How Regulators Let Crypto and Fintech Firms Test Real Products, Safely
What Is a Regulatory Sandbox?
A regulatory sandbox is a framework that allows a firm to test a new financial product or service with real customers, under a limited scope and close regulatory supervision, without first obtaining the full licence that would ordinarily be required. The concept originated with the UK’s Financial Conduct Authority in 2016 and has since been adopted, in various forms, by dozens of regulators worldwide specifically to address a structural problem: innovative products, including most crypto and blockchain-based services, often cannot demonstrate real-world viability without live testing, but full authorisation processes are frequently built around business models that already exist and can be lengthy, expensive, and simply not designed for something genuinely new.
How a Sandbox Actually Works
The process typically runs in three stages. A firm applies to the regulator with a specific product or service it wants to test, along with its proposed customer safeguards and testing parameters. If accepted, the regulator grants a conditional, limited-scope authorisation, permitting the firm to operate with real customers but under close supervision, often with caps on customer numbers, transaction volumes, or the total value at risk. At the end of the testing period, the firm either graduates to full authorisation, having demonstrated the product works within acceptable risk parameters, or winds the test down if it does not, in either case with the direct regulatory relationship built during the sandbox informing the eventual outcome.
Figure 1. The sandbox tests a specific product with real users, under conditions a regulator sets and watches.
Sandboxes a Practitioner Actually Encounters
The UK FCA’s sandbox remains the most widely referenced model globally, having run since 2016 and processed cohorts of fintech and crypto firms through structured testing windows. Singapore’s Monetary Authority of Singapore operates a tiered sandbox structure that scales supervisory intensity to the risk level of the product being tested. Within the markets Blockchain People covers most closely, Kenya’s Capital Markets Authority has run sandbox cohorts covering fintech and digital asset pilots, and Nigeria’s Securities and Exchange Commission has built a regulatory incubation framework specifically for digital asset businesses, both reflecting a broader pattern of African regulators building sandbox capacity as a deliberate tool for bringing crypto and blockchain activity into a supervised, rather than unregulated, market.
Figure 2. Africa’s frameworks increasingly mirror this model as national regulators build capacity.
What a Sandbox Does and Doesn’t Actually Provide
A sandbox provides genuine access to real customers at a limited scale, and it provides a direct, ongoing dialogue with the regulator that can meaningfully shape how a product’s eventual full authorisation application is received. What it does not provide is a general exemption from the underlying law: consumer protection requirements, anti-money laundering obligations, and other core legal protections remain enforced throughout the testing period, they are never waived simply because a firm is operating inside a sandbox. Nor does successful completion of a sandbox period guarantee a firm will receive full authorisation afterward; the sandbox reduces the cost and risk of testing a new idea, it does not pre-approve the eventual licence application.
Figure 3. A sandbox lowers the cost of testing. It never lowers the bar on consumer protection or AML law.
Why This Matters for a Blockchain Business
For a founder building a crypto or blockchain product intended to operate across both African and European markets, a sandbox is often the most realistic path to gathering the operational track record that a full VASP licence application will eventually require, particularly in markets where the formal licensing framework is still maturing. Treating a sandbox period as a genuine compliance-building exercise, rather than as a loophole to avoid regulation altogether, is what actually turns the experience into a credible foundation for the full authorisation that follows.
A sandbox isn’t a shortcut around regulation. It’s a supervised runway toward it, built for products regulators haven’t seen enough of yet to fully assess any other way.
Related reading on Blockchain People
What Is a Virtual Asset Service Provider (VASP)? · What Is VASP-KE, Kenya’s Virtual Asset Framework? · Blockchain People Glossary
External References
FCA Regulatory Sandbox (Financial Conduct Authority) · MAS FinTech Regulatory Sandbox (Monetary Authority of Singapore)
About The Author
