Central Bank of Nigeria Payment Rules Target Fintech Market Concentration

The Central Bank of Nigeria recently introduced strict regulations aimed at controlling how much of the digital financial market a single company can own. Released in mid-2026, the new directive places hard caps on market share for banks and financial technology organizations. The policy specifically restricts companies from controlling both sides of a digital transaction, forcing major brands to choose whether they want to focus on everyday consumers or the merchants who accept their payments.

Setting Hard Limits on Market Share

Under the new regulatory framework, any licensed financial institution that controls more than 25 percent of the consumer issuing market is strictly capped at a 15 percent market share on the merchant acquiring side. The rule also works in reverse. If a company handles more than 25 percent of merchant acquiring activities over a twelve month period, it cannot legally hold more than 15 percent of the consumer issuing market. Companies have until December 31, 2026, to restructure their operations and meet these new requirements.

Consumer issuing involves products that everyday people use to spend their money, like debit cards, mobile wallets, and personal bank accounts. Merchant acquiring covers the physical point-of-sale terminals, internet payment gateways, and settlement software that shop owners use to receive money. By separating these two functions, the central bank wants to stop any single corporation from acting as both the buyer's bank and the seller's bank on a massive scale.

This policy change directly affects some of the largest financial technology brands operating in the country. For example, Moniepoint currently manages roughly 38.5 percent of the local point-of-sale market, while OPay controls nearly 27 percent. Because both companies exceed the 25 percent limit on the merchant side, they face immediate restrictions on how much they can expand their consumer banking operations. These structural changes force fast-growing startups to reconsider their long-term growth plans. You can see how other local competitors adjust their strategies by reading our report on how PalmPay targets heavy funding to expand its digital banking reach.

Protecting a Trillion-Naira Economy

The financial authority made this move because the digital economy grew faster than the old rules could handle. In 2025 alone, the national payments network processed more than ₦1.2 quadrillion in digital transactions. When that volume of money flows through just two or three private companies, the entire national economy becomes vulnerable. If a dominant payment processor experiences a technical failure or a cyberattack, millions of citizens and thousands of small businesses could lose access to their funds instantly.

To reduce this structural risk, the new circular operates more like a competition law than standard banking oversight. The financial authority did not accuse any specific company of breaking the rules. Instead, the regulators decided that no single player should become too big to fail.

The new rules arrive during a period of heavy consolidation across the sector. Earlier in the year, Paystack acquired Ladder Microfinance Bank, and Flutterwave secured its own microfinance license after purchasing Mono. These moves allowed payment processors to offer full banking services directly to their users. To understand how large companies consolidate power quietly, review our coverage of how Paystack shut down Allawee following a secret acquisition. The central bank recognized that if these companies continued building closed loops, they would eventually shut out smaller competitors entirely.

Ownership Transparency and Data Protection

Market share limits represent only one part of the new regulatory package. The circular also introduced strict rules regarding ultimate beneficial ownership. Every licensed digital payment provider must maintain accurate records showing exactly who owns and controls the company. The central bank requires firms to present these ownership documents upon request to ensure compliance with anti-money laundering laws and anti-terrorism funding rules.

Alongside ownership transparency, the policy mandates strict data localization. By January 1, 2027, all financial institutions must store and manage their payment transaction data locally on servers physically located inside the country. Keeping sensitive financial records within national borders gives local authorities direct legal oversight and protects citizen information from foreign interference. Global financial news outlets like Reuters continually track how governments worldwide are demanding local data storage to protect national security interests.

A Shifting Path for Tech Founders

This regulatory action follows a previous rule enacted on April 1, 2026, which required all point-of-sale agents to work exclusively for a single principal company. Together, these policies show that the central bank intends to shape the market actively rather than waiting to fix problems after a crisis happens.

For startup founders and investors, the message is incredibly clear. Building a company that controls every step of a financial transaction is no longer a viable business model in the region. Organizations will likely have to split into separate holding companies or intentionally limit their growth in certain areas to stay under the 15 percent cap. The days of unregulated expansion are over, and the local technology market must now adjust to operating under strict government oversight.

Read More on TechRobust:

• Uber shuts down operations in Nigeria and Uganda
• CrowdStrike and OpenAI expand partnership to secure enterprise automated workers
• MTN plans expansion targeting thirty million mobile money users in Nigeria