CBN Tightens Payment Rules on Fintech Concentration
The Central Bank of Nigeria’s recent circular restricting payment firms from operating on both sides of the merchant-consumer ecosystem has brought renewed attention to the evolving role of regulation in shaping Africa’s digital economy. The directive raises broader questions about whether African regulators are taking a more assertive approach to market structure, competition and concentration in the technology sector.
Market Share Limits and Data Rules
Kehinde Fagbule, a senior consultant at TechCabal Insights, says the CBN has drawn a hard line around concentration before it becomes irreversible. The circular sets caps at 15 percent on the other side of the market for any institution with more than 25 percent share in consumer issuing or merchant acquiring.
The timing of the rule aligns with current market realities. Moniepoint controls roughly 38.5 percent of Nigeria’s POS market, while OPay sits near 27 percent. Both are already past the threshold the CBN treats as a structural risk trigger.
Related: Binance Blocks 17 Crypto Platforms
This isn’t a single rule, it’s three pillars working as one argument. Market share caps address concentration, UBO disclosure addresses ownership, and data localisation addresses control of information. Put together, the CBN is asking who owns these systems, where the data sits, and whether any single player has become too embedded to fail or to regulate. That question carries weight because Nigeria’s payments ecosystem processed over ₦1.2 quadrillion in 2025. When that volume runs mostly through two or three entities, a bad day for one of them becomes a bad day for the economy.
The CBN’s posture is notable. The regulator isn’t accusing anyone of wrongdoing, it’s saying the market evolved faster than the guardrails around it. That’s a more mature form of regulatory action than Nigerian policy is usually given credit for, and it signals the CBN wants to shape market structure ahead of a crisis rather than clean one up after it happens.
Restructuring Paths for Fintechs
Companies that built across every layer of the value chain at once are the most exposed. Moniepoint is the clearest case: it moved from a merchant acquiring company with strong distribution to something closer to national infrastructure, using payments as the hook and credit as the lock-in. That architecture, built for scale, now reads as a compliance liability. The timing makes it worse. Paystack acquired Ladder Microfinance Bank in January and Flutterwave secured its own microfinance banking licence in April, both moves designed to turn payment users into banking customers. Some companies may already be sitting in breach territory before they’ve finished executing the strategy that got them there.
Practically, there are three paths out. Structural separation into distinct holding entities, which Paystack has already tested through The Stack Group. Strategic retreat, giving up ground in whichever segment pushes them over the cap. Or white-labelling the divested capability to smaller players, turning a forced exit into a new revenue line instead of a pure loss. None of these are quick fixes, and each reshapes the economics that justified the original build-out. Layered on top is data localisation, a separate but equally serious problem: a meaningful share of Nigerian payment data still sits on foreign servers, and local data centre capacity isn’t built out enough to absorb the migration on the CBN’s timeline.
Related: EU introduces new repair rights for consumers
The companies that move first on restructuring, rather than waiting to see how enforcement plays out, will likely keep more optionality over which parts of their business they get to keep. This is exactly the kind of decision that’s still being shaped in real time, which is why conversations like Moonshot by TechCabal’s Government & Policy track matter: getting founders, operators, and policymakers in the same room while the rules are still being interpreted, not after they’re settled.
Regulators are now treating payments as digital infrastructure with market power implications, not just a financial sector to supervise. This logic doesn’t stop at issuing and acquiring. Any segment where one or two players have become the chokepoint, lending, insurance distribution, agent networks, could face the same structural treatment next. Founders can no longer treat regulation as something to route around after scaling. Market structure now has to be part of the strategy from day one.
Both a healthier market and disruption are possible outcomes, depending almost entirely on enforcement consistency and implementation details the CBN hasn’t yet published. If dominant players are forced to pull back in certain segments, space opens up for others to grow. Moniepoint and OPay’s dominance has made certain segments functionally inaccessible to smaller players; the caps change that. However, data localisation places asymmetric cost burdens on smaller operators. Larger institutions can absorb the compliance cost; super agents and smaller switching companies face the same deadline with far fewer resources.
Related: Smart Investors Know a Good Franchise
Investment Implications
Two things need to update in fintech valuation models right now. The “winner takes all” premium for cross-market dominance needs a regulatory discount. A company at 38 percent POS share while growing a consumer wallet has a structural compliance problem with a hard December 31 deadline, not just a growth story. The flip side is investable too. Whoever fills the space dominant players get forced to vacate is worth identifying now, before that white space becomes obvious.
For foreign-backed players like Flutterwave and Paystack, UBO disclosure changes the information relationship with the CBN. Ownership now has to be transparent all the way up the chain, not just at the Nigerian operating entity. The bigger question is whether this is Nigeria-specific or the start of a more interventionist era across African tech broadly. If it’s the latter, the playbook shifts away from end-to-end platform control and toward interoperability and modularity, with moats built from execution rather than structural lock-in.
Companies that want to survive and scale in this new environment must build regulatory intelligence as a core competency. The signals for this circular were visible months in advance: the April POS exclusivity rule, CBN commentary on concentration risk, the pace of licensing upgrades. Companies reading those signals had a head start on scenario planning while everyone else spent the week of June 15 scrambling to interpret a circular. The Stack Group structure, whatever its original intent, is now the template for how you build a large fintech in Nigeria, separate regulated entities, ring-fenced risk, clean lines between business units. Build that architecture at Series A, not after you’re a unicorn facing a December deadline. Don’t build moats from structural lock-in, build them from execution. The companies best positioned are the ones whose advantage comes from product quality, distribution depth, or data, none of which the CBN can cap. The operators who show up with data and perspective help shape what the next circular looks like. That’s not a soft benefit, it’s a competitive advantage.
