CBN Sandbox Tests Nigeria’s Future of Responsible Finance

CBN’s New Financial Experiment

The Central Bank of Nigeria (CBN) opened applications on August 12 for the second cohort of its Regulatory Sandbox Programme. Fintechs, banks, virtual asset firms and data-driven startups have until August 31 to apply. 

This round has a clear dual structure. The Virtual Asset Service Provider Track (VASP) covers stablecoins, payments, settlement, custody and wallets. The Data-Enabled Financial Services Track focuses on permission-based data sharing to improve credit, payments and inclusion. Together, the tracks show the CBN now treats virtual assets and data-driven finance as central, not fringe.

Timing matters here. Cohort 2 follows President Bola Tinubu’s July 18 executive order, which created a Virtual Asset Council chaired by the CBN. It is also after a CBN pilot in March involving Flutterwave, Paystack and Juicyway on stablecoin-linked cross-border payments. 

Nigerians transacted roughly $92.1 billion in cryptocurrency between July 2024 and June 2025, per Chainalysis, explaining why regulators want this activity supervised. Before treating Cohort 2 as proof of regulatory maturity, though, a harder question comes first. What actually happened the first time Nigeria tried this?

What Did the First Sandbox Teach Nigeria?

The CBN opened its first sandbox cohort in December 2022 and closed applications on February 1, 2023. It reportedly received more than 1,000 submissions, suggesting strong appetite for a legitimate testing pathway. Yet public information about what happened next is thin. 

Searches of CBN statements, filings and Nigerian business coverage turn up no account of how many applicants were admitted. There is no published list of which products completed testing, how long it ran, or how many participants exited successfully. Nor is there a public tally of products that reached commercial operation or received licences afterward.

This gap does not mean the CBN hid anything deliberately, but other sandboxes set a different standard. The UK’s Financial Conduct Authority publishes cohort reports naming participants and results. India’s and Pakistan’s central banks have released similar lists. No equivalent document appears to exist for Nigeria’s first cohort.

Consequently, the strongest governance question around Cohort 2 is not about ambition but accountability. The sandbox exists, in the CBN’s own words, to help regulators “test, learn and regulate.” How much of that learning has actually reached the public it is meant to protect?

Where Governance Enters the Conversation

Framed through a governance lens, supervised testing has real merit. It lets the CBN observe how emerging technologies behave under live conditions before they reach millions of unprotected consumers. That is evidence-based policymaking, in principle, rather than regulation written after harm occurs. 

The CBN’s February 2026 Fintech Policy Insight Report reinforces this logic. It proposes a “test-then-codify” approach converting sandbox lessons into formal rules for AI, cross-border payments and embedded finance.

However, good governance cannot rest on a testing framework’s existence alone. It also requires transparency about outcomes. A sandbox that admits participants but never explains what they achieved gives regulators private insight while leaving the public in the dark, and that gap is where Cohort 2 faces its first real test.

Can Fintech Deliver Greater Inclusion?

The Data-Enabled Financial Services Track carries genuine inclusion potential. Permission-based data sharing, often called open banking elsewhere, could let lenders assess creditworthiness using transaction histories rather than collateral. This could extend credit and savings tools to people excluded from formal banking.

Even so, fintech access does not automatically mean inclusion. Millions of Nigerians still face barriers around smartphone affordability, connectivity, financial literacy and identity verification. Trust matters too, since data breaches and aggressive digital lending have left some consumers wary of sharing information. 

Whether the track deepens inclusion, or simply sharpens tools for the already-connected, remains open.

Who Carries the Risk?

Financial innovation carries risk directly to consumers. Fraud, cybersecurity breaches, irresponsible lending and weak grievance mechanisms are documented problems in Nigeria’s digital finance sector. The CBN’s sandbox conditions acknowledge this, requiring applicants to build consumer protection and operational resilience into their testing plans.

Still, sustainable innovation cannot simply shift risk from companies onto customers while companies gain market access and investor confidence. If a tested product later causes harm after leaving the sandbox, Nigeria’s consumer redress mechanisms will decide whether responsible innovation was actually achieved, or only assumed.

The Data Governance Question

The data-enabled track raises pointed questions about who controls Nigerians’ financial information as it moves between institutions. Meaningful consent requires customers to understand what they are authorising, not just click through a screen. It also matters whether customers can withdraw permission, and what happens if data is misused. 

The CBN says cybersecurity safeguards form part of testing parameters. However, enforcement in practice, not rules on paper, will determine whether responsible technology becomes more than a stated goal.

Crypto Moves Into the Governance Spotlight

The VASP Track brings Nigeria’s large, largely informal crypto economy closer to formal oversight. Given the scale Chainalysis suggests, the real story is whether supervised testing can strengthen anti-money laundering controls, transparency and consumer protection in a market that has run with minimal oversight. 

The new Virtual Asset Council, alongside the SEC’s parallel incubation programme for digital asset firms, shows Nigeria building layered oversight, not relying on the sandbox alone.

From Experiment to Regulation

The CBN’s “test-then-codify” approach implies sandbox findings will eventually shape formal rules. The February 2026 Fintech Policy Insight Report backs this, proposing sandbox expansion within nine months and a reform secretariat to prevent stalled implementation. 

Still, stating an intention to codify lessons differs from showing that Cohort 1’s lessons already shaped Cohort 2’s design. The new tracks may reflect insight from the first cohort. However, without a published account of what regulators observed, that link remains inference, not documented fact.

What Cohort 2 Must Prove

Nigeria’s sandbox will not be judged by application numbers. More than a thousand firms applied the first time, and strong demand seems likely again. Its value depends instead on whether the CBN publishes clear evidence of what was tested, what worked and what changed as a result.

Conclusion

Ultimately, sandboxes prove very little on their own. Their value depends on what regulators and companies do with what they learn. Will fintech firms treat responsible innovation as a genuine operating principle, or merely as a box to tick before scaling aggressively?  Will the CBN convert testing insights into enforceable rules quickly enough to matter? 

These questions will not be answered by August 31. Rather, they will be answered over the months and years that follow. Also, as Cohort 2 participants move from controlled testing into the unpredictable reality of the Nigerian market.

Sustainable financial innovation cannot rest on good intentions. It needs governance that turns experiments into public knowledge, inclusion that reaches beyond the already-connected. It also needs protections that hold after a product graduates from testing. 

Cohort 2 gives the CBN a real chance to prove all three. Whether it does, and whether Nigerians ever see what Cohort 1 achieved, will say more about the sandbox’s value than any application number could.