The Sandbox and the Standard: Why Nigeria's crypto moment demands more than good intentions
What industry experts describe as a telecoms restriction introduced in February 2024 has yet to be lifted, and it is preventing Nigerians from accessing the most compliant and best-capitalised players
What industry experts describe as a telecoms restriction introduced in February 2024 has yet to be lifted, and it is preventing Nigerians from accessing the most compliant and best-capitalised players in one of the world's most dynamic virtual asset markets.
This restriction persists even though the Investment and Securities Act 2025 came into force to formally regulate the sector, the licensing framework is built, and the regulator is preparing to issue licences. Millions of Nigerians are still being pushed toward unregulated alternatives by what appears to reflect a coordination coordination failure that the government finds difficult to resolve internally.
That is the anomaly at the heart of Nigeria's digital asset moment. And it deserves to be named plainly — because everything else the Tinubu administration has built in this space, and it has built an impressive regulatory edifice, is being undermined by it.
What has been built
The Tinubu administration has done more on digital asset regulation than it is given credit for. The Investment and Securities Act 2025 brought cryptocurrency formally within Nigeria's legal framework for the first time. Nigeria's removal from the FATF grey list in October followed. A licensing framework for virtual asset service providers is now in place. Moreover an interagency scaffold has been constructed to coordinate regulation across government. Nigeria has arguably one of the most sophisticated regulatory frameworks for the sector in the developing world.
The Central Bank's announcement on 31 March sits within this broader exercise in regulatory enterprise. It brought six entities under a structured supervisory pilot — focused on anti-money laundering compliance and transaction transparency. The CBN has real interests in monitoring firms that touch Nigeria's banking infrastructure and its foreign exchange market. Nobody serious disputes that.
While the CBN pilot is a bold step towards operationalising a market for virtual asset service providers, it is the Securities and Exchange Commission's Accelerated Regulatory Incubation Programme — ARIP — that will determine the future of Nigeria's digital asset market. This is the process through which virtual asset service providers will be licensed to operate. The SEC has already given provisional licences to two indigenous companies. Several others — some of whom have been inside the framework for three years, meeting every requirement asked of them — are ready to do the same.
What happens next with ARIP is the real test of whether Nigeria's regulatory ambition translates into regulatory reality.
The integrity question
It is at this point that the integrity of the process becomes a defining issue.
Nigeria's removal from the FATF grey list rests on a commitment to robust, evidence-based supervision. Recommendations 15 and 16 — the Travel Rule — place substantial reporting and compliance burdens on both regulator and regulated, with the real risk of future FATF sanctioning if those burdens are not met. The SEC's recent decision to raise capital thresholds signals clearly to operators that regulatory standards are being elevated, not relaxed. It also signals how stringent the SEC intends to be on compliance — giving pause to some operators currently active in Nigeria's virtual asset space. This is part of a deliberate post-grey list regulatory posture, positioning Nigeria ahead of its next FATF mutual evaluation in 2027.
The SEC now faces the ARIP test — and the test is simply this: the value of an accelerated incubation programme lies entirely in the quality of what it incubates.
Nigeria has come too far to stumble at this stage. The SEC has the framework, the mandate, and the mechanism to ensure that what ARIP produces is worthy of the architecture that surrounds it. The compliance floor must be set and held. The most advanced applicants — those who have invested years building the standards the framework demands — deserve to be assessed on that basis. And Nigeria deserves a licensing process whose outcomes FATF assessors will recognise as rigorous, not merely expedient. The President's intent in building this architecture was serious. The implementation must be worthy of it.
The comparative picture
Nigeria is not operating in isolation. It is operating among comparators and competitors — and currently losing ground to both.
South Africa has licensed 248 virtual asset service providers. Kenya has a functioning framework. Ghana — with a fraction of Nigeria's market, a fraction of its technical talent, and a fraction of its crypto adoption rate — has moved faster. Nigeria is being lapped not because it lacks capability or vision but because it has been caught in the paralysis of analysing the market, its impact on currency stability, cross-border settlements, remittances and arbitrage, rather than regulating it.
That paralysis is understandable. Nigeria's digital asset market is deeper and more systemic than any other on the continent. The stakes of getting it wrong are genuinely high. But the architecture to both manage and mine that market has now been built. ISA 2025 and ARIP are among the more sophisticated regulatory frameworks for the sector in the developing world. That is to the administration's credit.
What has been absent is activation. And in an age of accelerating technological change, that absence carries a specific cost that goes beyond missed licensing fees or delayed tax revenue. Regulatory systems only learn by doing. They adapt to market innovation by supervising it — not by observing it from a distance. A framework that is not operational cannot keep pace with the market it was designed to govern. It will always be catching up.
Activation failures are choices. And choices have consequences.
The anomaly that undermines everything
The regulatory architecture Nigeria has built rests on a premise — that licensed, supervised, Travel Rule-compliant virtual asset operators are accessible to Nigerian users. A telecoms restriction introduced in February 2024 remains in force, blocking operationalisation by restricting access to the exchanges with the deepest pockets and most robust compliance infrastructure. The institutions that could lift it find it hard to align for long enough to do so. The market meantime grows and adapts to the conditions as the new regulatory framework ages towards an obsolescence that approaches as fast as the market innovates.
The consequences are practical rather than theoretical. Nigerian users who cannot access licensed platforms do not exit the market — they migrate to less regulated alternatives. The compliance data, the suspicious transaction reports, the tax contributions that a supervised market would generate flow instead through channels that are harder to see and harder to govern. The restriction manages the symptom. It does not address the condition.
There is an irony worth noting. The CBN's supervisory pilot is itself a search for visibility — a recognition that supervised transactions are preferable to unsupervised ones, and that understanding virtual asset flows requires direct supervisory engagement rather than observation from a distance. That instinct is correct. But the CBN's pilot and the SEC's ARIP process are generating separate and incomplete pictures of the same market. The ARIP companies with demonstrated Travel Rule implementation hold the compliance data that would make the CBN's supervisory findings meaningful at scale. The telecoms restriction is the reason that vision remains incomplete.
A vision that is obscured by the fact that Nigerian users blocked by NCC use VPNs to route around the restriction entirely — becoming invisible not just to the platforms they are accessing but to the Nigerian regulators who need to see them. Every VPN-routed transaction is a transaction whose compliance data — KYC records, Travel Rule information, suspicious activity reports — flows to foreign regulators rather than Nigerian ones. Nigeria's supervisory authorities cannot access it. Nigeria's FATF assessors cannot count it. The restriction does not drive activity underground in the metaphorical sense. It does so technically and literally. It is the opposite of the supervisory visibility the entire framework is designed to create.
The fiscal dimension compounds the problem. The Finance Minister's tax reform architecture — the NTAA 2025 — depends on transaction visibility to function. Virtual asset flows routed through VPNs and unregulated channels are flows that the NRS cannot tax. The restriction is not a telecoms policy question. It is a fiscal enforcement failure dressed as one.
The restriction mechanism is understood to require direction from either ONSA or the SEC to lift. That it has not been given reflects the genuine difficulty of coordinating across institutions with competing interests and contested jurisdictions — a difficulty this piece does not pretend is simple. But difficulty is not the same as impossibility. And the cost of continued inaction is structural and growing.
This should be resolved not after ARIP is complete but alongside it. The framework cannot activate what it cannot reach.
What this moment requires
Activation could start with the removal of the telecoms restriction — creating greater visibility of what is actually going on in a market that is already one of the world's most significant. Sadly, the institutions that could act on this find it genuinely difficult to align. That difficulty is real and this piece does not dismiss it. But the market is not waiting. Nigeria has built the gateway. The question is whether the administration will open it on its own terms — or whether the market will continue to find its own way through, invisible to the regulators, the revenue authorities, and the security agencies that a properly activated framework would serve.
Nigeria has the framework. It has the market. It has, in the ARIP companies that have spent years inside its regulatory perimeter, operators ready to be governed. What it needs now is the decision to begin — because every month of continued inaction is a month in which the institutions responsible for Nigeria's financial future fall further behind the curve they will eventually have to master.
There is one further consideration that the urgency of activation tends to obscure. In an age of programmable money, tokenised assets, and AI-driven financial infrastructure, the regulatory challenges of 2030 will make today's look manageable. The institutions that will be equipped to handle them are not those that waited for perfect consensus before engaging with the market. They are those that built supervisory competence by governing it — learning through licensing, adapting through oversight, developing expertise through direct engagement with the technology and the operators that carry it. Regulatory capacity is not inherited. It is built. And it is built only by doing.
The gateway is open in law. It needs to be opened in practice. Now is the time.
The author is a financial regulation specialist writing from Lagos.
