CBN Fintech Regulation 2025: Opay, Kuda & Palmpay Impact
Banking & Fintech Regulation
CBN Fintech Regulation 2025: What OPay, Kuda and PalmPay Users Must Know in 2026
📋 Information verified and updated as of November 2026 against CBN circulars, FCCPC regulations and verified secondary reporting
Every CBN circular referenced in this article is published on the official Central Bank of Nigeria website at cbn.gov.ng — Reforms and Initiatives. Before making any account or business decision based on this article, verify the current circular text directly with the CBN. The regulations described here continue to evolve; the most recent update to this article reflects the regulatory position as of November 2, 2026.
Daily Reality NG is an independent Nigerian digital publication. This article is researched editorial content — it is not financial advice, legal counsel, or a regulatory opinion. The transaction limits, fines, licence statuses and policy requirements described here are drawn from CBN circulars, official press releases, and verified reporting; they are subject to revision by the CBN at any time. Daily Reality NG has no commercial relationship with OPay, Kuda, PalmPay, Moniepoint or any other fintech. Readers with specific compliance concerns should contact their financial institution, the CBN Consumer Protection Division, or a qualified professional.
This is a complete, updated guide to the CBN regulations that have reshaped Nigeria's three most-used fintech platforms since 2024. It covers the KYC crisis that triggered the government's intervention, the national licence upgrades granted in late 2025, the agent banking exclusivity rule that forced POS operators to pick one principal, the June 2026 market dominance cap, the AML compliance deadline, and what you should do if your OPay, Kuda or PalmPay account is restricted. If you use any of these platforms for everyday transfers, savings, or you run a POS business, this article explains where you stand.
- The Short Answer
- Why the CBN Moved Against Nigeria's Biggest Fintechs
- The KYC Overhaul: Account Tiers, Limits and What You Need
- National Licence Upgrades: December 2025 and January 2026
- Agent Banking Exclusivity: What Every POS Operator Must Know
- PoS Geo-Tagging, Dual Connectivity and Cash Withdrawal Limits
- Market Structure Caps: The June 2026 Anti-Dominance Circular
- Ring-Fencing and AML Baseline Standards
- Data Localisation and Instant Payment Rules
- OPay, Kuda and PalmPay Side-by-Side
- What to Do If Your Account Is Frozen or Restricted
- Nigeria Payments System Vision 2028
- Frequently Asked Questions
- Sources and Limitations
1. The Short Answer
If you use OPay, Kuda or PalmPay, your account is now under a stricter regulatory regime than at any point in Nigerian fintech history. Between April 2024 and November 2026, the Central Bank of Nigeria issued at least nine major circulars and guidelines that directly affected these three platforms — covering everything from KYC verification and account limits to PoS terminal registration and market share ceilings. Two of the platforms were fined ₦1 billion each before being rewarded with national licences. Every POS agent who served customers of more than one platform had to choose a single employer by April 1, 2026. And a June 2026 circular placed a hard cap on how much of Nigeria's digital payments market any single institution can control.
None of these changes erased the platforms' legitimacy. OPay, Kuda and PalmPay are all CBN-licensed, NDIC-insured and operating legally as of November 2026. But the conditions under which they operate — and the conditions under which you access them — changed substantially. This article explains each change, when it took effect, and what it means in practice for ordinary Nigerians.
- ₦1.2 quadrillion — Nigeria's estimated electronic transaction volume in 2025 (CBN figures reported by Legit.ng, July 2026)
- ₦1 billion each — CBN penalties imposed on OPay and Moniepoint in Q2 2024 for KYC breaches (OPay disputed this figure)
- 25% / 15% — Market share cap between card issuing and merchant acquiring under CBN Circular PSS/DIR/PUB/CIR/001/004, June 15, 2026
- April 1, 2026 — Deadline for POS agents to register with a single principal under the CBN Agent Banking Guidelines, October 2025
- January 1, 2027 — Deadline for all payment transaction data generated in Nigeria to be stored on local servers
2. Why the CBN Moved Against Nigeria's Biggest Fintechs
The wave of regulation that has reshaped OPay, Kuda and PalmPay was not announced without warning. It followed years of rapid, largely unregulated growth that created real problems — for the financial system, for ordinary Nigerians and, ultimately, for the fintechs themselves.
By 2024, Nigeria's digital lending and payment sector was processing volumes that exceeded traditional banks in certain retail categories. Platforms like OPay had built agent networks of over 560,000 POS terminals. PalmPay had grown from a 2019 pilot to a platform competing for market share across consumer transfers, merchant acquiring and agent cash disbursements. Kuda, operating as a microfinance bank, had attracted millions of customers who preferred its zero-fee model to traditional banking.
The problem, which CBN examiners and the Economic and Financial Crimes Commission identified independently, was the quality of the customer data behind those accounts. Accounts had been opened at scale, sometimes without verified Biometric Verification Numbers or National Identification Numbers. The same fintech platforms that were facilitating millions of legitimate transfers daily were also, in some cases, being used to move money related to illegal foreign-exchange trading and cryptocurrency transactions — activities that Nigeria's currency controls expressly prohibit. (CBN Reforms and Initiatives page)
In October 2023, the friction became public when Fidelity Bank blocked transfers to OPay, PalmPay, Kuda and Moniepoint, citing KYC concerns. The CBN responded by issuing new KYC rules in November 2023 that targeted the fintech sector. Then, on April 29, 2024, the apex bank directed five fintech companies — OPay, Moniepoint, Kuda, PalmPay and Paga — to halt all new customer onboarding until further notice. The directive came after the CBN had summoned the heads of these fintechs to Abuja to discuss KYC failures. (Pulse Nigeria, July 2024)
The suspension lasted approximately five weeks. During that period, existing account holders could still transact, but anyone trying to open a new account on these platforms was turned away. The CBN lifted the ban in early June 2024, but with conditions: each platform had to implement physical address verification for all account tiers and strengthen its identity confirmation processes. OPay announced that all Tier 1 account holders who had not provided their NIN were blocked from transacting until they did so. Kuda introduced a new Tier 2 account structure and made it clear that Tier 3 would require BVN, NIN, proof of address and in-person address verification. (TechCity, June 2024)
Before the year was out, the CBN went further. Reports from TechCabal in December 2024 indicated that the regulator had imposed ₦1 billion fines on both Moniepoint and OPay for breaches of KYC requirements during the second quarter of 2024. OPay publicly denied this, stating in a response to TechCabal that the claims were false. Moniepoint declined to comment. The CBN did not issue a public statement on the specific fines. Daily Reality NG notes this contradiction: the reported penalties are widely cited in secondary sources, but OPay's public denial means the figure must be treated as contested rather than established fact. (TechCabal, December 2024)
What is not disputed is that the 2024 enforcement cycle marked the end of the era in which Nigerian fintechs could operate at national scale under licences originally designed for limited or regional activity. Everything that followed — the licence upgrades, the AML standards, the market caps, the agent exclusivity rule — flows from the CBN's conclusion that size and regulatory status had to match, and that compliance could no longer be treated as an afterthought.
3. The KYC Overhaul: Account Tiers, Limits and What You Need
The framework that now governs how OPay, Kuda and PalmPay verify their users is the CBN's three-tier KYC system, which the regulator formalised through its Customer Due Diligence Regulations of 2023. The 2024 enforcement cycle made compliance with this framework non-negotiable. Understanding which tier your account sits at directly determines how much money you can send, receive and hold on these platforms. (CBN KYC/AML Requirements 2026 — Youverify Guide citing CBN CDD Regulations 2023)
Tier 1 Accounts: Basic Access, Tightest Limits
A Tier 1 account is the entry point — the kind of account you can open with minimal documentation, in line with the CBN's financial inclusion mandate. The original intention was to bring Nigerians who have no BVN or formal identification into the financial system. In practice, the CBN requires at least a name and phone number, though a BVN or NIN is now strongly recommended even at this level following the 2024 enforcement directive. Daily transfer limits for Tier 1 accounts on platforms such as OPay sit at approximately ₦50,000 per day, with a balance cap in the same range. Exact current limits should be confirmed with the platform directly, as these are subject to regulatory revision.
Tier 2 Accounts: The Middle Ground Added in 2024
Following the CBN's 2024 directive, Kuda announced the formal addition of a Tier 2 level to its account structure. Tier 2 typically requires a verified BVN and an additional form of government-issued identification. The daily transfer limit rises substantially at this tier — reaching approximately ₦200,000 per day on some platforms — but the precise ceiling is set by the CBN framework and applied by each institution. Physical address verification is a CBN condition for accounts operating at this tier and above. (Kuda Help Centre — New Account Tiers, Rules and Limits)
Tier 3 Accounts: Full Access Requires Full Verification
Tier 3 is the highest level of account on fintech platforms operating under CBN KYC rules. To reach Tier 3, a customer must provide a verified BVN, a verified NIN, proof of residential address and, since the 2024 reforms, physical address verification — meaning the platform confirms the address on the ground, not just on paper. This tier unlocks the highest daily transfer ceilings, with OPay's Tier 3 reaching approximately ₦5,000,000 per day for personal accounts and merchant accounts operating at distinct higher limits set by the institution. (Brands.ng — OPay Transfer Limit 2026 Breakdown citing CBN Mobile Money Framework)
One point that confuses many users: the CBN's tiered KYC framework was not designed for OPay specifically. It applies identically across every CBN-licensed fintech, including PalmPay, Kuda and Moniepoint. When OPay tells you that you need your NIN to continue using the platform, it is not imposing an internal policy — it is complying with a regulatory requirement that applies to all its competitors on the same terms. A user who feels their account has been wrongly restricted on KYC grounds can raise a formal dispute through the relevant platform's complaints channel and, if unresolved, escalate to the CBN's Consumer Protection Division.
The NIMC Act 2026 and Why Your NIN Matters More Than Ever
On June 27, 2026, President Bola Tinubu signed the National Identity Management Commission Act 2026 into law, replacing the 2007 NIMC Act. The new law makes the National Identification Number the single verified identity credential for every Nigerian citizen and resident, aligning it with the credit reporting system under the Credit Reporting Act 2017 and with the data protection requirements of the Nigeria Data Protection Act 2023. For fintech users, the practical consequence is that NIN-anchored verification is now the foundation of every KYC process. An account without a verified NIN linked to a valid BVN sits in a weaker compliance position than it did before June 2026. (CRC Credit Bureau — What the NIMC Act 2026 Means for Credit in Nigeria, July 2026)
The CBN also amended its BVN framework in a March 12, 2026 circular that took effect May 1, 2026. Under the revised framework, only individuals aged 18 and above may enrol for a BVN, a BVN-linked phone number can be changed only once, and access to the BVN database is restricted to licensed financial institutions. Banks are also required to maintain a temporary watch list for BVNs linked to suspicious transactions for up to 24 hours while contacting the account holder for clarification. (CBN Reforms — March 12, 2026 BVN Framework Amendment)
Nigeria's fintech sector processed an estimated ₦1.2 quadrillion in electronic transactions in 2025 — a volume that made the CBN's decision to tighten compliance not a matter of regulatory preference but of systemic risk management. At that scale, a gap in identity verification is not just a consumer protection problem; it is a potential channel for money laundering and foreign exchange manipulation that could undermine the naira. (Source: Legit.ng, citing CBN figures, July 2026)
4. National Licence Upgrades: What Changed in December 2025 and January 2026
The most visible regulatory milestone of late 2025 and early 2026 was the CBN's formal upgrade of the operating licences of OPay, Moniepoint, Kuda, PalmPay and Paga to national status. The announcement was made by Yemi Solaja, Director of the Other Financial Institutions Supervision Department at the CBN, during the annual Committee of Heads of Banks' Operations conference in Lagos. Kuda's licence was upgraded in December 2025; OPay and PalmPay received theirs in January 2026. (BusinessDay — CBN Upgrades Licences of OPay, Moniepoint, Kuda to National Status, January 2026)
What "National Status" Actually Means
Nigerian financial institutions operate under a hierarchy of licences that determine their geographic reach and the range of services they can legally offer. Before December 2025, several of Nigeria's biggest fintechs held state-level or regional licences — meaning they were technically authorised to operate only in certain parts of the country. In reality, platforms like OPay and PalmPay had built national customer bases and agent networks that spanned all 36 states and the FCT. The mismatch between their formal licence scope and their actual operational footprint was a regulatory vulnerability: they were doing business as national institutions without the compliance obligations that national status carries.
A national licence resolves that mismatch. It grants formal authorisation to operate across the entire federation, but it simultaneously subjects the holder to higher minimum capital requirements, more rigorous CBN supervision and a closer examination of governance and risk management standards. Solaja told the conference: "Institutions like Moniepoint MFB, OPay, Kuda Bank and others have now received national status. Their licences now reflect what they were already doing on the ground." (P.M. News — OPay, PalmPay, Moniepoint Get CBN Upgrade, January 2026)
What It Does Not Mean
The CBN specifically clarified that the licence upgrade does not convert fintech companies or microfinance banks into commercial banks. OPay and PalmPay continue to hold Mobile Money Operator licences at national level, not bank licences. Kuda continues to operate as a national microfinance bank. The distinction matters because it determines the regulatory requirements, the deposit insurance structure and the range of banking services each platform can legally offer. OPay and PalmPay cannot, for example, issue letters of credit or participate in certain trade finance instruments in the way a commercial bank can. (IT Edge News — CBN Upgrades Licences to National Status)
Is Your Money Protected?
Deposits held with OPay, Kuda and PalmPay are covered by the NDIC — Nigeria Deposit Insurance Corporation. NDIC coverage applies to deposits held with all CBN-licensed deposit-taking institutions, including microfinance banks and licensed mobile money operators. You should verify the current coverage limit with the NDIC directly, as limits are periodically reviewed. What the national licence upgrade does not change is the fact that if a fintech platform fails, your NDIC claim will be processed against the applicable per-depositor limit, not a commercial bank limit — a meaningful distinction for high-balance users to understand. For more on how to verify the financial standing of Nigerian digital banks, see Daily Reality NG's Digital Banking Hub.
5. Agent Banking Exclusivity: What Every POS Operator Must Know
One of the most immediately disruptive rules to come out of the 2025 regulatory wave was not aimed at account holders at all — it was aimed at POS agents, the roughly two million Nigerians who operate the cash-in, cash-out terminals that make Nigeria's agent banking ecosystem one of the largest in Africa.
On October 6, 2025, the CBN issued its revised Guidelines for the Operations of Agent Banking in Nigeria (Circular Ref: FPR/DIR/PUB/CIR/002/025). The guidelines consolidated existing rules into a single framework and introduced one entirely new requirement: an agent could only affiliate with one principal. (CBN Reforms — Agent Banking Guidelines, October 6, 2025)
What the Single-Principal Rule Means
Before October 2025, it was commonplace for a POS agent in Lagos, Kano, Warri or Onitsha to operate terminals from OPay, Moniepoint and PalmPay simultaneously. The agent benefited from this arrangement: if OPay's network went down, they could switch to Moniepoint; if PalmPay's commissions were higher for a specific transaction type, they would route certain customers there. Customers also benefited indirectly, because agents with multiple terminals could serve almost any customer regardless of their preferred platform.
The CBN's single-principal rule ended this model. From April 1, 2026 — the enforcement date set in the October 2025 circular — every POS agent was required to be exclusive to one principal, defined as a bank, mobile money operator, microfinance bank or licensed super agent. Switching principals is only permitted when an existing contract expires. (TechCabal — CBN Bans Agents Owning Multiple Terminals, October 2025)
Who Is Affected — Agents, Not Merchants
A critical distinction that was initially misreported: the exclusivity rule applies to banking agents, not to merchants or businesses. Merchants — market traders, fuel stations, supermarkets, restaurants — retain the freedom to use multiple POS terminals from different providers. A filling station can continue to accept payments through OPay, Moniepoint and PalmPay machines simultaneously. What the rule restricts is the agent model, where an individual earns commissions by providing cash-in, cash-out services on behalf of a financial institution. (Leadership Nigeria — Merchants and SMEs Can Use Multiple POS Terminals)
The CBN's stated rationale was regulatory oversight: an agent affiliated with one institution is easier to monitor, audit and hold accountable than one juggling three providers. The rule also enforces the daily withdrawal limit of ₦1.2 million and location geo-fencing requirements that were introduced alongside the exclusivity provision. (Techpoint Africa — CBN Agent Banking Guidelines, October 2025)
The Competition for Agent Loyalty
As April 2026 approached, Nigeria's leading POS networks — OPay (563,262 registered POS agents as of 2025 reporting) and Moniepoint — were in active competition to retain agents. Agents who chose Moniepoint cited better network uptime and higher commission rates in certain regions. Agents who stayed with OPay pointed to its larger urban merchant network, which meant more transactions routed through an OPay terminal. PalmPay mounted its own retention drive. The outcome of this competition will ultimately reshape the geographic distribution of Nigeria's agent banking network in ways the data will only fully reveal in 2027. For an in-depth look at the POS business landscape, see Daily Reality NG's POS Business Hub Nigeria 2026 and the companion guide, How to Start a POS Business in Nigeria 2026.
Analysts at Techpoint Africa noted that the consolidation pressure could push Nigeria's agent banking sector toward fewer, stronger providers: "The combined impact of the exclusivity clause, evolving consumer payment behaviour, and tightening compliance rules is likely to push Nigeria's agent banking sector toward consolidation." The implication for POS operators is real: your income is now tied to a single platform's performance, network reliability and commission policy. Before April 2026, a bad month on OPay could be partially offset by Moniepoint commissions. That buffer no longer exists. (Techpoint Africa — Agent Banking Rules and Competition Analysis)
6. PoS Geo-Tagging, Dual Connectivity and Cash Withdrawal Limits
Three additional directives from 2025 and early 2026 altered the technical and financial environment for PoS operations in Nigeria in ways that affect both agents and their customers.
Mandatory Geo-Tagging of All PoS Terminals
In a circular dated August 25, 2025, the CBN directed all licensed payments operators — including OPay, PalmPay, Moniepoint and deposit money banks — to geo-tag every POS terminal within 60 days. This meant that the millions of POS devices deployed across Nigeria had to be registered with exact GPS coordinates. The CBN introduced a GPS enforcement deadline of October 31, 2025, requiring every device to be updated with built-in GPS capability connected to the National Central Switch through a software development kit. In April 2026, the deadline was extended following stakeholder feedback, and the allowable geo-fence radius was expanded from 10 metres to 70 metres, providing more operational flexibility particularly in dense urban markets. (CBN Reforms — Geo-Fencing Directive, August 2025 and Extension, 2026)
The purpose is fraud reduction: a terminal that is geo-tagged to a specific location cannot be easily moved to conduct fraudulent transactions elsewhere without triggering a flag in the central monitoring system. For legitimate POS operators, the requirement is administrative rather than substantive — but ensuring compliance requires coordination with the principal institution to update terminal firmware.
Dual Connectivity: Cutting Transfer Failures
In a December 11, 2025 circular, the CBN directed all acquirers, processors and payment terminal service providers to enable active connections to both the Nigeria Interbank Settlement System (NIBSS) and Unified Payment Services Limited (UPSL). The mandate for dual connectivity — meaning every POS transaction routes through two active pathways and switches automatically if one fails — was set to take effect within one month of the circular. (CBN Reforms — Dual Connectivity Directive, December 11, 2025)
For the customer standing at a market POS terminal who has experienced the frustration of a "network not available" message, this directive matters directly. Single-channel dependency was a documented cause of downtime across Nigeria's POS network; dual connectivity eliminates the most common failure scenario. Whether the 2026 reduction in failed POS transactions is measurable will depend on CBN's payment system statistics for the year.
Cash Withdrawal Limits Effective January 2026
On December 2, 2025, the CBN announced a revised cash policy that took effect nationwide on January 1, 2026. Under the revised framework, individuals are limited to ₦500,000 per week across all cash withdrawal channels, including over-the-counter bank withdrawals and POS cash-out transactions. Corporate organisations are limited to ₦5 million per week. Withdrawals above these thresholds attract excess-cash charges of 3 per cent for individuals and 5 per cent for corporates, shared between the CBN and the financial institution. (CBN Reforms — Cash Policy Effective January 1, 2026)
This limit applies to cash-out operations at POS agent terminals. A customer withdrawing more than ₦500,000 in cash through a POS operator in a single week will either be declined or directed to a bank branch. The policy reinforces the CBN's cashless agenda and creates additional incentive for Nigerians to move transactions into digital channels — which, in turn, strengthens the business case for OPay, Kuda and PalmPay as digital alternatives to cash-based banking.
OPay leads Nigeria's POS agent market with over 563,000 registered POS agents as of 2025 reporting — out of an estimated 1.5 million agents across Nigeria's entire agent banking ecosystem. This concentration is precisely what the CBN's June 2026 market structure circular was designed to address, by preventing any single institution from simultaneously dominating both the consumer payment (card issuing) and the merchant payment (merchant acquiring) sides of the digital payments market. (Source: Legit.ng, 2025)
7. Market Structure Caps: The June 2026 Anti-Dominance Circular
Of all the regulatory changes that have affected OPay, Kuda and PalmPay through 2025 and 2026, the most structurally consequential is the CBN's market structure circular issued on June 15, 2026. This is not a compliance rulebook for individual accounts; it is a competition policy intervention aimed at the architecture of Nigeria's digital payments system itself.
The circular — formally titled "Introduction of Market Structure Requirements, Data Localisation, Ultimate Beneficial Ownership Disclosure, and Systemic Oversight Measures in the Nigeria Payments System" and bearing reference PSS/DIR/PUB/CIR/001/004 — was signed by Dr. Rakiya Yusuf, Director of the Payments System Supervision Department at the CBN. (AllAfrica citing BusinessDay — CBN Orders Fintechs to Localise Data, Cap Market Dominance, June 2026)
The 25% / 15% Market Share Rule
The core market concentration limit works as follows. Any licensed financial institution that holds more than 25 per cent of the consumer card-issuing market — meaning the side of the payments system where customers hold their money and payment instruments — is prohibited from simultaneously holding more than 15 per cent of the merchant-acquiring market, which is the side where merchants receive payments. The same restriction applies in reverse: any institution with more than 25 per cent of merchant acquiring cannot hold more than 15 per cent of card issuing. The restriction applies to groups of related entities, not just individual legal entities — meaning OPay's various subsidiaries are counted together, not separately. (Reg Alert — CBN Circular PSS/DIR/PUB/CIR/001/004, June 15, 2026)
Affected institutions are required to file monthly market share reports with the CBN and must achieve full compliance by December 31, 2026. The CBN has not published a list of which institutions are currently over the limit, but the architecture of the rule targets the largest players — the institutions whose POS agent networks, card issuing volumes and merchant terminals give them substantial presence on both sides simultaneously.
Why This Matters for Ordinary Nigerians
The immediate practical effect for most users is indirect: you will not see a change in your OPay app because of this circular. But over time, the restriction means that no single fintech can build the kind of end-to-end dominance over Nigeria's digital payment system that would allow it to set fees, terms and access conditions unilaterally. The CBN explicitly stated that the goal is "a fair, competitive and resilient payments ecosystem." (BusinessDay — CBN Curbs Payments Dominance)
For the fintechs themselves, the constraint is strategic. A platform like OPay, which has built an enormous POS agent and merchant-acquiring network while simultaneously running a large consumer-facing money transfer and savings product, may face a compliance decision: which side of the market do you protect, and which do you reduce? The monthly reporting obligation means the CBN will have real-time visibility into the competitive landscape — a significant departure from the years in which these platforms grew largely under the regulatory radar. For more on how Nigerian fintech tools compare under this new framework, see the Daily Reality NG Fintech Tools Comparison Hub.
Ultimate Beneficial Ownership Disclosure
Alongside the market concentration limits, the June 15 circular introduced mandatory Ultimate Beneficial Ownership disclosure. Banks and payment service providers are now required to identify and report the natural persons who ultimately own or control 5 per cent or more of their shares, regardless of how many corporate layers sit between the beneficial owner and the regulated entity. This is a standard international anti-money-laundering requirement that Nigeria's digital payment sector has historically applied inconsistently. The requirement aligns with the CBN's broader effort to remove the opacity that facilitated some of the KYC failures identified in the 2024 enforcement cycle. (TVC News — CBN Orders Banks to Disclose Owners)
8. Ring-Fencing and AML Baseline Standards
The Ring-Fencing Proposal
On June 10, 2026, five days before the market structure circular, the CBN issued an exposure draft of guidelines on the ring-fencing of operations of closely linked entities in the Nigerian financial system. Ring-fencing, in regulatory terms, means requiring each regulated subsidiary within a financial group to operate with its own separate governance structure, capital adequacy position, liquidity buffer and risk management system. It prevents the blurring of lines that occurs when one corporate group runs its payment, lending and savings operations as though they are interchangeable departments. (Legit.ng — CBN Tightens Rules for OPay, Moniepoint, PalmPay, July 2026)
The CBN described the existing arrangement as creating "regulatory arbitrage arising from the commingling of activities across different licence categories." In plain terms: platforms that operate a payment subsidiary, a lending subsidiary and a savings product under one roof have been, in effect, running a bank without being regulated as one. Ring-fencing forces each unit to stand on its own capital and governance footing. The exposure draft status means the requirements were still under consultation as of this article's update. Affected fintechs are expected to submit compliance plans before the final guidelines are issued.
AML Baseline Standards: The March 2026 Compliance Mandate
On March 10, 2026, the CBN issued Circular BSD/DIR/PUB/LAB/019/002, establishing mandatory minimum standards for automated Anti-Money Laundering, Combating the Financing of Terrorism and Countering Proliferation Financing solutions across all CBN-supervised institutions. The circular explicitly lists mobile money operators, payment service providers, microfinance banks and fintechs holding CBN licences — meaning OPay, Kuda, PalmPay and their peers are directly covered. (Reg Alert — CBN Circular BSD/DIR/PUB/LAB/019/002, March 10, 2026)
The standards require each institution to deploy automated systems capable of real-time transaction monitoring, automated customer due diligence including risk profiling and enhanced due diligence for high-risk customers, sanctions screening against designated lists, and automated flagging of suspicious activities for regulatory reporting. Spreadsheet-based or semi-manual review processes will not satisfy the baseline. The compliance deadline differs by institution type: deposit money banks must comply fully by September 10, 2027; mobile money operators, fintechs and payment service providers have until March 10, 2028. (Youverify — CBN AML Baseline Standards for Fintechs and PSPs, September 2026)
What this means in practice for OPay, Kuda and PalmPay is a significant technology investment. Each platform must either build or procure an AML system that can process the volumes they handle — which, in OPay's case, runs to hundreds of millions of transactions per year — in real time, with documented decision trails. The CBN also issued a guidance note on March 31, 2026, clarifying that compliance is assessed at the institution level, not the vendor level: buying an approved AML software product does not guarantee compliance if it is not implemented correctly across the institution's full transaction flow. (CBN Reforms — March 31, 2026 AML Guidance Note)
9. Data Localisation and Instant Payment Rules
Payment Data Must Stay in Nigeria from January 2027
The June 15, 2026 circular introduced a requirement that will have significant implications for the technology infrastructure of every Nigerian fintech: all payment transaction data generated within Nigeria must be stored and managed on servers physically located in Nigeria. The deadline for full compliance is January 1, 2027. (IT Edge News — CBN Orders Local Storage of Payment Data from 2027)
This rule affects platforms that currently rely on international cloud infrastructure — Amazon Web Services, Google Cloud, Microsoft Azure — for parts of their payment data processing. The localisation requirement does not prohibit the use of these providers; it requires that the Nigerian data remain on Nigerian nodes or be replicated to Nigerian-hosted infrastructure in a manner that meets CBN and Nigeria Data Protection Act 2023 requirements. The requirement also intersects with the NIMC Act 2026's strengthened data protection provisions, which impose criminal penalties for unauthorised access to identity records.
For users, data localisation means that a Nigerian court or regulator can more readily compel access to transaction records than would be the case if those records were held in a foreign jurisdiction. It is a measure intended to strengthen law enforcement access as much as it is a data protection provision.
New Instant Payment Rules: One Device, Customer-Controlled Limits
A separate March 12, 2026 circular introduced rules for instant payment services that affect how customers interact with OPay, Kuda and PalmPay on their phones. The rules, which took effect July 1, 2026, include the following key provisions. (CBN Reforms — Instant Payment Circular, March 12, 2026)
First, mobile banking applications may only be linked to one device at a time. When you activate the app on a new device, the account carries a ₦20,000 transaction limit for the first 24 hours — a measure designed to prevent fraudsters who obtain a new device from immediately draining an account. Second, customers can voluntarily disable instant transfers on their accounts for any period they choose. Opting in and out of this restriction requires multi-factor authentication. Third, financial institutions must allow customers to set personal transaction limits below the regulatory ceiling, verified through the institution's security process. Fourth, new accounts are automatically enrolled for instant payments, but customers can later change this preference.
These rules represent a shift from the approach of earlier CBN guidelines, which focused almost entirely on operator-side compliance. The instant payment circular acknowledges that fraud prevention also requires giving customers active control over their own accounts — a model more consistent with how digital banking operates in the UK and EU.
10. OPay, Kuda and PalmPay: A Regulatory Comparison
With all the regulations described above now in effect or approaching their enforcement dates, the regulatory profiles of Nigeria's three most-discussed fintech platforms look as follows as of November 2026. Note that specific transaction limits are set by CBN regulation and applied by each institution; the figures below should be verified directly with the platform before making a financial decision, as they are subject to revision.
| Dimension | OPay | Kuda | PalmPay |
|---|---|---|---|
| CBN Licence Type | Mobile Money Operator (MMO) — National status, January 2026 | Microfinance Bank (MFB) — National status, December 2025 | Mobile Money Operator (MMO) — National status, January 2026 |
| NDIC Insurance | Yes — verify current limit with NDIC | Yes — verify current limit with NDIC | Yes — verify current limit with NDIC |
| Tier 1 Daily Limit | ~₦50,000 (CBN mobile money framework) | ~₦50,000 (CBN MFB tier framework) | ~₦50,000 (CBN mobile money framework) |
| Tier 3 Daily Limit | ~₦5,000,000 (confirm with OPay; CBN ceiling applies) | ~₦5,000,000 (confirm with Kuda; CBN ceiling applies) | ~₦5,000,000 (confirm with PalmPay; CBN ceiling applies) |
| Tier 3 Requirements | BVN + NIN + address proof + physical verification | BVN + NIN + address proof + physical verification | BVN + NIN + facial verification + address verification |
| 2024 KYC Penalty | ₦1 billion reported (OPay denied; CBN not confirmed publicly) | No fine reported | No fine reported |
| 2024 Onboarding Ban | April 29 – June 2024 | April 29 – June 2024 | April 29 – June 2024 |
| POS Agent Network | 563,000+ agents (leading position as of 2025 data) | Limited POS agent presence; primarily app-based | Significant agent network; competes with OPay for agent exclusivity |
| Cross-Border Payments | Available | Tanzania, Canada payment licences (March 2024) | Nigeria, Kenya, Tanzania (2025) |
| Stamp Duty on Transfers (Jan 2026) | ₦50 on transfers of ₦10,000 and above (Nigeria Tax Act 2025) | ₦50 on transfers of ₦10,000 and above | ₦50 on transfers of ₦10,000 and above |
Sources for this table: CBN Reforms page, TechCabal (December 2024), Brands.ng OPay Review 2026, Kuda Help Centre, Brands.ng PalmPay Safety Guide 2026, IT Edge News. Limits quoted are from CBN's published framework; individual platform current limits may vary within the CBN ceiling.
One detail worth highlighting separately: the ₦50 stamp duty now applied to all electronic transfers of ₦10,000 and above is not a platform policy — it is a tax provision under the Nigeria Tax Act 2025 that took effect January 1, 2026. It applies identically to OPay, Kuda, PalmPay and every other financial institution in Nigeria. (Brands.ng — OPay Review 2026 citing Nigeria Tax Act 2025)
For a deeper comparison of the tools, fees and features these platforms offer Nigerian users and businesses, the Best POS and Fintech Tools in Nigeria 2026 guide on Daily Reality NG covers the operational landscape. The site's Nigerian Fintech Glossary 2026 explains the technical terms referenced in this article in plain Nigerian English.
11. What to Do If Your Fintech Account Is Frozen or Restricted
Despite the regulations described in this article, account restrictions and freezes remain a genuine risk for users of OPay, Kuda and PalmPay — whether triggered by a KYC gap, a suspicious transaction flag, or a compliance action that catches a legitimate account in its net. Here is what you should do, and what you should not do, if this happens to you.
Immediate Steps
If your account is restricted or your transactions are blocked, start by reading the notification carefully. A restriction notice from a fintech will usually state a specific reason — missing NIN, address verification required, suspicious activity flag, or a temporary hold pending identity confirmation. Do not assume the worst; most restrictions at this stage are administrative and resolvable through the platform's compliance process.
Contact the platform's customer support through its official channel only — its verified in-app chat, email address or phone number published on its official website or CBN licence page. Do not respond to messages from unofficial numbers, especially any that ask you to provide your PIN, password, OTP or account number to "unfreeze" your account. These are fraud attempts that exploit account restriction anxiety. (FCCPC — Consumer Rights and Responsibilities)
Escalating a Legitimate Dispute
If you have provided all required documentation and your account remains restricted without explanation after a reasonable period, escalate formally in writing. Send a dated email to the platform's compliance or disputes address. State your BVN, the account number, the nature of the restriction, and the documentation you have already submitted. Keep a copy of everything you send.
If the platform does not resolve the matter within 7 to 14 working days, you have two official escalation routes. First, file a complaint with the CBN through its Consumer Protection Division. The CBN maintains a unified complaints tracking system accessible via its website. Second, the FCCPC — Federal Competition and Consumer Protection Commission — accepts complaints about digital financial services through its portal at complaints.fccpc.gov.ng. (FCCPC Official Website)
What NOT to Do
- Do not share your PIN, password or OTP with anyone, including people claiming to be fintech customer service agents calling by phone. Legitimate fintech customer service never asks for your PIN.
- Do not pay a third party to "unfreeze" your account. No intermediary has the authority to lift a CBN-mandated restriction, and any such payment is a scam.
- Do not attempt multiple login attempts on a frozen account. Repeated failed logins can trigger additional security locks that complicate the resolution process.
- Do not submit documents through unofficial channels. NIN and BVN submissions should only be made through the official in-app verification process, not through links sent via SMS or WhatsApp.
- Do not wait indefinitely before escalating. The CBN's consumer protection framework entitles you to a timely response. Document every date and every interaction.
Credit Bureau Records and Your Financial Future
If a restriction on your fintech account arises from a fraud flag or a compliance issue, be aware that some of this information may be reported to Nigeria's credit bureaus — CRC Credit Bureau Limited, CreditRegistry Nigeria or FirstCentral Credit Bureau. Under the Credit Reporting Act 2017, you are entitled to one free credit report per year from each bureau. If you believe incorrect information has been reported about you, you have the right to submit a written complaint to the bureau within 10 working days. The bureau must investigate and communicate the outcome within 10 working days of receiving the complaint. (CRC Credit Bureau — What to Do When There Is an Error in Your Credit Report)
12. Nigeria Payments System Vision 2028
The regulatory tightening described throughout this article does not represent the CBN's full ambition for the fintech sector. On June 1, 2026, CBN Governor Olayemi Cardoso unveiled the Nigeria Payments System Vision 2028 — a strategic roadmap that sets out where the regulator wants the country's digital payments ecosystem to be in two years. (CBN — Nigeria Payments System Vision 2028)
The vision's headline target is 95 per cent financial inclusion of Nigeria's adult population by 2028 — an ambitious figure when measured against current estimates that place financial inclusion at approximately 64 per cent. The PSV 2028 identifies four priority areas: expanding access to formal financial services, deepening digital payments, positioning Nigeria as a hub for African digital finance, and strengthening the resilience and security of the payments infrastructure.
For OPay, Kuda and PalmPay, the PSV 2028 is simultaneously an endorsement and a challenge. The vision explicitly recognises fintech companies as essential contributors to financial inclusion — the very mission that justified their rapid growth. But the roadmap also embeds the compliance architecture described in this article: the market structure caps, the AML standards, the data localisation requirements and the ring-fencing framework are all consistent with a vision of fintech as regulated infrastructure rather than unregulated disruption.
OPay publicly backed the PSV 2028, stating that the target aligned with its own stated mission of bringing financial services to Nigerians who have historically been excluded from the banking system. The practical test of the vision will be whether the compliance burden it imposes on fintechs raises costs in ways that price out the very low-income users the policy is designed to serve. That tension — between regulatory discipline and financial inclusion — is the central challenge Nigeria's digital banking sector will navigate through 2027 and beyond. See Daily Reality NG's Nigeria Fintech News Hub 2026 for ongoing coverage of this regulatory landscape, and the Nigerian Fintech Research and Analysis page for deeper data.
13. Frequently Asked Questions
Q1: Can OPay, Kuda or PalmPay freeze my account without notice?
Yes, but with limitations. A CBN-licensed fintech can place a temporary hold on an account as part of a fraud investigation, a KYC compliance review or a response to a regulatory directive. However, the platform is required to notify you and provide a reason within a reasonable period. If you receive no explanation after contacting the platform through official channels, escalate to the CBN Consumer Protection Division or the FCCPC. Sudden unexplained freezes with no notification are a compliance failure by the institution, not a normal operating procedure.
Q2: Is my money safe if OPay, Kuda or PalmPay collapses?
Your deposit is covered by the Nigeria Deposit Insurance Corporation up to the applicable per-depositor limit. This coverage applies to all CBN-licensed deposit-taking institutions, including microfinance banks and licensed mobile money operators. The exact current limit should be verified at ndic.gov.ng, as it is subject to revision. NDIC coverage does not guarantee instant access to your funds if an institution fails — the NDIC's claims process takes time — but it does protect your principal up to the limit. Amounts above the limit are not insured.
Q3: Does the single-principal rule mean I can no longer use OPay if I am a Moniepoint merchant?
No. The single-principal rule applies to banking agents — individuals who operate POS terminals as a business on behalf of a financial institution, earning commissions for facilitating cash-in and cash-out. It does not apply to merchants or businesses that accept payments through multiple POS terminals. You can continue to accept OPay, Moniepoint and PalmPay payments in your store simultaneously. What you cannot do, from April 1, 2026, is operate as a commissioned POS agent for more than one principal at the same time.
Q4: What is the difference between OPay's Tier 1, Tier 2 and Tier 3 limits?
The tier limits are set by the CBN's mobile money framework. Tier 1 has the lowest daily transfer and balance ceilings, accessible with minimal identification. Tier 2 requires a verified BVN and additional identity documentation, unlocking higher limits. Tier 3 requires BVN, NIN, proof of address and physical address verification, and provides the highest limits — approximately ₦5,000,000 per day for personal accounts, though you should confirm current ceilings directly with OPay, as the CBN framework permits institutions to set lower limits within the regulatory ceiling. The same tier structure applies to PalmPay as an MMO and to Kuda as a microfinance bank, though the exact documentation requirements may differ slightly.
Q5: Will the ₦50 stamp duty on transfers also apply to my OPay or Kuda transfers?
Yes. The ₦50 stamp duty on all electronic transfers of ₦10,000 and above was introduced under the Nigeria Tax Act 2025, effective January 1, 2026. It applies across all CBN-licensed financial institutions without exception, including OPay, Kuda and PalmPay. This is a federal tax collected by the financial institution on behalf of the government, not a platform fee. A ₦10,000 transfer now attracts a ₦50 stamp duty charge in addition to whatever transfer fee the platform applies.
Q6: Can a loan app blacklist my OPay or Kuda BVN?
No — a loan app does not have the authority to blacklist a BVN. Loan apps can report your default to Nigeria's three licensed credit bureaus (CRC Credit Bureau Limited, CreditRegistry Nigeria and FirstCentral Credit Bureau), which will affect your credit score and your ability to obtain future credit. But placing a BVN on a watchlist is the CBN's function, reserved for situations involving suspected financial crimes. A failed loan repayment is a civil matter, not a criminal one. The appropriate response to a defaulted loan app debt is to repay what you owe; the appropriate response to a loan app that is harassing your contacts or making fraudulent threats is to report it to the FCCPC at lenderstaskforce@fccpc.gov.ng.
Q7: What happens if OPay exceeds the 25% market share cap in card issuing?
Under the June 15, 2026 circular, any institution exceeding 25 per cent of card issuing would be restricted to a maximum 15 per cent of merchant acquiring in the same rolling 12-month period. The CBN requires monthly market share reporting. Institutions that are over the limit must file a compliance plan. The circular does not specify the immediate sanction for exceeding the cap without a plan, but CBN supervisory penalties under the Banks and Other Financial Institutions Act 2020 would ordinarily apply. The compliance deadline for full adherence to the market structure requirements is December 31, 2026.
Q8: Is PalmPay still banned in Nigeria?
No. The April 2024 CBN directive that temporarily prevented PalmPay and three other fintechs from onboarding new customers was lifted within weeks, after the companies tightened their KYC processes. As of January 2026, PalmPay holds a national operating licence from the CBN — the highest regulatory status available to a mobile money operator in Nigeria. A claim that PalmPay was "banned over cryptocurrency" was rated misleading by FactCheckHub; the actual issue was KYC compliance, not cryptocurrency activity. PalmPay is fully operational and legally authorised across all 36 states and the FCT.
Q9: Does Kuda's national microfinance bank licence mean it is now a full commercial bank?
No. The CBN explicitly clarified when it announced the licence upgrades that upgrading a fintech or microfinance bank to national status does not convert it into a commercial bank. Kuda continues to operate as a licensed microfinance bank at national level. This means it is subject to CBN's microfinance bank regulations, not the higher capital and operational requirements of commercial banking. The distinction affects the range of services it can offer, its regulatory capital requirements and the deposit insurance structure applicable to its customers.
Q10: If I have a complaint about how a fintech treated me during a restriction, where do I report it?
You have two primary channels. The CBN Consumer Protection Division accepts complaints through its website at cbn.gov.ng and via the toll-free line *959#. The FCCPC — the Federal Competition and Consumer Protection Commission — handles complaints about digital financial services at complaints.fccpc.gov.ng or by email to contact@fccpc.gov.ng. For complaints specifically about data privacy violations — a fintech accessing your contacts without consent, for example — the Nigeria Data Protection Commission (NDPC) is the appropriate body, and its director has publicly warned that "any unauthorised access to people's contacts is an offence." Document your complaint in writing and retain copies.
Q11: What does the CBN's AML deadline mean for me as an ordinary user?
The AML Baseline Standards issued in March 2026 are compliance obligations for financial institutions, not individual users. What they mean in practice is that your fintech will be required to deploy more sophisticated systems for detecting unusual transaction patterns by March 2028. For most users, the visible effect will be stronger fraud monitoring — which may occasionally produce false-positive alerts or temporary transaction delays while the system flags a transaction for review. If your transaction is held for review, follow your platform's stated process for providing clarification. Do not attempt workarounds, as these can trigger additional flags.
Q12: What is data localisation and does it affect my privacy on these platforms?
The CBN's data localisation requirement, effective January 1, 2027, mandates that all payment transaction data generated within Nigeria be stored on servers located in Nigeria. For users, the practical implication is that Nigerian regulators and courts can more readily access your transaction records when required by law. It is not a privacy intrusion in the sense of increasing the fintech's visibility into your transactions — they already have that. What it changes is the jurisdictional reach of Nigerian regulatory authority over your data.
Q13: Can the CBN block all transfers through OPay, Kuda or PalmPay at once?
The April 2024 new-customer onboarding ban shows that the CBN can issue a directive that significantly restricts operations. That ban did not block existing users from transacting; it prevented new accounts from being opened. A more sweeping suspension of transaction activity would be an extreme measure that the CBN has not yet used against a licensed fintech, but it retains this authority under the Banks and Other Financial Institutions Act 2020. Existing account holders are advised to maintain balances across more than one financial institution — including at least one traditional commercial bank — as a basic risk management measure.
Q14: What is the Nigeria Payments System Vision 2028 and how does it affect fintech users?
The PSV 2028, launched June 1, 2026, is the CBN's strategic blueprint for expanding Nigeria's digital payments ecosystem by 2028. Its headline target is 95 per cent financial inclusion of Nigeria's adult population. For users, the vision signals that the CBN intends to expand digital payment access — meaning the regulatory environment should, over time, make it easier for underserved Nigerians to open accounts and use digital payment services. However, the compliance requirements embedded in the same regulatory wave (AML standards, data localisation, ring-fencing) also increase operating costs for fintechs, which may be passed on in the form of fees or reduced product accessibility.
Q15: Is it still worth using OPay, Kuda or PalmPay in 2026 after all these regulations?
The three platforms remain among the most widely used digital payment tools in Nigeria, and their national licences and NDIC coverage make them more formally regulated than at any previous point in their histories. The regulations described in this article are, in most respects, signs of a maturing sector rather than indicators of institutional failure. Whether a specific platform is right for your needs depends on your transaction volumes, your preference for agent banking versus app-only banking, and whether you have completed Tier 3 verification. Daily Reality NG's Nigerian Fintech Tools Comparison Hub provides an ongoing comparison to help you decide. Whatever platform you choose, verify its current CBN licence status at cbn.gov.ng before depositing significant funds.
14. Sources and Research Limitations
This article draws on CBN circulars published on the official CBN Reforms and Initiatives page (cbn.gov.ng/AboutCBN/Reforms.html); the June 15, 2026 CBN Circular PSS/DIR/PUB/CIR/001/004 as published on Reg Alert and confirmed by Aluko & Oyebode and SCP Law; the March 10, 2026 CBN AML Circular BSD/DIR/PUB/LAB/019/002 as confirmed by KPMG Nigeria and Youverify; the October 6, 2025 Agent Banking Guidelines (Circular FPR/DIR/PUB/CIR/002/025) confirmed by TechCabal and Techpoint Africa; the FCCPC's official website (fccpc.gov.ng); the CRC Credit Bureau's blog on the NIMC Act 2026; BusinessDay and Nairametrics on CBN licence upgrades and market structure; Kuda's official Help Centre; Brands.ng research on OPay limits and PalmPay safety; and legal analysis from Gresyndale Legal published on Mondaq.
Limitations: Transaction limits change by CBN directive; figures quoted in this article should be verified with the relevant platform before relying on them. The ₦1 billion KYC fines reported against OPay are contested by OPay and have not been publicly confirmed by the CBN — they are treated as disputed in this article. The ring-fencing guidelines were in exposure-draft form as of November 2026; final requirements may differ from what was consulted. This article was updated November 2, 2026; any CBN circular issued after that date is not reflected here. This article is part of Daily Reality NG's ongoing commitment, explained in our Founder's Notes, to provide independent, evidence-based financial reporting for Nigerian readers.
Samson Ese is the founder and editor-in-chief of Daily Reality NG (dailyrealityngnews.com), an independent Nigerian digital publication based in Warri, Delta State. My reporting on Nigerian fintech, banking regulation and consumer finance draws on primary CBN documents, official regulatory filings and verified secondary sources. I have covered Nigeria's digital banking landscape since 2025. Daily Reality NG operates without advertising influence; My editorial positions are independent of any financial institution or technology company.
Related Reading on Daily Reality NG
- Nigeria Fintech News & Insights Hub 2026
- Complete Digital Banking Hub Nigeria 2026
- CBN Fees Database: Complete Nigerian Bank Charges Guide
- POS Business Hub Nigeria 2026: Complete Guide
- How to Start a POS Business in Nigeria 2026
- Nigerian Fintech Research & Analysis
- Nigerian Fintech Glossary 2026 — 100 Terms Explained
- Best POS & Fintech Tools in Nigeria 2026
- Nigerian Bank Downtime Log — Track Transfer Failures
- Nigerian Fintech Tools Comparison Hub
- Nigerian SME Resource Centre & Tools
- POS Agent Earnings Calculator Nigeria
- Nigerian Business Cost Calculator 2026
- Daily Reality NG Editorial Standards & Fact-Checking
- Founder's Notes: Why Daily Reality NG Exists
The regulatory requirements described in this article are based on CBN circulars and verified sources as of November 2, 2026. Nigeria's financial regulatory environment changes frequently. Specific transaction limits, compliance deadlines and licence conditions may have been updated after this article's publication date. This content is for general information only — it does not constitute financial, legal or regulatory advice. Always verify current requirements with the CBN, your fintech provider or a qualified professional before taking action. The Nigeria Data Protection Act 2023 governs how platforms use your personal data; you have rights to access, correct and object to processing, exercisable through your platform's data protection officer or the Nigeria Data Protection Commission.
Comments
Post a Comment