DEV Community

zikarelhub
zikarelhub

Posted on

CBN Regulatory Sandbox Cohort 2 — Technical Guide for Nigerian Fintech Builders

The CBN has opened Regulatory Sandbox Cohort 2 to unlicensed Nigerian fintech startups for the first time. Here is the technical breakdown of what this means for Nigerian builders.

What the Sandbox Is and Is Not

const sandbox = {
  IS: 'Supervised testing with real users under CBN oversight',
  isNOT: 'A commercial licence or permission to scale',
  duration: '6-12 months',
  outcome: 'CBN readiness assessment for full licence application',
  cohort2Change: 'Unlicensed startups with working MVPs now eligible'
};
Enter fullscreen mode Exit fullscreen mode

The Two Tracks

const tracks = {
  VASP: {
    for: ['Stablecoin settlement', 'Crypto on/off-ramps', 'Crypto wallets', 'Digital asset payments'],
    cbnChecks: ['AML/CFT for virtual assets', 'Blockchain analytics', 'Travel Rule', 'Cold storage custody'],
    additionalRegulator: 'SEC Nigeria — digital asset classification'
  },

  NON_VASP: {
    for: ['Open banking', 'Payment initiation', 'Fraud detection', 'Financial inclusion', 'RegTech'],
    cbnChecks: ['NDPA compliance', 'API security', 'Fraud controls', 'Complaints handling']
  },

  confirmWithCBN: ['Plain fiat remittance — not explicitly listed in either track']
};
Enter fullscreen mode Exit fullscreen mode

Eligibility Check

function checkEligibility(startup) {
  const disqualifiers = [
    !startup.hasWorkingMVP && 'No MVP — concept stage not eligible',
    startup.hasOutstandingRegulatoryAction && 'Outstanding sanctions',
    !startup.hasInnovationBeyondExisting && 'No meaningful innovation'
  ].filter(Boolean);

  const missingCompliance = [
    'amlPolicy', 'sanctionsScreening', 'cdd',
    'consumerProtection', 'cybersecurity',
    'incidentResponse', 'dataProtection', 'namedComplianceOfficer'
  ].filter(item => !startup[item]);

  return {
    eligible: disqualifiers.length === 0,
    disqualifiers,
    complianceGaps: missingCompliance,
    readinessScore: Math.round(
      ((8 - missingCompliance.length) / 8) * 100
    )
  };
}
Enter fullscreen mode Exit fullscreen mode

Don't Force a Track Fit

The most important advice for Nigerian fintech builders evaluating Cohort 2:

Do not add digital asset features just to qualify for the VASP track.

VASP adds: SEC Nigeria jurisdiction, blockchain analytics costs, Travel Rule infrastructure, custody architecture requirements and significant technical complexity. If your product is genuinely payments or open banking — the Non-VASP track is correct. The compliance overhead difference is substantial.

Tomorrow: The full readiness checklist — what CBN wants to see before you apply.


ZikarelHub LTD is Nigeria's #1 software and digital agency — CBN-ready fintech platforms built with compliance from the foundation.

Are you considering CBN Sandbox Cohort 2? Which track fits your product? 👇

Top comments (1)

Collapse
 
jasonstcyr profile image
Jason St-Cyr

This content does not appear related to #puppet at all. I recommend, at the very least, that the puppet tag be removed.

It also doesn't appear to have any relation to JavaScript, despite the code blocks which are not real and only used to make this post appear to be technical.