The CBN has opened Regulatory Sandbox Cohort 2 to unlicensed Nigerian fintech startups for the first time. Here is the technical breakdown of what this means for Nigerian builders.
What the Sandbox Is and Is Not
const sandbox = {
IS: 'Supervised testing with real users under CBN oversight',
isNOT: 'A commercial licence or permission to scale',
duration: '6-12 months',
outcome: 'CBN readiness assessment for full licence application',
cohort2Change: 'Unlicensed startups with working MVPs now eligible'
};
The Two Tracks
const tracks = {
VASP: {
for: ['Stablecoin settlement', 'Crypto on/off-ramps', 'Crypto wallets', 'Digital asset payments'],
cbnChecks: ['AML/CFT for virtual assets', 'Blockchain analytics', 'Travel Rule', 'Cold storage custody'],
additionalRegulator: 'SEC Nigeria — digital asset classification'
},
NON_VASP: {
for: ['Open banking', 'Payment initiation', 'Fraud detection', 'Financial inclusion', 'RegTech'],
cbnChecks: ['NDPA compliance', 'API security', 'Fraud controls', 'Complaints handling']
},
confirmWithCBN: ['Plain fiat remittance — not explicitly listed in either track']
};
Eligibility Check
function checkEligibility(startup) {
const disqualifiers = [
!startup.hasWorkingMVP && 'No MVP — concept stage not eligible',
startup.hasOutstandingRegulatoryAction && 'Outstanding sanctions',
!startup.hasInnovationBeyondExisting && 'No meaningful innovation'
].filter(Boolean);
const missingCompliance = [
'amlPolicy', 'sanctionsScreening', 'cdd',
'consumerProtection', 'cybersecurity',
'incidentResponse', 'dataProtection', 'namedComplianceOfficer'
].filter(item => !startup[item]);
return {
eligible: disqualifiers.length === 0,
disqualifiers,
complianceGaps: missingCompliance,
readinessScore: Math.round(
((8 - missingCompliance.length) / 8) * 100
)
};
}
Don't Force a Track Fit
The most important advice for Nigerian fintech builders evaluating Cohort 2:
Do not add digital asset features just to qualify for the VASP track.
VASP adds: SEC Nigeria jurisdiction, blockchain analytics costs, Travel Rule infrastructure, custody architecture requirements and significant technical complexity. If your product is genuinely payments or open banking — the Non-VASP track is correct. The compliance overhead difference is substantial.
Tomorrow: The full readiness checklist — what CBN wants to see before you apply.
ZikarelHub LTD is Nigeria's #1 software and digital agency — CBN-ready fintech platforms built with compliance from the foundation.
Are you considering CBN Sandbox Cohort 2? Which track fits your product? 👇
Top comments (1)
This content does not appear related to #puppet at all. I recommend, at the very least, that the puppet tag be removed.
It also doesn't appear to have any relation to JavaScript, despite the code blocks which are not real and only used to make this post appear to be technical.