CBN Data Localisation Rule Raises Concerns for Nigerian Fintechs and Digital Payment Platforms

• The Central Bank of Nigeria (CBN) has ordered all payment-related data generated within Nigeria to be stored and processed locally by January 2027.
• The policy affects banks, fintechs, payment service providers, and other institutions facilitating payments.
• Fintech executives support the objective of strengthening payment sovereignty but question whether Nigeria’s local infrastructure is ready for large-scale migration.
• Industry concerns focus on processing capacity, disaster recovery, migration risks, operational resilience, and compliance costs.
• The directive reflects a broader global trend toward data localisation and digital sovereignty.

The Central Bank of Nigeria (CBN) has instructed that all payment-related data generated within the country be stored and processed locally. The CBN requires full compliance by January 2027. The directive applies to banks, fintechs, payment service providers, and any institution facilitating payments in Nigeria.

Fintech executives say they broadly support strengthening Nigeria’s control over its own financial data. However, they are questioning whether the country’s data infrastructure ecosystem is ready for a migration of this scale.

What the CBN Announced

The directive requires payment-related data to be hosted and managed within Nigeria’s borders, rather than on servers located abroad.

The CBN has framed the policy around three goals. The directive is intended to strengthen payment system resilience, assert national data sovereignty, and improve the security of financial infrastructure.

It’s one of the more consequential infrastructure-related regulatory moves Nigeria has made in recent years.

Why Fintechs Are Concerned

Industry operators aren’t pushing back against the principle. Most agree that a country processing this much financial activity should have meaningful sovereignty over its own data.

The concern is about the capacity of the local infrastructure. If the migration happens, will they be able to reliably support the transaction volumes, real-time processing, and uptime requirements that Nigeria’s payments ecosystem depends on?

Nigeria does have some data centre capacity. Equinix MDXi, West Africa’s leading provider for commercial data centres, has facilities in Nigeria. Open Access Data Centres (OADC), Kasi Cloud, MTN Nigeria, and Airtel Africa all have existing facilities in Nigeria.

The problem is that these facilities have not been tested at the scale at which Nigeria’s payments industry actually operates, and that scale is substantial.

In 2024, electronic payment transactions in Nigeria reached an all‑time high of approximately ₦1.07 quadrillion. The volume of transactions during that period was approximately 11.2 billion.

Moniepoint, a Nigerian fintech and microfinance bank, averaged over 1.6 billion monthly transactions worth over ₦400 trillion in 2025.

Absorbing that volume into domestic infrastructure, reliably and without service degradation, will be a challenge.

The Disaster Recovery Problem

One of the areas of concern for fintech industry leaders is disaster recovery.

Global cloud providers offer multi-region redundancy, automated failovers, and geographically distributed backups. This model is built specifically to survive regional outages.

In Nigeria, 84% of data centres are located in Lagos. 12% are in the Nation’s Capital of Abuja, and Kano has just one.

The lack of facilities elsewhere in the country means that a major outage affecting Lagos-based infrastructure could pose systemic risk due to the absence of backup systems.

Migration Risk in the Near Term

To properly move payment infrastructure at the scale and within the time frame the CBN is demanding would require significant work.

Customers expect seamless transactions from their banks and payment systems. Migration, which requires rebuilding systems, replicating databases, and verifying data integrity, must be done in a way that maintains transaction continuity.

If it is done too quickly or handled poorly, customers would experience service interruptions and failed transactions, which could erode trust.

The compliance runway is technically workable, but there is significant execution risk during the transition period.

Cost Pressure on Startups

Beyond migration costs, local commercial prices are higher than global prices.

Global cloud providers offer startup credits, flexible pricing, and developer support. These are services that smaller fintechs can rely on without incurring extra cost. Local providers do not offer the same options.

That gap, if not addressed, could lead to higher infrastructure costs and tighter operational margins for early-stage companies.

What This Means for Crypto Firms

While the directive doesn’t mention crypto firms, many crypto businesses operating in Nigeria run on much of the same infrastructure as traditional fintechs.

Many of these firms currently depend on AWS, Microsoft Azure, Google Cloud, and foreign-hosted compliance and transaction-monitoring systems.

If the CBN extend its expectations to payment data tied to crypto transactions, firms may need to relocate parts of their infrastructure. This will also involve setting up local data storage and revisiting their compliance and disaster recovery frameworks.

Recently, African payment companies have been integrating stablecoin settlement into their products. Flutterwave recently partnered with Tempo and Ripple to integrate RLUSD.

These systems blend blockchain networks, cloud infrastructure, and local banking rails, and the CBN’s directive could bring more scrutiny to where the underlying payment records and customer data sit.

For data centres and providers, there’s also an opportunity here. There is a rising demand for Nigerian crypto-compliant cloud services, local custody infrastructure, domestic compliance tooling, and locally hosted blockchain analytics.

Taken together with Nigeria’s ongoing work on VASP legislation, the country appears to be pursuing digital asset innovation while keeping tighter domestic oversight of financial infrastructure.

Part of a Larger Trend

Nigeria isn’t acting in isolation. Governments worldwide are increasingly requiring local data storage, domestic processing, and national control over critical infrastructure.

Most cite security, privacy, regulatory oversight, and economic development as justification.

The CBN’s move fits squarely within this broader push toward digital sovereignty.

What Happens Next

The transition period runs through 2026, with full compliance expected by January 2027.

Can local infrastructure scale fast enough? Will operators get clear implementation guidance? Will disaster recovery requirements be addressed? And will hybrid models be permitted during the transition?

All of these are questions waiting to be answered. Some by local data center providers, others by regulators and operators.

Ultimately, the success of this policy will hinge on whether Nigeria’s infrastructures’ current requirements can keep pace with what it now requires.

Originally published at https://cryptoafrica.news on June 19, 2026.

CBN Data Localisation Rule Raises Concerns for Nigerian Fintechs and Digital Payment Platforms was originally published in Coinmonks on Medium, where people are continuing the conversation by highlighting and responding to this story.