Starting a lending business in Nigeria without the right legal foundation is one of the most expensive mistakes a founder can make. At Lex-Praxis, we see the same five mistakes over and over again, and almost all of them happen before the first loan is ever disbursed. In this article, we’ll cover 5 legal mistakes lending startups make and, more importantly, what to do instead.
The Nigerian lending sector has grown dramatically. Digital lending alone is now worth over $1 billion, with hundreds of new lenders entering the market every year. But rapid growth has also brought rapid regulatory changes, and many founders are building on legal foundations that are either incomplete, outdated, or simply wrong.
The good news is that every mistake covered in this article is avoidable. All it takes is the right legal advice at the right time. The right time, in almost every case, is almost every case, is before you launch.
5 LEGAL MISTAKES NIGERIAN LENDING STARTUPS MAKE
MISTAKE 1: OPERATING WITHOUT THE RIGHT LICENSE OR GETTING THE WRONG ONE
This is the most dangerous mistake on this list and the most common. Many founders assume that registering their company with the Corporate Affairs Commission is sufficient to start lending money. It is not.
In Nigeria, if you lend money at interest as a business, you need a specific money lenders license issued by the state government in the state where you operate. A CAC registration simply gives you a legal entity. It does not authorize you to lend.
To obtain a money lenders license in Nigeria, your company must have a minimum share capital of N20,000,000 (twenty million) before you can apply. If any of your shareholders are foreign nationals or foreign entities, that minimum jumps to N100,000,000 (one hundred million naira)
For digital lenders, those operating lending apps or online platforms, there is an additional mandatory layer: registration with the Federal Competition and Consumer Protection Commission (FCCPC) under the Consumer Lending Regulations that came into force in July 2025.
Now here is where founders go wrong;
a. Skipping the license entirely, intending to get it “later”
b. Assuming a general business registration covers money lending
c. Registering with the FCCPC but forgetting the state money lenders license
d. Obtaining the state licensing but failing to register with the FCCPC for a digital product
Under Nigerian law. Lending money without a proper license is a criminal offence under Nigerian law. Beyond the criminal exposure, your loans become legally unenforceable. If a borrower defaults on an unlicensed loan, your ability to recover through the courts is severely limited.
Before you lend a single Naira, get proper legal advice to map exactly which licenses apply to your specific lending model. A traditional lender operating in one state needs different things from a digital lender operating nationally. Do not guess. Get this right from day one.
MISTAKE 2: THE WRONG CORPORATE STRUCTURE FROM DAY ONE
Most founders register a private limited liability company and move on. That is a starting point, not a strategy.
“Corporate Structure” goes beyond whether or not your money lending business is registered as a limited liability company. It’s about outlining the long term goals of your money lending platform and going back to the foundation to create the pillars that will enable your business to achieve that goal either now or in the near future without having to restructure all over again. This is done before a company is even formed.
For instance, are you planning to bring in investors into the business? If yes, how will they come in? Are you looking at individual, corporate investors, or both? Are you open to foreign investors or strictly local? Do you intend to operate in one state or across multiple states? Your answers to these questions will determine what documentation, licensing, etc. you need to consider alongside forming a company, as well as whether it should be done now or in the near future.
Get the above listed points (and many more) ironed out before you incorporate or even get a license. It is far cheaper and faster to structure correctly before incorporation than to restructure after the fact.
It is far cheaper and faster to structure correctly before incorporation than to restructure after the fact.
MISTAKE 3: WEAK LOAN AGREEMENTS (THE MISTAKE THAT KILLS YOUR RECOVERY)
If there is one mistake on this list that costs Nigerian lending startups the most money in real practical terms, it is this one.
We have seen lending startups use loan agreement templates downloaded from the internet, agreements copied from another lender’s terms, etc. When borrowers default and founders come to us asking how to recover, the honest answer with a badly drafted agreement is: with great difficulty.
There are key elements a legally compliant loan agreement must cover, such as enforceability basics, legally compliant collection methods, data consent, security documentation, etc.
Your loan agreement is your primary legal tool for recovering money when things go wrong. It is not a formality, and it should not be treated as one. A properly drafted Nigerian lending agreement is a specialized document that must be current with the FCCPC 2025 Regulations and the Nigeria Data Protection Act 2023. Have it drafted by a lawyer who knows both.
MISTAKE 4: IGNORING DATA PROTECTION UNTIL REGULATORS COME KNOCKING
Lending businesses process some of the most sensitive personal data that exists: financial history, bank account details, BVN, salary information, employment records, phone usage patterns, location history, etc. All of this is collected and processed by lending startups as a matter of routine. Each category has specific legal handling requirements under the Nigeria Data Protection Act (NDPA) 2023, enforced by the Nigeria Data Protection Commission (NDPC).
Most founders treat the privacy policy as a website formality or a template copied from another company and forgotten. In a lending business, that approach creates serious regulatory exposure.
The NDPC can investigate any organization it has reason to believe is mishandling personal data. Penalties run up to 2% of annual gross revenue or N10,000,000 (ten million naira), whichever is higher. Beyond fines, a data breach that exposes borrowers’ financial records is a reputational event that the Nigerian lending sector, which has already been battered by trust issues from years of predatory apps, simply cannot absorb.
The FCCPC 2025 Consumer Lending Regulations add specific obligations to general NDPA compliance:
- Digital lenders must hand over borrower data to the FCCPC within 48 hours of a valid request
- The regulations restrict which categories of data can be used for credit scoring
- Borrowers must be explicitly informed of data handling practices at the point of loan application
This creates a tension between the FCCPC’s data requirements and some NDPA data minimization principles, a legal complexity that lenders must navigate carefully and proactively.
So, what does compliance actually look like for lending startups?
- A privacy policy specific to your lending model. Not a generic template. It must state clearly what data you collect, why you collect it, how long you retain it, and who you share it with, including credit bureaus, the FCCPC, and any third-party data processors.
- A lawful basis for every category of data you process. Consent is not always the correct basis. For some processing activities, legitimate interest or contractual necessity is more appropriate. Getting this wrong means your data processing is unlawful even if you have a consent form.
- A Data Protection Impact Assessment (DPIA) for high-risk processing. Credit scoring using alternative data (phone contacts, location history, social media behaviors, etc. is high-risk processing under the DPIA. A DPIA is required before you go live, not after.
- A registered Data Protection Officer (DPO) arrangement. For most lending startups, this is an outsourced DPO arrangement with a firm registered with the NDPC, not necessarily a full-time hire, but a documented, functional, and auditable arrangement.
The solution?
Build data protection compliance into your product architecture before you launch. It is far more expensive to retrofit after an NDPC investigation begins than to build correctly from day one.
MISTAKE 5: NO LEGAL STRATEGY FOR RAISING MONEY
This is the mistake that surprises founders the most and one of the most expensive to fix in the middle of a deal.
Most lending startups will need to raise capital either equity from investors, debt to fund the loan book, or a combination of both. Founders often approach this the same way that they would fundraise for a tech product or consumer goods company. But a lending business has unique regulatory considerations that change everything about how you structure your fundraising.
From the type of investment structure to investor documentation, to whether or not your investors are local or foreign, these all have direct and indirect implications for the appropriate strategy that will be applicable to your lending startup.
The solution?
Involve a lawyer in your fundraising strategy before you approach investors, not after the term sheet arrives. The legal work done before an investor enters the picture is what makes the deal close cleanly and quickly when they do.
CONCLUSION
Here is what these five mistakes have in common: none of them are made because founders are careless. They are made because the legal landscape for lending businesses in Nigeria is genuinely complex, and it changed significantly in 2025 with the FCCPC Consumer Lending Regulations and the Nigeria Tax Act. What was compliant in 2023 may not be compliant today.
If you are building a lending business in Nigeria, traditional or digital, and you want to make sure your legal foundation is right from the start, we are here to help.
HOW LEX-PRAXIS CAN HELP
At Lex-Praxis, we work with lending startups and fintech founders to get the legal structure right before they launch and to keep it right as the business grows and regulations evolve. Our services for lending businesses include:
- Regulatory mapping: We identify which licenses, registrations, and regulatory obligations apply to your specific lending model
- Corporate structuring: Incorporating with the right share capital, object clause, and shareholding structure from day one
- Loan Agreement drafting: FCCPC 2025 and NDPA-compliant loan documentation tailored to your product
- Data protection compliance: These include privacy policies, DPIAs, lawful basis assessments, and DPO arrangements
- VC and equity advisory: This involves structuring investor funding to avoid regulatory traps and close deals efficiently
- Ongoing legal retainer: Entails keeping your compliance current as Nigeria’s lending regulations continue to evolve.
For enquiries, you may contact us through any of the live chat icons on the right or left side of this page, or email us using this link, and we’ll attend to you.
