January 5, 2026, isn't just another date on the calendar for Nigerian lenders. It's the line between operating legally and facing operational shutdown.
The Federal Competition and Consumer Protection Commission (FCCPC) has set Monday, January 5, 2026, as the deadline for all operators to fully comply with the Digital, Electronic, Online and Non-Traditional Consumer Lending Regulations, 2025. The consequences of missing it are severe.
If your lending platform, fintech app, or credit service isn't fully compliant by then, enforcement actions will commence immediately after the deadline, including restricting non-compliant entities from operating, directing partners or platforms to cease dealing with them, and applying other sanctions permitted under the law. This is your final window to get everything right.
Let’s get right into it!
What Is at Stake?
The compliance deadline isn't about paperwork for the sake of bureaucracy. The new regulations, effective July 21, 2025, under the Federal Competition and Consumer Protection Act (FCCPA) 2018, aim to promote fairness, transparency, and accountability across Nigeria's fast-growing digital lending sector.
The FCCPC has been clear about its intentions: to clean up the industry that unethical practices, data breaches, and borrower harassment have plagued.
Starting from Monday, January 5, 2026, any loan app and digital lender that has not secured full approval under the new FCCPC's regulations would face severe sanctions of paying up to N100,000,000 or 1% of the previous year's turnover from the company, up to N50,000,000 for individuals, and board directors could face suspensions and disqualification for up to five years.
These aren't idle threats. The commission has already demonstrated its willingness to act by permanently delisting non-compliant operators.
Beyond the financial penalties, non-compliance means your payment partners will be forced to stop working with you, your app will be removed from distribution platforms, and your customers will be advised to avoid your services. Recovery from that kind of reputational damage is nearly impossible.
Who Needs to Comply
The scope of these regulations is broader than many lenders realize. The Digital, Electronic, Online, and Non-Traditional Consumer Lending (DEON) regulations 2025 apply to all digital, online, or non-traditional consumer loans, including unsecured cash loans, airtime credit, data loans, cashback schemes, and barter schemes in which a verifiable monetary value is exchanged.
This means compliance isn't just for obvious digital lending platforms. If your business model involves any of the following, you need FCCPC approval:
- Mobile money operators offering overdrafts or short-term credit facilities to customers must register with the regulator. Even if lending is a small part of your service offering, it's still covered.
- Telecommunications companies that advance airtime or data to subscribers fall under these regulations. The fact that you're primarily a telco doesn't exempt you from compliance.
- Agritech platforms that provide inputs such as seeds, fertilizer, or equipment on credit are included. Whether you're lending cash or physical goods on deferred payment terms, you're a lender under these rules.
- E-commerce platforms offering buy-now-pay-later options require approval. Any installment payment structure where customers receive goods or services before full payment qualifies as consumer lending.
- Service providers and partners who benefit from lending transactions, even indirectly, must comply. If you're earning commissions, referral fees, or any other income from facilitating loans, the regulations apply to you.
The FCCPC uses a benefit test to determine coverage. If your business gains any advantage from a lending transaction, whether in cash, goods, or services, you're operating within the scope of these regulations and need to be compliant.
Your Complete Compliance Checklist
Getting to full compliance requires completing specific documentation and meeting technical requirements. Here's what needs to be done before January 5:
Registration and application requirements
Complete and submit the mandatory DEON Consumer Lending Form 001 and the Declaration Form 002. These forms collect essential information about your business structure, operations, and compliance systems.
Accuracy matters here, as incomplete or incorrect submissions will delay your approval. Pay the non-refundable application fee of ₦100,000, and an approval fee of ₦1,000,000 (for up to two apps) is payable upon successful approval.
Additional apps require separate fees. Budget for these costs now, and remember that initial approvals are valid for specific periods and require renewal.
Provide certified copies of your company's Certificate of Incorporation, along with complete details of all directors, promoters, and key personnel, including their nationalities. The FCCPC wants to know precisely who is behind each lending operation.
Technical and operational compliance
Mandatorily submit all Service Level Agreements (SLAs) with any third-party service providers for the FCCPC's express, prior review and approval, applying to both existing and new contracts.
This includes payment processors, collection agencies, data providers, and any other partners involved in your lending operations.
Ensure to confirm that the apps to be deployed will not have access to consumer call logs, contacts, and photos/gallery. This is non-negotiable. Apps that access protected consumer data will be rejected outright, and existing lenders using such access will face immediate sanctions.
Submit your complete terms of service, privacy policy, and code of conduct. These documents must clearly explain your interest rates, fees, repayment schedules, and collection practices in plain language that borrowers can understand.
Data protection and compliance audits
Obtain and submit a Compliance Audit Report and Data Protection Impact Assessment (DPIA) Report from a duly registered Data Protection Compliance Organisation (DPCO), ensuring strict adherence to the Nigeria Data Protection Act, 2023. This isn't something you can prepare internally; it must come from an accredited DPCO.
Get your Audit Trust Mark from the Nigeria Data Protection Commission (NDPC). This demonstrates that your data-handling practices meet national standards and that you're handling customer information with appropriate security measures.
Financial documentation
Provide full details of all operational bank accounts, including bank names, account numbers, and account names. Transparency in your financial operations is essential for approval.
Submit your proposed interest rate regime, including all calculation formulas. The FCCPC wants to see how you arrive at the rates you charge, and these must be defensible and reasonable.
Include proof of tax compliance and clearance certificates. Lenders who fail to meet their tax obligations will face additional scrutiny and potential rejection.
How Zeeh Makes Compliance Sustainable
Meeting the January 5 deadline is critical, but compliance doesn't end there. Approvals require renewal, regulations evolve, and maintaining compliant operations requires ongoing attention to data accuracy, customer verification, and risk management.
This is where Zeeh's infrastructure becomes essential for Nigerian lenders. Our platform helps you maintain compliance while strengthening your lending operations.
ZeehID for customer verification
Zeeh provides instant identity verification that meets regulatory standards. Instead of manual document checks that create bottlenecks and potential compliance gaps, ZeehID automatically processes identity documents, runs biometric verification, and screens against sanctions lists.
This means that every customer in your system has been verified correctly in accordance with regulatory requirements.
Connect for financial data verification
Zeeh gives you access to verified financial information directly from customer bank accounts with their consent. This is increasingly important for compliance because it allows you to make accurate affordability assessments, verify income claims, and identify potential fraud, all of which are requirements under the new regulations.
Automated compliance tracking
Through compliance tracking, Zeeh helps you maintain the documentation and reporting required by the FCCPC. When regulations require transparency in your lending decisions and customer verification processes, having automated systems that log every step becomes essential.
Data protection by design
Zeeh's infrastructure is built to comply with Nigeria's data protection requirements. When your verification and underwriting systems are compliant from the foundation, maintaining FCCPC approval becomes significantly easier.
The reality is that compliance is an ongoing operational requirement that affects how you onboard customers, make lending decisions, handle data, and work with partners.
Technology infrastructure that embeds compliance into your daily operations, such as Zeeh, is what enables lenders to thrive under changing regulations.
What Happens After The Deadline?
The FCCPC warned that enforcement actions will commence immediately after the January 5, 2026, deadline, with non-compliant companies facing operational restrictions, while their partners and platforms could be instructed to cease collaborations with them.
This isn't going to be a gradual phase-in or a period of warnings. The commission has made clear that the deadline is absolute. Lenders operating without approval after January 5 will face immediate action, including fines, forced shutdown of operations, and potential criminal referrals for serious violations.
Your payment processors, banking partners, and technology providers will also be at risk if they continue working with non-compliant lenders. This creates a cascading effect where even if you're willing to operate without approval, your entire ecosystem will be forced to cut ties with you.
For consumers, the FCCPC has already indicated it will actively communicate which lenders are approved and which are operating illegally.
Borrowers will be advised to avoid non-compliant platforms, which will destroy your ability to acquire new customers, even if you somehow manage to keep operating.
Action Plan for Your Business
If you're not yet fully compliant, here's what needs to happen immediately:
Conduct a gap analysis today
Review your current state against the complete requirements checklist. Identify precisely what you're missing and how long each item will take to obtain.
Engage a registered DPCO
Do this immediately if you haven't already. The compliance audit and DPIA are required documents that cannot be produced internally, and these organizations have limited capacity to handle last-minute requests.
Review all third-party relationships
Review all relationships and submit the documented SLAs. Don't assume existing relationships are covered, as every partnership needs explicit FCCPC approval.
Audit your mobile apps
Check them for prohibited data access. If your app currently requests or uses contact lists, call logs, or access to the photo gallery, you need to remove these permissions before applying.
Prepare your financial documentation
This includes bank account details, interest rate calculations, and tax clearance certificates. Having these ready prevents delays during the application review process.
Submit your application
Do this as soon as you have all the required documents. Don't wait until the final week of December, hoping to submit on January 4. The FCCPC processes applications as they're received and returns incomplete submissions for correction.
Plan for partnership approvals
If you collaborate with other entities to provide lending services, obtain partnership approvals. Joint applications take longer to process because they involve multiple parties.
Final Thoughts
Avoiding penalties shouldn’t be your only reason for complying with the FCCPC regulations. It should be more about building a lending business that can scale sustainably in Nigeria's changing financial services landscape.
The lenders who embrace these regulations and build compliant operations from the foundation are positioning themselves for long-term success. They'll face less regulatory scrutiny, attract better partnerships, gain customer trust more easily, and avoid the constant risk of enforcement actions.
January 5, 2026, is coming whether you're ready or not. It’s better if you’re prepared by complying, so you can operate legally with a sustainable business model.
With Zeeh, you can strengthen your verification and compliance infrastructure. We provide identity verification and financial data solutions that help Nigerian lenders meet regulatory requirements and improve underwriting.
Book a demo to learn how our platform can support your compliance efforts.
