The $65 Billion African Fintech Wave Is Here. This Is the Licence That Gets You In.

The first wave was about getting people on the grid. The second wave is about who gets to build the grid. And the builders who win it will have one thing in common — they got compliant before they got big.

Boston Consulting Group does not release landmark reports for small occasions.

When BCG published Beyond Payments: Unlocking Africa's Second FinTech Wave at the Inclusive FinTech Forum in Kigali earlier this year, the message was unambiguous: the first chapter of African fintech is over. The second one — bigger, more complex, more regulated, and far more valuable — has already begun.

The numbers are striking. African fintech revenues are projected to expand 13-fold to approximately $65 billion by 2030. The continent has already built scale — Sub-Saharan Africa accounts for 74% of global mobile money transaction volume. But the BCG report is explicit about what comes next: the opportunity is no longer about building more payment rails. It is about converting that scale into institutional-grade financial infrastructure. Credit. B2B payments. Data-driven underwriting. Regulated investment platforms. Cross-border financial services that actually work.

For founders building in this space, this report is both a market signal and a compliance wake-up call. Because the second wave does not look like the first one. The first wave moved fast and asked permission later. The second wave belongs to the platforms that are already licensed, already structured, and already positioned to handle the institutional capital, the banking partnerships, and the regulatory scrutiny that comes with operating at scale.

What Exactly Changed?

The first wave of African fintech was built on a single, powerful insight: most Africans had a phone before they had a bank account. Mobile money, USSD payments, and digital wallets filled the gap. It was a consumer story — fast adoption, low friction, high volume.

It worked. Better than almost anyone predicted. Over 40% of adults in Sub-Saharan Africa now use mobile money. That is a remarkable achievement.

But mobile money transactions are not the same as financial depth. You can have a continent moving trillions in payment volume and still have more than half of all lending happening through informal channels — cash loans, rotating savings clubs, personal networks. According to the BCG report, that is exactly where Africa is today.

The gap that remains is not in transactions. It is in credit, institutional investment, cross-border financial infrastructure, and regulated financial services for businesses rather than just consumers.

This is what the second wave is built on. And it requires a fundamentally different regulatory posture to participate in it.

Why the Second Wave Is a Compliance Story

The first wave's regulatory environment was, to put it charitably, permissive. Regulators in most African markets were still figuring out what digital financial services actually were. A lot of fintechs operated in grey areas — not illegally, but without the kind of formal licensing structure that would survive serious scrutiny. They moved fast, they built users, and they dealt with compliance when they had to.

That window has closed.

The BCG report makes clear that the markets attracting serious, long-term capital in the second wave are the ones offering regulatory clarity and interoperable infrastructure. Rwanda is cited explicitly as an example — not because it is the largest market, but because it has built the institutional coordination that makes it a predictable, investable environment. The Licence Passporting MOU between Rwanda and Kenya is a live example of what regulatory maturity looks like in practice: two regulators creating a framework that allows licensed entities to operate across both markets without duplicating the entire application process.

This is the direction the continent is moving. Regulators are becoming active partners and gatekeepers simultaneously. The platforms that get licensed now — properly, cleanly, in the right jurisdictions — are the ones that will be positioned to take advantage of every passporting agreement, every banking partnership, and every institutional investment opportunity that comes in the next five years.

The ones operating without the right structure will be excluded from all of it.

The Second Wave in Practice — Five Sectors and the Licence Each One Requires

1. Digital Credit and B2B Lending

More than 50% of Africa's lending still happens informally. That is not a small gap — it is the single largest financial services opportunity on the continent. Digital credit platforms, BNPL providers, and B2B lending fintechs are all competing to formalise this market.

But lending to consumers and businesses in a regulated environment requires more than a payments licence. In Nigeria, a digital credit provider must hold a CBN-approved licence. In Kenya, the CBK issues a Digital Credit Provider licence — introduced in 2022 and now actively enforced. In South Africa, lending platforms need FSCA registration and compliance with the National Credit Act.

Getting this wrong is not a small compliance issue. It is the kind of thing that triggers enforcement actions, freezes operations, and destroys institutional trust at exactly the moment you need it most.

The licence you need: Digital Credit Provider licence in Kenya ($8,000–$16,000), CBN microfinance or lending licence in Nigeria, or NCR registration in South Africa. In the US, state lending licences apply if you are serving diaspora or cross-border borrowers.

2. B2B Payments and Cross-Border Infrastructure

This is arguably the most commercially exciting space in African fintech right now. The fragmentation of African payment systems — different currencies, different rails, different clearing systems in every country — creates enormous friction and enormous opportunity simultaneously.

Reducing cross-border payment costs by 50% could add over $3 billion to remote work exports alone, according to Harvard Business School research published this month. The opportunity is not theoretical.

But operating a B2B payments platform, a payment aggregator, or a cross-border remittance service requires a payment institution licence in every jurisdiction where you are processing transactions. Not one licence — multiple. And the complexity of maintaining compliance across multiple African jurisdictions is exactly why so many fintechs in this space either limit their geographic scope or operate with incomplete regulatory coverage.

The passporting developments in East Africa are the beginning of a solution. Founders who get their first licence in the right jurisdiction today will be first in line when passporting agreements expand.

The licence you need: Payment Institution licence in your primary market (CBN payment licence in Nigeria, CBK PSP licence in Kenya, SARB in South Africa). An EMI licence in Lithuania or Malta for European corridor access. MSB registration with FinCEN for US-dollar corridors.

3. Regulated Investment Platforms

PiggyVest crossed 6 million users in 2025. The Nigerian retail investment market is growing faster than almost anyone projected five years ago. And right behind the savings platforms is the next generation of investment products — equity, fixed income, dollar-denominated assets, real estate — targeting the same digitally native users who are already comfortable putting money into an app.

This is the fastest-growing licensing category Gratebridge works with. And it is the one where the compliance gaps are most dangerous, because investment platforms that pool user funds without the right structure expose their users — and themselves — to serious legal and financial risk.

Nigeria's ISA 2025 has updated the framework. The SEC is actively scrutinising unlicensed platforms. The enforcement actions are happening. The founders who get their Fund Manager licence now — or structure through a US State RIA for global reach — will be operating legally in a market where enforcement is only going to increase.

The licence you need: Nigeria SEC Fund Manager licence for Nigerian retail operations. US State RIA for global client reach and diaspora investors. Both can run simultaneously and are complementary.

4. Stablecoins and Crypto Infrastructure

This is the second wave category that most founders underestimate from a compliance perspective. Stablecoins emerged in 2025 as the most consequential infrastructure trend for African cross-border finance — the logic is straightforward: most African currencies cannot be exchanged directly without routing through USD, GBP, or EUR, which adds cost, time, and friction to every transaction. A stablecoin rail solves this.

But offering stablecoin services — whether as an exchange, a wallet, a payment processor, or a custody provider — requires a VASP registration or a crypto asset licence in every jurisdiction where you operate. The EU's MiCA regulation, which is now fully live, means any company offering crypto asset services to European users without a CASP licence is operating illegally.

The window to get ahead of enforcement is narrowing fast.

The licence you need: VASP registration in Seychelles or Cayman Islands for offshore structuring ($6,000–$20,000). VARA licence in Dubai for Middle East operations. CASP/MiCA authorisation for EU market access. Lithuania or Malta for EU passporting.

5. Embedded Finance and BaaS

Banking-as-a-service is the infrastructure layer that powers the second wave. When a logistics company offers its drivers a digital wallet, or an e-commerce platform gives its sellers access to credit, or an HR platform provides payroll-linked savings — that is embedded finance. And it is growing faster in Africa than almost anywhere else, because the traditional banking infrastructure is thin enough that non-bank distribution makes genuine commercial sense.

But BaaS platforms and embedded finance providers are not just technology companies. They are regulated financial intermediaries. The entity providing the financial service — even if it appears as a feature inside a non-financial app — needs the appropriate licence. Programme managers, e-money issuers, and payment facilitators all have specific regulatory requirements.

The licence you need: EMI or PI licence in Lithuania or Malta for EU BaaS operations. CBN Payment Solution Service Provider for Nigerian BaaS. ADGM Financial Services Permission for Middle East embedded finance. UK FCA authorisation for UK market access.

The Regulatory Maturity Premium

Here is what the BCG report makes clear that most founders have not fully absorbed yet: in the second wave, regulatory standing is not just a compliance requirement. It is a commercial asset.

The markets attracting long-term institutional capital are the ones with regulatory clarity. The platforms securing banking partnerships are the ones that can show clean regulatory standing. The fintechs that will be acquired, invested in, or scaled by the wave of global capital now paying serious attention to Africa are the ones that are already licensed.

Flutterwave's banking licence was not a compliance milestone. It was a commercial unlock — it opened banking relationships, custody arrangements, and market access that were simply unavailable before. The licence did not follow the business success. It enabled it.

The second wave belongs to the platforms that understand this. Compliance is not the tax you pay on growth. It is the infrastructure that makes growth possible.

The One Thing That Has Not Changed

With all of this — the 13-fold revenue projection, the BCG report, the passporting agreements, the regulatory maturity premium — one truth has stayed constant from the first wave to the second.

You start from somewhere.

Not from everywhere. Not from the end state. From one incorporation, in one jurisdiction, that gives you the legal standing to take the first step. The second licence follows. Then the third. The compliance infrastructure grows with the business.

The second wave is not waiting for your product to be perfect or your team to be complete. It is moving now, in 2026, with or without you. The question is whether you have the regulatory foundation to be part of it.

How Gratebridge Works With You on This

Whether you are entering digital credit in Kenya, building a cross-border payments platform, launching an investment product for diaspora investors, or structuring a BaaS infrastructure play — we have done this before.

We map your product to the right licence category. We identify the jurisdiction that fits your current stage, budget, and market. We handle the application, the compliance documentation, the regulator engagement, and the ongoing obligations — so your team stays focused on the product while we handle the paperwork that determines whether you get to operate.

The second wave is a compliance story. We are the compliance partner.

Gratebridge Compliance — Compliance is how you go further.

Sources: Boston Consulting Group, Beyond Payments: Unlocking Africa's Second FinTech Wave (March 2026); Harvard Business School, The Role of African Fintechs in Facilitating Telemigration (April 2026). This article is for informational purposes and does not constitute legal or financial advice.