VASPs, capital is now only one part of the story.

The SEC’s January 2026 framework covers digital asset exchanges, custodians, digital asset intermediaries, digital asset platform operators and tokenisation businesses.

The Commission has also exposed new proposed rules in August 2026 covering the issuance, trading, custody, transfer and settlement of digital and virtual assets, including businesses operating in Nigeria, serving Nigerian residents or targeting Nigerian investors.

Meanwhile, the CBN already requires banks and other financial institutions dealing with SEC licensed VASPs to operate within specific risk management and monitoring requirements.

That creates a regulatory chain.

The VASP has obligations. The bank serving the VASP has obligations. The transaction itself may generate AML concerns.

There is increasingly nowhere for weak controls to hide.

Capital is becoming a compliance issue

The sharpest change may be the cost of entry.

The SEC has increased minimum capital for several digital asset categories. A Digital Assets Exchange now requires₦2 billion, compared with ₦500 million previously. Digital Asset Custodians also move to ₦2 billion, while Digital Assets Offering Platforms require ₦1 billion.

This will inevitably affect smaller operators.

Some will raise capital. Some may merge. Others may decide that the Nigerian market is too expensive to operate in.

That is not necessarily a bad outcome from a regulatory perspective.

The regulator’s argument is that firms handling other people’s money and assets should have enough financial strength to survive operational and market shocks. The SEC says the revised framework is intended to improve resilience, investor protection and risk sensitive supervision.

But there is a tradeoff. Higher barriers can remove weak operators. They can also make it harder for smaller legitimate businesses to enter the market.

That balance will matter.

Compliance Implications

For BDCs, VASPs and financial institutions serving them, compliance can no longer sit at the end of the process.

Customer due diligence, beneficial ownership checks, source of funds, transaction monitoring, sanctions screening, record keeping and regulatory reporting need to be built into daily operations.

For fintechs and digital asset businesses, the capital question should also be treated as a governance question. Boards need to know whether the business can meet the new requirements without weakening its actual compliance infrastructure.

Compliance Takeaway

Nigeria is moving towards a financial system where regulatory permission increasingly depends on both financial capacity and demonstrable control over financial crime risk.

The message from the CBN and SEC is becoming difficult to misread.

A licence is not simply permission to operate.

It comes with a continuing obligation to prove that the business knows its customers, understands its risks and can withstand regulatory scrutiny.

For BDCs and VASPs, the era of growing first and fixing compliance later is becoming much harder to sustain.