CBN 규제 샌드박스 코호트 2 — 나이지리아 핀테크 빌더를 위한 기술 가이드

The CBN has opened Regulatory Sandbox Cohort 2 to unlicensed Nigerian fintech startups for the first time. Here is the technical breakdown of what this means for Nigerian builders.

What the Sandbox Is and Is Not

const sandbox = {
  IS: 'Supervised testing with real users under CBN oversight',
  isNOT: 'A commercial licence or permission to scale',
  duration: '6-12 months',
  outcome: 'CBN readiness assessment for full licence application',
  cohort2Change: 'Unlicensed startups with working MVPs now eligible'
};

Enter fullscreen mode Exit fullscreen mode

The Two Tracks

const tracks = {
  VASP: {
    for: ['Stablecoin settlement', 'Crypto on/off-ramps', 'Crypto wallets', 'Digital asset payments'],
    cbnChecks: ['AML/CFT for virtual assets', 'Blockchain analytics', 'Travel Rule', 'Cold storage custody'],
    additionalRegulator: 'SEC Nigeria — digital asset classification'
  },

  NON_VASP: {
    for: ['Open banking', 'Payment initiation', 'Fraud detection', 'Financial inclusion', 'RegTech'],
    cbnChecks: ['NDPA compliance', 'API security', 'Fraud controls', 'Complaints handling']
  },

  confirmWithCBN: ['Plain fiat remittance — not explicitly listed in either track']
};

Enter fullscreen mode Exit fullscreen mode

Eligibility Check

function checkEligibility(startup) {
  const disqualifiers = [
    !startup.hasWorkingMVP && 'No MVP — concept stage not eligible',
    startup.hasOutstandingRegulatoryAction && 'Outstanding sanctions',
    !startup.hasInnovationBeyondExisting && 'No meaningful innovation'
  ].filter(Boolean);

  const missingCompliance = [
    'amlPolicy', 'sanctionsScreening', 'cdd',
    'consumerProtection', 'cybersecurity',
    'incidentResponse', 'dataProtection', 'namedComplianceOfficer'
  ].filter(item => !startup[item]);

  return {
    eligible: disqualifiers.length === 0,
    disqualifiers,
    complianceGaps: missingCompliance,
    readinessScore: Math.round(
      ((8 - missingCompliance.length) / 8) * 100
    )
  };
}

Enter fullscreen mode Exit fullscreen mode

Don’t Force a Track Fit

The most important advice for Nigerian fintech builders evaluating Cohort 2:

Do not add digital asset features just to qualify for the VASP track.

VASP adds: SEC Nigeria jurisdiction, blockchain analytics costs, Travel Rule infrastructure, custody architecture requirements and significant technical complexity. If your product is genuinely payments or open banking — the Non-VASP track is correct. The compliance overhead difference is substantial.

Tomorrow: The full readiness checklist — what CBN wants to see before you apply.

ZikarelHub LTD is Nigeria’s #1 software and digital agency — CBN-ready fintech platforms built with compliance from the foundation.

Are you considering CBN Sandbox Cohort 2? Which track fits your product? 👇