Can a non-South African company use Paystack South Africa?

Foreign companies can use Paystack South Africa if they have a registered South African entity (branch or subsidiary) with CIPC registration. Paystack requires a CIPC-registered business and a South African bank account for settlement.

What is FICA and why does Paystack require it?

FICA (Financial Intelligence Centre Act) is South Africa's anti-money laundering legislation. Payment service providers must verify the identity of their customers (merchants) under FICA. This is why Paystack requires ID documents and proof of address — it is a legal obligation, not optional.

Is VAT registration required to use Paystack in South Africa?

VAT registration is not required to use Paystack — it depends on your business revenue. Businesses with annual turnover above ZAR 1 million must register for VAT with SARS. If you are VAT registered, provide your VAT registration number to Paystack and include VAT in your pricing.

Who is the Information Officer I need to appoint for POPIA?

Under POPIA, the Information Officer is typically the CEO or managing director of a company by default. For small businesses, the owner fills this role. The Information Officer must register with the Information Regulator. Larger companies may appoint a dedicated Data Protection Officer. Registration is done at ir.justice.gov.za.

Paystack Onboarding and Compliance Requirements in South Africa (2026)

Paystack Onboarding and Compliance Requirements in South Africa

To onboard with Paystack in South Africa: (1) register your business with CIPC (Companies and Intellectual Property Commission) — as a Private Company (Pty Ltd) or Sole Proprietor; (2) provide your SARS income tax number; (3) submit your CIPC registration documents (CoR 14.3); (4) provide a South African bank account for settlement; (5) comply with POPIA (Protection of Personal Information Act) for customer data you collect.

Required Documents for South African Paystack Merchants

Document	Purpose	Notes
CIPC Registration (CoR 14.3 or CoR 15.1A)	Business registration proof	From Companies and Intellectual Property Commission
SARS Tax Number	Tax compliance	Income tax reference number from SARS
South African ID or Passport (directors)	FICA identity verification	Smart ID card or passport for foreign nationals
SA bank account	Settlement	Must match company name for business accounts
Proof of business address	FICA requirement	Utility bill or bank statement, not older than 3 months

POPIA Compliance for South African Paystack Merchants

POPIA (Protection of Personal Information Act, 2013) is South Africa's data protection law, fully in effect since 2021. As a Paystack merchant, you process personal information (customer names, emails, payment references). POPIA requires:

Lawful purpose: Processing customer data for payment is lawful under "contractual necessity"
Privacy notice: Inform customers what data you collect and how you use it
Security: Protect personal data with reasonable security measures
Breach notification: Notify the Information Regulator within 72 hours of a breach
Retention: Keep data only as long as necessary for the purpose
Information Officer: Appoint and register an Information Officer with the Information Regulator (ir.justice.gov.za)

Learn More

This guide is part of the Paystack by country guide.

Sign up for the McTaba newsletter

Key Takeaways

✓Register your business with CIPC before applying for a live Paystack South Africa account.
✓SARS income tax number (or VAT number if VAT registered) is required as part of merchant KYC.
✓POPIA (Protection of Personal Information Act) applies to all South African businesses collecting customer data.
✓Provide a South African bank account (ABSA, FNB, Nedbank, Standard Bank, Capitec) for settlement.
✓Paystack South Africa operates under SARB (South African Reserve Bank) and PASA oversight.
✓FICA (Financial Intelligence Centre Act) requirements apply — Paystack verifies your identity under FICA for AML compliance.

Frequently Asked Questions

Can a non-South African company use Paystack South Africa?: Foreign companies can use Paystack South Africa if they have a registered South African entity (branch or subsidiary) with CIPC registration. Paystack requires a CIPC-registered business and a South African bank account for settlement.
What is FICA and why does Paystack require it?: FICA (Financial Intelligence Centre Act) is South Africa's anti-money laundering legislation. Payment service providers must verify the identity of their customers (merchants) under FICA. This is why Paystack requires ID documents and proof of address — it is a legal obligation, not optional.
Is VAT registration required to use Paystack in South Africa?: VAT registration is not required to use Paystack — it depends on your business revenue. Businesses with annual turnover above ZAR 1 million must register for VAT with SARS. If you are VAT registered, provide your VAT registration number to Paystack and include VAT in your pricing.
Who is the Information Officer I need to appoint for POPIA?: Under POPIA, the Information Officer is typically the CEO or managing director of a company by default. For small businesses, the owner fills this role. The Information Officer must register with the Information Regulator. Larger companies may appoint a dedicated Data Protection Officer. Registration is done at ir.justice.gov.za.

Ready to build real-world apps?

Join the McTaba Labs full-stack marathon (4 months full-time · 6 months part-time). Learn M-Pesa, USSD, and WhatsApp engineering while shipping 8 production apps.

Apply to the McTaba Marathon