Bulk SMS in Nigeria: Legal and Regulatory Aspects

Bulk SMS in Nigeria: Legal and Regulatory Aspects

Smartphone with SMS message bubbles, a compliance shield with checkmark, and a balance scale representing legal and regulatory aspects of bulk SMS in Nigeria

Bulk SMS is one of the fastest ways to reach customers in Nigeria, and one of the easiest places to pick up a compliance rule nobody can point to a source for.

In this guide to bulk SMS regulations in Nigeria, every rule that carries a link is quoted from the Nigerian Communications Commission’s own frameworks, so you can read the clause yourself. Much of what governs bulk SMS in Nigeria binds licensees, aggregators and network operators rather than you, so each rule below names who it actually binds.

Who regulates bulk SMS in Nigeria

Several authorities oversee bulk SMS services in Nigeria.

Nigerian Communications Commission (NCC)

The NCC is the main regulatory body, established under the Nigerian Communications Act. It supervises the telecommunications sector, including SMS messaging, and publishes the frameworks quoted throughout this guide.

National Information Technology Development Agency (NITDA)

NITDA is responsible for data protection and privacy rules that govern the use of personal data in SMS communications, ensuring businesses manage personal information appropriately.

Wireless Telegraphy Act (WTA)

This act oversees the licensing and operation of wireless communications, including SMS services, ensuring that providers meet technical and operational standards.

Nigerian Data Protection Regulation (NDPR)

The NDPR regulates the handling of personal data involved in SMS messaging, requiring businesses to secure user consent and protect that data.

What the NCC frameworks require

Two published NCC documents carry most of the rules. The Value Added Services and Aggregator Framework governs domestic bulk SMS. The Licence Framework for International Application to Person (A2P) Messaging governs international A2P traffic entering Nigeria, and its conditions bind the licensees carrying that traffic rather than the businesses buying SMS.

Express consent

Requirement

Nigeria’s Value Added Services and Aggregator Framework states that marketing messages sent via an SMS platform can only be delivered to those on the opt-in list, while SMS information messages that are not marketing can be sent to all categories of subscribers. So a delivery confirmation, an OTP or an appointment reminder is not restricted to your opt-in list. A promotion is.

Collect that consent in a way you can evidence later: a sign-up form, a checkout checkbox, or a keyword opt-in by SMS. In a public notice on the unauthorised use of subscribers’ phone numbers, the Commission stated that no service provider or telemarketer is authorised to invade, harvest or use consumer data in any form without the express approval of the consumer.

What happens if you ignore it

A promotion sent to a number that never opted in is a message the framework tells operators and aggregators not to deliver, and the party answering to the Commission for that traffic is the licensed provider carrying it. Data is the exception that reaches you directly: the same notice warns that any telemarketer harvesting telecom and personal details by dishonest means for commercial purposes will be arrested and prosecuted.

Opt-out instructions

Requirement

The Licence Framework for International Application to Person (A2P) Messaging states that the consumer must have the right to opt in or opt out of any promotion or programme/service, whether subscription based or otherwise. The duty to honour that right falls on the service provider.

At network level the mechanism already exists. The NCC directed all mobile network operators to run a Do-Not-Disturb service on the short code 2442, which subscribers use to stop promotional messages entirely or to choose which categories they still receive.

Carry a clear opt-out line in your own messages anyway. It lets a recipient leave your list without switching off every promotional message they get.

What happens if you ignore it

A recipient with no easy way out of your list has one blunt option left. A DND registration at 2442 takes that number out of promotional traffic across every network. You do not lose one campaign, you lose the number.

Sender identification

Requirement

This is the clause that decides whether your message arrives. The Value Added Services and Aggregator Framework requires that all bulk SMS messages be accompanied by the registered MSISDN (the sender’s mobile number) or short code of the sender, and directs terminating network operators not to deliver a bulk SMS message that has no sender ID.

International traffic carries the same principle under a narrower scope. The A2P framework’s version is a condition on International A2P Messaging licensees rather than a duty on a Nigerian business buying SMS, and it says that an A2P message not accompanied by an SMS sender ID must not be accepted by the originating operator, and must not be forwarded to the subscriber by the terminating network operator.

What happens if you ignore it

Nothing arrives. The framework does not ask the operator to fine anyone; it tells the operator not to deliver the message.

No unsolicited messages

Requirement

The A2P licence framework is direct about spam. It states that service providers must not send, or have others send on their behalf, unsolicited, random or untargeted telecommunications messages, and that in no circumstance should a provider send an unsolicited message.

“Or have others send on their behalf” is how that prohibition reaches a business sending through a licensed provider. Your provider cannot lawfully carry the traffic, so the rule arrives through your contract rather than through a regulator’s letter.

What happens if you ignore it

Your provider stops the route. A provider that carries unsolicited traffic is the party exposed to the Commission, which is why acceptable use terms get enforced. Ours are here.

Do not disturb list

Requirement

The DND list is maintained one level above you. The Value Added Services and Aggregator Framework requires operators to establish a central database into which subscribers can register their phone number to prevent receiving advertisements, and requires operators and aggregators to ensure no adverts are sent to any number on that database.

Transactional and OTP traffic travels a separate route, covered below.

What happens if you ignore it

You cannot really ignore it, because the filter sits above your campaign. You only see the result: a list heavy with DND-registered numbers returns a delivered count well below its size, and that gap stays invisible until you read the delivery report.

What your provider will hold you to

Content of the SMS

Requirement

Your messages should not contain pornographic, defamatory, harmful to children, or deliberately deceptive content. They should also not use misleading tactics to coerce users into taking actions like making payments or providing sensitive information.

What happens if you ignore it

The place a bulk sender actually meets a content standard is the acceptable use terms of the provider carrying the message, and that is where the consequence lands: the message is refused, or the route is suspended, by the provider.

Compliance with NCC regulations

Requirement

All users of bulk SMS services must adhere to the regulations set by the NCC, which cover guidelines related to content, timing, and recipient consent. Adhering to rules is crucial for the effective functioning of bulk SMS marketing.

What happens if you ignore it

Look again at who each clause quoted above is addressed to. Almost every one speaks to a licensee, an aggregator or a network operator. So the sanction that reaches your campaign is commercial rather than regulatory: the message is not delivered, and the provider carrying your traffic answers to the Commission. Which provider you send through is a compliance decision, not only a procurement one.

Bulk SMS registration in Nigeria: your sender ID

What you register before you can send bulk SMS in Nigeria is your sender ID.

Only companies registered in Nigeria can register a Nigerian sender ID. The base submission for either route is a CAC certificate, a use case and a sample message. The sender ID itself must be 11 characters or fewer and non-numeric, so a brand name works and a phone number does not.

Promotional traffic uses the standard route. Each sender ID is registered separately, with a description of what it will be used for.

Transactional and OTP traffic uses the DND route, which is what lets verification messages reach a number registered for Do-Not-Disturb. Whitelisting a sender ID for that route asks for more: a CAC certificate, an operational licence, your office address, the preferred sender ID, up to 3 message-content samples, your company name and a website URL.

The two routes clear on different timescales. A promotional sender ID comes back in days. DND whitelisting runs to weeks, so start it well before the launch it supports. An OTP go-live planned on days will miss.

Those samples are where your message content genuinely gets looked at. They go in with the sender ID application, to the provider, which handles registration with the networks.

Arkesel registers Nigerian sender IDs for both routes as part of onboarding: you send each route’s documents once, and we handle the operator side. If you are still weighing options, our guide to free bulk SMS in Nigeria covers what the no-cost tiers include. Otherwise, start with bulk SMS for Nigeria.

Best practices for compliance

Choose a reliable service provider

Choose a bulk SMS service provider that complies with all relevant regulations. A provider with a proven record of reliability and legal adherence can help safeguard your business.

Comply with service provider terms

Bulk SMS service providers have their own terms of service. Be familiar with the terms of your chosen provider and comply with them.

Maintain transparency

Identify yourself as the sender and provide opt-out instructions in every message. Transparency is key to building trust and enhancing customer relationships.

Obtain user consent

Always seek consent from users before sending messages, and be clear about how their data will be used. Collect it through a website opt-in or a text message opt-in, and keep the record.

Respect recipient preferences

Honour opt-out requests promptly and keep your lists clean. Respecting recipient preferences is essential for maintaining a positive brand image and customer loyalty.

Register your sender ID early

Get your sender ID registered before you build a campaign around it, and register the route that matches the traffic you send.

Send at the right time

Send during the day or early in the evening, and avoid late night and early morning. A message that lands at 2am is read as an intrusion. Opt-outs and DND registrations rise, and the numbers you worked to collect stop being reachable.

SMS should be short

The length of your message should be at most 160 characters. It should be brief and informative. You should only send one SMS per hour.

Ensure data privacy

Follow the Nigeria Data Protection Regulation (NDPR) guidelines. Secure personal data from breaches or unauthorized access using encryption and additional security protocols.

Regular training and updates

Keep your marketing team updated on current regulations and best practices for bulk SMS marketing. Ongoing training prevents accidental violations and improves overall compliance.

Getting bulk SMS in Nigeria right

The rules that govern bulk SMS in Nigeria are published and short. Send marketing only to people who opted in, put a registered sender identity on every message, and stay off the numbers on the DND list.

Get those right and your messages get delivered. Get them wrong and they quietly do not. Register your sender ID, pick a provider whose licence and acceptable use terms you are comfortable standing behind, and talk to our team about Nigerian sender ID registration when you want the route set up with you.

Scroll to Top