#
South Africa's SARB Payments Ecosystem Modernisation programme is set to open the national payment system to licensed non-banks in H2 2026 under a draft activity-based authorisation framework; the COFI Bill was approved by Cabinet in April 2026; and FSCA's CASP regime has approved 300 of 512 applications as of January 2026.
In Nigeria, the Central Bank of Nigeria licenses PSPs under four categories — Switching & Processing, Mobile Money Operations, Payment Solution Services, and the Regulatory Sandbox — per the December 2020 categorisation circular and BOFIA 2020. Crucially for the bank vs non-bank distinction, only Mobile Money Operators and Payment Service Banks may hold customer funds, structuring the entire non-bank market. The CBN sets PSB structure via its Guidelines for Licensing and Regulation of Payment Service Banks, requiring at least 25% of access points in rural or underserved areas to drive financial inclusion — tying market-access licensing directly to inclusion policy.
In Kenya, the Central Bank of Kenya vests PSP authorisation under the National Payment System Act No. 39 of 2011 and the NPS Regulations 2014, with four categories: Electronic Retail PSP, Designated Payment Instrument Issuer, E-Money Issuer and Small E-Money Issuer. PSP business is prohibited unless authorised, and the regime sets capital requirements ranging by category. This tiered authorisation underpins the M-Pesa-dominated market.
Outlook
The SARB final Authorisation Framework and Exemption Notice are expected in Q3 2026, moving South Africa decisively to activity-based, direct non-bank authorisation with client-fund segregation — the bloc's most consequential near-term licensing change. Nigeria's and Kenya's regimes are mature and stable, with the fund-holding boundaries (MMOs/PSBs in Nigeria; trust-account model in Kenya) remaining the defining structural features. The trajectory across W1a is established, with South Africa as the active locus of change.
Licensing, Authorisation & Market Access
South Africa is the locus of this cycle's market-access signal, with three distinct regulatory tracks moving in the same direction simultaneously. The South African Reserve Bank's Payments Ecosystem Modernisation programme is expected to open the national payment system to licensed non-bank payment service providers in the second half of 2026. A draft activity-based authorisation framework, under which market access is determined by the activity a firm undertakes rather than its institutional charter type, was out for public comment until 15 June 2026. This bank-PSP versus non-bank-PI/EMI distinction is the structural spine of this development: SARB's reform, if it proceeds as signalled, would mark a shift from a bank-centric national payment system architecture toward one that admits non-bank payment institutions and e-money issuers on an activity-based licensing basis. This finding is assessed at Probable confidence; the sourcing this cycle is vendor commentary rather than a directly retrieved SARB primary consultation document, and readers should treat the specific H2 2026 timeline as indicative rather than confirmed pending a primary-source check.
Running alongside the market-access reform is South Africa's Conduct of Financial Institutions (COFI) Bill, approved by Cabinet for submission to Parliament in April 2026. COFI is designed to build a single conduct framework spanning open finance, payments and crypto-asset activity, replacing the current sector-by-sector conduct rulebook with a unified regime. Cabinet approval is a meaningful legislative-stage marker, but it is not enactment; the Bill has not yet passed through Parliament, and its final scope and commencement timing remain to be determined through the parliamentary process.
The third track is licensing volume under the existing FSCA Crypto Asset Service Provider regime, which has processed 512 applications since June 2023, with 300 approved and 14 declined as of January 2026. While this is a crypto-specific licensing figure rather than a payments-market-access figure in the strict sense, it is material to the W1a picture because it demonstrates FSCA's operational capacity to process a high-volume licensing pipeline under the FAIS Act, capacity that will be directly relevant if the broader non-bank payments authorisation framework proceeds to implementation on a comparable activity-based model.
Taken together, these three tracks, market-access consultation, conduct-framework legislation, and crypto-licensing volume, represent a coordinated broadening of South Africa's regulatory perimeter across payments and digital assets. No single track has yet reached full implementation; all three are at consultation, cabinet-approval, or ongoing-processing stages respectively. The signal this cycle is the alignment of direction across all three, not the completion of any one of them.
Outlook
The consultation on SARB's non-bank authorisation framework closed on 15 June 2026; the next material indicator is whether SARB publishes a final framework or a further consultation round, and whether the stated second-half-2026 timeline for opening the national payment system to non-banks holds. On the legislative track, watch for COFI Bill's progress through Parliament following its April 2026 Cabinet approval; enactment and subsequent commencement dates will determine when the unified conduct framework actually displaces the current sectoral rulebook. The FSCA CASP licensing pipeline's continued processing volume is a useful proxy for regulatory capacity to absorb an expanded non-bank payments licensing caseload should the broader market-access reform proceed on schedule.
2 earlier distinct update(s)
Licensing, Authorisation & Market Access
The Central Bank of Nigeria's Circular PSS/DIR/PUB/CIR/001/004, dated 15 June 2026, imposes market-structure caps barring any institution from exceeding 25% of the card-issuing market or 15% of merchant-acquiring share, with a compliance deadline of 31 December 2026, alongside a payment-data localisation mandate taking effect 1 January 2027. A separate set of Guidelines on Agent Banking Operations, effective 6 October 2025 with a grace period running to April 2026, limits POS agents to a single partner institution and requires them to be geo-fenced to a fixed location. The market-structure caps apply to both bank and non-bank payment service providers, whereas the agent-exclusivity rules are targeted specifically at non-bank agent networks, carrying the bank/non-bank distinction that runs through this module. The interpreter's domain tracker records this module as escalating and no longer baseline-stable, describing a dense run of H1 2026 Central Bank of Nigeria circulars covering PSSP/PSP licensing, agent-banking exclusivity, instant payments, ATM-deployer approval, and the new market-structure/data-localisation regime. The interpreter's key judgment for this cycle is that the Central Bank of Nigeria is driving the most structurally significant payments-regulatory change across the African bloc through these concentration caps, data-localisation requirements, and agent-banking exclusivity rules.
Outlook
Three compliance dates anchor the near-term outlook: institutions exceeding the concentration caps must restructure by 31 December 2026, the agent-banking exclusivity grace period ends around April 2026, and payment-transaction data must localise to Nigeria-based servers by 1 January 2027. The interpreter's jurisdiction risk tracker rates Nigeria at ELEVATED risk on a tightening trajectory, reflecting the dense run of H1 2026 circulars culminating in these market-structure and data-localisation measures. The next cycle should surface which institutions, if any, are required to divest or restructure to remain under the concentration thresholds, and whether the localisation mandate prompts changes to cloud-hosting or data-residency arrangements among Nigerian payment institutions.
Licensing, Authorisation & Market Access
South Africa and Nigeria are running the two most consequential licensing-architecture stories in the African payments market this cycle, and they point in opposite directions. The South African Reserve Bank has published a third draft Authorisation Framework alongside a draft exemption notice, moving toward an activity-based licensing regime that replaces reliance on bank sponsorship for e-money issuance and money-remittance activity. The practical effect, once finalised, is that non-bank payment service providers would be authorised directly against the activities they perform rather than needing to operate under a sponsoring bank's licence, a structural liberalisation of market access for the non-bank segment even as the framework simultaneously brings that segment inside a formal prudential perimeter for the first time. This runs in parallel with the Cabinet's April 2026 approval of the Conduct of Financial Institutions (COFI) Bill for submission to Parliament, which would establish a single market-conduct framework spanning open finance, crypto assets, and payment-system activity under South Africa's Twin Peaks regulatory architecture, a conduct-side complement to the Reserve Bank's prudential licensing reform. The COFI Bill's inclusion of crypto assets within the same conduct perimeter as traditional payment-system activity is itself notable: it signals that South Africa's regulatory architecture is converging digital-asset conduct oversight with mainstream payments conduct oversight, rather than treating crypto as a separate regulatory silo.
Nigeria's Central Bank moved in the same period, but toward tightening rather than liberalising. The Fourth Edition Foreign Exchange Manual, issued 15 May 2026, revises cash-disbursement rules for personal and business travel allowances and updates eCCI capital-registration documentation requirements, while reaffirming that domestic transactions must be naira-denominated. This is a bank-facing instrument in the first instance, since FX-manual compliance sits primarily with deposit money banks handling FX transactions. Separately, and more consequentially for the non-bank segment, the CBN has imposed a cross-ownership cap: any entity holding more than 25 percent share of the consumer-issuing market is barred from holding more than 15 percent share of the merchant-acquiring market, and vice versa, with compliance deadlines of 31 December 2026 and 1 January 2027. This measure is explicitly aimed at non-bank payment service providers, OPay, Moniepoint, PalmPay, Paystack, and Flutterwave are the named affected entities, and represents a direct market-structure intervention in a segment that has grown large enough, and vertically integrated enough across issuing and acquiring, to attract this kind of competition-style regulatory response. The market-power-cap regime's dual-direction design, capping issuing-side concentration from extending into acquiring, and vice versa, reflects a deliberate attempt to prevent single-group dominance across both sides of the payments value chain, a competition-policy concern that is analytically distinct from, but adjacent to, the safety-and-soundness rationale typically associated with payments licensing. Nigeria's simultaneous FX Manual revision, by contrast, sits squarely within the traditional prudential and macro-stability rationale for licensing intervention.
The bank-versus-non-bank distinction is therefore the analytical spine running through both jurisdictions' licensing developments this cycle, but the direction of travel differs sharply. South Africa's reform lowers the barrier for non-banks to access the market directly rather than through a sponsoring bank, while formalising prudential oversight of that same segment. Nigeria's reform does the opposite in its market-structure dimension: it constrains how large and how vertically integrated a non-bank payment group may become, even as its FX-manual revision continues to route certain categories of FX-handling activity through bank-centric compliance obligations. Any payment group operating across both markets will need to manage two structurally different licensing philosophies: activity-based market access in South Africa, and a market-structure ceiling in Nigeria.
Outlook
The SARB Authorisation Framework's final publication, expected in the third quarter of 2026 following the close of the industry comment period, is the near-term milestone that will determine how quickly South Africa's activity-based regime becomes operative for non-bank applicants. The COFI Bill's parliamentary progress through the second half of 2026 will determine whether the conduct-side framework is in place on a comparable timeline. In Nigeria, the 31 December 2026 and 1 January 2027 compliance deadlines for the cross-ownership cap are the concrete near-term test: whether large, vertically integrated fintech groups restructure their issuing and acquiring businesses ahead of the deadlines, seek exemptions, or contest the requirement will be the clearest signal of how binding this market-structure intervention proves in practice.
Sources and findings (6)
- T2Lexology / Bowmans / SARB draft Authorisation Framework
- T1SARB Authorisation Framework & Exemption Notice; PA Prudential Communication 10 of 2026 (resbank.co.za)
- T1Central Bank of Nigeria — Payment Service Providers framework (cbn.gov.ng)
- T1CBN Payment Service Bank Guidelines (primary)
- T1Central Bank of Kenya — National Payment System Act 2011 (primary)
- T3Lexserve / KDS Advocates