The Letter You Weren't Prepared For: What Every Nigerian Founder Should Do in the First 72 Hours

Sometime in 2022, a Nigerian fintech founder slid a regulator's letter across a desk in Yaba and asked the question that has opened almost every advisory conversation I have had since:

"What does this actually mean, and what am I supposed to do?"

He had raised seed capital. His product worked. Users were growing. The letter was not catastrophic — it was a routine notice of inquiry. With the right response, it could have been resolved in weeks. With the wrong response, it could have ended the business.

What troubled me was not the letter. It was that a capable founder — someone investors had backed — was entirely unequipped to interpret it, respond to it, or understand the institutional logic behind it.

If that sounds familiar, this article is for you.

Silence is not approval

The most dangerous assumption a founder can make is that silence means approval.

Regulators do not typically approve your business model in advance. They observe, inquire, and act when activity falls outside the framework they are mandated to enforce. In Nigeria's digital asset and fintech landscape — shaped by the Investments and Securities Act 2025, SEC Digital Asset Rules, CBN payment and VASP guidance, and NFIU AML frameworks — function matters more than labels.

A "utility token" that carries income or appreciation rights may still be a security. A wallet with naira on-ramps may trigger both SEC and CBN engagement. A platform that holds client assets may need registrations beyond a single licence category.

The letter is often the first moment founders discover that gap.

What the letter usually is (and isn't)

Not every regulator letter is an enforcement action. Common types include:

It is rarely a death sentence on day one. In many cases — especially for digital asset businesses — the regulator is asking you to come in from the cold: register, demonstrate governance, show AML controls, or clarify your product classification.

The founder in Chapter 1 of The Founder's Guide spent weeks on the wrong strategy: PR management, aggressive legal positioning, and relabelling tokens to avoid securities classification. Relabelling does not change function. It often signals evasion rather than compliance — and makes the situation worse.

Your 72-hour action plan

If a letter arrives today, treat the first 72 hours as stabilisation, not advocacy.

Hour 0–24: Read, classify, don't panic-reply

1. Read the letter three times — once for tone, once for asks, once for deadlines.
2. Identify the issuing regulator and department (SEC Nigeria, CBN, NFIU, etc.).
3. Note the response deadline — calendar it immediately.
4. Do not post about it publicly and do not make admissions in a hasty reply.
5. Brief your co-founders and board on facts only — no speculation.

Hour 24–48: Assemble the right room

You need counsel, but not any counsel. Engage someone with Nigerian fintech or digital asset regulatory experience, not only corporate or real estate practice.

In parallel:

• Pull your CAC documents, cap table, and product description.
• Run an honest product classification check — what does the product do, not what you call it?
• List every customer-facing claim about returns, custody, or payments.

Hour 48–72: Draft a cooperative acknowledgment

Your first response should typically:

• Acknowledge receipt professionally
• Express intention to engage constructively
• Request clarification on any ambiguous asks
• Propose a realistic timeline if the deadline is tight
• Avoid asserting legal positions or admitting wrongdoing without advice

The Founder's Guide is clear: the founders who survive regulatory contact are those who treat it as a process to navigate, not a fight to win on social media.

The shift that changes outcomes

The conversation that changed everything for the founder in Chapter 1 lasted about ninety minutes and covered three things:

1. Plain-language translation of what the regulator actually asked for
2. A viable path — often ARIP, licensing, or structured remediation
3. A compliance posture investors and regulators both recognise as serious

That is the difference between a letter that ends a company and a letter that starts a regulator-ready chapter.

How Klarify helps in the first 72 hours

Klarify is built for the founder who just received the letter:

• Document Analyser — upload or paste the letter; get plain-language summary, urgency level, deadline countdown, and a 72-hour action plan
• Product Classifier — understand which licences and regulators apply to what you actually built
• FounderCounsel — ask follow-up questions with citations to Nigerian primary sources
• Compliance Roadmap — turn gaps into locked, phased tasks you can execute

This is regulatory information and operational guidance — not legal advice. Review every draft response with qualified Nigerian fintech counsel before submission.

What to do next

If you have a letter now: don't wait for perfect advice to acknowledge receipt. Stabilise, classify, and engage the right expertise.

If you don't have a letter yet: build the posture that makes one manageable — incorporation, classification, AML foundations, and documented regulator engagement.

---

This article adapts themes from Chapter 1 of The Founder's Guide to Building in Regulated Markets (Chuta, 2026). Klarify provides regulatory information, not legal advice. For advice specific to your situation, consult a qualified practitioner.