Bulk SMS in Nigeria: Legal and Regulatory Aspects

Bulk SMS is one of the fastest ways to reach customers in Nigeria, and one of the easiest places to pick up a compliance rule nobody can point to a source for.
In this guide to bulk SMS regulations in Nigeria, every rule that carries a link is quoted from the Nigerian Communications Commission’s own frameworks, so you can read the clause yourself. Much of what governs bulk SMS in Nigeria binds licensees, aggregators and network operators rather than you, so each rule below names who it actually binds.
Who regulates bulk SMS in Nigeria
Several authorities oversee bulk SMS services in Nigeria.
Nigerian Communications Commission (NCC)
The NCC is the main regulatory body, established under the Nigerian Communications Act. It supervises the telecommunications sector, including SMS messaging, and publishes the frameworks quoted throughout this guide.
National Information Technology Development Agency (NITDA)
NITDA is responsible for data protection and privacy rules that govern the use of personal data in SMS communications, ensuring businesses manage personal information appropriately.
Wireless Telegraphy Act (WTA)
This act oversees the licensing and operation of wireless communications, including SMS services, ensuring that providers meet technical and operational standards.
Nigerian Data Protection Regulation (NDPR)
The NDPR regulates the handling of personal data involved in SMS messaging, requiring businesses to secure user consent and protect that data.
What the NCC frameworks require
Two published NCC documents carry most of the rules. The Value Added Services and Aggregator Framework governs domestic bulk SMS. The Licence Framework for International Application to Person (A2P) Messaging governs international A2P traffic entering Nigeria, and its conditions bind the licensees carrying that traffic rather than the businesses buying SMS.
Express consent
Requirement
Nigeria’s Value Added Services and Aggregator Framework states that marketing messages sent via an SMS platform can only be delivered to those on the opt-in list, while SMS information messages that are not marketing can be sent to all categories of subscribers. So a delivery confirmation, an OTP or an appointment reminder is not restricted to your opt-in list. A promotion is.
Collect that consent in a way you can evidence later: a sign-up form, a checkout checkbox, or a keyword opt-in by SMS. In a public notice on the unauthorised use of subscribers’ phone numbers, the Commission stated that no service provider or telemarketer is authorised to invade, harvest or use consumer data in any form without the express approval of the consumer.
What happens if you ignore it
A promotion sent to a number that never opted in is a message the framework tells operators and aggregators not to deliver, and the party answering to the Commission for that traffic is the licensed provider carrying it. Data is the exception that reaches you directly: the same notice warns that any telemarketer harvesting telecom and personal details by dishonest means for commercial purposes will be arrested and prosecuted.
Opt-out instructions
Requirement
The Licence Framework for International Application to Person (A2P) Messaging states that the consumer must have the right to opt in or opt out of any promotion or programme/service, whether subscription based or otherwise. The duty to honour that right falls on the service provider.
At network level the mechanism already exists. The NCC directed all mobile network operators to run a Do-Not-Disturb service on the short code 2442, which subscribers use to stop promotional messages entirely or to choose which categories they still receive.
Carry a clear opt-out line in your own messages anyway. It lets a recipient leave your list without switching off every promotional message they get.
What happens if you ignore it
A recipient with no easy way out of your list has one blunt option left. A DND registration at 2442 takes that number out of promotional traffic across every network. You do not lose one campaign, you lose the number.
Sender identification
Requirement
This is the clause that decides whether your message arrives. The Value Added Services and Aggregator Framework requires that all bulk SMS messages be accompanied by the registered MSISDN (the sender’s mobile number) or short code of the sender, and directs terminating network operators not to deliver a bulk SMS message that has no sender ID.
International traffic carries the same principle under a narrower scope. The A2P framework’s version is a condition on International A2P Messaging licensees rather than a duty on a Nigerian business buying SMS, and it says that an A2P message not accompanied by an SMS sender ID must not be accepted by the originating operator, and must not be forwarded to the subscriber by the terminating network operator.
What happens if you ignore it
Nothing arrives. The framework does not ask the operator to fine anyone; it tells the operator not to deliver the message.
No unsolicited messages
Requirement
The A2P licence framework is direct about spam. It states that service providers must not send, or have others send on their behalf, unsolicited, random or untargeted telecommunications messages, and that in no circumstance should a provider send an unsolicited message.
“Or have others send on their behalf” is how that prohibition reaches a business sending through a licensed provider. Your provider cannot lawfully carry the traffic, so the rule arrives through your contract rather than through a regulator’s letter.
What happens if you ignore it
Your provider stops the route. A provider that carries unsolicited traffic is the party exposed to the Commission, which is why acceptable use terms get enforced. Ours are here.
Do not disturb list
Requirement
The DND list is maintained one level above you. The Value Added Services and Aggregator Framework requires operators to establish a central database into which subscribers can register their phone number to prevent receiving advertisements, and requires operators and aggregators to ensure no adverts are sent to any number on that database.
Transactional and OTP traffic travels a separate route, covered below.
What happens if you ignore it
You cannot really ignore it, because the filter sits above your campaign. You only see the result: a list heavy with DND-registered numbers returns a delivered count well below its size, and that gap stays invisible until you read the delivery report.
What your provider will hold you to
Content of the SMS
Requirement
Your messages should not contain pornographic, defamatory, harmful to children, or deliberately deceptive content. They should also not use misleading tactics to coerce users into taking actions like making payments or providing sensitive information.
What happens if you ignore it
The place a bulk sender actually meets a content standard is the acceptable use terms of the provider carrying the message, and that is where the consequence lands: the message is refused, or the route is suspended, by the provider.
Compliance with NCC regulations
Requirement
All users of bulk SMS services must adhere to the regulations set by the NCC, which cover guidelines related to content, timing, and recipient consent. Adhering to rules is crucial for the effective functioning of bulk SMS marketing.
What happens if you ignore it
Look again at who each clause quoted above is addressed to. Almost every one speaks to a licensee, an aggregator or a network operator. So the sanction that reaches your campaign is commercial rather than regulatory: the message is not delivered, and the provider carrying your traffic answers to the Commission. Which provider you send through is a compliance decision, not only a procurement one.
Bulk SMS registration in Nigeria: your sender ID
What you register before you can send bulk SMS in Nigeria is your sender ID.
Only companies registered in Nigeria can register a Nigerian sender ID. The base submission for either route is a CAC certificate, a use case and a sample message. The sender ID itself must be 11 characters or fewer and non-numeric, so a brand name works and a phone number does not.
Promotional traffic uses the standard route. Each sender ID is registered separately, with a description of what it will be used for.
Transactional and OTP traffic uses the DND route, which is what lets verification messages reach a number registered for Do-Not-Disturb. Whitelisting a sender ID for that route asks for more: a CAC certificate, an operational licence, your office address, the preferred sender ID, up to 3 message-content samples, your company name and a website URL.
The two routes clear on different timescales. A promotional sender ID comes back in days. DND whitelisting runs to weeks, so start it well before the launch it supports. An OTP go-live planned on days will miss.
Those samples are where your message content genuinely gets looked at. They go in with the sender ID application, to the provider, which handles registration with the networks.
Arkesel registers Nigerian sender IDs for both routes as part of onboarding: you send each route’s documents once, and we handle the operator side. If you are still weighing options, our guide to free bulk SMS in Nigeria covers what the no-cost tiers include. Otherwise, start with bulk SMS for Nigeria.
Best practices for compliance
Choose a reliable service provider
Choose a bulk SMS service provider that complies with all relevant regulations. A provider with a proven record of reliability and legal adherence can help safeguard your business.
Comply with service provider terms
Bulk SMS service providers have their own terms of service. Be familiar with the terms of your chosen provider and comply with them.
Maintain transparency
Identify yourself as the sender and provide opt-out instructions in every message. Transparency is key to building trust and enhancing customer relationships.
Obtain user consent
Always seek consent from users before sending messages, and be clear about how their data will be used. Collect it through a website opt-in or a text message opt-in, and keep the record.
Respect recipient preferences
Honour opt-out requests promptly and keep your lists clean. Respecting recipient preferences is essential for maintaining a positive brand image and customer loyalty.
Register your sender ID early
Get your sender ID registered before you build a campaign around it, and register the route that matches the traffic you send.
Send at the right time
Send during the day or early in the evening, and avoid late night and early morning. A message that lands at 2am is read as an intrusion. Opt-outs and DND registrations rise, and the numbers you worked to collect stop being reachable.
SMS should be short
The length of your message should be at most 160 characters. It should be brief and informative. You should only send one SMS per hour.
Ensure data privacy
Follow the Nigeria Data Protection Regulation (NDPR) guidelines. Secure personal data from breaches or unauthorized access using encryption and additional security protocols.
Regular training and updates
Keep your marketing team updated on current regulations and best practices for bulk SMS marketing. Ongoing training prevents accidental violations and improves overall compliance.
Getting bulk SMS in Nigeria right
The rules that govern bulk SMS in Nigeria are published and short. Send marketing only to people who opted in, put a registered sender identity on every message, and stay off the numbers on the DND list.
Get those right and your messages get delivered. Get them wrong and they quietly do not. Register your sender ID, pick a provider whose licence and acceptable use terms you are comfortable standing behind, and talk to our team about Nigerian sender ID registration when you want the route set up with you.





