Flutterwave vs Paystack for Nigerian Solo Business Owners: Fee Structure, Integration, and Choice
Solo Nigerian business owner choosing between Paystack and Flutterwave — five compliance layers (CBN licence, NDPA 2023, CAC, FIRS, NIBSS) that pricing pages don't show.
The five compliance-plus-fit questions a solo Nigerian business asks before choosing a payment gateway
Before comparing Paystack and Flutterwave fee tables, a solo business owner in Lagos, Abuja, Port Harcourt, Kano, Ibadan, Enugu, Kaduna, Benin City, Aba or Owerri weighs five questions.
1. What CBN licence does the processor operate under? The Central Bank of Nigeria (CBN) issues six main licence categories under the CBN Guidelines for Licensing and Regulation of Payment Service Providers (revised 2020, updated 2022):
Payment Solution Service Provider (PSSP) — authorises card-not-present online acquiring, payment gateway, invoicing links. Paystack, Flutterwave, Squad, Interswitch WebPAY, Moniepoint all operate as PSSPs.
Switching and Processing — authorises routing transactions across issuing banks. Interswitch (dominant switch), NIBSS itself, Unified Payments Systems.
Payment Terminal Service Provider (PTSP) — authorises deployment of POS terminals. CBN caps PTSP tier to ₦100M minimum capital.
Mobile Money Operator (MMO) — authorises deposit-taking via mobile wallet without full bank status.
Payment Service Bank (PSB) — permits deposit-taking with limited banking scope, targeted at financial inclusion. Five PSBs licensed: 9mobile 9PSB, Airtel Smartcash, MTN MoMo, Sterling One Plus, Titan Trust PSB.
Paystack and Flutterwave both hold PSSP licences and operate primarily as card-not-present online acquirers with bank-transfer, USSD and card capabilities layered in.
2. What settlement rails does the processor use? Nigeria's domestic settlement is anchored by:
NIBSS Instant Payment (NIP) — operated by Nigeria Inter-Bank Settlement System, the dominant instant transfer rail for bank-to-bank moves settling in ~30 seconds 24/7. Cost typically ₦10-50 per transfer.
NEFT (NIBSS Electronic Funds Transfer) — legacy bulk settlement, slower and cheaper.
RTGS (Real Time Gross Settlement) — high-value transfers.
eNaira — the CBN-issued central bank digital currency launched October 2021, adoption limited but active infrastructure.
Both Paystack and Flutterwave settle merchant payouts via NIBSS NIP typically same-day (T+0) or next-day (T+1) depending on tier and time of day.
3. What KYC tier does the solo business need to unlock? Under CBN Circular on Three-Tiered KYC Framework (2013, still in force with updates):
Tier 1 — phone number verification only, low limits (~₦50k per single deposit, ₦300k daily transaction max historically, subject to revision).
Tier 2 — BVN or NIN verified, higher limits (~₦200k per single deposit, ₦500k daily transaction max historically).
Tier 3 — full KYC with BVN + NIN + utility bill + reference, no volume limits within CBN framework.
BVN (Bank Verification Number) is an 11-digit unique identifier for all Nigerian bank customers, launched 2014 by CBN in partnership with NIBSS. NIN (National Identity Number) is issued by the National Identity Management Commission (NIMC). CBN Directive 2020 required linking BVN and NIN — since 2022 the two operate as complementary identifiers.
4. What CAC and FIRS status is required? Registration with the Corporate Affairs Commission (CAC) is mandatory under the Companies and Allied Matters Act 2020 (CAMA 2020) for anyone conducting business in Nigeria under a name other than the entrepreneur's own personal name:
Business Name (BN) — sole proprietor or partnership, ₦10,000 registration fee, ~2-5 business days via CAC portal since 2021. Suitable for informal traders formalising.
Limited Liability Company (Ltd) — two directors minimum (private Ltd) or seven for public plc, ₦20,000+ base fee plus stamp duty. Required for tenders, larger contracts, VC investment.
Incorporated Trustee (IT) — NGOs and religious bodies.
Once CAC-registered the entity receives an RC number (for Ltd) or BN number and via CAC joint-TIN scheme also a FIRS Tax Identification Number (TIN) — required for opening a business bank account or applying to Paystack/Flutterwave as a business entity (not individual).
5. What NDPA 2023 obligations apply? The Nigeria Data Protection Act 2023 (NDPA), signed into law June 2023, superseded the older NITDA-issued Nigeria Data Protection Regulation 2019 (NDPR). The Nigeria Data Protection Commission (NDPC) — headed by the National Commissioner — is the enforcer. NDPA obligations include: publishing a privacy notice per sections 27-30 NDPA, honouring data subject rights within 21 days per section 34-40, notifying NDPC within 72 hours of a breach per section 40, designating a Data Protection Officer for major controllers per section 32, registering with NDPC if classified as a Data Controller of Major Importance per section 45. Penalties up to ₦10 million or 2% of annual gross revenue whichever is higher for major controllers. The NDPA Implementation Framework 2024 published by NDPC gave guidance on major-controller classification and registration processes.
Paystack — Stripe-owned Lagos-based PSSP with developer-first UX
Paystack was founded in Lagos in 2015 by Shola Akinlade and Ezra Olubi, admitted to Y Combinator W16 batch, and acquired by Stripe in October 2020 for approximately US$200 million — the largest African fintech exit at the time. Post-acquisition Paystack has retained brand independence and expanded across Ghana (2018), South Africa (2020), Kenya (2020, still building), Ivory Coast (Beta), and Egypt (Beta). CBN Payment Solution Service Provider (PSSP) licence.
Paystack — core capabilities for a solo Nigerian business:
Card acquiring — Verve (domestic), Visa, Mastercard for card-present-not-present transactions.
Bank transfer via NIBSS NIP — customer initiates a bank transfer via Paystack's virtual account, near-instant confirmation.
USSD — customer dials a USSD code (901# GTBank, 894# Fidelity, *966# Zenith etc) to authorise a Paystack charge; useful for feature-phone customers.
QR payment via NQR (Nigeria Quick Response) — the NIBSS-operated QR standard for offline-to-online payments.
Payment Pages — hosted-checkout without needing a website, suitable for Instagram / WhatsApp / TikTok sellers.
Payment Links — one-time or recurring links for invoicing.
Subscriptions / Plans — recurring billing for coaches, SaaS.
Split payments — automatically split settlement across multiple sub-accounts (useful for marketplaces).
Transfers API — payout to any Nigerian bank account.
Refunds — one-click refund from dashboard.
Chargebacks — dispute-handling workflow.
Paystack — 2026 pricing (indicative — verify at paystack.com/pricing):
Local cards / bank transfer / USSD: 1.5% + ₦100 with the ₦100 waived for transactions under ₦2,500; capped at ₦2,000 per transaction.
International cards: 3.9% (Visa/Mastercard cards issued outside Nigeria).
Transfers to bank accounts (payouts): ₦10-50 per transfer depending on bank.
Chargebacks: ₦500 per chargeback processed (not per dispute filed).
Settlement: T+1 (next business day) default for local transactions; T+0 for premium tier.
What Paystack does NOT do natively for a Nigerian solo business:
No CAC / FIRS integration — you fill CAC + TIN details manually during onboarding but the platform does not file or automate.
No VAT invoicing native (you handle 7.5% VAT invoicing via your own accounting software).
No POS terminal supply (for POS, use Moniepoint POS, Opay POS, Interswitch POS, or PalmPay POS in Nigeria).
Strengths of Paystack for Nigerian solo business:
Developer-first API and clean documentation (paystack.com/docs) — dominant among Nigerian engineering teams.
Stripe-backed technical infrastructure and support processes post-2020 acquisition.
Payment Pages and Payment Links workflows suitable for social-commerce sellers without needing a full website.
Deep integration into Nigerian e-commerce stack (Selar, Paystack Storefront, WooCommerce plugin, Shopify partial).
Weaknesses:
Pan-African footprint slower than Flutterwave (Paystack focused on Nigeria-first depth vs Flutterwave breadth).
Less presence in offline / agent-banking layer where Moniepoint and Opay dominate.
Historical settlement-timing complaints from some merchants, mostly resolved after Stripe infrastructure roll-in 2022-2024.
🎯 For small-business owners
Weekly notes on what's actually working for small businesses.
WhatsApp scripts, SaaS-tool comparisons, real revenue tactics — honest, no fluff.
✓ Check your inbox for the first note.
Flutterwave — Lagos + San Francisco pan-African PSSP with broadest footprint
Flutterwave was founded in Lagos in 2016 by Iyinoluwa 'E' Aboyeji (co-founder Andela), Olugbenga 'GB' Agboola (co-founder & CEO) and others, later moving co-HQ to San Francisco while retaining strong Lagos engineering base. Series D 2022 valued Flutterwave at approximately US$3 billion — Africa's most-valued startup at the time. CBN Payment Solution Service Provider (PSSP) licence in Nigeria plus authorisations in Kenya (KRA / CBK), Ghana (BoG), Rwanda (BNR — Flutterwave received Electronic Money Institution and Payment Service Provider licences), and expanded presence in Egypt, Uganda, Tanzania, South Africa, Sierra Leone, Malawi, Zambia and Cameroon. As of 2026 Flutterwave supports 34+ African currencies and 150+ payment methods across the continent.
Flutterwave — core capabilities for a solo Nigerian business:
Card acquiring — Verve (domestic), Visa, Mastercard, Discover, Union Pay (via international routing), AmEx (via routing).
Bank transfer via NIBSS NIP with virtual accounts.
USSD with all major Nigerian banks.
Mobile money — dominant differentiator. MTN Mobile Money (Ghana, Rwanda, Uganda, Cameroon), Airtel Money (multiple countries), M-Pesa (Kenya via Safaricom), Orange Money (multiple countries), Vodafone Cash (Ghana).
QR payments including NQR (Nigeria), Mpesa QR (Kenya).
Barter by Flutterwave — the consumer app (formerly Flutterwave for Consumers) that permits virtual USD/GBP/EUR cards for cross-border spending, though feature has been suspended-and-resumed intermittently based on CBN cross-border FX policy.
Rave Payments (older brand) — remains the developer-integration surface with hosted checkout and standard-checkout modes.
Flutterwave Store — hosted-checkout online store for social-commerce sellers.
Send by Flutterwave — remittance product for Africa-to-Africa payouts.
F4B (Flutterwave for Business) — dashboard for merchants with real-time analytics, subscriptions, split payments.
Flutterwave — 2026 pricing (indicative — verify at flutterwave.com/ng/pricing):
Local Nigerian cards / bank transfer / USSD: 1.4% with cap at ₦2,000 per transaction.
International cards: 3.8% for Visa/Mastercard/Discover issued outside Nigeria.
Mobile money (cross-border): variable per corridor, typically 2-3% plus FX spread.
Transfers / payouts: ₦10-50 per transfer to Nigerian bank; higher for cross-border.
Chargebacks: ₦500-₦1,000 per chargeback processed.
Settlement: T+1 default for local; T+0 for premium tier merchants.
What Flutterwave does NOT do natively for a Nigerian solo business:
No CAC / FIRS filing automation.
No native VAT 7.5% invoicing (external accounting integration required).
No physical POS terminal supply.
Strengths of Flutterwave for Nigerian solo business:
Broadest pan-African footprint — critical for solo businesses serving diaspora Nigerians or cross-border clients (Ghana, Kenya, Rwanda, South Africa).
Mobile-money support out-of-box across MTN MoMo, Airtel Money, M-Pesa, Orange Money.
Multi-currency wallet infrastructure via Flutterwave Send and Barter.
Deep integrations with pan-African e-commerce platforms and marketplaces.
Weaknesses:
More corporate governance and regulatory scrutiny episodes 2022-2024 (Kenya Asset Recovery Agency investigation, Nigerian court case regarding customer funds, USD-card suspension periods). Operational continuity maintained but reputational sensitivity higher than Paystack.
Developer documentation historically less polished than Paystack (improving 2024-2025 with new docs site).
Barter and cross-border USD card features have been intermittently suspended based on CBN FX policy — customer expectations should be set accordingly.
A Paystack-vs-Flutterwave analysis omits the broader Nigerian payments ecosystem where several other CBN-licensed entities are relevant to a solo business owner:
Moniepoint (formerly TeamApt) — founded 2015 by Tosin Eniolorunda, holds CBN Switching and Processing licence + Merchant Acquiring approvals. Moniepoint Business Bank recently upgraded to full Microfinance Bank licence. Best known for agent-banking POS deployment (hundreds of thousands of Moniepoint POS units in market) and for merchant-acquiring with settlement into Moniepoint Business Account. Solo business use case: physical retail with POS terminal + optional online acquiring; the account itself operates as a business bank account with local IBAN-equivalent NUBAN number.
Opay — ByteDance-affiliated (via Opera Software heritage), holds CBN Payment Service Bank (PSB) licence plus PSSP + Super Agent. Opay is dominant in agent-banking and consumer wallet in Nigeria. Solo business use case: Opay Merchant for POS + online acquiring; competitive fee structure for high-volume small-ticket merchants.
PalmPay — founded 2019 backed by Transsion Holdings (Tecno / Infinix / Itel maker), CBN Mobile Money Operator licence. Strong consumer wallet presence; PalmPay Business is available for merchant acquiring.
Squad by GTCO Habari — payment infrastructure by Guaranty Trust Holding Company's Habari technology arm. CBN PSSP licence. Squad offers competitive pricing for GTBank-account-holding merchants with integrated GTBank settlement.
Interswitch — the incumbent Nigerian switching company since 2002, holds full Switching and Processing licence plus PSSP. Interswitch WebPAY is the legacy card gateway used by many bank websites and legacy merchant integrations. Verve card scheme is operated by Interswitch. Quickteller (consumer app) is a Super Agent network.
Stripe Nigeria (Beta / phased rollout) — Stripe launched Nigeria access in Beta 2020-2022 with limited invite-only merchant onboarding; more recently expanded but still not general availability. Stripe uses its Paystack subsidiary for on-the-ground Nigerian operations. For Nigerian merchants targeting international customers with USD invoicing, Stripe Nigeria Beta is a serious option once approved.
PayPal Nigeria (receive-only) — PayPal permits Nigerian sellers to receive payments from international buyers via PayPal but does not permit Nigerian buyers to send via PayPal (asymmetric because of CBN FX capital control history). PayPal Business Nigeria works for exporters and freelancers with foreign customers.
Wise Business (formerly TransferWise) — Wise permits Nigerian residents with valid CAC and Nigerian bank account to receive USD, GBP, EUR into Wise multi-currency account; not a full domestic acquirer but useful for freelancers receiving international invoices.
Decision matrix per solo-business profile:
Instagram / WhatsApp seller with informal trade, no CAC yet: Paystack Payment Pages or Flutterwave Store — no website needed, just a hosted-checkout link.
Freelancer with mixed local + international clients: Paystack for Nigerian local acquiring + Wise Business (or Stripe Nigeria Beta if approved) for international receivables in USD/GBP/EUR.
E-commerce merchant with WooCommerce/Shopify + WordPress: Paystack or Flutterwave WordPress/WooCommerce plugin; both work seamlessly.
Physical retail with POS terminal: Moniepoint POS or Opay POS for on-the-ground deployment (Paystack and Flutterwave don't supply physical POS at solo-business scale).
Solo business with cross-border African client base (Ghana, Kenya, Rwanda, South Africa): Flutterwave for broader mobile-money + multi-currency coverage.
Bank-anchored merchant with GTBank primary relationship: Squad by GTCO Habari for integrated GTBank settlement.
High-volume small-ticket merchant with agent-banking exposure: Opay for wallet + Super Agent economics.
CAC and FIRS — the tax and registration stack for a Nigerian solo business
The Corporate Affairs Commission (CAC) is the statutory regulator for company and business-name registration in Nigeria, established under the Companies and Allied Matters Act (CAMA), last comprehensively updated as CAMA 2020. CAC operates the online Company Registration Portal (CRP) at cac.gov.ng since 2016.
Registration options for a Nigerian solo business:
Business Name (BN) — for sole proprietor or partnership. ₦10,000 government fee + processing. Suitable for informal-trade formalisation. Once registered receives a BN registration number. Does not confer separate legal personality — the sole proprietor is personally liable for debts.
Private Limited Liability Company (Ltd) — minimum two directors, minimum ₦100,000 issued share capital (for Small Company classification). Registration fee tiered by capital, ~₦20,000+ base. Receives an RC number with 'Ltd' suffix. Confers separate legal personality — company debts do not attach personally to shareholders.
Public Limited Company (plc) — ₦2M+ share capital, seven directors, tender-eligible for large government contracts.
Incorporated Trustee (IT) — NGOs, religious bodies, charities.
FIRS Tax Identification Number (TIN) — the Federal Inland Revenue Service (FIRS) issues a TIN via joint-TIN scheme during CAC registration, or standalone via the FIRSTax portal (tin.firs.gov.ng). TIN is required for: opening business bank account, applying to Paystack/Flutterwave as a business entity, filing tax returns, VAT registration, government tenders, importation.
Companies Income Tax (CIT) under Companies Income Tax Act (CITA) as amended by Finance Act 2019, 2020, 2021, 2022, 2023:
Small Company — turnover < ₦25M annually — 0% CIT (introduced by Finance Act 2019 to encourage MSME formalisation).
Medium Company — turnover ₦25M-₦100M — 20% CIT.
Large Company — turnover > ₦100M — 30% CIT.
Tertiary Education Tax — 2.5% of assessable profits on all companies except Small.
Police Trust Fund Levy — 0.005% of net profit on companies.
Personal Income Tax (PIT) under Personal Income Tax Act (PITA) as amended:
Applies to sole proprietor's business income (as opposed to CIT for Ltd).
Graduated bands: 7% on first ₦300k, 11% on next ₦300k, 15% on next ₦500k, 19% on next ₦500k, 21% on next ₦1.6M, 24% on above ₦3.2M.
Collected by the State Board of Internal Revenue Service (SBIRS) — Lagos LIRS, FCT-IRS Abuja, Rivers IRS Port Harcourt, Kano SIRS etc.
Value Added Tax (VAT) — 7.5% under Finance Act 2019 (previously 5%). Registration mandatory once annual turnover exceeds ₦25M. Monthly VAT return + payment due by 21st of the following month via FIRS.
Withholding Tax (WHT) — deducted at source on payments for services (5-10%), commissions (5-10%), rent (10%), professional fees (10%). Remitted to FIRS or SBIRS depending on payer/payee entity type. Quarterly filing.
Payroll obligations if the solo business hires staff:
PAYE — Pay As You Earn under PITA, remitted monthly to SBIRS.
NHF — National Housing Fund 2.5% employee contribution (Ltd companies with 10+ employees).
NSITF — Nigeria Social Insurance Trust Fund 1% of payroll (companies with 5+ employees).
Pension under Pension Reform Act 2014 — 18% total contribution (10% employer + 8% employee) for employers with 3+ staff.
For the solo Nigerian business scaling past ₦25M turnover: engage an ICAN (Institute of Chartered Accountants of Nigeria) or ANAN member for FIRS filings, and either a lawyer or corporate secretary for CAC compliance (annual returns, changes in directors, share transfers).
The Nigeria Data Protection Act 2023 (NDPA) was signed into law by President Bola Tinubu on 14 June 2023, superseding the older Nigeria Data Protection Regulation 2019 (NDPR) issued under the NITDA Act 2007 by the National Information Technology Development Agency (NITDA). The NDPA established the Nigeria Data Protection Commission (NDPC) as an independent statutory body headed by a National Commissioner, replacing NITDA's earlier data-protection remit.
Key obligations for a Nigerian solo business as data controller:
Section 24 NDPA — Lawful bases. Six lawful bases mirror EU GDPR: consent, contract performance, legal obligation, vital interests, public interest, legitimate interests. For a solo business: contract performance for customer service delivery, legal obligation for FIRS invoicing retention, consent for marketing communications via SMS/WhatsApp/email.
Sections 27-30 NDPA — Information duties. Publish a privacy notice on the website and provide at first customer contact. Content: identity and contact of the data controller (with CAC RC number), purposes, lawful basis, categories of personal data, recipients (Paystack/Flutterwave as processors), retention periods, data subject rights, cross-border transfer safeguards, NDPC contact for complaints.
Sections 34-40 NDPA — Data subject rights. Access, rectification, erasure, restriction of processing, portability, objection, withdrawal of consent. Response within 21 days (extendable by 14 days for complex requests).
Section 32 NDPA — Data Protection Officer (DPO). Mandatory for major data controllers (typically those processing personal data of more than 5,000 unique persons in Nigeria annually, or classified as Data Controller of Major Importance under section 45). Solo businesses below that threshold are exempt but may voluntarily designate a contact person.
Section 40 NDPA — Breach notification. Notify NDPC within 72 hours of becoming aware of a breach likely to result in risk to rights and freedoms of data subjects. Notify data subjects themselves if high risk. Maintain internal register of all breaches even where not notifiable.
Section 45 NDPA — Data Controller of Major Importance registration. A controller processing personal data of over 200 individuals in Nigeria in the preceding year OR classified as major by NDPC in specific sectors (health, finance, telecom, education, insurance) must register with NDPC. Registration requires: privacy notice link, DPO details, description of processing activities, cross-border transfer schedule, breach-response procedure. NDPC maintains a register of registered controllers.
Section 48 NDPA — Data Protection Compliance Organisation (DPCO). NDPC accredits DPCOs (private compliance consultancies) to audit major data controllers annually. Solo businesses classified as major must engage a DPCO for annual data protection audit — findings filed with NDPC.
Section 60 NDPA — Cross-border transfers. Permitted to jurisdictions with adequate data protection or under approved Standard Contractual Clauses / Binding Corporate Rules / explicit consent. Paystack (Stripe) and Flutterwave both maintain infrastructure partially outside Nigeria — verify their cross-border transfer notices in privacy policy.
Penalties under section 48-53 NDPA:
Data Controller of Major Importance — up to ₦10 million or 2% of annual gross revenue whichever is higher.
Other data controllers — up to ₦2 million or 2% of annual gross revenue whichever is higher.
Individuals — up to ₦2 million fine or 3 years imprisonment.
NDPA Implementation Framework 2024 — published by NDPC provides operational guidance on major-controller classification (200-individual threshold, sectoral criteria), DPCO accreditation criteria, registration process, and audit expectations. Ongoing regulatory guidance issued via NDPC circulars at ndpc.gov.ng.
Nigerian Communications Commission (NCC) SIM-linked marketing rules. Marketing SMS or WhatsApp to Nigerian numbers requires prior opt-in consent under NCC guidelines. Do-not-disturb (DND) service allows consumers to opt out — dial 2442 from the number. Cost-per-SMS marketing to Nigerian numbers is subject to VAT + NCC fee.
The defensible payment stack for a solo Nigerian business in 2026
Combining the five layers, the payment-and-compliance stack a solo Nigerian business owner can defend before CBN, NDPC, CAC, FIRS and (if applicable) sector regulator in 2026:
1. At least one CBN-licensed acquirer with local card + bank transfer + USSD support and NIBSS NIP settlement — Paystack (Stripe-owned, developer-first, best for online/social-commerce solo businesses), Flutterwave (broadest pan-African footprint, best for cross-border African client base), or hybrid stack (Paystack for local + Wise Business or Stripe Nigeria Beta for international USD/GBP/EUR receivables). For physical retail: layer Moniepoint POS or Opay POS on top of the online acquirer.
2. CAC registration appropriate to scale — Business Name (BN) at ₦10,000 for informal-trade formalisation, upgrade to Limited (Ltd) at ₦20,000+ base when CIT bands, VC investment or tender-eligibility require. Joint TIN via CAC or standalone via FIRSTax.
3. FIRS tax compliance stack — monthly VAT returns (once turnover > ₦25M), quarterly WHT returns (if withholding on service payments), annual CIT return (for Ltd) or PIT return (for sole proprietor via State IRS). ICAN chartered accountant engagement recommended above ₦25M turnover.
4. NDPA 2023 compliance — privacy notice published on website conforming to sections 27-30, data subject rights response pipeline within 21 days per sections 34-40, breach notification pipeline within 72 hours per section 40 to NDPC (ndpc.gov.ng), DPO designated for major controllers per section 32, NDPC registration for Data Controller of Major Importance per section 45 (threshold: 200 individuals in preceding year OR sectoral classification), annual DPCO audit for major controllers per section 48.
5. Written policy on what is NOT automated — sole-proprietor-to-Ltd conversion triggered by CIT small-company threshold or investor requirements; VAT registration triggered by ₦25M turnover; NDPA major-controller registration triggered by 200-individual threshold or sectoral classification; referral to ICAN chartered accountant for FIRS filings; referral to NDPC-accredited DPCO for annual data protection audit if major controller; referral to lawyer for CAC annual returns and share-capital changes.
Five documents that separate a compliant solo Nigerian business from an informal one at scale:
CAC certificate with RC number (for Ltd) or BN number (for Business Name), plus certified extract downloadable from cac.gov.ng.
FIRS Tax Identification Number (TIN) certificate.
BVN + NIN linkage for the sole proprietor or Ltd directors, upgraded to Tier 2 or Tier 3 KYC on the acquirer account per CBN 2013 Three-Tiered Framework.
NDPA privacy notice published on website conforming to sections 27-30 NDPA, plus (if major controller) NDPC registration certificate plus DPCO annual audit report.
Typical profile — informal Instagram seller in Ikeja formalising: CAC BN registration ₦10,000 + Paystack Payment Pages (free to create, 1.5% + ₦100 capped at ₦2,000 per transaction) + FIRS TIN + basic NDPA privacy notice on Instagram bio link. Under ₦25M turnover: 0% CIT, no VAT registration required, no NDPA major-controller obligations. Total compliance stack under ₦50k first-year cost.
Typical profile — freelance tech consultant in Yaba with international clients: CAC BN or Ltd + Paystack for local Naira invoicing + Wise Business or Stripe Nigeria Beta for USD/GBP/EUR receivables (avoids CBN FX capital-control friction on USD Domiciliary Account) + FIRS TIN + accounting software (Sage One Nigeria, QuickBooks Online, Zoho Books, Wave) with quarterly VAT return preparation once past ₦25M. NDPA privacy notice on client-facing website.
Typical profile — e-commerce merchant in Lagos with WooCommerce store scaling past ₦100M: CAC Ltd + Paystack or Flutterwave (or both for redundancy) with split payments for supplier remittance + Moniepoint or Opay POS for physical pickup counter + ICAN chartered accountant for FIRS + NDPA privacy notice + likely triggers Data Controller of Major Importance registration with NDPC + engages DPCO for annual audit + 30% CIT band + 7.5% VAT registration mandatory + quarterly WHT filings + Pension Reform Act obligations if 3+ staff.
Migration Playbook: From Existing Platform to New Stack Without Breaking Nigerian Client Continuity
Platform migration for a Nigerian SME running on WhatsApp Business API is not a software swap — it is an operational transition that must protect client-conversation continuity, template-approval status, and Meta Business Verification standing.
4-phase migration playbook:
- Phase 1 pre-migration audit (weeks 1-2) — inventory active Phone Numbers + approved template categories (utility vs marketing) + integration points (Paystack / Flutterwave / Moniepoint / CRM / booking platform) + staff roles + opted-in contact consent-record; contract review outgoing notice period (30 days) + data-export capability + NDPA 2023 retention; cost model with break-even calculation for switching.
- Phase 2 new-platform setup (weeks 3-4) — Meta Business Account reconfiguration; template resubmission with parallel approval; payment-integration webhook test; NDPA opt-in refresh broadcast to historical contacts.
- Phase 3 parallel-run (weeks 5-6) — both platforms live with 20-40% new traffic on new platform; monitoring template hit-rate + response time + payment webhook success + staff comfort; issue log for every friction point.
- Phase 4 cut-over + sunset (weeks 7-8) — full traffic routed to new platform + client-communication broadcast + old-platform contract cancellation + historical-message archive per NDPA + sector retention (6 years financial / legal / medical; 3-5 years general commercial).
Common Nigerian-migration failure modes:
- Template rejection on new platform — Meta re-review can flag templates that passed on old platform; keep old platform running until new templates confirmed.
- FX-volatility pass-through — USD-billed BSP subscription becomes punitive if migration happens during NGN weakness; consider NGN-native BSP.
- NDPA consent-refresh incomplete — silent-consent doesn't survive NDPC scrutiny; broadcast opt-in refresh to historical contacts.
- Staff training gap — budget realistic 2-week ramp-up for the full team.
Nigerian-Local BSPs and NGN-Native Billing Alternatives
USD-billed international BSPs dominate the Nigerian WhatsApp Business API stack, but Nigerian-local BSPs offer NGN-native billing and in-country support:
Prembly — Nigerian identity + compliance + messaging stack; NGN billing; local KYC and payment integration.
KwikChat — Nigerian messaging platform with WhatsApp Business API reseller relationship; NGN pricing; local support.
Terragon — Nigerian marketing-tech company with WhatsApp channel for enterprise segment.
BusyBot / Nigerian-agency BSPs — smaller Nigerian tech-agency resellers with NGN billing and Naija-time-zone support.
When Nigerian-local BSP fits:
- NGN cost predictability (insulates against FX pass-through)
- Africa-time-zone support (response times during West Africa Time hours)
- Deeper Paystack / Moniepoint / Interswitch native integration
- NDPA compliance built in from day one
When international BSPs still win:
- Feature depth (WATI / respond.io / AiSensy mature product)
- Enterprise multi-country deployment (pan-African / global coverage)
- Meta relationship maturity (smoother template-approval)
Selection discipline questions:
- Total annual cost in NGN including FX-volatility risk vs NGN-native pricing?
- Support SLA in Africa business hours vs US / EU hours?
- Meta template-approval turnaround via this BSP historically?
- NDPA-compliance documentation (DPA + breach-notification + audit-report support)?
- Contract cancellation notice + data-portability provision?
Setup Milestones, KPI Targets, and 30-Day Success Signals for Nigerian SMEs
Nigerian WhatsApp Business API deployments succeed or fail in the first 30 days:
Days 1-7 foundation — Meta Business Verification + BSP account + first Phone Number verified; 6-8 template categories drafted + submitted; Paystack / Flutterwave / Moniepoint merchant activated; two-agent shared-inbox test.
Days 8-14 staff onboarding + soft launch — training + escalation vocabulary + 20-30% inbound traffic routed through new system; monitor response quality + template hit-rate.
Days 15-21 full-traffic rollout — all inbound routed + first payment cycle completes + NDPA consent flow live.
Days 22-30 steady-state validation — cost audit + template refinement + staff feedback; KPI checkpoint: response time -60%+ + payment reconciliation -70% + customer repeat +15-25% within 60 days.
Success signals: first-response time under 15 minutes business hours; customer-satisfaction indicative signal (no material complaint); staff-comfort 4/5+ self-report; booking-to-completion conversion comparable or better than pre-system baseline; payment webhook confirmation 95%+ successful auto-confirmation.
Sources
Data + numbers referenced in this article are sourced from these public documents:
For **individual accounts** you can start on Paystack or Flutterwave with just your **BVN (Bank Verification Number) and NIN (National Identity Number)** and personal bank account — no CAC required at the smallest tier. However, both processors will require a **CAC Business Name (BN) certificate or Limited Company (Ltd) RC number plus FIRS Tax Identification Number (TIN)** for full business features (higher transaction limits, business bank account settlement, chargeback dispute handling, tax invoicing). CAC BN registration costs ₦10,000 and takes 2-5 business days via cac.gov.ng. Once you scale past ₦25 million annual turnover, VAT registration becomes mandatory under Finance Act 2019 (7.5% VAT) and you should engage an ICAN chartered accountant. Registering early with CAC + FIRS creates fewer transitions and reduces the risk of the acquirer freezing settlements pending KYC upgrade later.
**Flutterwave** is currently marginally lower at **1.4% capped at ₦2,000** per transaction for local cards, bank transfers and USSD, versus **Paystack at 1.5% + ₦100 (waived under ₦2,500) also capped at ₦2,000**. For an average transaction ticket of ₦5,000-₦20,000 the difference is negligible (₦5-30 per transaction). For international cards both charge similar rates: Paystack 3.9% versus Flutterwave 3.8%. Chargebacks cost ₦500-₦1,000 per processed dispute at both. Actual rates depend on your merchant tier and negotiated volume pricing at scale — a high-volume merchant should negotiate directly (Paystack merchant success team or Flutterwave enterprise team). Always verify current pricing at paystack.com/pricing and flutterwave.com/ng/pricing since 2026 changes may occur.
Under **section 45 NDPA 2023** you must register with the **Nigeria Data Protection Commission (NDPC)** if classified as a **Data Controller of Major Importance** — the NDPA Implementation Framework 2024 defines this as controllers processing personal data of **more than 200 individuals in Nigeria in the preceding year** OR classified as major in specific sectors (health, finance, telecom, education, insurance, e-commerce). Registration involves: privacy notice link, DPO details, description of processing activities, cross-border transfer schedule, breach-response procedure. Below the threshold you are still bound by NDPA obligations (privacy notice, data subject rights within 21 days, breach notification within 72 hours) but you do not need to register with NDPC. Major controllers must engage an NDPC-accredited **Data Protection Compliance Organisation (DPCO)** for **annual audit** under section 48 NDPA. Penalties for non-compliance reach **₦10 million or 2% of annual gross revenue** whichever is higher for major controllers under section 48-53.
Under the **CBN Three-Tiered KYC Framework 2013**, your account tier determines transaction and settlement limits. **Tier 1** (phone-only verification) is limited to approximately ₦50k per single deposit and ₦300k daily transaction ceiling (subject to periodic CBN revision). **Tier 2** requires **BVN or NIN** verification and raises limits to approximately ₦200k per single deposit and ₦500k daily. **Tier 3** requires **BVN + NIN + utility bill + reference** with no volume limits within the framework. Both Paystack and Flutterwave passport merchants through KYC upgrade during onboarding — solo business owners typically operate at Tier 2 or Tier 3 depending on transaction pattern. Since 2022 the CBN has required linking of BVN (issued by NIBSS via banks) with NIN (issued by NIMC) — both operate as complementary identifiers. Missing linkage can result in acquirer settlement holds. Confirm your BVN-NIN linkage status via *565*0# from your registered SIM or via your bank app.
**VAT registration is mandatory once annual turnover exceeds ₦25 million** under **Finance Act 2019** (which also raised the VAT rate from 5% to **7.5%**). Below ₦25M turnover you are exempt from mandatory VAT registration but can voluntarily register if you want to claim input VAT on business purchases. Once registered you: charge 7.5% VAT on invoices, file monthly VAT returns via FIRS TaxProMax or FIRSTax portal by the **21st of the following month**, remit VAT collected to FIRS, and can claim input VAT credit on eligible purchases. Late filing carries a **₦50,000 first-month penalty + ₦25,000 subsequent months** plus interest on unpaid VAT at CBN Monetary Policy Rate + 5%. Companies Income Tax (CIT) bands under Finance Act 2019: **Small Company** turnover < ₦25M pays **0% CIT**; **Medium Company** ₦25M-₦100M pays **20% CIT**; **Large Company** > ₦100M pays **30% CIT**. Tertiary Education Tax **2.5% of assessable profits** applies to Medium and Large. Sole proprietors pay Personal Income Tax (PIT) at graduated bands 7-24% to State Internal Revenue Service, not FIRS.
**Both** Paystack and Flutterwave accept **international card payments** (Visa, Mastercard, Discover) at approximately **3.8-3.9% fee**, with the settlement converted to Naira at the CBN Investors' and Exporters' (I&E) window rate. This works for merchants who accept payment on international customer credit cards. For **direct USD/GBP/EUR settlement into a Domiciliary Account** the picture is more complex: CBN policy on export proceeds and Domiciliary Account usage has evolved (2023 reforms unified Naira and Investors' window; 2024-2025 further FX liberalisation). Paystack does not natively settle in USD; Flutterwave's Barter feature has been intermittently suspended based on CBN cross-border FX policy. For solo businesses reliably receiving international USD/GBP/EUR: consider **Wise Business** (Nigerian residents with valid CAC and Nigerian bank account can open a Wise multi-currency account and receive USD/GBP/EUR into local details, converting to Naira at Wise mid-market + fee) or **Stripe Nigeria Beta** (if approved) which uses Paystack as its Nigerian rails but settles USD invoicing to international bank account. Always confirm current CBN FX policy at cbn.gov.ng before designing a cross-border settlement architecture.
For a **CAC-registered Limited Company** the annual filings under Companies and Allied Matters Act 2020 (CAMA 2020) and Companies Income Tax Act (CITA) as amended by successive Finance Acts include: (a) **CAC Annual Return** — filed within 42 days of the anniversary of incorporation, includes updated statement of directors, shareholders, share capital and registered office. Fee ~₦5,000 for Small Company plus penalty ₦5,000/day for late filing; (b) **CIT Annual Return to FIRS** — filed within 6 months of financial year end via TaxProMax portal, with audited accounts for Medium and Large companies (Small companies file with self-prepared accounts); (c) **VAT Monthly Returns to FIRS** by 21st of following month (if VAT-registered above ₦25M turnover); (d) **WHT Quarterly Returns** to FIRS or SBIRS depending on payer type; (e) **PAYE Monthly Returns to SBIRS** (if the company has employees); (f) **NHF Monthly Contributions** (2.5% of gross salary for companies with 10+ employees under National Housing Fund Act); (g) **NSITF Annual Contribution** 1% of payroll (companies with 5+ employees); (h) **Pension Reform Act 2014 Contributions** — 18% total (10% employer + 8% employee) if 3+ employees. Late filing on any of the above carries specific statutory penalties. Engage an ICAN or ANAN chartered accountant for FIRS + a corporate secretary or lawyer for CAC — combined annual cost typically ₦150k-₦500k depending on company size.