A NITDA survey shown at a joint dialogue with the central bank found 22 of 44 institutions had not begun moving payment data onshore. The deadline is 1 January 2027 and the CBN warns of sanctions.
Bank of Ghana names three systemically important payment players
EditorialBy TrustList Editorial
Bank of Ghana's framework, cover dated September 2026, sets designation tests for payment systems, providers and SaaS, PaaS, cloud and data-centre vendors; designations are reviewed every two years and no vendor has been named.
About Bank of Ghana names three systemically important payment players
Bank of Ghana names three systemically important payment players
5 November 2026: The Bank of Ghana has issued a framework for identifying and supervising systemically important payment systems and service providers, and designated its first three: the Ghana Interbank Settlement (GIS) System, Ghana Interbank Payment and Settlement Systems (GhIPSS) and MobileMoney Fintech Ltd. The framework also lets the bank name software, platform, cloud and data-centre vendors as critical infrastructure service providers, though none has been named yet.
Not yet independently verified. The page title and file name for Notice 41 on the bank's site say Regulatory Framework for Dedicated Electronic Money Issuers, but the PDF carries the notice on designating systemically important payment systems, which we have used. The framework states no effective date or compliance deadline, and no critical infrastructure service provider is named in it. We will update this when it can be confirmed, and remove this note.
The three entities on the first list
Notice BG/GOV/SEC/2026/41, signed by Aimee Vyda Quashie as Secretary of the Bank, is addressed to banks, specialised deposit-taking institutions, dedicated electronic money issuers, payment service providers and other critical service providers. It rests on the Payment Systems and Services Act, 2019 (Act 987).
GIS, the real-time gross settlement platform the bank itself operates for high-value and time-critical payments, is designated a Systemically Important Payment System. GhIPSS and MobileMoney Fintech Ltd are each designated a Systemically Important Payment Service Provider. The bank says it will review the designations at least once every two years, looking at systemic importance, risk profile, market developments and compliance. The framework adds that the bank will publish and update a list of designated entities.
Who falls inside the scope
Section 4 of the framework covers large-value and retail payment systems, payment service providers and payment and financial technology service providers. It also reaches entities that provide critical infrastructure support and technology services to the financial industry, and it names platform-as-a-service providers, software-as-a-service providers, data centres, cloud service providers and customer due diligence platforms.
Being in scope is not the same as being designated. The framework sets three categories: the payment system (SIPS), the payment service provider (SIPSP) and the critical infrastructure service provider (CISP). For the third category it says classification and designation are limited to payment and financial technology service providers. A cloud or SaaS vendor that serves banks is described as in scope, yet the designation language points at the payment and fintech firms. The annexure defines a CISP as a non-financial provider, such as cloud, cyber or data services, whose operations are essential to designated systems and whose failure could pose systemic risk.
How the bank decides
The tests differ by category. A payment system qualifies if it handles at least one-third of national payment transactions by value or volume, or is the only infrastructure in the country for a type of transaction. A payment service provider can qualify with a market share above half of retail payments by value or three-quarters by volume, as the framework words it, or on operational criticality and difficulty of substitution.
A third-party provider is judged on seven points:
- dependence of payment systems on its infrastructure
- the systemic risk if it fails or is compromised
- how many designated providers it serves
- whether alternatives exist in the short term
- time-sensitive or high-value services
- links with other critical sectors
- exposure of sensitive financial data to cyber risk
The bank collects data, may consult the entity, evaluates it against the criteria and then issues a formal designation notice to the operator.
What designation demands
Designated entities face enhanced oversight in line with the CPMI-IOSCO Principles for Financial Market Infrastructures. Section 9 lists the duties: governance and risk management to international standards, legal certainty of settlement, real-time or same-day settlement with finality, strong know-your-customer and due diligence checks by payment providers, clear participation rules, crisis management plans and monitoring of links to other systems. Designated entities must publish information on governance, risk policies and performance, and must seek the bank's approval for significant operational, infrastructure or pricing changes. The bank evaluates them annually or as needed, using self-assessment reports they submit.
The gaps in the text
Neither the notice nor the framework states an effective date or a compliance deadline, and the framework cover reads September 2026, two months before the notice. No critical infrastructure service provider has been designated, so vendors cannot yet tell whether any of them will be. Questions go to the bank's Payment Systems Department.
Sources
- Bank of Ghana: Notice BG/GOV/SEC/2026/41, Designation of Systemically Important Payment Systems and Payment Service Providers in Ghana (PDF), 5 November 2026, 5 November 2026
- Bank of Ghana: Framework for Systematically Important Payment Systems and Service Providers in Ghana (PDF, cover dated September 2026), posted 5 November 2026, 5 November 2026
Categories & features
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
You may be interested in
Notice 43 lets the Bank of Ghana call for statements of settlement accounts from banks, sets no grace period and names no fine, only regulatory, supervisory and enforcement action for breaches.
Chrome users are protected automatically, but other browsers and apps may not be. Google urges domain owners to watch certificate logs and restrict which certificate authorities may issue for them.
The attacker demanded about 8 billion yen and threatened to publish data and launch ransomware at noon on 27 October. GMO refuses to pay and has asked the government to use active cyber defence.
Interest-free deferred payment escapes only if no third party funds it and the shopper pays within 50 days, or 14 days for large online sellers.
Legal Notice 191 of 2026 widens Central Bank oversight beyond digital lenders. Application fees reportedly rise from KSh5,000 to KSh100,000, and annual fees from KSh20,000 to KSh500,000.
Every bank, microfinance bank and e-money issuer would have to open balance and transaction data to licensed third parties, who may not store credentials and must delete data within 30 days of a revoked consent.
The guidelines cover every kind of AI, including models supplied by third parties, and phase in over two years: core duties from October 2027, the rest from October 2028.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.