Brokers risk fines and disciplinary action as NGX RegCo introduces tougher cybersecurity and compliance requirements for digital trading systems….
NGX Regulation Limited (NGX RegCo) has rolled out stricter compliance rules for stockbroking firms operating online trading platforms, warning that any Trading Licence Holder (TLH) that deploys digital trading systems without regulatory approval could face sanctions.
The move signals a major tightening of oversight within Nigeria’s capital market as regulators push to strengthen investor protection, cybersecurity resilience, and market transparency amid the rapid growth of digital trading activities.
The directive was contained in a newly issued circular signed by Chinedu Akamaka, Head of the Market Regulation Department, and addressed to all Trading Licence Holders operating in the Nigerian market.
Under the revised rules, brokers seeking to launch, migrate, or upgrade web-based or mobile trading platforms must now secure written approval from NGX RegCo before deployment.
The regulator stressed that digital trading infrastructure can no longer be introduced without prior scrutiny and compliance clearance.
According to the circular, firms are expected to significantly strengthen their operational risk management and cybersecurity frameworks to safeguard investor accounts, transaction integrity, and sensitive financial data.
NGX RegCo stated that all online trading operators must fully comply with prescribed security standards, including the implementation of Two-Factor Authentication (2FA), encryption technologies, Secure Socket Layer (SSL), and HTTPS security protocols.
The regulator also directed brokers to conduct penetration testing at least twice every year using NGX-approved cybersecurity providers, with certified reports submitted within regulatory timelines.
“All Trading License Holders operating online trading platforms are required to obtain prior written approval from NGX RegCo before deployment or migration to any digital trading system,” the circular stated.
It added that failure to comply with the new directives could attract penalties starting from N250,000 alongside other disciplinary measures under existing Exchange rules.
Beyond cybersecurity, the regulator introduced stricter obligations around operational monitoring and investor protection.
Trading firms are now required to maintain continuous surveillance of trading activities and immediately report system failures, suspicious activities, anomalies, or operational breaches to the Exchange.
NGX RegCo also reinforced compliance with Know Your Customer (KYC) requirements, directing brokers to complete full customer verification procedures before activating trading accounts.
In addition, operators must retain customer records and transaction documentation for a minimum of six years in line with regulatory standards.
The regulator further emphasized the need for clearer investor communication, directing digital trading platforms to provide adequate disclosures on investment risks while complying with existing rules governing advertisements, market communication, and publications.
Industry analysts say the latest directive reflects growing concern among regulators over rising cyber threats, increasing retail investor participation, and the expanding influence of digital trading platforms within Nigeria’s financial ecosystem.
The new measures are also seen as part of NGX RegCo’s broader strategy to align Nigeria’s capital market infrastructure with international best practices while improving confidence among local and foreign investors.
The tougher compliance stance comes amid an aggressive enforcement campaign by the regulator in recent months.
NGX RegCo recently disclosed that it recovered more than N500 million in restitution for investors after resolving complaints linked to unauthorized trades, disputed transactions, and account-related infractions.
One of the most significant recoveries involved N326.85 million returned to an investor following an unauthorized share transaction reported in 2025.
In March 2026, the regulator also sanctioned five brokerage firms over allegations of market manipulation and artificial price distortion, imposing cumulative fines totaling N291.29 million.
The infractions reportedly included wash trades, self-matching transactions, misleading market activities, and artificial price formation practices.
Meanwhile, NGX RegCo’s latest X-Compliance Report released in April revealed that 34 listed companies were fined a combined N540.37 million for failing to submit financial statements within the required deadlines during the 2024/2025 compliance cycle.
According to the regulator, the increasing recoveries, sanctions, and enforcement actions demonstrate major improvements in its surveillance technology, post-trade monitoring systems, and compliance enforcement framework.
For market operators, however, the latest circular sends a clear message: Nigeria’s capital market regulator is no longer willing to tolerate weak controls, poor cybersecurity standards, or non-compliance within the fast-growing digital trading space.
