Mandatory Device Binding for Digital Financial Services

Central Bank of Nigeria Directive
Summary

'One device' policy tying mobile banking apps to a single authenticated handset; full re-authentication on device change with transactions capped at ₦20,000 in the first 24 hours on a new device — a cooling-off period targeting SIM-swap and credential-theft fraud.

Applicability

Banks, fintechs and providers of mobile/digital banking services.

Open Source Document ↗
Document Details
Date Issued
15 Apr 2026
Date Effective
01 Jul 2026
Compliance Deadline
01 Jul 2026
← Back to Vault