Live Infrastructure · Phase 1 Complete

NFC tap-to-pay infrastructure
for Nigerian fintechs

Turn any NFC Android into a payment terminal. No hardware. No procurement. Your rails, your brand — powered by Bragg.

Try the Sandbox Talk to us
How a payment works
📱
Customer Phone
HCE wallet (BraggSDK)
⟶ NFC tap
🏪
Merchant Phone
BraggTerminal SDK
⟶ cryptogram
⚡
Bragg API
validates · fraud scores
⟶ webhook
🏦
Your Backend
NIBSS · settlement
Bragg never touches money. Settlement runs on your own licensed NIBSS rails.
Onboarding
Three paths. One integration.
Partners integrate once. Merchants and users onboard themselves. No field ops required.
🏢
Partner (Bank / Fintech)
You integrate the Bragg API into your existing app. Your brand, your rails, your merchant relationships.
  • 1 Get credentials — contact us; we register your partner account and issue your API key and secret
  • 2 Authenticate — POST /auth/token with your partner ID and secret → receive JWT
  • 3 Create wallets — one API call per customer; BVN verified automatically in production
  • 4 Register merchants — submit business details; Bragg assigns a terminal ID on approval
  • 5 Register a webhook — receive tap.completed and settlement.batch events signed with HMAC-SHA256
  • 6 Go live — distribute the BraggSDK to your customers and BraggTerminal to your merchants
Start in sandbox →
🏪
Merchant
Any business with an NFC Android phone. No terminal hardware. Live in minutes.
  • 1 Download the app — your partner (bank or fintech) distributes the Bragg-powered app
  • 2 Register — submit business name, settlement account, and bank code via the app or partner portal
  • 3 Get approved — partner reviews and approves; Bragg auto-assigns a terminal ID
  • 4 Accept payments — open the terminal screen, enter amount, tap CHARGE, hold phone near customer's phone or card
  • 5 Get settled — daily settlement batch at 23:00 UTC; funds arrive via your partner's NIBSS transfer
Partner portal →
📱
Customer (Wallet holder)
Your end customer. Pays by tapping their phone — no card, no cash, no QR scan.
  • 1 Wallet created by partner — your bank or fintech creates a Bragg wallet linked to the customer's BVN
  • 2 Set PIN — customer sets a 4–6 digit PIN on first login; stored as bcrypt hash, never in plain text
  • 3 Fund wallet — partner funds the wallet via their own transfer rails
  • 4 Tap to pay — open the app, authenticate with biometrics, hold phone near merchant terminal — done
  • 5 CBN limits enforced — ₦15,000 per tap, ₦50,000 daily — automatically at the API level
Customer portal →
Infrastructure
Everything your engineers won't have to build
🔐
HMAC Cryptograms
Every tap generates a 5-minute HMAC-SHA256 cryptogram. Replay attacks blocked at the API level.
🛡️
Fraud Scoring
10-rule pre-transaction scoring engine. Cross-partner fraud signals with 30-day TTL. Real-time webhooks.
💳
Card-on-Phone
Physical Verve, Visa, and Mastercard contactless cards tap the same terminal. EMV PPSE, BER-TLV parsed.
📡
Signed Webhooks
X-Bragg-Signature: sha256=<hex> on every delivery. 3-retry backoff. Full delivery log.
⚖️
CBN Limits Built-in
₦15k tap limit and ₦50k daily cap enforced at the transaction service — not in your app.
🏗️
White-label Ready
Brand colours, app name, logo, support email — all configurable via SDK init. Your users never see "Bragg".
🔑
BVN Verification
KYC via Dojah or FSI/NIBSS sandbox. Feature-flagged — off by default in sandbox, on in production.
💰
Your Rails, Your Settlement
Bragg calculates net amounts and fires a webhook. You disburse via NIBSS. Bragg never touches money.
Regulatory
Built against the CBN NFC framework
Every requirement from the CBN draft NFC/Contactless Payment Framework is enforced at the infrastructure level.
CBN Requirement Implementation Status
₦15,000 max per contactless tapHard-rejected at transaction service before state is written✅ Enforced
₦50,000 daily contactless limitVelocity check per wallet per calendar day✅ Enforced
BVN linkage for wallet creationBVN verification via KYC provider before wallet created✅ Implemented
PIN for transactions > ₦15,0004–6 digit PIN, bcrypt-hashed, DB-backed lockout after 3 failures✅ Enforced
HCE (Host Card Emulation)BraggSDK implements ISO 7816 APDU over Android HCE✅ Implemented
EMV contactless terminalPPSE → AID selection → GPO → BER-TLV — Verve/Visa/Mastercard✅ Implemented
Terminal ID per merchantAuto-generated TID-XXXXXX-XXXXXX on merchant approval✅ Implemented
Transaction cryptogramHMAC-SHA256, 5-minute expiry, replay-protected✅ Implemented
Partner holds the licenceSettlement routed through partner's own NIBSS rails✅ By design

Start building today

The sandbox is live and pre-seeded. Your developers can test a full payment flow — tap, cryptogram, webhook, settlement — in under 10 minutes. No credentials to request.

Open Sandbox Request partner access
Base URL: sandbox.bragglabs.com.ng
Partner: sandboxdemo
Secret: sandboxdemo2026xx
KYC: disabled
Wallet balance: ₦5,000 pre-seeded