Nigeria's Securities and Exchange Commission published proposed rules on Thursday, August 20, 2026, that would require any crypto exchange, custodian, virtual asset service provider (VASP), or tokenization platform serving Nigerian users to register with the SEC — regardless of where the company is incorporated or operates (TechCabal, Aug 20 2026). The proposal also compels covered firms to grant the Commission API-based or electronic access to operational, transactional, financial, wallet, custody, and settlement data, and to separately report transactions involving Nigerian residents and cross-border flows, complete with wallet addresses, values, timestamps, and counterparty details.
The steelman: Nigeria has real reasons to want visibility
Nigeria is, by most trading-volume estimates, one of the largest crypto markets in the world by grassroots usage — a byproduct of naira volatility, capital controls, and a young population that has treated stablecoins as a de facto savings and remittance rail for years. That scale is exactly why regulators have struggled: money moves in and out of Nigeria's formal financial system through offshore exchanges that answer to no domestic authority, creating blind spots for money laundering, terrorism financing, and tax leakage that a purely domestic licensing regime cannot close. The SEC's own framework, the Investments and Securities Act 2025 (enacted March 31, 2025), was written precisely to bring virtual assets under securities law and give the Commission license, monitoring, and enforcement power it previously lacked. Extraterritorial reach for platforms serving local users is not unusual — it is the same logic behind the EU's MiCA regime and the extraterritorial provisions in US securities and AML law. A regulator that can only see the exchanges licensed inside its own borders, while the bulk of activity happens through offshore apps, is regulating in the dark.
Where the proposal overreaches
The problem is less the principle of registration than the breadth of what it demands and the thinness of what backs it up. Requiring blanket API access to wallet, custody, and settlement data — for any platform "targeting" Nigerian users, a standard the draft does not define with precision — is a materially heavier data-sharing obligation than most peer regimes impose at the registration stage, and it arrives without a published enforcement mechanism against offshore firms that simply decline to register. Nigeria cannot compel a Singapore- or Dubai-based exchange to open its systems; it can only block access, pressure app stores, or lean on payment rails, tools that are blunt, easily circumvented by VPN and P2P channels, and that historically have pushed volume toward less transparent channels rather than more visible ones — precisely the opposite of what a transparency-driven rule is meant to achieve. Nigeria has already run this experiment: in 2021 it directed banks to block accounts linked to crypto exchanges, and peer-to-peer trading volume simply migrated to unregulated channels that were harder, not easier, to monitor.
Capital floors are doing double duty — and squeezing the wrong firms
The new proposal restates and layers onto capital thresholds the SEC already raised on January 16, 2026: exchanges and custodians must hold ₦2 billion (roughly $1.5 million) in minimum capital, up four-fold from the previous ₦500 million floor, with the increase to be met by June 30, 2027 or firms face suspension (TechCabal, Jan 16 2026). The August draft adds tiers for VASPs (₦200 million) and for tokenization and digital-asset offering platforms (₦500 million), plus registration fees of ₦30 million for exchanges and ₦15 million for VASPs. Capital adequacy rules are a legitimate tool against thinly capitalized operators who cannot absorb a hack or a run — Nigeria's own history includes exchange collapses that left users unable to withdraw funds. But a four-fold increase compressed into eighteen months, stacked with new registration fees and open-ended data-sharing duties, functions less like a safety floor and more like a consolidation filter: well-capitalized international exchanges can absorb it, Nigerian startups and the ARIP-incubated firms the SEC has spent the past year cultivating largely cannot. A regime built to bring informal activity into the light risks instead narrowing the field to a handful of large incumbents while pushing everyone else back into the informal channels the rule was designed to eliminate.
The wider pattern
This SEC proposal does not stand alone. The Central Bank of Nigeria's Payments System Vision 2028, unveiled June 1, 2026, separately proposes running observer nodes on blockchain networks carrying approved stablecoins to watch transaction flows in real time (CBN PSV 2028). Taken together with the SEC's registration-plus-API-access model, Nigeria is converging on a strategy of pervasive, real-time financial surveillance of digital assets rather than periodic reporting — a meaningfully more intrusive posture than most jurisdictions have adopted, and one that deserves scrutiny on proportionality grounds even where the underlying AML and tax objectives are legitimate. The SEC's public comment period is the moment to press for a narrower, better-defined "targeting Nigerian users" test, a phased capital timeline that doesn't gut the ARIP pipeline it just built, and data-access scope tied to specific enforcement triggers rather than standing API pipes into every registered wallet.