Nigeria's Securities and Exchange Commission has established a comprehensive regulatory framework for Virtual Asset Service Providers, creating binding obligations that young crypto and Web3 founders cannot afford to ignore.
The SEC's Rules on Issuance, Offering Platforms and Custody of Digital Assets, first published in May 2022, set out the foundational requirements for any entity dealing in digital assets classified as securities. Under these rules, VASPs must register with the Commission, meet minimum capital thresholds, and comply with ongoing disclosure and reporting obligations.
Operating an unregistered VASP in Nigeria attracts serious sanctions. The SEC has the power to impose monetary penalties, suspend operations, and refer matters for criminal prosecution where warranted. Founders who bypass registration expose themselves and their companies to enforcement action that can terminate business operations entirely.
The regulatory architecture includes the Accelerated Regulatory Incubation Programme, designed to bring emerging digital asset firms into the supervisory perimeter within a structured timeline. Participants in the programme must demonstrate compliance readiness and submit to SEC oversight, including periodic reporting on their activities, governance structures, and customer protection measures.
Anti-money laundering and counter-terrorism financing obligations form a central pillar of VASP compliance. Registered providers must implement know-your-customer protocols, transaction monitoring systems, and suspicious transaction reporting to the Nigerian Financial Intelligence Unit. Failure to maintain adequate AML/CFT controls can result in separate penalties under the Money Laundering (Prevention and Prohibition) Act.
Tax compliance adds another layer of obligation. The Finance Act 2023 introduced a 10% tax on gains derived from the disposal of digital assets, bringing crypto transactions squarely within the net of the Federal Inland Revenue Service. VASPs may also have value-added tax, withholding tax, and companies' income tax obligations depending on their business model and transaction structures.
The SEC collaborates with other regulators, including the Central Bank of Nigeria and the FIRS, to monitor the digital asset ecosystem. This inter-agency coordination means that a compliance failure with one regulator can quickly cascade into action by others, compounding the legal and financial exposure for founders.
For young founders building Web3 products, proactive legal structuring and early engagement with regulatory requirements are essential. The cost of compliance, while not trivial, is far lower than the cost of enforcement penalties, reputational damage, and the potential loss of the entire business.

