Most coverage of the Central Bank's June 2026 payment circular has focused on one thing: data has to stay in Nigeria. That part is real, and we covered it in our piece on the data-localisation deadline. But if you run a large payment operator, there is a second part of that same circular that is easier to miss and harder to unwind. It is not a data rule. It is a limit on how big a slice of the market you are allowed to hold, and that makes it a business-model decision.
The caps are a structural constraint, not a checklist
The circular sets market-structure limits. If a licensed operator, on its own or as part of a group, controls more than 25% of consumer issuing, it cannot hold more than 15% of merchant acquiring in the same rolling twelve months, and the same applies the other way round. In plain terms: you are not allowed to dominate both sides of the payment rail at once.
Your compliance lead almost certainly knows this already. The point of saying it out loud is that the decision it forces is not a compliance decision. It is a strategy one.
What that looks like in numbers
A worked example makes it concrete. The following is illustrative, not real market data.
Picture a fictional operator, call it NairaPay. Say NairaPay issues 30% of the cards in the market. Because 30% is above the 25% ceiling on consumer issuing, the rule caps its merchant-acquiring share at 15%. Now suppose NairaPay is currently acquiring 22% of merchants. It has a fork in the road:
- Pull card issuing back below 25%, and keep its acquiring business, or
- Shed roughly seven points of merchant acquiring, down from 22% to 15%, and keep its issuing lead.
Either way, a line of business NairaPay spent years building has to shrink. That is not a footnote your compliance team files. That is a decision about which half of the market you want to lead, made under a deadline. The percentages stop being abstract the moment you put your own numbers in.
Ownership is on the table too
The same circular requires disclosure of ultimate beneficial ownership. For a standalone company that is paperwork. For a group with cross-holdings, shared investors, or a complex cap table, it is a prompt to understand how "related entities" are counted, because that is what decides whether you are treated as one operator brushing against the caps or several smaller ones. Ownership structure is no longer just a tax or governance question. It now interacts directly with how much market you are allowed to hold.
The cost is real, and so is the opportunity
None of this is free. PwC has warned that the new rules raise compliance costs and will push operators to reassess their business models, technology infrastructure, and ownership ahead of the deadlines at the end of 2026 and the start of 2027. That is the honest downside.
The same analysis points at the other side of it: the rules are also spinning up demand for local data centres, cloud infrastructure, and cybersecurity, as every affected operator rebuilds to comply. If you are deciding where to invest anyway, that is worth seeing clearly. The cost of compliance and the growth of a local infrastructure market are the same wave.
Make the structural call deliberately
Here is the trap: treating this as a box your compliance team ticks next quarter, and discovering in December that "ticking the box" means restructuring a business line or a shareholding. The operators who come through this well will decide, on purpose and early, which side of the rail they want to lead, how their group is counted, and what they are willing to spend or shed to get there.
If you want a second set of eyes on what the structure decision looks like for your specific setup, that is the kind of question we work through with leadership teams. The first conversation is a free, no-pressure 45-minute structured call: start the conversation.
A companion piece looks at what these same rules mean for the people downstream: consumers, developers integrating payment APIs, and banking partners.
Sources: CBN Circular PSS/DIR/PUB/CIR/001/004 (15 June 2026), read directly (see our data-localisation piece); PwC commentary via The Guardian on compliance cost and market impact, re-verified November 2026 across multiple outlets. The NairaPay figures are illustrative, not real market data.
