Lawmakers in West Africa are escalating the central bank's payment data localisation directives into statutory criminal law, while domestic card and mobile money rails across the continent push tokenised checkouts to sideline international schemes.
Escalating the non-negotiable January 1, 2027, data localisation deadline reaffirmed by the Central Bank of Nigeria this week, House of Representatives member Lanre Okunlola introduced a bill on Tuesday, November 3, 2026, to establish the National Payment Data Protection and Sovereignty Commission. The proposed legislation classifies payment data as Critical National Information Infrastructure, mandating all domestic transaction data be stored and processed within Nigeria. Non-compliance carries minimum penalties of N1 billion for financial institutions, while unauthorized cross-border transfers of sensitive payment data face up to 10 years' imprisonment or N500 million in fines. This legislative push follows the NITDA survey data we tracked last week showing widespread industry non-compliance, with 22 out of 44 surveyed financial institutions yet to begin data migration.
Why it matters
This bill escalates data localization from a central bank administrative directive into statutory criminal law. For gateway operators hosting transaction pipelines on foreign cloud regions (such as AWS eu-west-1), compliance will require re-architecting data stores to onshore providers or local AWS Outposts before 2027. The creation of a dedicated sovereignty commission adds a secondary regulatory body alongside the CBN, raising annual audit costs and legal exposure for cross-border acquirers.
Building on last week's initial rollout of Google Wallet tokenisation by Nigerian lenders, Mastercard and Interswitch formally launched Google Pay in Nigeria on Monday, November 2, 2026, integrating local issuer connectivity with global tokenisation rails. While earlier reports indicated GTBank activated support on October 27, the bank formally enabled cardholders to store debit cards for tap-to-pay and online checkouts this week. Concurrently, GTCO subsidiary HabariPay enabled Google Pay acceptance by default on its Squad payment gateway to reduce manual checkout entry steps. NIBSS data released alongside the announcement shows Nigerian digital transactions reached 11.2 billion in 2026, valued at USD 796 billion.
Why it matters
Squad's instant enablement of Google Pay shifts checkout expectations for Nigerian e-commerce merchants. Integrating network tokenisation directly into local acquiring gateways bypasses raw card entry, driving down cart abandonment caused by SMS OTP failures on 3D Secure. Competing B2B payment gateways must support tokenised wallet payloads to prevent merchant churn to Squad and domestic acquirers.
Following yesterday's coverage of Grey deploying direct bilateral currency pairs, the cross-border fintech announced on Monday, November 2, 2026, that it secured an International Money Transfer Operator (IMTO) license from the Central Bank of Nigeria. The authorization allows Grey to process inbound P2P and B2B foreign payments directly. Backed by the $5 billion in cumulative processing volume we noted earlier, Grey is deploying direct clearing as local currency stabilization compresses foreign currency holding durations.
Why it matters
Direct IMTO licensing eliminates Grey's reliance on third-party bank settlement intermediaries for inbound Nigerian clearing. Owning the regulated rail allows Grey to capture full fee margins on cross-border merchant payouts. Operating direct IMTO licenses becomes a requirement for payment platforms seeking to maintain unit economics under tightened CBN forex monitoring.
Interswitch's domestic card scheme, Verve, announced on Monday, November 2, 2026, that its issued card base grew from 100 million in December 2025 to 130 million cards. Verve CEO Vincent Ogbunude unveiled Mobile Tap-to-Pay for Android and wearable devices via native tokenisation. Additionally, the network confirmed early technical testing of AI-powered agentic payment protocols designed to allow autonomous AI assistants to execute purchases without human checkout intervention.
Why it matters
Verve's expansion across 130 million cards highlights the dominance of domestic card schemes over international card brands for retail acquirers in West Africa. The rollout of localized tokenisation ensures that Verve cardholders can access contactless and wallet payments without relying on international schemes. Gateway engineers should evaluate Verve's agentic commerce API blueprints as machine-to-machine checkout protocols gain initial traction.
At the Africa Virtual Assets Summit in Accra on Monday, November 2, 2026, Bank of Ghana Governor Dr. Johnson Pandit Asiama announced the central bank is drafting a formal Stablecoin Directive. Operating under the Virtual Asset Service Providers Act, 2025 (Act 1154) alongside the SEC and Financial Intelligence Centre, the directive aims to limit dollar-denominated stablecoin substitution and protect monetary policy sovereignty, while facilitating AfCFTA trade settlement.
Why it matters
Unregulated stablecoin corridors used by B2B importers are facing direct central bank supervision in Ghana. While stablecoins accelerate settlement, forthcoming regulatory limits may restrict non-bank entities from processing foreign-currency pegged tokens without explicit license tiers. Gateways facilitating digital dollar clearing into West Africa must track these incoming rules to ensure local compliance.
Further cementing the South African Reserve Bank's push for direct non-bank settlement and ecosystem modernisation we tracked this week, the National Treasury's Operation Vulindlela quarterly report released on Friday, October 30, 2026, confirmed South Africa is advancing payment authorisation testing under the Payments Ecosystem Modernisation (PEM) Key sandbox toward a March 2027 deadline. The initiative integrates citizen digital ID prototypes with PayShap, QR code rails, and a national digital wallet scheduled for pilot testing in late November 2026. Concurrently, the Department of Home Affairs confirmed it will cease green paper ID book production by March 31, 2027.
Why it matters
Embedding digital identity directly into PayShap and national payment sandboxes provides a standardized digital KYC layer for South African acquirers. Standardizing payment authorization credentials reduces merchant onboarding friction and fraud rates for instant EFT processing. Payment processors operating in South Africa should prepare integration hooks for the government's PEM sandbox.
Following a one-year pilot, the eZAR stablecoin opened to commercial partners on Friday, October 30, 2026, reporting R303 million in issued tokens. Developed by Ninety One, AVBOB Financial Services, and eZAR, the token maintains a 1:1 ZAR peg backed by reserves invested in Ninety One money market funds. The platform enables fintechs and payment platforms to integrate white-labeled wallets featuring instant transfers while passing daily investment yields to token holders.
Why it matters
eZAR introduces a yield-bearing rand settlement rail for South African corporate treasury management. Unlike traditional non-interest-bearing bank accounts, merchants holding floating ZAR settlement balances can earn money market returns directly on-chain while executing instant transfers. For B2B gateways, tokenized yield accounts provide an alternative treasury tool for managing merchant settlement floats.
Following our coverage of the Central Bank of Kenya's payment ecosystem policy blueprint, the regulator confirmed the framework relies on global messaging protocols to enforce its open API standards across financial institutions and mobile networks. The directive targets the removal of walled-garden pricing moats between telecom operators and banks, establishing compliance audits to lower peer-to-peer and merchant transfer fees across East Africa.
Why it matters
Enforced open APIs lower integration maintenance costs for acquirers targeting Kenyan merchants. Standardized messaging protocol mandates force telecom operators like Safaricom to expose direct clearing endpoints, reducing payment gateway dependency on custom aggregators. This lowers processing overhead for cross-border merchants collecting payments via M-PESA and bank apps.
Building on the recent M-PESA platform upgrades and fraud reductions we've tracked, Safaricom reported on Monday, November 2, 2026, that M-PESA processed 46.4 billion transactions valued at KSh41.68 trillion across 3.13 million business accounts in FY2026. The operator highlighted the growth of its Ziidi wealth management products to 2.2 million active users holding KSh21.1 billion in assets under management. Safaricom also confirmed the continued expansion of its dynamic QR checkouts and tap-to-pay terminals, scaling the Pesapal partnership we covered last month.
Why it matters
M-PESA's transaction volume solidifies its role as the dominant clearing infrastructure for East African commerce. Pesapal's integration of dynamic QR and contactless accepting points across M-PESA tills highlights how payment aggregators must build directly onto telecom infrastructure to capture merchant volume.
Following up on Kenswitch's partnership with Wibmo we covered last week, the domestic switch detailed the deployment of its EMV 3-D Secure risk scoring and Access Control Server infrastructure across its participating banks and microfinance institutions. The deployment embeds dynamic risk-based authentication, supporting OTPs, biometrics, and push notifications for card-not-present transactions.
Why it matters
Deploying 3D Secure at the national switch level reduces processing friction and authorization failure rates for domestic online card checkouts in Kenya. Standardized ACS infrastructure protects acquirers against card-not-present fraud liabilities without requiring individual microfinance institutions to build custom risk engines.
Technical guidance published on Monday, November 2, 2026, by risk platform Greip details sub-second pre-authorization scoring models for payment gateways. Citing Nilson Report figures showing global card fraud reached $33.41 billion, the technical framework outlines methods for evaluating BIN data, IP geolocation, device fingerprinting, and card velocity before authorization calls are transmitted across card switches.
Why it matters
Moving fraud scoring upstream into pre-authorization execution paths prevents bad orders from incurring non-refundable card network gateway fees and chargeback processing costs. Integrating API-driven device and BIN risk scoring allows small engineering teams to drop card fraud rates while maintaining authorization speed.
The one-year transitional grace period for crypto asset service providers under Kenya's Virtual Asset Service Providers Act, 2025 ends on Wednesday, November 4, 2026. Jointly regulated by the Central Bank of Kenya and Capital Markets Authority, mandatory licensing now applies to all entities operating within Kenya or serving local residents from offshore jurisdictions, covering custodial wallets, payment processors, and liquidity exchanges.
Why it matters
The end of Kenya's VASP grace period exposes unlicensed offshore crypto gateways to immediate regulatory enforcement and bank off-ramp termination. B2B platforms facilitating cross-border stablecoin conversions into Kenyan Shillings must hold formal authorization or route settlement exclusively through licensed local VASP entities to prevent transaction disruptions.
Legislative Mandates Escalate Payment Data Sovereignty Enforcement Following central bank administrative circulars, Nigerian lawmakers have introduced legislation to establish a National Payment Data Protection and Sovereignty Commission. The proposed law introduces criminal liability and fines up to N1 billion for exporting payment data, accelerating the urgency for domestic infrastructure migration.
Domestic Switching Infrastructure Deploys Tokenisation to Retain Acquiring Volume Domestic switches Verve and Interswitch are expanding tokenised tap-to-pay rails to counter international digital wallets like Google Pay in Nigeria. By enabling localized card credential storage, domestic switches are attempting to preserve merchant acquiring fee revenues against global card networks.
Central Bank Directives Replace Sandbox Experimentation for West African Stablecoins Following Ghana's 2025 VASP Act and Kenya's grace period deadline on November 4, 2026, the Bank of Ghana announced a formal Stablecoin Directive. Regulators across Sub-Saharan Africa are establishing strict supervisory boundaries around foreign-currency stablecoin flows to protect domestic monetary policy.
Central Banks Enforce Open APIs to Dismantle Proprietary Mobile Money Walls Building on policy blueprints, the Central Bank of Kenya is mandating open API standards and global messaging protocols to bridge legacy banks and telecom wallets. The directive aims to eliminate transaction fees between competing mobile networks and lower acquiring friction for local merchants.
Pre-Authorization Telemetry Integrates Sub-Second Risk Decisioning To combat authorized push payment scams and instant payment fraud, acquirers and gateways are moving risk evaluations upstream into pre-authorization windows. Gateways are relying on BIN data, device fingerprints, and IP velocity checks evaluated within milliseconds before hitting card network switches.
What to Expect
2026-11-04—Kenya VASP Grace Period Expiration — Transition window under the Virtual Asset Service Providers Act 2025 concludes, making licensing mandatory.
2026-12-31—JIBAR Discontinuation Deadline — South African financial sector complete transition from JIBAR benchmark to ZARONIA.
2026-12-31—CBN Market Share Reporting Deadline — Nigerian payment entities holding over 25% issuing or acquiring share must submit compliance reporting.
2027-01-01—Central Bank of Nigeria Data Localisation Enforcement — Mandatory domestic storage and processing deadline for all payment transaction data.
2027-03-31—South Africa PEM Sandbox and Green ID Book Retirement — Target deadline for Payments Ecosystem Modernisation sandbox testing and cessation of green ID book production.
How We Built This Briefing
Every story, researched.
Every story verified across multiple sources before publication.
🔍
Scanned
Across multiple search engines and news databases
376
📖
Read in full
Every article opened, read, and evaluated
107
⭐
Published today
Ranked by importance and verified across sources
12
— The Settlement Layer
🎙 Listen as a podcast
Subscribe in your favorite podcast app to get each new briefing delivered automatically as audio.
Apple Podcasts
Library tab → ••• menu → Follow a Show by URL → paste