← All articles
paystack vs flutterwave nigeria 2026 cbn payment service provider pssp licence By BossBot Editorial Team · · Updated · 22 min read
Drafted with AI assistance under founder-led editorial direction. How our editorial team works.

Flutterwave vs Paystack for Nigerian Solo Business Owners: Fee Structure, Integration, and Choice

Nigerian solo business owner in Lagos comparing Paystack and Flutterwave with CAC certificate and FIRS TIN on desk.

Solo Nigerian business owner choosing between Paystack and Flutterwave — five compliance layers (CBN licence, NDPA 2023, CAC, FIRS, NIBSS) that pricing pages don't show.

In this article Hide ▲
  1. The five compliance-plus-fit questions a solo Nigerian business asks before choosing a payment gateway
  2. Paystack — Stripe-owned Lagos-based PSSP with developer-first UX
  3. Flutterwave — Lagos + San Francisco pan-African PSSP with broadest footprint
  4. The wider Nigerian payments landscape — Moniepoint, Opay, Squad, Interswitch, Stripe, PayPal
  5. CAC and FIRS — the tax and registration stack for a Nigerian solo business
  6. Nigeria Data Protection Act 2023 — NDPC, DPCO audits, 72-hour breach notification
  7. The defensible payment stack for a solo Nigerian business in 2026
  8. Migration Playbook: From Existing Platform to New Stack Without Breaking Nigerian Client Continuity
  9. Nigerian-Local BSPs and NGN-Native Billing Alternatives
  10. Setup Milestones, KPI Targets, and 30-Day Success Signals for Nigerian SMEs

The five compliance-plus-fit questions a solo Nigerian business asks before choosing a payment gateway

Before comparing Paystack and Flutterwave fee tables, a solo business owner in Lagos, Abuja, Port Harcourt, Kano, Ibadan, Enugu, Kaduna, Benin City, Aba or Owerri weighs five questions.

1. What CBN licence does the processor operate under? The Central Bank of Nigeria (CBN) issues six main licence categories under the CBN Guidelines for Licensing and Regulation of Payment Service Providers (revised 2020, updated 2022):

Paystack and Flutterwave both hold PSSP licences and operate primarily as card-not-present online acquirers with bank-transfer, USSD and card capabilities layered in.

2. What settlement rails does the processor use? Nigeria's domestic settlement is anchored by:

Both Paystack and Flutterwave settle merchant payouts via NIBSS NIP typically same-day (T+0) or next-day (T+1) depending on tier and time of day.

3. What KYC tier does the solo business need to unlock? Under CBN Circular on Three-Tiered KYC Framework (2013, still in force with updates):

BVN (Bank Verification Number) is an 11-digit unique identifier for all Nigerian bank customers, launched 2014 by CBN in partnership with NIBSS. NIN (National Identity Number) is issued by the National Identity Management Commission (NIMC). CBN Directive 2020 required linking BVN and NIN — since 2022 the two operate as complementary identifiers.

4. What CAC and FIRS status is required? Registration with the Corporate Affairs Commission (CAC) is mandatory under the Companies and Allied Matters Act 2020 (CAMA 2020) for anyone conducting business in Nigeria under a name other than the entrepreneur's own personal name:

Once CAC-registered the entity receives an RC number (for Ltd) or BN number and via CAC joint-TIN scheme also a FIRS Tax Identification Number (TIN) — required for opening a business bank account or applying to Paystack/Flutterwave as a business entity (not individual).

5. What NDPA 2023 obligations apply? The Nigeria Data Protection Act 2023 (NDPA), signed into law June 2023, superseded the older NITDA-issued Nigeria Data Protection Regulation 2019 (NDPR). The Nigeria Data Protection Commission (NDPC) — headed by the National Commissioner — is the enforcer. NDPA obligations include: publishing a privacy notice per sections 27-30 NDPA, honouring data subject rights within 21 days per section 34-40, notifying NDPC within 72 hours of a breach per section 40, designating a Data Protection Officer for major controllers per section 32, registering with NDPC if classified as a Data Controller of Major Importance per section 45. Penalties up to ₦10 million or 2% of annual gross revenue whichever is higher for major controllers. The NDPA Implementation Framework 2024 published by NDPC gave guidance on major-controller classification and registration processes.

Paystack — Stripe-owned Lagos-based PSSP with developer-first UX

Paystack was founded in Lagos in 2015 by Shola Akinlade and Ezra Olubi, admitted to Y Combinator W16 batch, and acquired by Stripe in October 2020 for approximately US$200 million — the largest African fintech exit at the time. Post-acquisition Paystack has retained brand independence and expanded across Ghana (2018), South Africa (2020), Kenya (2020, still building), Ivory Coast (Beta), and Egypt (Beta). CBN Payment Solution Service Provider (PSSP) licence.

Paystack — core capabilities for a solo Nigerian business:

Paystack — 2026 pricing (indicative — verify at paystack.com/pricing):

What Paystack does NOT do natively for a Nigerian solo business:

Strengths of Paystack for Nigerian solo business:

Weaknesses:

🎯 For small-business owners
Weekly notes on what's actually working for small businesses.
WhatsApp scripts, SaaS-tool comparisons, real revenue tactics — honest, no fluff.

Flutterwave — Lagos + San Francisco pan-African PSSP with broadest footprint

Flutterwave was founded in Lagos in 2016 by Iyinoluwa 'E' Aboyeji (co-founder Andela), Olugbenga 'GB' Agboola (co-founder & CEO) and others, later moving co-HQ to San Francisco while retaining strong Lagos engineering base. Series D 2022 valued Flutterwave at approximately US$3 billion — Africa's most-valued startup at the time. CBN Payment Solution Service Provider (PSSP) licence in Nigeria plus authorisations in Kenya (KRA / CBK), Ghana (BoG), Rwanda (BNR — Flutterwave received Electronic Money Institution and Payment Service Provider licences), and expanded presence in Egypt, Uganda, Tanzania, South Africa, Sierra Leone, Malawi, Zambia and Cameroon. As of 2026 Flutterwave supports 34+ African currencies and 150+ payment methods across the continent.

Flutterwave — core capabilities for a solo Nigerian business:

Flutterwave — 2026 pricing (indicative — verify at flutterwave.com/ng/pricing):

What Flutterwave does NOT do natively for a Nigerian solo business:

Strengths of Flutterwave for Nigerian solo business:

Weaknesses:

The wider Nigerian payments landscape — Moniepoint, Opay, Squad, Interswitch, Stripe, PayPal

A Paystack-vs-Flutterwave analysis omits the broader Nigerian payments ecosystem where several other CBN-licensed entities are relevant to a solo business owner:

Moniepoint (formerly TeamApt) — founded 2015 by Tosin Eniolorunda, holds CBN Switching and Processing licence + Merchant Acquiring approvals. Moniepoint Business Bank recently upgraded to full Microfinance Bank licence. Best known for agent-banking POS deployment (hundreds of thousands of Moniepoint POS units in market) and for merchant-acquiring with settlement into Moniepoint Business Account. Solo business use case: physical retail with POS terminal + optional online acquiring; the account itself operates as a business bank account with local IBAN-equivalent NUBAN number.

Opay — ByteDance-affiliated (via Opera Software heritage), holds CBN Payment Service Bank (PSB) licence plus PSSP + Super Agent. Opay is dominant in agent-banking and consumer wallet in Nigeria. Solo business use case: Opay Merchant for POS + online acquiring; competitive fee structure for high-volume small-ticket merchants.

PalmPay — founded 2019 backed by Transsion Holdings (Tecno / Infinix / Itel maker), CBN Mobile Money Operator licence. Strong consumer wallet presence; PalmPay Business is available for merchant acquiring.

Squad by GTCO Habari — payment infrastructure by Guaranty Trust Holding Company's Habari technology arm. CBN PSSP licence. Squad offers competitive pricing for GTBank-account-holding merchants with integrated GTBank settlement.

Interswitch — the incumbent Nigerian switching company since 2002, holds full Switching and Processing licence plus PSSP. Interswitch WebPAY is the legacy card gateway used by many bank websites and legacy merchant integrations. Verve card scheme is operated by Interswitch. Quickteller (consumer app) is a Super Agent network.

Stripe Nigeria (Beta / phased rollout) — Stripe launched Nigeria access in Beta 2020-2022 with limited invite-only merchant onboarding; more recently expanded but still not general availability. Stripe uses its Paystack subsidiary for on-the-ground Nigerian operations. For Nigerian merchants targeting international customers with USD invoicing, Stripe Nigeria Beta is a serious option once approved.

PayPal Nigeria (receive-only) — PayPal permits Nigerian sellers to receive payments from international buyers via PayPal but does not permit Nigerian buyers to send via PayPal (asymmetric because of CBN FX capital control history). PayPal Business Nigeria works for exporters and freelancers with foreign customers.

Wise Business (formerly TransferWise) — Wise permits Nigerian residents with valid CAC and Nigerian bank account to receive USD, GBP, EUR into Wise multi-currency account; not a full domestic acquirer but useful for freelancers receiving international invoices.

Decision matrix per solo-business profile:

CAC and FIRS — the tax and registration stack for a Nigerian solo business

The Corporate Affairs Commission (CAC) is the statutory regulator for company and business-name registration in Nigeria, established under the Companies and Allied Matters Act (CAMA), last comprehensively updated as CAMA 2020. CAC operates the online Company Registration Portal (CRP) at cac.gov.ng since 2016.

Registration options for a Nigerian solo business:

FIRS Tax Identification Number (TIN) — the Federal Inland Revenue Service (FIRS) issues a TIN via joint-TIN scheme during CAC registration, or standalone via the FIRSTax portal (tin.firs.gov.ng). TIN is required for: opening business bank account, applying to Paystack/Flutterwave as a business entity, filing tax returns, VAT registration, government tenders, importation.

Companies Income Tax (CIT) under Companies Income Tax Act (CITA) as amended by Finance Act 2019, 2020, 2021, 2022, 2023:

Personal Income Tax (PIT) under Personal Income Tax Act (PITA) as amended:

Value Added Tax (VAT) — 7.5% under Finance Act 2019 (previously 5%). Registration mandatory once annual turnover exceeds ₦25M. Monthly VAT return + payment due by 21st of the following month via FIRS.

Withholding Tax (WHT) — deducted at source on payments for services (5-10%), commissions (5-10%), rent (10%), professional fees (10%). Remitted to FIRS or SBIRS depending on payer/payee entity type. Quarterly filing.

Payroll obligations if the solo business hires staff:

For the solo Nigerian business scaling past ₦25M turnover: engage an ICAN (Institute of Chartered Accountants of Nigeria) or ANAN member for FIRS filings, and either a lawyer or corporate secretary for CAC compliance (annual returns, changes in directors, share transfers).

Nigeria Data Protection Act 2023 — NDPC, DPCO audits, 72-hour breach notification

The Nigeria Data Protection Act 2023 (NDPA) was signed into law by President Bola Tinubu on 14 June 2023, superseding the older Nigeria Data Protection Regulation 2019 (NDPR) issued under the NITDA Act 2007 by the National Information Technology Development Agency (NITDA). The NDPA established the Nigeria Data Protection Commission (NDPC) as an independent statutory body headed by a National Commissioner, replacing NITDA's earlier data-protection remit.

Key obligations for a Nigerian solo business as data controller:

Section 24 NDPA — Lawful bases. Six lawful bases mirror EU GDPR: consent, contract performance, legal obligation, vital interests, public interest, legitimate interests. For a solo business: contract performance for customer service delivery, legal obligation for FIRS invoicing retention, consent for marketing communications via SMS/WhatsApp/email.

Sections 27-30 NDPA — Information duties. Publish a privacy notice on the website and provide at first customer contact. Content: identity and contact of the data controller (with CAC RC number), purposes, lawful basis, categories of personal data, recipients (Paystack/Flutterwave as processors), retention periods, data subject rights, cross-border transfer safeguards, NDPC contact for complaints.

Sections 34-40 NDPA — Data subject rights. Access, rectification, erasure, restriction of processing, portability, objection, withdrawal of consent. Response within 21 days (extendable by 14 days for complex requests).

Section 32 NDPA — Data Protection Officer (DPO). Mandatory for major data controllers (typically those processing personal data of more than 5,000 unique persons in Nigeria annually, or classified as Data Controller of Major Importance under section 45). Solo businesses below that threshold are exempt but may voluntarily designate a contact person.

Section 40 NDPA — Breach notification. Notify NDPC within 72 hours of becoming aware of a breach likely to result in risk to rights and freedoms of data subjects. Notify data subjects themselves if high risk. Maintain internal register of all breaches even where not notifiable.

Section 45 NDPA — Data Controller of Major Importance registration. A controller processing personal data of over 200 individuals in Nigeria in the preceding year OR classified as major by NDPC in specific sectors (health, finance, telecom, education, insurance) must register with NDPC. Registration requires: privacy notice link, DPO details, description of processing activities, cross-border transfer schedule, breach-response procedure. NDPC maintains a register of registered controllers.

Section 48 NDPA — Data Protection Compliance Organisation (DPCO). NDPC accredits DPCOs (private compliance consultancies) to audit major data controllers annually. Solo businesses classified as major must engage a DPCO for annual data protection audit — findings filed with NDPC.

Section 60 NDPA — Cross-border transfers. Permitted to jurisdictions with adequate data protection or under approved Standard Contractual Clauses / Binding Corporate Rules / explicit consent. Paystack (Stripe) and Flutterwave both maintain infrastructure partially outside Nigeria — verify their cross-border transfer notices in privacy policy.

Penalties under section 48-53 NDPA:

NDPA Implementation Framework 2024 — published by NDPC provides operational guidance on major-controller classification (200-individual threshold, sectoral criteria), DPCO accreditation criteria, registration process, and audit expectations. Ongoing regulatory guidance issued via NDPC circulars at ndpc.gov.ng.

Nigerian Communications Commission (NCC) SIM-linked marketing rules. Marketing SMS or WhatsApp to Nigerian numbers requires prior opt-in consent under NCC guidelines. Do-not-disturb (DND) service allows consumers to opt out — dial 2442 from the number. Cost-per-SMS marketing to Nigerian numbers is subject to VAT + NCC fee.

The defensible payment stack for a solo Nigerian business in 2026

Combining the five layers, the payment-and-compliance stack a solo Nigerian business owner can defend before CBN, NDPC, CAC, FIRS and (if applicable) sector regulator in 2026:

1. At least one CBN-licensed acquirer with local card + bank transfer + USSD support and NIBSS NIP settlement — Paystack (Stripe-owned, developer-first, best for online/social-commerce solo businesses), Flutterwave (broadest pan-African footprint, best for cross-border African client base), or hybrid stack (Paystack for local + Wise Business or Stripe Nigeria Beta for international USD/GBP/EUR receivables). For physical retail: layer Moniepoint POS or Opay POS on top of the online acquirer.

2. CAC registration appropriate to scale — Business Name (BN) at ₦10,000 for informal-trade formalisation, upgrade to Limited (Ltd) at ₦20,000+ base when CIT bands, VC investment or tender-eligibility require. Joint TIN via CAC or standalone via FIRSTax.

3. FIRS tax compliance stack — monthly VAT returns (once turnover > ₦25M), quarterly WHT returns (if withholding on service payments), annual CIT return (for Ltd) or PIT return (for sole proprietor via State IRS). ICAN chartered accountant engagement recommended above ₦25M turnover.

4. NDPA 2023 compliance — privacy notice published on website conforming to sections 27-30, data subject rights response pipeline within 21 days per sections 34-40, breach notification pipeline within 72 hours per section 40 to NDPC (ndpc.gov.ng), DPO designated for major controllers per section 32, NDPC registration for Data Controller of Major Importance per section 45 (threshold: 200 individuals in preceding year OR sectoral classification), annual DPCO audit for major controllers per section 48.

5. Written policy on what is NOT automated — sole-proprietor-to-Ltd conversion triggered by CIT small-company threshold or investor requirements; VAT registration triggered by ₦25M turnover; NDPA major-controller registration triggered by 200-individual threshold or sectoral classification; referral to ICAN chartered accountant for FIRS filings; referral to NDPC-accredited DPCO for annual data protection audit if major controller; referral to lawyer for CAC annual returns and share-capital changes.

Five documents that separate a compliant solo Nigerian business from an informal one at scale:

Typical profile — informal Instagram seller in Ikeja formalising: CAC BN registration ₦10,000 + Paystack Payment Pages (free to create, 1.5% + ₦100 capped at ₦2,000 per transaction) + FIRS TIN + basic NDPA privacy notice on Instagram bio link. Under ₦25M turnover: 0% CIT, no VAT registration required, no NDPA major-controller obligations. Total compliance stack under ₦50k first-year cost.

Typical profile — freelance tech consultant in Yaba with international clients: CAC BN or Ltd + Paystack for local Naira invoicing + Wise Business or Stripe Nigeria Beta for USD/GBP/EUR receivables (avoids CBN FX capital-control friction on USD Domiciliary Account) + FIRS TIN + accounting software (Sage One Nigeria, QuickBooks Online, Zoho Books, Wave) with quarterly VAT return preparation once past ₦25M. NDPA privacy notice on client-facing website.

Typical profile — e-commerce merchant in Lagos with WooCommerce store scaling past ₦100M: CAC Ltd + Paystack or Flutterwave (or both for redundancy) with split payments for supplier remittance + Moniepoint or Opay POS for physical pickup counter + ICAN chartered accountant for FIRS + NDPA privacy notice + likely triggers Data Controller of Major Importance registration with NDPC + engages DPCO for annual audit + 30% CIT band + 7.5% VAT registration mandatory + quarterly WHT filings + Pension Reform Act obligations if 3+ staff.

Migration Playbook: From Existing Platform to New Stack Without Breaking Nigerian Client Continuity

Platform migration for a Nigerian SME running on WhatsApp Business API is not a software swap — it is an operational transition that must protect client-conversation continuity, template-approval status, and Meta Business Verification standing.

4-phase migration playbook:
- Phase 1 pre-migration audit (weeks 1-2) — inventory active Phone Numbers + approved template categories (utility vs marketing) + integration points (Paystack / Flutterwave / Moniepoint / CRM / booking platform) + staff roles + opted-in contact consent-record; contract review outgoing notice period (30 days) + data-export capability + NDPA 2023 retention; cost model with break-even calculation for switching.
- Phase 2 new-platform setup (weeks 3-4) — Meta Business Account reconfiguration; template resubmission with parallel approval; payment-integration webhook test; NDPA opt-in refresh broadcast to historical contacts.
- Phase 3 parallel-run (weeks 5-6) — both platforms live with 20-40% new traffic on new platform; monitoring template hit-rate + response time + payment webhook success + staff comfort; issue log for every friction point.
- Phase 4 cut-over + sunset (weeks 7-8) — full traffic routed to new platform + client-communication broadcast + old-platform contract cancellation + historical-message archive per NDPA + sector retention (6 years financial / legal / medical; 3-5 years general commercial).

Common Nigerian-migration failure modes:
- Template rejection on new platform — Meta re-review can flag templates that passed on old platform; keep old platform running until new templates confirmed.
- FX-volatility pass-through — USD-billed BSP subscription becomes punitive if migration happens during NGN weakness; consider NGN-native BSP.
- NDPA consent-refresh incomplete — silent-consent doesn't survive NDPC scrutiny; broadcast opt-in refresh to historical contacts.
- Staff training gap — budget realistic 2-week ramp-up for the full team.

Nigerian-Local BSPs and NGN-Native Billing Alternatives

USD-billed international BSPs dominate the Nigerian WhatsApp Business API stack, but Nigerian-local BSPs offer NGN-native billing and in-country support:

When Nigerian-local BSP fits:
- NGN cost predictability (insulates against FX pass-through)
- Africa-time-zone support (response times during West Africa Time hours)
- Deeper Paystack / Moniepoint / Interswitch native integration
- NDPA compliance built in from day one

When international BSPs still win:
- Feature depth (WATI / respond.io / AiSensy mature product)
- Enterprise multi-country deployment (pan-African / global coverage)
- Meta relationship maturity (smoother template-approval)

Selection discipline questions:
- Total annual cost in NGN including FX-volatility risk vs NGN-native pricing?
- Support SLA in Africa business hours vs US / EU hours?
- Meta template-approval turnaround via this BSP historically?
- NDPA-compliance documentation (DPA + breach-notification + audit-report support)?
- Contract cancellation notice + data-portability provision?

Setup Milestones, KPI Targets, and 30-Day Success Signals for Nigerian SMEs

Nigerian WhatsApp Business API deployments succeed or fail in the first 30 days:

Days 1-7 foundation — Meta Business Verification + BSP account + first Phone Number verified; 6-8 template categories drafted + submitted; Paystack / Flutterwave / Moniepoint merchant activated; two-agent shared-inbox test.

Days 8-14 staff onboarding + soft launch — training + escalation vocabulary + 20-30% inbound traffic routed through new system; monitor response quality + template hit-rate.

Days 15-21 full-traffic rollout — all inbound routed + first payment cycle completes + NDPA consent flow live.

Days 22-30 steady-state validation — cost audit + template refinement + staff feedback; KPI checkpoint: response time -60%+ + payment reconciliation -70% + customer repeat +15-25% within 60 days.

Rollback triggers — template rejection >50% + customer complaint 5+ + payment webhook fail >15% + staff comfort <3/5.

Success signals: first-response time under 15 minutes business hours; customer-satisfaction indicative signal (no material complaint); staff-comfort 4/5+ self-report; booking-to-completion conversion comparable or better than pre-system baseline; payment webhook confirmation 95%+ successful auto-confirmation.

Sources

Data + numbers referenced in this article are sourced from these public documents:

  1. Central Bank of Nigeria (CBN) — Guidelines for Licensing and Regulation of Payment Service Providers
  2. Nigeria Inter-Bank Settlement System (NIBSS) — Instant Payment (NIP) and settlement rails
  3. Companies and Allied Matters Act (CAMA) 2020
  4. Finance Act 2019 — VAT 7.5% + CIT bands
  5. Paystack — Pricing and documentation
  6. Flutterwave — Pricing (Nigeria)
  7. Moniepoint — Merchant acquiring and POS
  8. Opay — Merchant and PSB
  9. Interswitch — Switching, Verve card scheme, WebPAY
  10. Meta — WhatsApp Business Platform Pricing (Nigeria zone)
  11. Paystack — Nigeria Merchant Pricing
  12. Flutterwave — Nigeria Merchant Pricing
  13. Data Reportal — Digital 2024 Nigeria

Frequently Asked Questions

For **individual accounts** you can start on Paystack or Flutterwave with just your **BVN (Bank Verification Number) and NIN (National Identity Number)** and personal bank account — no CAC required at the smallest tier. However, both processors will require a **CAC Business Name (BN) certificate or Limited Company (Ltd) RC number plus FIRS Tax Identification Number (TIN)** for full business features (higher transaction limits, business bank account settlement, chargeback dispute handling, tax invoicing). CAC BN registration costs ₦10,000 and takes 2-5 business days via cac.gov.ng. Once you scale past ₦25 million annual turnover, VAT registration becomes mandatory under Finance Act 2019 (7.5% VAT) and you should engage an ICAN chartered accountant. Registering early with CAC + FIRS creates fewer transitions and reduces the risk of the acquirer freezing settlements pending KYC upgrade later.
**Flutterwave** is currently marginally lower at **1.4% capped at ₦2,000** per transaction for local cards, bank transfers and USSD, versus **Paystack at 1.5% + ₦100 (waived under ₦2,500) also capped at ₦2,000**. For an average transaction ticket of ₦5,000-₦20,000 the difference is negligible (₦5-30 per transaction). For international cards both charge similar rates: Paystack 3.9% versus Flutterwave 3.8%. Chargebacks cost ₦500-₦1,000 per processed dispute at both. Actual rates depend on your merchant tier and negotiated volume pricing at scale — a high-volume merchant should negotiate directly (Paystack merchant success team or Flutterwave enterprise team). Always verify current pricing at paystack.com/pricing and flutterwave.com/ng/pricing since 2026 changes may occur.
Under **section 45 NDPA 2023** you must register with the **Nigeria Data Protection Commission (NDPC)** if classified as a **Data Controller of Major Importance** — the NDPA Implementation Framework 2024 defines this as controllers processing personal data of **more than 200 individuals in Nigeria in the preceding year** OR classified as major in specific sectors (health, finance, telecom, education, insurance, e-commerce). Registration involves: privacy notice link, DPO details, description of processing activities, cross-border transfer schedule, breach-response procedure. Below the threshold you are still bound by NDPA obligations (privacy notice, data subject rights within 21 days, breach notification within 72 hours) but you do not need to register with NDPC. Major controllers must engage an NDPC-accredited **Data Protection Compliance Organisation (DPCO)** for **annual audit** under section 48 NDPA. Penalties for non-compliance reach **₦10 million or 2% of annual gross revenue** whichever is higher for major controllers under section 48-53.
Under the **CBN Three-Tiered KYC Framework 2013**, your account tier determines transaction and settlement limits. **Tier 1** (phone-only verification) is limited to approximately ₦50k per single deposit and ₦300k daily transaction ceiling (subject to periodic CBN revision). **Tier 2** requires **BVN or NIN** verification and raises limits to approximately ₦200k per single deposit and ₦500k daily. **Tier 3** requires **BVN + NIN + utility bill + reference** with no volume limits within the framework. Both Paystack and Flutterwave passport merchants through KYC upgrade during onboarding — solo business owners typically operate at Tier 2 or Tier 3 depending on transaction pattern. Since 2022 the CBN has required linking of BVN (issued by NIBSS via banks) with NIN (issued by NIMC) — both operate as complementary identifiers. Missing linkage can result in acquirer settlement holds. Confirm your BVN-NIN linkage status via *565*0# from your registered SIM or via your bank app.
**VAT registration is mandatory once annual turnover exceeds ₦25 million** under **Finance Act 2019** (which also raised the VAT rate from 5% to **7.5%**). Below ₦25M turnover you are exempt from mandatory VAT registration but can voluntarily register if you want to claim input VAT on business purchases. Once registered you: charge 7.5% VAT on invoices, file monthly VAT returns via FIRS TaxProMax or FIRSTax portal by the **21st of the following month**, remit VAT collected to FIRS, and can claim input VAT credit on eligible purchases. Late filing carries a **₦50,000 first-month penalty + ₦25,000 subsequent months** plus interest on unpaid VAT at CBN Monetary Policy Rate + 5%. Companies Income Tax (CIT) bands under Finance Act 2019: **Small Company** turnover < ₦25M pays **0% CIT**; **Medium Company** ₦25M-₦100M pays **20% CIT**; **Large Company** > ₦100M pays **30% CIT**. Tertiary Education Tax **2.5% of assessable profits** applies to Medium and Large. Sole proprietors pay Personal Income Tax (PIT) at graduated bands 7-24% to State Internal Revenue Service, not FIRS.
**Both** Paystack and Flutterwave accept **international card payments** (Visa, Mastercard, Discover) at approximately **3.8-3.9% fee**, with the settlement converted to Naira at the CBN Investors' and Exporters' (I&E) window rate. This works for merchants who accept payment on international customer credit cards. For **direct USD/GBP/EUR settlement into a Domiciliary Account** the picture is more complex: CBN policy on export proceeds and Domiciliary Account usage has evolved (2023 reforms unified Naira and Investors' window; 2024-2025 further FX liberalisation). Paystack does not natively settle in USD; Flutterwave's Barter feature has been intermittently suspended based on CBN cross-border FX policy. For solo businesses reliably receiving international USD/GBP/EUR: consider **Wise Business** (Nigerian residents with valid CAC and Nigerian bank account can open a Wise multi-currency account and receive USD/GBP/EUR into local details, converting to Naira at Wise mid-market + fee) or **Stripe Nigeria Beta** (if approved) which uses Paystack as its Nigerian rails but settles USD invoicing to international bank account. Always confirm current CBN FX policy at cbn.gov.ng before designing a cross-border settlement architecture.
For a **CAC-registered Limited Company** the annual filings under Companies and Allied Matters Act 2020 (CAMA 2020) and Companies Income Tax Act (CITA) as amended by successive Finance Acts include: (a) **CAC Annual Return** — filed within 42 days of the anniversary of incorporation, includes updated statement of directors, shareholders, share capital and registered office. Fee ~₦5,000 for Small Company plus penalty ₦5,000/day for late filing; (b) **CIT Annual Return to FIRS** — filed within 6 months of financial year end via TaxProMax portal, with audited accounts for Medium and Large companies (Small companies file with self-prepared accounts); (c) **VAT Monthly Returns to FIRS** by 21st of following month (if VAT-registered above ₦25M turnover); (d) **WHT Quarterly Returns** to FIRS or SBIRS depending on payer type; (e) **PAYE Monthly Returns to SBIRS** (if the company has employees); (f) **NHF Monthly Contributions** (2.5% of gross salary for companies with 10+ employees under National Housing Fund Act); (g) **NSITF Annual Contribution** 1% of payroll (companies with 5+ employees); (h) **Pension Reform Act 2014 Contributions** — 18% total (10% employer + 8% employee) if 3+ employees. Late filing on any of the above carries specific statutory penalties. Engage an ICAN or ANAN chartered accountant for FIRS + a corporate secretary or lawyer for CAC — combined annual cost typically ₦150k-₦500k depending on company size.
4-phase playbook: Phase 1 audit weeks 1-2 (inventory + contract review + cost model); Phase 2 setup weeks 3-4 (Meta reconfiguration + template resubmission + payment webhook + NDPA opt-in refresh); Phase 3 parallel weeks 5-6 (both live with 20-40% new traffic + monitoring + issue log); Phase 4 cut-over + sunset weeks 7-8 (full traffic new + broadcast + old-platform cancellation + historical archive per NDPA sector retention 6yr financial/legal/medical vs 3-5yr general commercial). Failure modes: template rejection + FX pass-through + NDPA consent-refresh + staff training. Nigerian-local BSPs (Prembly / KwikChat / Terragon) offer NGN-native billing.
Days 1-7 foundation (Meta verification + BSP + template + payment merchant + shared-inbox test); Days 8-14 staff onboarding + soft launch 20-30% traffic; Days 15-21 full-traffic rollout + first payment cycle + NDPA consent flow; Days 22-30 steady-state + cost audit + refinement. Success signals: response time -60%+ vs baseline; payment reconciliation -70%; customer repeat +15-25% within 60 days; staff-hours-saved 8-15/week solo-operator; per-conversation cost comparable or lower than pre-system. Rollback triggers: template rejection >50% + customer complaint 5+ + payment webhook fail >15% + staff comfort <3/5.
What a conversation looks like
🤖
BossBot AI
● Online
Hi! I came across your business and wanted to find out more
Hi there! Happy to help 😊 What would you like to know? I can help with bookings, pricing, availability, or any questions you have.
Great — do you have any appointments available this week?
Yes! I have availability Tuesday and Thursday this week. What time of day works best for you?
Thursday afternoon if possible
Thursday afternoon is available ✅ I'll get that booked for you. Can I take your name to confirm?

WhatsApp automation for your Nigerian solo business

BossBot connects WhatsApp Business Platform to Paystack, Flutterwave, Moniepoint and Opay — with NDPA-compliant customer records, NIBSS NIP payout webhooks, USSD-fallback flows, and FIRS-compatible VAT invoicing. 7-day free trial.

Start free trial

Not ready to sign up yet? Try the free demo →

How did this land for you?
Tap what fits. Anonymous, one per browser.
✨ Recorded. Thanks for the vote.
📧 Small business owner? Weekly notes on what actually works. Free.