A Comprehensive Guide for Virtual Asset Service Providers Under ISA 2025

Nigeria has moved decisively from crypto ambiguity to crypto regulation.

With the enactment of the Investments and Securities Act, 2025 (ISA 2025), digital asset activities now sit squarely within Nigeria’s capital markets regulatory framework. The Securities and Exchange Commission (SEC Nigeria) is expressly empowered to register and regulate virtual asset exchanges and other digital asset market operators.

For Virtual Asset Service Providers (VASPs), this means one thing:

If you are serving Nigerian users, you must evaluate whether you require a SEC Nigeria VASP license, and how to obtain it.

This article provides a detailed breakdown of:

• What the SEC Nigeria VASP license covers
• Who requires registration
• Licensing requirements
• Fees and capital obligations
• Expected timeline
• Compliance framework
• Enforcement risks
• Strategic considerations for global operators

1. Legal Foundation: ISA 2025 and Digital Asset Regulation

The Investments and Securities Act, 2025 re-establishes the SEC Nigeria as the apex regulator of capital markets and expands its authority to explicitly cover digital assets.

The Act empowers the SEC to:

“register and regulate… virtual and digital asset exchanges and other market venues.”

This provision formally integrates crypto exchanges and digital asset platforms into statutory law.

Crypto businesses are no longer operating under implied oversight. They are regulated entities under Nigerian capital markets legislation.

2. What Is a “VASP” Under Nigeria’s Framework?

Under SEC Nigeria’s onboarding framework, VASPs include entities engaged in:

• Operating digital asset exchanges
• Providing custody services
• Executing trades as brokers or dealers
• Promoting, forming, or issuing token offerings
• Providing digital investment advisory services
• Facilitating transfer or administration of digital assets

The scope is broad and functional.

If your business touches Nigerian users and facilitates digital asset services, you may fall within the regulatory perimeter.

3. Does SEC Nigeria Licensing Apply to Offshore Exchanges?

Yes, potentially.

The ARIP framework applies to:

• Persons providing virtual asset services to Nigerians, irrespective of physical location
• Foreign or non-resident operators that actively target Nigerian investors

This is a functional jurisdiction approach.

If you:

• Allow Nigerian onboarding
• Market to Nigerian users
• Process Nigerian KYC documentation
• Support Nigeria-based communities

You may require SEC Nigeria authorization.

4. The Two Routes to SEC Nigeria Authorization

VASPs generally have two licensing pathways:

Route 1: Direct Full Registration

This involves applying for full SEC registration as a capital market operator.

Suitable for:

• Mature, well-capitalized operators
• Firms ready for immediate full regulatory compliance
• Entities with local governance structure

Route 2: Accelerated Regulatory Incubation Program (ARIP)

ARIP is a structured onboarding program that grants Approval-in-Principle (AIP) pending full registration.

ARIP provides:

• Supervised entry
• Structured compliance alignment
• Transition pathway to full licensing

For many VASPs, ARIP is the preferred market entry mechanism.

5. Licensing Requirements: What SEC Nigeria Expects

Obtaining a VASP license requires satisfying several regulatory pillars.

5.1 Corporate and Structural Requirements

Applicants must demonstrate:

• Valid incorporation
• Clear shareholding structure
• Defined governance framework
• Appointed principal officers

Under ARIP, a minimum of four sponsored individuals is required, including a Managing Director and Compliance Officer.

5.2 Fit-and-Proper Leadership

Applicants must provide sworn undertakings confirming:

• Accuracy of submissions
• Solvency status
• Fitness and integrity of management

Regulatory credibility is heavily dependent on executive suitability.

5.3 Business and Operational Plan

SEC Nigeria expects a detailed business plan including:

• Description of services
• Target customer base
• Revenue model
• Risk analysis
• Technology infrastructure

The plan must demonstrate capacity to operate an orderly, fair, and transparent market.

5.4 AML/CFT and Travel Rule Compliance

VASPs must maintain robust AML/CFT systems, including:

• Customer due diligence
• Suspicious transaction reporting
• Travel Rule compliance
• Registration with relevant financial intelligence bodies where applicable

This is one of the most scrutinized areas during licensing.

5.5 Risk Management and Internal Controls

Applicants must demonstrate:

• Market risk controls
• Custody safeguards
• Cybersecurity controls
• Incident response framework
• Complaint resolution procedures

SEC retains inspection and audit authority.

6. Costs of Obtaining a SEC Nigeria VASP License

6.1 ARIP Processing Fee

₦2,000,000 (non-refundable)

6.2 Capital Requirements

Applicants must show evidence of sufficient shareholder funds to support operations.

SEC may impose capital conditions based on:

• Scale of operations
• Risk profile
• Custody responsibilities

6.3 Fidelity Bond

Minimum 25% of required shareholder funds

6.4 Ongoing Compliance Costs

VASPs should anticipate:

• Compliance personnel costs
• Regulatory reporting systems
• Audit costs
• Governance oversight expenses

Regulation is not a one-time cost, it is an ongoing operational obligation.

7. Licensing Timeline: What to Expect

There is no fixed statutory timeline, but the general ARIP sequence is:

1. Initial Assessment Submission
2. Eligibility Confirmation
3. Formal Application Submission
4. Regulatory Review
5. Approval-in-Principle Issuance
6. Operational Supervision Period
7. Transition to Full Registration

Timeline variables include:

• Application quality
• Completeness of documentation
• Regulatory workload
• Applicant responsiveness

Well-prepared applications significantly reduce delays.

8. Reporting and Compliance Framework Post-Approval

Licensed VASPs must maintain:

8.1 Periodic Reporting

• Weekly/monthly trading statistics
• Quarterly financial reports
• Compliance reports

8.2 Incident Reporting

Mandatory disclosure of:

• Fraud
• System breaches
• Operational failures
• Customer complaints

8.3 Inspection Rights

SEC may conduct on-site or off-site inspections.

9. Enforcement and Penalties

Operating without authorization may trigger:

• ₦20,000,000 penalty for unauthorized commercialized VASPs
• Suspension from capital market activities
• Potential broader enforcement measures

ARIP participants who breach conditions may also face penalties and removal from the program.

Regulatory risk is rising as Nigeria strengthens its enforcement posture.

10. Strategic Insights for Global VASPs

10.1 Nigeria Is a High-Adoption Market

One of the largest crypto adoption markets globally.

10.2 Early Regulatory Positioning Creates Competitive Advantage

ARIP participants build early regulator relationships.

10.3 Supervised Entry Reduces Enforcement Ambiguity

Operating within ARIP reduces uncertainty.

10.4 Compliance Infrastructure Is a Competitive Differentiator

Strong governance enhances long-term licensing outcomes.

Conclusion

The SEC Nigeria VASP licensing framework represents a significant evolution in Nigeria’s digital asset regulation.

ISA 2025 provides statutory clarity.
ARIP provides structured onboarding.
Penalties for non-compliance are clear.

For VASPs seeking Nigerian market access, the strategic choice is straightforward:

Operate within the regulatory perimeter, or accept increasing enforcement exposure.

Nigeria is not closing its doors to crypto.

It is institutionalizing it.

The operators who move early, and move compliantly, will shape the future of Nigeria’s regulated digital asset market.

Legal Disclaimer: This article is for informational purposes only and does not constitute legal advice. Licensing strategy must be tailored to your specific business model and current SEC guidance.

FAQs