The KYC Trap: Why Identity Verification Is Slowing Africa’s Fintech Sector

Africa’s fintech industry has, by most measures, defied expectations. Despite a global funding retreat, Nigeria alone attracted $410 million in fintech investment in 2024, accounting for 44% of total fintech funding across the continent. Mobile money is reshaping how hundreds of millions of people transact. New payment infrastructure is being laid across markets that traditional banks long ignored.

Yet beneath that momentum, a structural problem persists, one that regulators, investors, and startup founders all acknowledge but struggle to resolve. Know Your Customer compliance, the process by which financial institutions verify who their customers are, has become one of the most consequential obstacles to fintech growth across the continent. It is not a new concern. But in 2024 and into 2025, the pressure has sharpened considerably.

What KYC Demands, and What Africa Lacks

KYC, at its core, requires financial service providers to collect, verify, and maintain documentation confirming their customers’ identities. In theory, it is a reasonable safeguard against fraud, money laundering, and terrorist financing. In practice, applying it to Africa’s demographic realities creates an immediate tension.

Almost 300 million adults across the continent remain unbanked, particularly in rural and low-income communities. A significant portion of those individuals lack formal documentation such as national identity cards, utility bills tied to a verifiable address, or tax identification numbers that standard KYC processes require. For a fintech company trying to onboard them, the gap between what the regulation demands and what a prospective customer can produce is often unbridgeable.

Complex and variable regulations, including license approval processes, can make it difficult for fintechs to ensure business continuity and compliance across markets. The problem compounds when a company operates across borders. Licensing a fintech in multiple countries can cost up to $2 million per market, while divergent KYC, AML, and data rules impede digital finance from scaling across borders.

Nigeria’s Reckoning

No market illustrates this tension more vividly than Nigeria. The country hosts the largest concentration of fintech companies on the continent, yet its regulators have spent much of the past two years tightening compliance requirements in response to rising fraud and international pressure.

In February 2023, the Financial Action Task Force added Nigeria to its grey list, flagging significant deficiencies in the country’s anti-money laundering framework. The consequences were immediate and lasting. The Central Bank of Nigeria intensified oversight, particularly targeting neobanks with what it considered lax customer verification practices.

In April 2024, the CBN temporarily banned key fintech players from onboarding new customers due to alleged foreign exchange violations. The ban was lifted a month later after the affected companies complied with KYC requirements and other regulatory conditions.

For the companies caught in that restriction, the financial and reputational cost was real. But the episode revealed something broader: when regulators decide KYC compliance is inadequate, they have the authority to halt growth entirely.

The cost burden is not abstract either. Full KYC checks in Nigeria now cost between NGN 1,500 and NGN 2,000 per customer, straining fintech operations, especially for companies trying to serve users at the bottom of the income pyramid, where thin margins make per-user compliance costs difficult to absorb.

A Continent-Wide Compliance Strain

The challenge is not confined to Nigeria. For many financial institutions across Africa, the cost of implementing effective AML/KYC measures is prohibitively high. Smaller banks and fintech startups, in particular, struggle with the expenses associated with compliance.

Regulators in Nigeria, Kenya, Ghana, Rwanda, Côte d’Ivoire, Senegal, South Africa, and the Gulf are pushing for stronger KYC, KYB, and AML controls, many aligning closer with FATF and GIABA requirements. The direction of travel is toward tighter verification, not looser, which means the compliance burden is only growing.

Thousands of fraudulent bank accounts were recently opened in South Africa using stolen credit bureau data, with hackers claiming to have siphoned R175 million in social grants, exposing major gaps in Africa’s digital identity and onboarding systems. That incident reinforced regulators’ instinct to demand more rigorous checks, even as critics argue that the identity infrastructure needed to support those checks is not yet in place.

The Identity Infrastructure Gap

Part of what makes this problem so difficult is that KYC compliance depends on underlying identity systems that many African governments are still building. Nigeria’s National Identity Number system has expanded considerably, but enrollment remains uneven. Kenya’s Huduma Namba programme faced legal challenges that delayed its rollout. Across francophone West Africa, cross-border identity recognition remains limited.

Zambia is deploying a new open-source e-KYC system, WAEMU is building a regional biometric identity platform, and Nigeria is scaling financial access through its national digital ID system. But without regional coordination, these initiatives risk becoming siloed.

Until there is an interoperable, standardised digital identity infrastructure, fintechs will continue to navigate a verification process that is simultaneously too costly for them, too burdensome for their users, and insufficiently reliable for regulators.

Kenya offers a partial counterpoint. The Central Bank of Kenya has supported risk-based KYC requirements to simplify onboarding, and over 83% of adults in Kenya now have access to formal financial services, largely through digital channels. Risk-based approaches where verification intensity is proportional to the level of financial risk a customer presents are increasingly recognised as a more workable framework for inclusion-focused markets. The question is whether other regulators will follow that model or continue defaulting to blanket documentation requirements.

What Needs to Change

Unlocking the continent’s full potential will require interoperable infrastructure, including cross-border payment systems, digital identity platforms, open banking frameworks, and shared KYC protocols. It will also depend on consistent and harmonised regulation that reduces compliance burdens and attracts long-term investment.

That is the structural case. In practical terms, it means regulators need to distinguish more carefully between fintechs that are evading compliance and those that are genuinely trying to serve populations with limited documentation. It means investing in national ID systems as economic infrastructure, not just administrative tools. And it means taking seriously the idea that KYC, as currently designed, may be excluding the very people financial inclusion programmes are supposed to reach.

The fraud threat is real. The money laundering risk is real. But a compliance regime that prevents legitimate users from opening accounts or that imposes costs that only well-capitalised incumbents can absorb, is not a neutral enforcement tool. It is a structural advantage for the established, and a structural barrier for everyone else.

For Africa’s fintech sector, resolving that tension is not a secondary concern. It sits at the centre of what the industry can become.