VASP Licence Nigeria How to Obtain SEC ARIP Approval-in-principle & a Full VASP Licence

Last reviewed 10 August 2026 consult Global Law Experts for the latest updates.

Quick Summary: What This Page Covers and Who Should Read It

If you are a founder, CEO, compliance officer, or investor researching how to obtain a VASP licence in Nigeria, this page provides the definitive step-by-step guide. Nigeria’s digital-asset regulatory environment has matured rapidly: the Investments and Securities Act (ISA) 2025 has expanded the statutory definition of “securities” to explicitly include virtual and digital assets, placing Virtual Asset Service Providers (VASPs) squarely under the regulatory remit of the Securities and Exchange Commission (SEC). The SEC’s Accelerated Regulatory Incubation Programme (ARIP) now provides a structured, fast-tracked pathway for operators to secure Approval-in-Principle (AIP) and progress toward a full VASP licence.

This guide covers the legal framework, ARIP eligibility and benefits, the eight-step application process, required documents, expected timelines, indicative costs, common reasons for refusal, and a detailed comparison of the ARIP pathway versus a direct full-licence application. Whether you are a domestic fintech scaling up or a foreign crypto exchange entering Nigeria, the information below grounded in official SEC, Central Bank of Nigeria (CBN), and Nigerian Financial Intelligence Unit (NFIU) sources will help you plan, prepare, and execute a successful application.

The 2024–2026 ARIP window represents a strategic moment: the SEC has been clearing additional VASPs for ARIP admission, and early movers benefit from guided onboarding, phased compliance timelines, and preferential access to the Nigerian market before full-licence transition obligations take effect.

Does the SEC Regulate Digital Assets in Nigeria?

Statutory Basis: The Investments and Securities Act (ISA) 2025

The answer is unequivocally yes. The ISA 2025 reformed and consolidated Nigeria’s capital-markets legislation, explicitly bringing virtual and digital assets within the definition of “securities” and, by extension, within the SEC’s supervisory mandate. This means that any entity offering, issuing, trading, or providing custody of digital assets in or from Nigeria must comply with SEC registration and conduct-of-business requirements. The Act provides the SEC with the authority to make rules, impose conditions, and sanction non-compliant operators a power it has actively exercised through subordinate regulations targeting VASPs and Digital Investment Service Providers (DISPs).

SEC Rules on Issuance, Custody and VASP Obligations

The SEC’s Rules on Issuance, Offering Platforms and Custody of Digital Assets set out the operational and governance standards that all digital-asset operators must meet. Key obligations include corporate-governance requirements (including board composition and the appointment of a resident chief executive officer), minimum custody standards for client assets, cybersecurity controls, consumer-protection disclosures, and capital-adequacy thresholds. These rules apply regardless of whether a VASP enters through the ARIP pathway or applies directly for a full licence.

Where FinPort and ARIP Fit in the SEC’s Market-Development Strategy

The SEC established its FinTech and Innovation Hub branded as FinPort to foster innovation while maintaining investor protection. FinPort operates two programmes: the Regulatory Incubation (RI) programme for early-stage fintechs and the ARIP for more mature operators, including VASPs, that are ready for near-term market participation. ARIP is the primary on-ramp for digital-asset businesses seeking a VASP licence in Nigeria. It enables the SEC to assess operators in a controlled, phased environment before granting full registration balancing innovation with regulatory rigour.

ARIP Nigeria An Operational Pathway to Approval-in-Principle (AIP)

ARIP Explained in Plain English

The Accelerated Regulatory Incubation Programme is a structured SEC initiative designed to fast-track the onboarding of VASPs and DISPs into Nigeria’s regulated capital market. Under the ARIP Framework, successful applicants receive an Approval-in-Principle (AIP) a conditional authorisation that permits limited market activity under SEC supervision. The objective is to allow operators to demonstrate compliance readiness, build operational track records, and resolve any regulatory gaps before transitioning to a permanent, full VASP licence.

Who Is Eligible?

Eligibility is defined by the SEC ARIP Checklist and the ARIP Framework. Broadly, the following categories of applicant may apply:

• Existing VASPs and DISPs operators already providing digital-asset services in or directed at Nigeria that need to formalise their regulatory status.
• Foreign exchanges and platforms international crypto businesses seeking to enter the Nigerian market, provided they establish a local corporate presence or partner with a Nigerian entity.
• New domestic ventures Nigerian-incorporated companies with a viable digital-asset product, adequate governance structures, and demonstrable technical readiness.
• Product-fit criteria the applicant’s product or service must fall within the SEC’s defined scope for digital-asset activities (e.g., exchange, brokerage, custody, token issuance).

Benefits and Limitations

The ARIP pathway offers significant advantages for applicants seeking a VASP licence in Nigeria:

• Fast-tracked onboarding the programme is specifically designed to compress the timeline from application to authorised market activity.
• Regulatory guidance participants benefit from direct SEC engagement, including guidance on compliance gaps and remediation steps.
• Phased compliance certain requirements may be met progressively during the incubation period rather than at the point of initial application.

However, applicants should be aware of important limitations:

• Conditional status AIP is not a permanent licence; it imposes conditions, reporting obligations, and activity restrictions.
• Transition obligation ARIP participants must demonstrate full compliance with SEC rules to transition to a full VASP licence within the prescribed timeframe.
• Revocation risk failure to meet conditions or transition milestones may result in withdrawal of the AIP.

Approved Participants and Precedent

The SEC maintains a public directory of registered fintech operators that have been admitted into FinPort programmes, including ARIP. This directory serves as verifiable evidence that the programme is operational and that a growing number of VASPs are actively progressing through the onboarding pipeline reinforcing the credibility and viability of the ARIP pathway.

Step-by-Step: Apply, Get ARIP AIP, Operate, Transition to Full Licence

The following eight-step process maps the full lifecycle of a VASP licence application in Nigeria from pre-application preparation through ARIP admission and eventual transition to full registration.

Step 1 Pre-Application Readiness

Before engaging the SEC, applicants must ensure they are structured correctly. The SEC Rules on Digital Assets require that any VASP operating in or into Nigeria be established as a body corporate. For foreign operators, this typically means incorporating a Nigerian subsidiary (private limited company registered with the Corporate Affairs Commission) or formalising a partnership with a locally incorporated entity. Key decisions at this stage include choosing the appropriate legal form, securing a registered office address, and appointing initial directors.

Step 2 Governance and Local Leadership

The SEC expects robust corporate governance. Central to this is the appointment of a resident chief executive officer a senior officer physically resident in Nigeria who can be accountable to the regulator. Board composition must reflect adequate experience in financial services, technology, and compliance. Applicants should prepare fit-and-proper declarations for all directors and senior managers, including personal details, professional qualifications, employment histories, and declarations of any prior regulatory sanctions or criminal proceedings.

Step 3 AML/KYC and NFIU/CBN Expectations

Nigeria’s anti-money laundering framework imposes specific obligations on VASPs. The NFIU’s advisory and guidance materials outline requirements for customer due diligence (CDD), enhanced due diligence (EDD) for high-risk customers, suspicious transaction reporting (STR), and registration with the goAML platform. Applicants must develop and document a comprehensive AML/CFT programme, appoint a qualified AML compliance officer, and implement transaction-monitoring and sanctions-screening systems aligned with FATF recommendations. The CBN Guidelines on Operations of Bank Accounts for Virtual Asset Providers additionally require VASPs to maintain banking relationships with licensed Nigerian banks and comply with bank-account operating requirements.

Step 4 Technology, Custody and Operational Controls

The SEC Rules on Digital Assets prescribe detailed technical and custody standards. Applicants must prepare documentation of their system architecture, including server infrastructure, API security, data encryption, and access controls. Custody models whether hot-wallet, cold-wallet, or segregated arrangements must be clearly described and evidenced. Disaster-recovery and business-continuity plans are mandatory, and applicants should obtain independent penetration-test reports demonstrating the resilience of their systems. Consumer-facing platforms must incorporate adequate risk disclosures and investor-protection mechanisms.

Step 5 Financials and Capital Requirements

The SEC requires evidence of financial soundness. Existing businesses must submit audited financial statements. Pre-revenue ventures should prepare pro forma financial projections covering three to five years, supported by a detailed business plan and revenue model. Proof of capital whether through bank statements, share-capital certificates, or investor commitments must demonstrate that the applicant can meet its operational obligations, maintain adequate reserves, and absorb losses without jeopardising client assets.

Step 6 Complete ARIP Application and Submit Checklist Documents

With all preparatory materials in hand, the applicant submits a formal application via the SEC ePortal and compiles the full document pack stipulated by the ARIP Checklist for VASP Onboarding. The primary documents typically include:

1. Completed application form and ePortal submission confirmation.
2. Company incorporation documents Certificate of Incorporation, Memorandum and Articles of Association.
3. Board and senior management CVs with fit-and-proper declarations.
4. Proof of resident CEO and local director appointment letter, passport copy, utility bill or tenancy agreement.
5. Business plan and revenue model with three- to five-year financial projections.
6. AML/CFT policy documents, KYC procedures, and AML officer appointment letter.
7. Transaction-monitoring and sanctions-screening policies; goAML registration evidence (where applicable).
8. Disaster-recovery and cybersecurity policies; system architecture diagram; independent penetration-test report.
9. Custody arrangements documentation and proof of custody controls (where holding client assets).
10. Audited financial statements or pro forma projections; proof of capital.
11. Governance documents board minutes, compliance framework, internal-controls documentation.
12. Legal opinions or third-party confirmations (where required by the SEC).
13. Copies of customer agreements and risk disclosures.
14. Evidence of a Nigerian bank relationship bank reference letter or account-opening confirmation, in accordance with CBN guidance.

An annotated ARIP checklist, prepared by Global Law Experts, is available for download to help applicants organise and cross-reference their submission materials.

Step 7 SEC Review, AIP Conditions, Onboarding and Go-Live

Once a complete application is submitted, the SEC conducts a substantive review covering legal, governance, financial, technical, and AML/CFT dimensions. The SEC may request additional information, conduct interviews with key personnel, or require site inspections. If the application meets the threshold, the SEC issues an AIP typically subject to conditions such as activity limitations, periodic reporting requirements, enhanced monitoring, and specific milestones the applicant must achieve before proceeding to full registration. Upon satisfying the AIP conditions, the applicant is authorised to commence operations within the parameters set by the SEC.

Step 8 Transition to Full VASP Licence

The ARIP Framework envisions a structured transition from AIP to full VASP registration. ARIP participants are expected to progressively meet all outstanding compliance requirements, submit transition filings (including updated audited financials, evidence of meeting AIP conditions, and any enhanced governance or technical controls), and demonstrate a satisfactory operational track record. The SEC evaluates readiness and, when satisfied, grants the full VASP licence removing the conditional limitations that applied during the incubation phase.

Timelines and Indicative Costs

Industry observers note that timelines vary significantly depending on the applicant’s state of readiness and the completeness of the submission. Based on published SEC guidance and market experience, the following timeline bands are typical:

• Pre-application preparation: 4–12 weeks, depending on whether the applicant needs to incorporate locally, recruit a resident CEO, or build AML/KYC infrastructure from scratch.
• ARIP application review: 6–12 weeks from submission of a complete application; incomplete applications or those requiring significant remediation will experience longer review periods.
• AIP to full-licence transition: variable, typically 6–18 months depending on the conditions attached to the AIP and the applicant’s ability to meet transition milestones.

Indicative costs for the overall process include SEC application and regulatory fees, local incorporation and corporate-secretarial costs, resident-director or resident-CEO remuneration, AML/compliance tooling and advisory fees, legal and professional advisory costs, and cybersecurity audit and penetration-testing expenditures. These costs vary widely based on the complexity of the applicant’s operations, jurisdictional footprint, and existing compliance infrastructure. Global Law Experts can provide a customised cost estimate following an initial assessment of your readiness profile.

Common Reasons for Refusal or Delay

Applications for a VASP licence in Nigeria are most frequently delayed or refused for the following reasons, as reflected in the SEC ARIP Checklist and ARIP Framework requirements:

• Incomplete documentation missing or inadequately prepared items from the ARIP checklist remain the single most common cause of delay.
• Weak AML/KYC programmes policies that do not align with NFIU guidance, FATF standards, or that lack clear transaction-monitoring and STR-filing procedures.
• Weak or non-local governance absence of a bona fide resident CEO, unclear board composition, or failure to demonstrate local accountability.
• Inadequate custody or technical controls insufficient evidence of secure custody arrangements, missing penetration-test reports, or lack of disaster-recovery planning.
• Insufficient capital or unclear business model financial projections that are unrealistic, incomplete, or unsupported by evidence of available capital.
• Adverse background checks sanctions hits, prior regulatory enforcement actions, or criminal records involving directors or key officers.
• Non-compliance with consumer-protection expectations inadequate risk disclosures, unfair contract terms, or failure to address data-protection and data-localisation requirements.

ARIP vs Full VASP Licence Which Path Suits You?

The ARIP pathway is generally suited to operators that have a viable product and governance structure but need a phased timeline to fully implement all technical, financial, and compliance requirements. Industry observers note that most new entrants particularly foreign exchanges establishing a Nigerian presence for the first time opt for ARIP because it compresses the time to market and provides valuable regulatory feedback during the incubation phase.

A direct full-licence application may be more appropriate for well-capitalised, fully compliant operators with existing regulatory licences in comparable jurisdictions and the capacity to meet all SEC requirements from the outset. In practice, the SEC has channelled the majority of VASP applicants through the ARIP route during the 2024–2026 onboarding period.

At-a-Glance Eligibility and Minimum Obligations

Before initiating an application, operators should confirm that they can meet the following baseline requirements derived from the ISA 2025, the SEC ARIP Checklist, and the CBN and NFIU guidance:

• Corporate form: incorporated as a body corporate in Nigeria or with a locally incorporated subsidiary or partner entity.
• Resident CEO / local presence: appointment of a chief executive officer physically resident in Nigeria; adequate local directorship and board composition.
• AML/CFT programme: documented policies aligned with NFIU guidance and FATF standards; appointed AML compliance officer; goAML registration.
• Custody model: clear, documented custody arrangements with segregation of client assets, as required by SEC rules.
• Capital and audited accounts: proof of adequate capital; audited financial statements or pro forma projections for new ventures.
• Cybersecurity and operational resilience: system-architecture documentation, penetration-test reports, and disaster-recovery and business-continuity plans.
• Nigerian bank account: an active banking relationship with a licensed Nigerian bank, compliant with CBN guidelines for virtual-asset providers.

Why Engage Global Law Experts (GLE) for Your Nigeria VASP Licence

Global Law Experts brings together a network of legal, compliance, and corporate-services professionals with direct experience supporting VASP applicants through the Nigerian SEC’s ARIP and full-licence processes. Representative engagements include:

• Multi-jurisdictional exchange ARIP admission: GLE coordinated the end-to-end application for an international digital-asset exchange seeking Nigerian market access from local incorporation and resident CEO appointment through AML framework design and SEC submission, culminating in ARIP admission.
• Domestic DISP governance restructure: a Nigerian Digital Investment Service Provider engaged GLE to remediate governance gaps identified by the SEC during an initial review, including board composition, custody controls, and compliance-framework enhancements, enabling a successful resubmission.
• AML/CFT programme design for emerging VASP: GLE’s compliance specialists designed and documented a comprehensive AML/KYC programme including sanctions-screening workflows, transaction-monitoring parameters, and goAML registration for a pre-revenue VASP preparing its ARIP application.

The growing list of operators admitted into the SEC’s ARIP, as reflected in the SEC’s registered fintech operators directory, confirms that the programme is actively processing applicants and that professional preparation materially improves the prospects of approval.

Ready to Apply? How GLE Can Help

Global Law Experts provides end-to-end support for operators pursuing a VASP licence in Nigeria, including:

• ARIP application drafting and submission preparation of the complete document pack and SEC ePortal submission.
• Resident CEO search and appointment support identification, vetting, and formal appointment of a qualified resident CEO.
• AML/KYC programme design development of compliant AML/CFT policies, procedures, and goAML registration.
• Custody and technical readiness checks review and documentation of custody arrangements, cybersecurity controls, and system architecture.
• Post-ARIP transition planning milestone tracking, transition filings, and preparation for full-licence registration.

An annotated ARIP checklist, prepared by GLE, is available for download to guide your preparation.

Sources

• Investments and Securities Act, 2025 Federal Republic of Nigeria (via SEC Nigeria)
• ARIP Framework for the Onboarding of VASPs Securities and Exchange Commission, Nigeria
• Accelerated Regulatory Incubation Program (ARIP) Checklist for VASP Onboarding SEC Nigeria
• Rules on Issuance, Offering Platforms and Custody of Digital Assets SEC Nigeria
• FinPort Programs (RI and ARIP) SEC Nigeria
• Registered FinTech Operators SEC Nigeria
• SEC Clears Further 2 Additional VASPs for Admission into ARIP SEC Nigeria Circulars
• Guidelines on Operations of Bank Accounts for Virtual Asset Providers Central Bank of Nigeria
• Advisory and Guidance Nigerian Financial Intelligence Unit (NFIU)