Fintech Regulation in Africa, 2026: The Founder’s Guide to 10 Key Markets

Africa’s largest fintech market runs on a strict, category-based licensing model.

The Central Bank of Nigeria sorts payments licenses into four buckets: Switching and Processing, Mobile Money Operations, Payment Solution Services, and a regulatory sandbox. Pick the bucket that matches what you do. A Payment Solution Service Provider (PSSP) can run gateways and merchant collections but cannot hold customer funds. Only a Mobile Money Operator can issue wallets. Holding funds on a PSSP license is a violation that can cost you the license.

East Africa’s fintech hub now has one of the continent’s most complete rulebooks.

The Central Bank of Kenya authorizes payment service providers and e-money issuers under the National Payment System Act and its 2014 regulations. Digital lenders fall under the Digital Credit Provider regime, which pulled hundreds of previously unregulated apps into CBK supervision and now sits within the broader non-deposit-taking credit framework. The Data Protection Act 2019 applies to every fintech handling personal data, with registration through the ODPC.

The continent’s most institutionally mature regime is mid-rebuild, and the changes favor fintechs.

South Africa runs a Twin Peaks model: the Prudential Authority handles soundness, the FSCA handles conduct, and the SARB oversees the national payment system. Historically, non-banks needed a bank sponsor to clear and settle payments. That is ending. The SARB’s Payments Ecosystem Modernisation programme will open the national payment system to licensed non-banks in the second half of 2026, with a draft activity-based authorisation framework out for comment until June 15, 2026.

A tiered licensing ladder lets you start small, plus a brand-new virtual asset law.

The Payment Systems and Services Act 2019 (Act 987) governs payments. The Bank of Ghana issues licenses in tiers, so an early-stage startup can enter at the Standard PSP level with no capital requirement and climb as it grows. Dedicated Electronic Money Issuers sit at the top of the ladder. The Data Protection Act 2012 (Act 843) requires registration with the Data Protection Commission.

Two regulators split the market, and one of them just hit pause on new entrants.

Egypt divides fintech by perimeter. The Central Bank of Egypt regulates banking, payments, wallets, and aggregators under Banking Law 194 of 2020. The Financial Regulatory Authority regulates non-bank financial services, including consumer finance, microfinance, leasing, and factoring, under Fintech Law 5 of 2022. Each side runs its own sandbox: the CBE’s banking sandbox (since 2019) and the FRA’s CORBEH sandbox. The Personal Data Protection Law 151 of 2020 applies across both.

A newly opened market with strict new rules and a 100 million birr entry ticket.

Ethiopia opened payments to foreign investors through the National Payment System (Amendment) Proclamation 1282/2023, and the sector is moving fast. The National Bank of Ethiopia licenses payment instrument issuers and payment system operators. Directive ONPS/10/2025, effective May 12, 2025, rewrote the rules: higher capital, mandatory wallet-to-wallet interoperability through the national switch, and required integration with the Ethiopian Instant Payment System (EIPS). Crypto transactions remain banned.

A small market with big regulatory ambition and a fast, structured licensing path.

The National Bank of Rwanda (BNR) licenses payment service providers under Regulation 70/2024, which forced all existing PSPs to recategorize their licenses by September 18, 2024 or face revocation. The BNR runs an active regulatory sandbox and has licensed regional players such as Pesapal. Rwanda’s Law 058/2021 on personal data protection applies, supervised by the National Cyber Security Authority. The national fintech strategy targets Kigali as a regional financial hub.

Clear license categories, low entry capital, but a multi-regulator obstacle course.

The National Payment Systems Act 2020 and its 2021 Regulations created three license types: payment system operator, payment service provider, and payment instrument issuer. You can combine categories in one application. Entry capital is among the lowest in the region. The catch is sequencing: you need NITA-U certification for your software before you file with the Bank of Uganda, registration with the Financial Intelligence Authority under the Anti-Money Laundering Act, and a registered data protection officer under the Data Protection and Privacy Act 2019.

A large mobile money market with one hard constraint on new wallet issuers.

The Bank of Tanzania licenses payment systems under the National Payment Systems Act 2015, the Electronic Money Regulations 2015, and the Payment Systems Licensing and Approval Regulations 2015. E-money issuers need TZS 2 billion or more in paid-up capital and must hold customer funds in trust with a licensed bank. The binding constraint: a December 2020 circular restricts new electronic money licenses to licensed mobile network operators. Non-MNO fintechs enter as PSPs or partner with an MNO. The Personal Data Protection Act 2022 adds registration and compliance duties.

One license regime for eight countries, applied one country at a time.

Senegal sits in the West African Economic and Monetary Union, so the regional central bank, BCEAO, licenses fintechs under Instruction 001-01-2024 and the 2025 Banking Law. You need a Payment Institution license for payment services or an Electronic Money Institution license to issue wallets. The 2025 Banking Law makes prior authorization explicit: no one may present themselves as a payment institution, e-money issuer, or fintech without approval and listing on the official register. Licenses are national; operating across WAEMU means applying in each member state. Senegal’s 2008 data protection law, enforced by the CDP, applies, and AML follows WAEMU-wide rules.