The Investments and Securities Act (ISA) 2025, signed by President Bola Tinubu in March 2025, formally classifies digital assets as securities and places the Securities and Exchange Commission (SEC) in charge of supervising the sector. Crucially, ISA 2025 anchors that oversight in statute for the first time, replacing the policy guidance that previously governed the space and signaling a more durable regulatory foundation. Under the law, any platform offering crypto services to Nigerian users must enroll in the SEC's Accelerated Regulatory Incubation Programme (ARIP) before it can receive full registration. As of the first quarter of 2026, only two platforms, Quidax and Busha, hold provisional licenses under that pathway. Every other operator faces enforcement risk.

The scale of what regulators are trying to supervise is significant. Data reported by Tekedia citing Chainalysis shows Nigeria received $92.1 billion in measurable on-chain crypto value between July 2024 and June 2025, placing it sixth globally on the 2025 Crypto Adoption Index. That ranking marks a slide from earlier highs: Nigeria placed fourth overall on the Chainalysis Adoption Index in 2023 and had previously ranked second globally in peer-to-peer volume, making the current position a signal of tightening competition rather than declining activity. The $92.1 billion figure does not include off-chain peer-to-peer (P2P) naira settlements, which analysts consider substantial but currently unquantifiable. Sub-Saharan Africa as a whole received $205 billion in on-chain value during the same period, a 52 percent year-on-year increase, making it the third fastest-growing crypto region in the world.

The structural problem facing Nigeria's framework is that its most-used platforms sit outside its jurisdiction. That dynamic has deep roots: in 2021, the Central Bank of Nigeria prohibited banks from servicing crypto exchanges, a move that pushed millions of users toward offshore P2P platforms and entrenched the opacity regulators now seek to dismantle. Binance P2P, Bybit P2P, OKX P2P, and Remitano collectively handle the bulk of Nigerian crypto activity and are all headquartered offshore. ISA 2025 gives the SEC authority to fine unlicensed domestic operators, but it cannot compel foreign platforms to register unless those platforms choose to engage. Legal analysts at Cryptoverse Lawyers have noted that the pre-ISA environment left offshore operators navigating high market opportunity alongside unclear legal anchoring and inconsistent market expectations, an ambiguity that has not fully resolved. Cryptoverse Lawyers, citing PwC analysis, has flagged that poor coordination between regulators and offshore operators could drive activity further into informal and offshore channels.

The Binance crisis of 2024 illustrated how much Nigeria depends on platforms it cannot directly supervise. In February of that year, Nigerian authorities detained Tigran Gambaryan, Binance's then-head of financial crime compliance, accusing the company of facilitating money laundering and naira speculation. Nigeria's Economic and Financial Crimes Commission (EFCC) charged Binance and its executives with laundering $35.4 million in illicit assets. Gambaryan, a former IRS agent who said he had previously helped the EFCC recover over $400,000 in illicit funds and had trained more than 70 Nigerian enforcement agents, was held at Kuje Prison for eight months before his release on humanitarian grounds in October 2024. The episode exposed a legal vacuum in which heavy-handed enforcement was the primary tool available, rather than a functioning licensing or supervisory relationship with the platform itself.

The regulatory environment has since shifted in ways that reflect genuine institutional progress. Nigeria was removed from the Financial Action Task Force (FATF) increased-monitoring list in October 2025 after over two and a half years on the so-called grey list, having first been added in February 2023. Separately, a March 2026 Central Bank directive now requires real-time anti-money laundering monitoring for banks, with expanded scrutiny of crypto-adjacent flows. The government collected $276 million in digital payment levies in the first eleven months of 2025, more than double the prior year's total. A new crypto tax regime that took effect in January 2026 adds further structure: capital gains on crypto assets are taxed at up to 25 percent, corporate income tax on crypto firms is set at 30 percent, and a stamp duty applies to eligible naira withdrawals.

The user profile of Nigerian crypto holders shapes why the stakes of getting this regulation right are high. Roughly 40 percent of Nigerian adults remain unbanked or underbanked, and approximately 80 percent of crypto-active Nigerians hold stablecoins, which they use primarily for remittances, inflation hedging, and collecting freelance payments. Some 95 percent of Nigerian crypto users prefer stablecoins over the naira for transactions. Notably, 52 percent of Nigerian crypto investors are under 30, a demographic for whom digital asset platforms often serve as a first point of contact with formal financial services. For this population, P2P platforms are not speculative tools; they are basic financial infrastructure. An enforcement posture that causes offshore platforms to geo-block Nigerian users, as Binance partially did after the 2024 crisis, would cut off real economic lifelines rather than reduce financial risk.

Nigeria's move is part of a broader pattern across the continent. South Africa introduced a crypto asset service provider licensing framework in June 2023. Kenya signed a virtual asset service provider bill in October 2025. ISA 2025 also aligns with the OECD's Crypto-Asset Reporting Framework, which took effect on January 1, 2026, signaling that Nigeria is deliberately synchronizing with G20-level standards. For developers and projects building in the region, the immediate practical requirements include a registration fee of 30 million naira (roughly $18,500), capital adequacy thresholds, and mandatory Bank Verification Number integration for all user accounts. Operators who fail to comply face penalties of 10 million naira in the first month of default and 1 million naira for each subsequent month. Whether the SEC can extend meaningful oversight to the offshore platforms that dominate actual usage will determine whether the $92 billion figure ever comes fully into view.