The License to Last: Why Regulation and Governance Now Decide Who Survives in African Payments 

Nkebet Mesele

Within months of each other, three of Africa’s biggest payment markets moved on the same front. Nigeria’s central bank demanded written roadmaps for automated anti-money laundering systems, with the deadline landing this week. Ghana switched on a sweeping cybersecurity directive covering every licensed financial institution. Kenya opened up its central banking laws to bring fintechs operating in legal grey zones under formal oversight. 

Three regulators, three markets, one message. Across the continent, the era of building first and answering regulatory questions later is over. The license to operate is turning into something harder to earn: the license to last. 

THE BREAKDOWN

Here is what I am seeing across our consulting work in multiple markets right now. 

For most of the last decade, compliance in African fintech was a paperwork exercise. You got the license, hired one compliance officer, filed your returns, and went back to chasing growth. Regulators mostly watched from a distance. 

That arrangement has ended, and the evidence is continental. 

First, regulation has moved from paperwork into the plumbing. Nigeria’s CBN issued baseline standards for automated AML solutions in March: 12 standards, around 100 requirements, real-time transaction monitoring, with roadmaps due June 10 and full compliance by 2027 for banks and 2028 for other institutions. Ghana’s central bank now requires every licensed institution, fintechs included, to meet a unified cybersecurity framework and keep sensitive financial data stored in-country. Kenya’s central bank is rewriting its founding laws so that digital lenders and payment fintechs that grew up outside the perimeter come inside it. Different instruments, same direction: the regulator is no longer asking whether you have a policy. It is specifying the systems your institution must run and attaching sanctions to the answer. 

Second, weak governance now carries a price you can measure. Ask the countries that lived it. Nigeria and South Africa spent over two years on the FATF grey list before exiting in October 2025, after rebuilding their AML supervision on a country-by-country, agency-by-agency basis. Kenya is still on that list and pushing hard to get off it. Grey-listing is expensive: research puts the average hit at 7.6% of GDP in reduced capital inflows, and every institution in a listed market pays through costlier correspondent banking and slower foreign partnerships. Governance failures at individual institutions add up to a national bill. 

Third, the biggest growth opportunity on the continent is gated by governance. 

PAPSS, the pan-African settlement system, now connects 19 countries and more than 160 commercial banks, settling cross-border payments in local currencies in seconds. That matters because more than 80% of African cross-border payments still detour through correspondent banks in the US or Europe, adding an estimated 2 to 5% in cost to every transaction. PAPSS and the new currency marketplace exist to close that detour. But AML checks and sanctions screening are built into the settlement window itself. Access to the new rails runs through compliance, and institutions with weak governance will watch from the sidelines. 

Where is this heading? Look at the markets African regulators’ benchmark. Singapore’s MAS runs COSMIC, a platform where banks share information on red-flag customers with each other, turning compliance from a private burden into a collective defence. The EU’s new anti-money laundering authority, AMLA, goes operational this year as a single supervisor across 27 countries. Ghana’s central bank has announced plans for a continental fintech sandbox in the same spirit. Supervision is becoming collaborative, technology-driven, and cross-border. The institutions that build for that future now will find every door open. 

What this means if you are building a career in payments: governance literacy and regulatory compliance are becoming the scarcest skills in the market, and it travels. The professional who can read a circular from Abuja, Accra, or Nairobi and translate it into an execution plan will outearn the one who can only build features. 

What this means if you run a bank or fintech, in any market: your honest answer to one question predicts your next three years. If your regulator asked you to evidence your AML monitoring, your data governance, and your board oversight next month, would you be ready, or would you be drafting explanations? 

THE OPPORTUNITY

The fastest-growing demand we see across our consulting and placement work sits in three roles, and all three are now multi-market jobs. AML Technology Analysts, who tune the monitoring systems that regulators across the continent now mandate. Data Protection Officers, who own compliance under Nigeria’s NDPA, Kenya’s Data Protection Act, Ghana’s data localisation rules, or South Africa’s POPIA, and answer for it personally. Regulatory Compliance Managers, who track circulars across several jurisdictions and turn them into operational change before the deadline, instead of after the sanction. 

These roles barely existed at scale five years ago. Today, they are among the hardest seats to fill in African financial services, and institutions are paying accordingly. 

THE RESOURCE

Whichever regulator you answer to, the question is the same: could you evidence your governance tomorrow? We built our Regulatory Readiness and Governance Review for exactly this moment. Our consulting team assesses your AML automation, data governance, and board oversight against the requirements in your market and hands you a prioritised remediation plan. 

Book a Regulatory Readiness and Governance Review →

If you are building a career on the talent side of this shift, The Payment School’s compliance and operations programmes cover the frameworks regulators now expect. And on the Made in Payments podcast, we unpack conversations like this one with the people doing the work. 

The Payments Brief is published weekly by Intreensic. We advise, train, and place payments professionals across Africa. If a colleague is staring down a compliance roadmap right now, forward this to them.