Fintech & payments · Nigeria

OTP and transaction SMS for fintechs and payment apps in Nigeria

For a Nigerian wallet or neobank, the SMS that matters most is the one sent when a customer moves to a new phone. The CBN's 2026 mobile banking security circular made one active device per app the rule, so device-binding codes, new-device warnings and transfer receipts now carry real weight. eSMS Verify generates, sends and checks those codes for you.

Create a free account Talk to sales

MTN, Airtel, Glo, 9mobile Delivery reports From NGN 9.1 per SMS

PayNaOTP

Your PayNa code is 482913. It expires in 5 min. Never share it, not even with PayNa staff.

90 chars · 1 segment · GSM-7

Nigeria context

What makes fintech & payments messaging different in Nigeria

A CBN circular of 12 March 2026, due for implementation by 1 July 2026, limits mobile banking apps to one active device at a time, deactivates the old device when a customer switches, and requires MFA before transaction limits change (Pavestones Legal via Mondaq).
The same circular caps inflows and outflows at NGN 20,000 for the first 24 hours after a new mobile banking activation and requires liveness checks and BVN or NIN validation for online account opening, so onboarding flows now include several SMS moments.
Customers move money by NIP transfer, USSD, card and wallets such as OPay, PalmPay, Moniepoint and MoMo PSB. A transfer that fails and reverses is the most common reason users phone support, and a clear reversal SMS heads off many of those calls.
Since July 2025 the NCC has licensed international A2P messaging aggregators, with the aim of routing international A2P traffic into Nigeria through approved channels (ITWeb). If your OTP platform sits abroad, ask how its Nigeria traffic is terminated.

What to send

Messages fintech & payments teams in Nigeria send

Device-binding codes

When a customer installs the app on a new phone, send a one-time code to the registered number before the new device is activated. eSMS Verify expires the code, caps attempts and rate-limits repeat requests to the same number.

New-device and old-device notices

After a switch, tell the customer which device was linked and that the previous one is logged out. If they did not make the change, the SMS gives them a helpline to call before money moves.

Limit-change confirmation

Send a code before a daily transfer limit is raised, then a confirmation once the new limit takes effect. The confirmation gives the customer a second chance to report a change they did not request.

Reversal and failed-transfer notices

When a NIP transfer fails and the funds return, send the amount, beneficiary and new balance. A clear reversal message cuts the "has my money gone?" calls that follow every banking-network outage.

KYC tier upgrade nudges

Remind customers on a low KYC tier to add their BVN or NIN to raise their limits, with a deep link to the in-app screen. Keep it transactional: a reminder about their own account, not a product offer.

Sample messages

Copy-ready templates for Nigeria

Character counts and segments are calculated with the same GSM-7 and Unicode rules used for billing. Replace the example brand and values with your own.

Device-binding OTP OTP

Your PayNa code is 482913. It expires in 5 min. Never share it, not even with PayNa staff.

90 chars · 1 segment · GSM-7

New device linked Transactional

PayNa: A new device was linked to your account at 14:02 today. Your old phone is now logged out. Not you? Call {helpline} now.

128 chars · 1 segment · GSM-7

Reversal notice (Pidgin) Transactional Pidgin

PayNa: Your transfer of NGN 5,000 to Musa Bello no go through. The money don return to your wallet. Bal NGN 12,300.

115 chars · 1 segment · GSM-7

Referral offer Promotional

PayNa: Invite a friend this month and you both get a bonus on their first transfer. T&Cs in app. Opt out: SMS STOP to {shortcode}

131 chars · 1 segment · GSM-7

Rules that apply

Compliance for fintech & payments SMS in Nigeria

A practical summary with sources, not legal advice. Check the regulator's current text for edge cases.

The CBN circular of 12 March 2026 requires MFA for limit changes and instant-payment opt-in or opt-out, one active device per mobile banking app, and enhanced MFA for a first internet banking login on a new device. It does not mandate SMS as the factor; your compliance team decides the factor mix.
OTP and alert sender IDs should be approved for transactional traffic on MTN, Airtel, Glo and T2. Keep promotional words out of OTP text, because networks typically filter or reroute messages that look like marketing.
Cashback, referral and loan offers are promotions in NCC DND category 1. They do not reach subscribers who blocked that category or sent STOP to 2442.
Digital lenders also answer to the Federal Competition and Consumer Protection Commission on fair collection practices. Reminders go to the borrower only, never to contacts in their phone book.
The NDPA 2023 applies to phone numbers and identity data. Collect only what a flow needs, record consent for marketing, and honour section 36 objections across every channel.

Across Nigeria

Telecom regulator: Nigerian Communications Commission (NCC)
Data protection: Nigeria Data Protection Act, 2023, Nigeria Data Protection Commission (NDPC)
Languages: English, Nigerian Pidgin, Hausa, Yoruba, Igbo
Payments: Bank transfer, USSD banking, MoMo PSB, OPay, Moniepoint, PalmPay

The NCC Do-Not-Disturb service lets subscribers text STOP to 2442 to block all promotional messages, or choose partial DND by category (banking, real estate, education, health, consumer goods, tourism, sports, religion and more).
Promotional SMS does not reach numbers on DND. OTPs, alerts and other transactional messages are sent on a separate transactional (corporate) route that operators restrict to non-promotional content.
The Nigeria Data Protection Act, 2023 gives people the right to object to direct marketing at any time, and processing for marketing must stop once they object.
Sender IDs are approved per network (MTN, Airtel, Glo, T2) and operators apply sending windows to promotional traffic.

Sender ID registration in Nigeria

Send it

From your system to MTN and Airtel in one call

1Create an account and copy a test key (esms_test_...) to try the integration without spending credit.
2Request your sender ID for Nigeria. Until it is approved you can send from the eSMS default sender.
3Call the send endpoint from your app, or upload a CSV in the dashboard with merge fields like {{name}}. Delivery reports arrive by webhook.

Need one-time codes? eSMS Verify generates, sends and checks them in two calls. Full reference in the API docs.

curl -X POST https://sms.esmsafrica.io/api/messages/send \
  -H "Authorization: Bearer $ESMS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "to": "+2348031234567",
    "text": "PayNa: Transfer of NGN {amount} to {beneficiary} was successful. Ref {ref}. Bal NGN {balance}.",
    "sender_id": "PayNa"
  }'

Live pricing

SMS pricing in Nigeria

Per-SMS rates for one segment, updated live. Pay as you go with no monthly minimum; volume rates apply automatically by monthly spend.

Basic

NGN9.1

per SMS· USD 0.0068

Monthly spend USD 1 - USD 1,000

Business

NGN7.5

per SMS· USD 0.0056

Monthly spend USD 1,001 - USD 4,999

Enterprise

NGN6.1

per SMS· USD 0.0046

Monthly spend USD 5,000+

Estimate a campaign with the SMS cost calculator or compare all countries in the Africa SMS pricing index.

FAQ

Fintech & payments SMS in Nigeria: common questions

Does the CBN 2026 circular require SMS OTP?

No. As summarised by Pavestones Legal on Mondaq, it requires multi-factor authentication for certain actions and one active device per app, but it does not name SMS. Many teams use an SMS code sent to the registered number as the possession factor during device binding, alongside a PIN or biometric. This is not legal advice; confirm your design with your compliance team.

Will OTPs reach users who have DND activated?

Yes, when they are sent on the transactional route with a sender ID approved for transactional traffic. DND filters promotions, not codes. Problems usually come from OTP text that reads like marketing, an unapproved sender ID on one network, or a number that ported to another network.

How does eSMS Verify stop OTP abuse?

Verify generates and stores the code hashed, expires it after the time you set, caps wrong attempts, allows at most five starts per number per hour and up to three resends. Combine that with your own checks, such as blocking sign-up bursts from one device or IP range, to limit SMS pumping.

Our platform is outside Nigeria. Does the NCC A2P licence affect us?

The framework announced in July 2025 aims to bring international A2P traffic into Nigeria through licensed channels. It does not change how you call an API, but it can affect how your provider terminates traffic. Ask your provider how their Nigeria traffic reaches the networks.