Starting an internet service provider in Africa has never been more achievable. Fibre backbones now reach most major cities, affordable wireless hardware can light up an entire neighbourhood, and mobile money lets you collect payments without a single bank visit. This guide walks through the practical steps to launch and grow an ISP or wireless ISP (WISP), from licensing and equipment to billing automation and scaling.
Step 1: Register and License Your Business
Before you sell a single megabit, sort out the legal foundation. First, register a company with your national business registry. Then apply for the correct telecom licence from your regulator.
Licensing differs by country, so confirm the exact category with your regulator before spending on equipment:
- •Kenya: The Communications Authority of Kenya (CAK) uses a Unified Licensing Framework with three main categories: Network Facilities Provider (NFP), Application Service Provider (ASP) and Content Service Provider (CSP). Most small operators apply under the ASP category to resell connectivity, while those building their own fibre, towers and microwave backhaul need an NFP licence.
- •Nigeria: The Nigerian Communications Commission (NCC) requires an ISP licence, and your business must first be registered with the Corporate Affairs Commission (CAC). Operating a communications service without the requisite licence is a punishable offence, with administrative fines for unlicensed operation.
- •Other markets: Most African regulators follow a similar tiered model separating infrastructure licences from service licences.
Budget for licence fees, annual frequency fees if you use licensed spectrum, and tax compliance documents. Getting this wrong is expensive, so treat licensing as a fixed early cost rather than something to defer.
Step 2: Secure Backhaul (Your Upstream Internet)
Your customers can only be as fast as your upstream link. You have three common options:
- •Fibre from a carrier: The most reliable choice in towns with metro fibre. You buy a dedicated or contended IP transit link from a Tier 1/2 provider and resell it.
- •Wireless backhaul: Where fibre has not arrived, point-to-point (PtP) radios bridge the gap. Carrier-grade 5GHz units such as Ubiquiti airFiber or MikroTik PtP radios carry traffic from a fibre point of presence to your tower over several kilometres, while 60GHz gear (such as MikroTik Wireless Wire) delivers very high capacity over shorter hops, typically up to around 1.5 km and sensitive to rain fade.
- •Hybrid: Many WISPs start on wireless backhaul and migrate to fibre as volumes grow.
Always negotiate backhaul capacity with headroom. Oversubscription is normal, but plan a sensible contention ratio so peak-hour speeds stay honest.
Step 3: Build the Core Network with MikroTik
MikroTik RouterOS is the workhorse of African ISPs because it is affordable, powerful and well documented. A typical setup uses a capable router (such as a CCR or RB series device) as the core gateway running RouterOS v6 or v7.
Two delivery methods dominate:
- •PPPoE for fixed home and business customers. Each subscriber authenticates with a username and password, and you control their bandwidth per plan.
- •Hotspot for pay-as-you-go WiFi zones, hostels and public areas, where users log in through a captive portal or redeem a voucher.
RouterOS includes a RADIUS client that can authenticate PPPoE, hotspot, PPP, L2TP and other sessions against a central RADIUS server. Instead of creating users manually on each router, you point RouterOS at RADIUS and manage everything centrally. On a successful login the server returns an Access-Accept and can push the MikroTik-Rate-Limit attribute to enforce each customer's speed tier automatically.
Step 4: Deploy Towers and CPE (Last Mile)
For a WISP, the last mile is wireless. Mount sector antennas or access points on a tower or tall mast to broadcast over a coverage area. At each customer's home you install a CPE (customer premises equipment) unit, a small outdoor radio with an integrated directional antenna, such as a MikroTik SXTsq or an equivalent 5GHz dish, aimed back at your tower.
Most last-mile gear runs in the licence-free 5GHz band, so you avoid spectrum fees, but you must manage interference carefully through channel planning. Keep clear line of sight between tower and CPE, use proper grounding and surge protection, and back up tower power with batteries or solar, since grid reliability is a real constraint in many areas.
Step 5: Design Your Pricing and Plans
Build simple, clearly differentiated packages. Common structures include:
- •Uncapped speed tiers: for example a basic, standard and premium home plan separated by Mbps.
- •Data bundles: capped volume packages for budget-conscious users.
- •Hotspot vouchers: time-based or data-based codes for walk-up WiFi, priced for daily, weekly and monthly use.
Price against local competitors and your real cost per Mbps of backhaul. Avoid promising speeds your backhaul cannot sustain at peak hours.
Step 6: Automate Billing and Provisioning
Manual billing collapses the moment you pass a few dozen customers. This is where a dedicated platform pays for itself. Iterative Billing is a cloud ISP and WiFi billing platform built for exactly this workflow. It integrates directly with MikroTik RouterOS (v6 and v7) and ships with a built-in RADIUS server supporting Change of Authorization (CoA) for both PPPoE and hotspot authentication.
CoA is what makes hands-off provisioning possible. Following RFC 3576 (the dynamic authorization extension to RADIUS, later updated by RFC 5176), RouterOS accepts incoming RADIUS messages on UDP port 3799, so your billing system can change a customer's bandwidth on the fly, upgrade or downgrade a plan, or suspend a non-paying account, all without the customer reconnecting. Note that you must enable incoming RADIUS in RouterOS and allow UDP 3799 in the firewall for this to work. When an invoice is paid, the customer is reactivated instantly.
A good platform handles the rest of the lifecycle too: automated invoicing, hotspot voucher generation, a customer self-service portal, and SMS notifications for renewals and outages. White-label branding lets you present the whole experience under your own ISP name. You can start free at https://billing.iterativebilling.com/register.
Before you commit to a bandwidth contract, run your subscriber, price and cost assumptions through the free ISP and hotspot profit calculator: it shows the break-even subscriber count for your numbers. For the automation itself, PPPoE billing explains how expiry, reconnection and speed plans are enforced on the router without manual work.
Step 7: Collect Payments via Mobile Money
In most African markets, mobile money is how customers actually pay. The Safaricom Daraja API's STK Push (M-Pesa Express) sends a prompt straight to the customer's phone asking them to enter their M-Pesa PIN, so they never have to remember a paybill, account number or transaction code. Your system posts the phone number, amount and account reference, M-Pesa processes the payment, and a callback confirms success.
To go live you need a Safaricom business shortcode (a Paybill or Till number) and a Daraja developer account with production credentials, which Safaricom approves after a short review. Beyond M-Pesa, support card and other mobile-money gateways so no customer is left out. Iterative Billing supports M-Pesa Daraja (STK Push, Paybill and Till), Co-op Bank, KopoKopo, Flutterwave, SasaPay, Pesapal and Paystack, and reconciles successful payments to invoices automatically, triggering instant reactivation through RADIUS CoA.
Step 8: Scale Up
Growth is mostly about repeatable systems. Add tower sites as demand clusters in new areas, and upgrade backhaul to fibre as volumes justify it. Because RADIUS centralises authentication, adding routers and sites does not multiply your admin work. Watch your contention ratios, monitor uptime, and keep network documentation current. Strong support and reliable speeds are what turn first customers into referrals, which remain the cheapest acquisition channel an ISP has.
Start small, prove the model in one neighbourhood, automate everything you can, and expand from a base that already runs itself.
Frequently asked questions
- Do I need a licence to start a small WISP in Africa?
- Yes. Almost every African regulator requires a telecom licence to sell internet access, even for a small operation. In Kenya you apply through the CAK Unified Licensing Framework, which has three categories: an Application Service Provider (ASP) licence for reselling connectivity, a Network Facilities Provider (NFP) licence if you build your own towers and fibre, and a Content Service Provider (CSP) licence for content. In Nigeria the NCC issues ISP licences and your company must first be registered with the CAC. Operating without the correct licence is a punishable offence carrying administrative fines, so confirm the exact category and fees with your national regulator before buying equipment.
- What MikroTik equipment do I need to start an ISP?
- At minimum you need a capable MikroTik router running RouterOS (a CCR or RB series device) as your core gateway, plus access points or sector antennas at your tower and CPE units like the MikroTik SXTsq at each customer's home. RouterOS has a built-in RADIUS client that authenticates PPPoE and hotspot users centrally, returns the MikroTik-Rate-Limit attribute to set each customer's speed, and accepts Change of Authorization messages on UDP port 3799 (once incoming RADIUS is enabled and the firewall allows the port) so a billing platform can adjust bandwidth or suspend accounts automatically. For wireless backhaul, add point-to-point radios: 5GHz units such as MikroTik or Ubiquiti airFiber for multi-kilometre hops, or 60GHz gear like MikroTik Wireless Wire for short, high-capacity links up to roughly 1.5 km.
- How can I automatically suspend customers who haven't paid?
- Use a RADIUS server with Change of Authorization (CoA) support. When an invoice goes unpaid, the billing system sends a CoA or disconnect message to your MikroTik router on UDP port 3799, which downgrades or cuts the session without anyone touching the router manually. This requires enabling incoming RADIUS in RouterOS and allowing the port through the firewall. The moment the customer pays, usually via M-Pesa STK Push or another mobile-money gateway, the platform reconciles the payment and reactivates the account instantly. Iterative Billing ships with a built-in RADIUS server and CoA, and links payment confirmation directly to reactivation.