Repeated CBN Sanctions, Money Laundering Concerns, Data Protection Breaches Put Fintech Giant Under Scrutiny as $304m US IPO Collapses
OPay Digital Services Limited, one of Nigeria’s prominent mobile money operators, is facing renewed scrutiny over its regulatory compliance, internal controls and corporate governance following revelations that it incurred nearly N1 billion in regulatory penalties between 2023 and 2025.
The disclosures, contained in the company’s audited financial statements and reported by InsideBusinessNG, raise serious questions about how a financial technology company entrusted with handling millions of customers’ transactions has repeatedly run into regulatory trouble.
For a company operating in Nigeria’s highly sensitive financial services industry, where customer confidence, financial transparency and strict regulatory compliance are fundamental, the reported pattern of sanctions deserves more than routine corporate explanations.
It raises a fundamental question: How effective are OPay’s internal compliance systems if regulatory violations continue to attract substantial financial penalties?
N994m in Fines: A Troubling Compliance Record
According to the disclosures under the heading ‘Compliance with Regulations’, OPay incurred regulatory fines totalling approximately N994 million over three years.
The penalties were imposed by the Central Bank of Nigeria (CBN), Nigeria Data Protection Commission (NDPC), Advertising Regulatory Council of Nigeria (ARCON) and Corporate Affairs Commission (CAC).
Among the regulatory breaches identified were violations of the Banks and Other Financial Institutions Act (BOFIA) 2020, CBN Anti-Money Laundering, Combating the Financing of Terrorism and Countering Proliferation Financing Regulations 2022, CBN Customer Due Diligence Regulations 2023 and Consumer Protection Regulations 2019.
These are not merely technical administrative requirements. They constitute critical safeguards designed to protect the financial system, prevent illicit transactions, establish customer identities and protect consumers from financial misconduct.
The reported recurrence of violations involving anti-money laundering and terrorism financing controls is particularly significant because digital payment platforms are expected to maintain effective systems for identifying suspicious transactions and preventing the misuse of their services.
Inside the N994m Regulatory Penalty Record
The reported breakdown of OPay’s regulatory penalties includes:
– N26 million paid to the CBN in 2023 over alleged money laundering and terrorism financing compliance violations.
– N113.7 million in 2024 over further money laundering and terrorism financing breaches.
– N197 million for violations of BOFIA 2020.
– N10 million for customer due diligence failures.
– N2 million for breaches of consumer protection regulations.
– N125 million imposed by the NDPC over violations of the Nigeria Data Protection Act 2023.
– N7 million imposed by ARCON over advertising regulatory breaches.
– N1 million imposed by the CAC over violations of the Companies and Allied Matters Act.
– N464 million paid to the CBN in 2025 over violations of the Framework for Mobile Money Services in Nigeria 2021.
The scale and diversity of these sanctions raise questions about whether OPay’s compliance department has been sufficiently effective in identifying, preventing and correcting regulatory failures before they attract penalties.
More importantly, paying regulatory fines should not become a substitute for building a compliance culture that prevents violations from recurring.
Money Laundering Concerns: Questions OPay Must Answer
The reported sanctions involving anti-money laundering and terrorism financing controls deserve particular attention.
Financial technology companies operate at the intersection of banking, digital identity and electronic transactions. Their platforms can process enormous volumes of financial activity, making effective customer verification, transaction monitoring and suspicious activity reporting indispensable.
The CBN’s regulatory framework exists to ensure that financial institutions do not become channels for illicit financial activities.
Consequently, repeated penalties involving AML and terrorism financing compliance raise legitimate questions about the effectiveness of OPay’s customer monitoring systems, risk management procedures and internal oversight.
While regulatory fines do not, by themselves, establish that a company knowingly facilitated criminal activities, they nevertheless demand transparency about the nature of the violations, the corrective measures taken and the safeguards introduced to prevent a recurrence.
OPay owes its customers and the Nigerian financial system clear answers.
N125m Data Protection Fine: How Safe Is Customers’ Information?
Another significant aspect of the disclosures is the N125 million penalty reportedly imposed by the Nigeria Data Protection Commission.
As a digital financial services provider, OPay collects and processes substantial amounts of customers’ personal and financial information.
Such information includes identity details, transaction records and other sensitive data required to operate digital payment services.
The Nigeria Data Protection Act 2023 establishes obligations for organisations handling personal information.
A penalty of N125 million therefore raises important questions about the company’s data protection framework, the circumstances surrounding the alleged breach and the measures adopted to protect customers’ information.
For millions of Nigerians who depend on digital financial platforms, the issue is not simply whether a company can afford to pay a fine. It is whether their personal information is adequately protected.
$304m IPO Collapse: Another Cloud Over OPay’s Corporate Ambitions
The regulatory disclosures have also drawn attention amid OPay’s decision to withdraw its proposed initial public offering on the New York Stock Exchange.
The company had planned to raise approximately $304 million through the sale of 16 million American Depositary Shares at $19 each, targeting a valuation of about $4 billion.
However, on October 30, 2026, OPay announced that it had mutually agreed with its underwriters to terminate the offering, barely a day after signing the underwriting agreement.
The decision followed a regulatory inquiry in an undisclosed foreign jurisdiction.
OPay described the jurisdiction as immaterial to its principal business and expressed confidence that the matter would be resolved.
Nevertheless, the withdrawal raises questions about the regulatory and due diligence considerations surrounding the company’s international capital market ambitions.
Although the foreign inquiry has not been established to be connected to the Nigerian regulatory penalties, the development adds another layer of scrutiny to OPay’s governance and regulatory risk profile.
For a company seeking international investor confidence and a multibillion-dollar valuation, transparency and regulatory credibility are essential.
Questions for the CBN and Financial Regulators
The revelations should prompt the CBN and other relevant regulators to provide greater clarity on the nature of the violations, the circumstances surrounding the penalties and whether OPay has fully implemented corrective measures.
Regulators should also clarify whether the reported violations were isolated incidents or part of a recurring pattern of compliance failures.
The public deserves to know whether the sanctions have produced measurable improvements in OPay’s internal controls.
More importantly, regulatory supervision should not end with the collection of fines. The ultimate objective must be to ensure that financial institutions comply with the rules and that customers are adequately protected.
OPay Must Answer to Its Customers
OPay has established a significant presence in Nigeria’s digital payment ecosystem. Its growth and popularity have made it an important player in the country’s financial technology industry.
But commercial expansion, customer numbers and transaction volumes cannot be the only measures of corporate success.
A financial institution must also be judged by its commitment to transparency, regulatory discipline, data protection and consumer confidence.
The reported N994 million in regulatory penalties raises questions that cannot be dismissed as ordinary business expenses.
Nigerians deserve to know what went wrong, who was responsible, what has changed and what guarantees exist that similar violations will not happen again.
OPay must explain why a company operating under the supervision of the CBN has accumulated such a substantial record of regulatory penalties.
Ultimately, the issue is bigger than the money paid in fines. It is about the integrity of Nigeria’s digital financial ecosystem and the protection of millions of people who entrust their money and personal information to fintech companies.
OPay may be able to pay nearly N1 billion in penalties, but it cannot afford to lose the confidence of the customers whose trust built its business.
