How to verify an investment app on SEC Nigeria’s FinPort before you send money
Before you fund any investment app in Nigeria, check its exact legal identity on SEC’s operator search and FinPort, then read the result properly. This guide shows you what to look for, what a real match looks like, and when to stop.
Intro
If you are about to send money to an investment app, the question is usually not abstract. You want to know one thing before you hit transfer: is this platform actually recognised by SEC Nigeria, or am I trusting branding, screenshots and social proof? That is a fair question, especially now that investment pitches reach people through WhatsApp, Instagram, Telegram, Facebook, TikTok and other digital channels, where it is easy for a polished page to look more legitimate than it is.
The short answer is that you should verify the app’s exact legal entity on SEC Nigeria’s records, not just the app name you see in an advert. In practice, that means using the SEC Find a Registered Operator page and, if it is a fintech or investment app, also checking the linked Registered FinTech Operators directory on FinPort. This guide will show you how to do that search, how to read the result properly, and what to do if you get a partial match, a sandbox-style listing, or no result at all.
These are the right steps because one common mistake is treating any online mention of SEC, or even a FinPort appearance, as final proof. SEC’s own guidance is narrower and stricter than that. The Commission says you should verify the operator’s exact legal identity, ask for CAC incorporation and SEC registration evidence, confirm who is behind the firm, and make sure receipts and bank accounts are in the company’s name rather than a person’s name. By the end of this guide, you should be able to check an app against SEC records with more confidence and know when to proceed, when to ask harder questions, and when to stop before sending money.
Key takeaways
- Start with the exact legal or corporate name, not just the app’s brand name. SEC says prospective investors should verify the operator’s exact legal identity before investing.
- Use both SEC checks together: the main Find a Registered Operator page and, for fintech/investment apps, the linked Registered FinTech Operators directory on FinPort.
- A useful positive match should show more than a name. Look for details such as CAC number, file number, address, email, regulated function, account status, date of registration and the page’s Last Synced field.
- A FinPort appearance is not always the end of the story. SEC says admission into its Regulatory Incubation program is not the same as full SEC registration as a Capital Market Operator.
- If you get no result, pause. Ask for the exact SEC-registered legal entity name and documentary proof before sending money, and do not rely on testimonials, social-media claims or screenshots alone.
Contextual framing
This matters in Nigeria because the problem is not theoretical. In a public notice dated May 14, 2026, SEC Nigeria warned about increasing promotion of unregistered online investment schemes across WhatsApp, Instagram, Telegram, Facebook, TikTok and other digital platforms. The Commission said many of these schemes show Ponzi or prohibited-investment characteristics and reminded the public that, under the Investments and Securities Act, 2025, only entities registered by the Commission are authorised to promote investment services, provide investment advisory services or solicit funds from the public in the Nigerian capital market.
That warning fits what people were already seeing on the ground. A BusinessDay investigation published May 12, 2026 said multiple fake investment operations targeted Nigerians mainly through Telegram, Facebook and WhatsApp. According to that report, the tactics included cloned company names, referral links, urgent “slot” marketing, personal-bank-account or wallet funding routes, and promises of unrealistic weekly or guaranteed returns. More than 10 victims told the paper they lost millions of naira, and the report added that by October 2025 SEC said Nigerians had lost about ₦316 billion to Ponzi schemes and illegal fund managers.
The verification problem also predates the current wave of app-based marketing. In a circular dated April 8, 2021, SEC said it had been alerted to several online investment and trading platforms claiming to give Nigerians direct access to securities listed in foreign jurisdictions, sometimes while claiming ties to SEC-registered operators. That longer history helps explain why SEC keeps directing investors back to its own databases before they transact. In other words, checking FinPort is not paranoia and it is not bureaucracy for its own sake; in the Nigerian market, it is one of the most practical first filters you have.
Main body
Why SEC keeps pointing you back to its own databases
In the 2026 public notice, SEC did not tell investors to judge an app by its marketing, referral network or popularity online. It explicitly directed investors to verify any platform, company or entity on the Registered FinTech Operators portal or the CMOs portal before transacting or investing. That matters because many questionable schemes borrow the language of real finance businesses, and some even use names that sound close to known brands. A database check will not answer every question about an investment, but it is far more reliable than trusting a screenshot, a Telegram admin or an influencer’s caption.
There is also a legal point here that is easy to miss. SEC’s notice says that under the Investments and Securities Act, 2025, only entities registered by the Commission are authorised to promote investment services, provide investment advisory services or solicit funds from the public in the Nigerian capital market. So when you run a search, you are not just checking whether a company exists somewhere online. You are checking whether the legal entity behind the app appears in the Commission’s own records in a way that matches the service being offered to you.
FinPort is useful, but it is not the whole answer
FinPort can be a very good starting point because the SEC’s Registered FinTech Operators page is meant to help users “validate the status of an operator before engaging.” For fintech-style investment apps, that is relevant. In the directory read on August 24, 2026, for example, Cowrywise Financial Technology Ltd appeared under “Digital Investment (Fund/Portfolio) Manager” and Bamboo System Technology appeared under “Digital Sub-Broker.” That gives you a practical way to see whether a familiar app brand connects to a named operator in a regulated category.
But this is where many readers can get tripped up: a FinPort listing is not automatically the same thing as full SEC registration as a Capital Market Operator. SEC’s FAQ on the Regulatory Incubation (RI) program says approval into RI is not SEC registration as a Capital Market Operator. The program is time-bound, and successful fintech entrepreneurs at the end of RI are required to apply for full SEC registration. So if you stop at “I saw them on FinPort,” you may miss the difference between a firm appearing in SEC’s innovation ecosystem and a firm already showing up as a registered operator with a defined function and status.
Unique feature spotlight: FinPort’s separate RI and ARIP tables
One genuinely useful feature of FinPort is that it does not present every operator in one undifferentiated list. The page is separated into category tables, RI participants and ARIP participants. That separation is more than a layout choice. It gives you a clue about what kind of appearance you are looking at before you assume too much.
If the name you find sits in a category table, that is one kind of signal. If it appears in RI or ARIP, that is a different kind of signal and should make you continue to the broader Find a Registered Operator database to see whether the legal entity appears there, what regulated function it holds, and what status is attached to it. The practical lesson is simple: on FinPort, where a firm appears matters, not just whether it appears.
What a positive SEC match should look like
A real match should give you usable details, not just a comforting name. On the SEC Find a Registered Operator database, the workflow described by the page is to search for a capital market operator and then review the record for CAC number, file number, address, email, function(s), fidelity bond details, sponsored individuals, account status, date of registration and “Last Synced.” Those fields help you move from vague recognition to actual verification.
The live record for Bamboo Systems Technology Limited is a good example of what that looks like. In the SEC database read on August 24, 2026, the record showed CAC 1548167, file number 2001, an address in Lekki Phase 1, Lagos, the email victoria@investbamboo.com, functions listed as “Sub-Broker Digital” and “Corporate Sub-Broker,” and Account Status: ACTIVE, with a Last Synced timestamp of about two months. If you were verifying Bamboo, those are the kinds of fields you would want to see line up with the operator you are dealing with.
The same applies to Cowrywise Financial Technology Limited. In the SEC database read on August 24, 2026, the page showed CAC 1419869, file number 1940, address 5C Reverend Ogunbiyi Street, Lagos, email compliance@cowrywise.com, function “Fund/Portfolio Manager,” and Account Status: ACTIVE, again with a Last Synced timestamp of about two months. Notice what is useful here: not just the existence of the company name, but the precise legal entity and the exact regulated function tied to it.
What a missing result should mean to you
The research gives a clean example of the opposite outcome too. A query-specific SEC results page for “PrimeAura” displayed “No results available.” The same page still reminded users that they should conduct their own due diligence. The safest reading of that kind of result is not to rationalise it away because an ad looked professional or because other users claim they were paid.
Instead, treat a missing hit as a hard pause point. Ask for the operator’s exact SEC-registered legal entity name and for supporting proof such as evidence of CAC incorporation and SEC registration. SEC’s investor-protection FAQ also says you should identify the directors or promoters, confirm their names, addresses and contact details, verify where the firm’s offices are located, check whether the investment professionals or marketers are registered, and confirm that receipts and bank accounts are in the company’s name rather than an individual’s name. If the firm cannot produce documentary evidence and proper receipts, that is exactly the kind of situation where SEC says you should exercise caution.
A verified record is a first filter, not the final judgment
There is one more tension worth being clear about. A positive SEC match can be reassuring, and it should be. But the SEC page itself cautions that investors should still conduct their own due diligence before making investment decisions. That means a clean search result is a necessary check, not a guarantee that every product, return claim or sales practice attached to the app is automatically good for you.
So think of the process in layers. First, verify that the operator exists in SEC records and that the legal entity, function and status make sense. Then compare the rest of what you were told: who is collecting the money, what name appears on receipts, where the office is, whether the marketer is registered, and whether the company can produce documentary evidence of the investment being offered. That layered approach is exactly what keeps you from being fooled by a real-looking brand attached to the wrong entity or the wrong funding route.
Numbered steps
Get the operator’s exact legal or corporate name before you search.
Do not start with the assumption that the app name in an advert is the same as the SEC-recognised entity name. SEC’s investor-protection FAQ says you should verify the operator’s exact legal identity before investing, which is why the legal name matters so much. If the platform cannot tell you the exact company name behind the app, that is already a reason to slow down.
Gather the supporting identity details the operator should be able to give you.
Before you even open SEC’s pages, ask for evidence of CAC incorporation and SEC registration. Also ask for the names, addresses and contact details of the firm’s directors or promoters, the location of its offices, and whether the investment professionals or marketers are registered. These details are not busywork; they give you something concrete to compare against the SEC record and something to challenge if the story keeps changing.
Open the SEC “Find a Registered Operator” page first.
This is the core verification page because it is built around a search box labelled “SEARCH FOR A CAPITAL MARKET OPERATOR.” The practical advantage is that the results are structured to show the fields that matter for verification, including CAC number, file number, address, email, function(s), fidelity bond details, sponsored individuals, account status, date of registration and Last Synced. In other words, this is where you move from “I have heard of this app” to “I have checked the legal entity attached to it.”
If it is a fintech or investment app, open the linked FinPort directory as well.
The SEC operator page itself links directly to Registered FinTech Operators, so you do not have to treat this as a separate universe. FinPort is useful because it is meant to help users validate the status of an operator before engaging, and it is organised in a way that is particularly relevant for app-based investment businesses. Use it alongside the broader operator search, not instead of it.
Search with the exact legal name, then read the result line by line.
When you get a hit, do not stop at the headline name. Check whether the CAC number, address, email, regulated function, account status, date of registration and Last Synced details make sense for the operator you are dealing with. A real verification habit is not just “I found something”; it is “I found the right entity, and the record tells a coherent story.”
Pay special attention to the regulated function and account status.
The function tells you what kind of regulated role the entity holds in SEC’s records. In the live examples from August 24, 2026, Bamboo Systems Technology Limited showed “Sub-Broker Digital” and “Corporate Sub-Broker,” while Cowrywise Financial Technology Limited showed “Fund/Portfolio Manager.” The point is not to memorise those exact labels for every firm, but to notice whether the role listed by SEC fits what the app says it does.
Check where the app appears on FinPort, not just whether it appears there.
FinPort is organised into category tables, RI participants and ARIP participants. That structure matters because SEC says approval into the Regulatory Incubation program is not the same as full SEC registration as a Capital Market Operator. If you find the operator in RI or another program bucket, follow through to the broader operator search and confirm whether the same legal entity appears there with a defined function and status.
If you get no result, stop before funding the app.
The sample SEC result for PrimeAura shows the kind of output you may see: “No results available.” The safest next move is to ask for the exact SEC-registered legal entity name and documentary proof, not to talk yourself into ignoring the gap because the app has nice branding or good online reviews. Until the name can be matched in SEC records, do not rely on screenshots, testimonials, social-media claims or brand marketing alone.
Confirm that money is being collected in the company’s name, not an individual’s name.
SEC’s FAQ specifically says investors should confirm that receipts and bank accounts are in the company’s name rather than an individual’s. This matters because fake or questionable operations often push payment through personal-bank-account or wallet routes. If the SEC-checked operator name and the payment destination do not match, treat that as a serious warning sign.
Finish with your own due diligence instead of treating the database result as the final answer.
SEC’s operator page still cautions investors to conduct their own due diligence before making investment decisions. So once you have a positive match, compare everything else the firm told you against the record and the documents it produced: office location, contacts, directors or promoters, marketer registration and documentary evidence of the investment itself. Verification works best as a layered process, not a one-click comfort check.
Before you rely on the steps above, make sure you have these details in hand as a checklist:
Requirements list
- The operator’s exact legal or corporate name
- Evidence of CAC incorporation
- Evidence of SEC registration
- Names of the directors or promoters
- Their addresses and contact details
- The firm’s office location
- Confirmation of whether the investment professionals or marketers are registered
- The bank account name and any receipt details, so you can confirm they are in the company’s name rather than an individual’s name
- Documentary evidence of the investment being offered
If the app or marketer cannot produce these basics, you do not have enough to do a proper verification, and that in itself is useful information.
Common mistakes
- Treating a FinPort mention as automatic proof of full SEC registration. This is probably the easiest mistake to make because FinPort feels official, and it is official. But SEC’s own FAQ says approval into the Regulatory Incubation program is not the same as registration as a Capital Market Operator. A FinPort result can be useful, yet you still need to check the broader Find a Registered Operator database for the legal entity, function and status.
- Searching the app’s brand name instead of the exact legal entity name. SEC says you should verify the operator’s exact legal identity. If you search loosely, you can miss a genuine operator, confuse two similar names, or accept a marketer’s story without tying it to the right company. That is why asking for the precise corporate name upfront is so important.
- Stopping at “ACTIVE” without reading the rest of the record. Account status matters, but it is not the only field that matters. You should also read the function(s), CAC number, address, email, date of registration and Last Synced information to make sure the result really matches the operator in front of you. A real check is about consistency across fields, not one reassuring word.
- Ignoring payment red flags because the company looks polished online. SEC tells investors to confirm that receipts and bank accounts are in the company’s name rather than an individual’s name. BusinessDay’s reporting also flagged personal-bank-account or wallet funding routes as part of how fake operations targeted Nigerians. A slick app interface does not cancel out a bad funding instruction.
- Using social proof to explain away a missing SEC result. If your search returns “No results available,” that is not the moment to lean harder on testimonials, screenshots or a Telegram group. It is the moment to pause and ask for the exact legal entity name and documentary proof. If the operator cannot bridge that gap, you should not be sending money yet.
Bottom line
If you remember only one thing from this guide, make it this: verify the exact legal entity, not the app’s marketing. In practice, that means checking the operator on SEC’s Find a Registered Operator page and, for fintech-style investment apps, also checking FinPort and noting whether the firm appears in a category table or in a program bucket such as RI.
This approach genuinely makes sense for you every time you are about to fund an investment app in Nigeria. It takes a few minutes, and it gives you a disciplined way to separate a real SEC-recorded operator from a brand story that may not hold up. If you cannot match the name, function, status and company payment details, the right move is not to hope harder. It is to stop before you send money.
FAQ
Frequently Asked Questions
Is appearing on FinPort enough to prove an app is fully SEC-registered?
What should I do if the SEC search shows “No results available”?
What if the app name and the company name are different?
Does an “ACTIVE” status mean the investment is safe?
What details should match before I send money?
Before your next transfer, run this check once from start to finish: get the exact legal entity name, open SEC’s operator search, open FinPort, and compare the record with the payment and document details you were given. If you want, save this guide as a quick checklist so you do not have to rely on memory when an app or marketer is pressuring you to “join now.”
Sources
- Retail investors lose millions to fake investment schemes(news_outlet)
- Proliferation of Unregistered Online Investment and Trading Platforms Facilitating Access to Trading in Securities Listed in Foreign Markets(regulatory)
- Find a Registered Operator (?query=PrimeAura)(regulatory)
- Find a Registered Operator (page 13 - Cowrywise Financial Technology Limited)(regulatory)
- Find a Registered Operator (page 7 - Bamboo Systems Technology Limited)(regulatory)
- Registered FinTech Operators(regulatory)
- Find a Registered Operator(regulatory)
- FAQs on the SEC Regulatory Incubation (RI) Program(regulatory)
- Public notice - unregistered online investment schemes(regulatory)
- FAQs on Differentiating Ponzi/Pyramid Schemes from Registered Fund/Portfolio Managers(regulatory)
