CBN begins virtual asset anti-money laundering supervision

Nigeria's Central Bank (CBN) has initiated a formal Anti-Money Laundering and Counter-Terrorism Financing (AML/CFT) supervision pilot targeting virtual asset service providers, with fintech unicorns Paystack and Flutterwave named as primary participants. This regulatory intervention marks a critical inflection point for Africa's most mature digital payments ecosystem and signals tightening compliance expectations that will reshape the competitive landscape for foreign investors.

The pilot programme focuses on Virtual Asset Service Providers (VASPs) — entities that custody, trade, or facilitate transfers of cryptocurrencies and tokenized assets. By naming Nigeria's two largest cross-border payment platforms, the CBN has effectively set a regulatory baseline that will ripple across the entire West African fintech corridor. Both Paystack and Flutterwave process billions in annual transaction volume, with Paystack handling roughly 40% of Nigeria's card payments and Flutterwave expanding aggressively across 33 African countries.

For European investors, this development carries dual implications. On the surface, stricter AML/CFT oversight appears restrictive — additional compliance infrastructure increases operational costs and slows product iteration. However, this regulatory formalization actually *strengthens* market entry barriers that protect established players from undercapitalized competitors. Paystack and Flutterwave have the technical and financial resources to absorb compliance costs; smaller challengers do not.

The timing is significant. Nigeria's fintech sector has historically operated in a grey regulatory zone, with the CBN issuing guidelines but lacking enforcement mechanisms. This pilot represents the CBN's first systematic attempt to operationalize supervision. The move aligns with international pressure from FATF (Financial Action Task Force) standards, which Nigeria committed to implementing. European regulators scrutinizing cross-border payments increasingly demand that their counterparts in emerging markets demonstrate robust AML controls — without this pilot, Nigerian fintechs would face mounting friction when settling through European banking corridors.

Market implications are material. Paystack, valued at $5.2 billion in 2021, now operates under explicit regulatory scrutiny that could limit its capacity for aggressive product expansion but simultaneously signals legitimacy that attracts institutional capital. Stripe's 2021 acquisition of Paystack for $200 million was partly contingent on regulatory clarity; deeper CBN involvement paradoxically increases Paystack's strategic value to Stripe's African expansion.

The compliance burden will filter upward to merchant networks and smaller regional fintechs that depend on Paystack and Flutterwave infrastructure. Nigerian SMEs exporting goods or receiving diaspora remittances will face identity verification requirements and transaction monitoring that may temporarily slow velocity but ultimately reduce fraud losses.

European investors should recognize this as Nigeria's fintech sector maturing from a regulatory Wild West into a monitored ecosystem. This is *not* a reversal of fintech-friendly policy — the CBN remains bullish on digital payments. Rather, it's the normal evolution toward institutionalization. Investors with 3-5 year horizons benefit from reduced regulatory tail risk; those seeking 18-month exits may face near-term friction as compliance infrastructure is built out.

The CBN's next move will likely be publishing specific VASP licensing requirements by Q2 2024, creating formal barriers to entry that cement Paystack and Flutterwave's dominance.