When the Investments and Securities Act (ISA 2025) finally landed on the books, the whole crypto scene in Nigeria flipped upside‑down. Nigeria cryptocurrency regulation is now a legal framework that treats digital assets as securities, forces every exchange to get a licence from the Securities and Exchange Commission (SEC), and gives banks a green light to work with approved providers. In plain English: you can still trade Bitcoin or Ethereum, but only through platforms that have cleared the new regulatory hurdle.
Key Takeaways
- ISA 2025 classifies crypto assets as securities, so all exchanges must register with the SEC.
- Quidax and Busha are the first local platforms to receive licences; other operators are still in the pipeline.
- Banks may now hold accounts for licensed VASPs, but enforcement remains uneven across the country.
- Users should verify a platform’s SEC licence number before depositing funds.
- Tax rules are being drafted, so expect reporting obligations on larger trades soon.
The regulatory turnaround: from ban to licence
From 2021 to late 2023 the Central Bank of Nigeria (CBN) put a blanket ban on any crypto‑related activity. Banks were forbidden to process crypto payments, and law‑enforcement raids on traders made headlines. The ban was lifted in December 2023 after a massive push from the community-Nigeria still tops global peer‑to‑peer (P2P) volume with more than 22 million participants. The new wave started with the ISA 2025, signed by President Bola Ahmed Tinubu in March 2025, which officially recognises digital tokens as securities.
Under the act, the SEC, not the CBN, now holds the primary licensing authority for crypto exchanges and Virtual Asset Service Providers (VASPs). The Economic and Financial Crimes Commission (EFCC) and the Nigerian Financial Intelligence Unit (NFIU) supply AML/CFT oversight, while the CBN focuses on banking relationships. This multi‑agency model is meant to keep innovation alive while tightening the net against fraud.
Licensing requirements you must meet
Any platform that wants to operate in Nigeria must submit a detailed application to the SEC. The dossier includes:
- Corporate registration documents and proof of capital adequacy.
- Comprehensive AML/CFT policies reviewed by the NFIU.
- Technical architecture that demonstrates secure custody of user assets.
- Fit‑and‑proper assessments for senior management, vetted by the EFCC.
- Ongoing reporting obligations - monthly transaction volumes, suspicious activity reports, and quarterly compliance audits.
The review process can take six to twelve months, especially for foreign exchanges that must also prove local partnership structures. Early approvals went to Quidax and Busha, both Nigerian‑born platforms that already had robust AML frameworks.
How to spot a licensed exchange
Because the SEC publishes a public licence register, the easiest way to verify a platform is to check its licence number on the SEC website. Look for three signals:
- SEC licence number displayed on the exchange’s homepage or “About” page.
- Clear AML/CFT policy links that reference the NFIU guidelines.
- Bank account details that belong to a Nigerian commercial bank, not an offshore shell.
If any of these are missing, treat the service as unlicensed and stay away-regulators have already issued cease‑and‑desist orders to several offshore platforms operating without approval.
Impact on everyday traders
For the average Nigerian trader, the shift feels both hopeful and frustrating. On the bright side, you can now open a bank‑linked account with a licensed exchange, making fiat‑to‑crypto conversions smoother and less risky. On the downside, police raids and extortion reports persist. Many users still report being stopped at checkpoints and asked to hand over crypto wallets, even though the law no longer prohibits ownership.
Another practical hurdle is the “bank‑relationship gap.” Some banks remain wary of crypto clients and may close accounts if they suspect the user is dealing with an unlicensed platform. The SEC recommends using banks that have publicly announced support for licensed VASPs, but the list is still short.
Taxation and future compliance
The SEC has hinted that a tax framework is in the works. Early drafts suggest a 10 % withholding tax on crypto‑to‑crypto trades above ₦5 million, plus capital‑gain reporting for individual traders who exceed ₦10 million in annual turnover. While the rules aren’t final, the trend points to a more formalised tax environment.
For now, keep detailed records of every transaction: date, amount, counterparties, and the exchange’s licence number. When the tax law lands, you’ll have the data ready and can avoid penalties.
Practical challenges and enforcement gaps
Even with a clear legal framework, on‑the‑ground enforcement is uneven. Law‑enforcement agencies sometimes act on outdated guidance, targeting users who simply hold crypto in a non‑custodial wallet. Community forums on Reddit and Twitter echo the same complaints: “I have a licence‑verified exchange, but the police still demand money.”
To protect yourself, consider the following safeguards:
- Store large holdings in hardware wallets, not on exchange hot‑wallets.
- Use two‑factor authentication (2FA) and strong passwords for every account.
- Maintain a printed copy of the exchange’s SEC licence certificate in case you need to prove legitimacy.
These steps won’t stop every raid, but they make it harder for scammers and give you legal footing if you need to contest a seizure.
Comparing licensed vs. unlicensed platforms
| Feature | Licensed (SEC‑approved) | Unlicensed |
|---|---|---|
| Regulatory oversight | SEC, CBN, EFCC, NFIU | None |
| Bank account access | Allowed with compliant banks | Often blocked |
| AML/CFT compliance | Mandatory, audited quarterly | Rarely implemented |
| Legal protection for users | Recourse through SEC dispute portal | None; higher fraud risk |
| Tax reporting support | Guidelines in development | None |
Clearly, the benefits of using a licensed exchange outweigh the convenience of many unlicensed P2P channels, especially as the regulatory climate tightens.
Future outlook: from restriction to opportunity
Analysts say Nigeria could become “the fintech capital of Africa” if the SEC, CBN, and other agencies stick to the game plan. The ISA 2025 sets a foundation for foreign investment: venture capital firms are already scouting for startups that can build compliant DeFi bridges, NFT marketplaces for investment‑grade tokens, and crypto‑payment APIs for merchants.
However, success hinges on two things: consistent enforcement that respects the new law, and clear, timely communication from regulators. If police stops treating crypto possession as a crime and banks fully embrace licensed VASPs, user confidence will rise, trading volumes will soar, and tax revenues will follow.
Quick checklist for Nigerian crypto users
- Verify the exchange’s SEC licence number on the official register.
- Use a bank that publicly supports licensed VASPs.
- Keep detailed transaction logs for future tax reporting.
- Store large balances in hardware wallets, not on exchanges.
- Stay updated on SEC announcements - they release policy updates every quarter.
Is owning crypto illegal in Nigeria after ISA 2025?
No. The law now treats crypto assets as securities, so ownership is legal. What’s illegal is using unlicensed platforms or evading AML rules.
How can I check if an exchange is SEC‑licensed?
Visit the SEC’s public licence register, search the exchange’s name, and compare the licence number shown on the exchange’s site with the official record.
Will my bank close my account if I trade crypto?
Banks are allowed to service accounts that transact with SEC‑approved VASPs. If you use an unlicensed exchange, a bank may flag or close the account.
What taxes will I owe on cryptocurrency trades?
The final tax rules are still being drafted, but proposals include a 10 % withholding tax on large trades and capital‑gain reporting for annual turnover above ₦10 million.
Can I still use P2P platforms?
P2P trading is not banned, but using a platform that is not SEC‑licensed carries higher fraud and enforcement risk. Always verify the other party’s credentials.