Cryptoassets Regulatory Intelligence

Kenya Crypto & Digital Asset Regulation

KE schema crypto-v2.0.0 trajectory: not yet assessed in transition overlaps: Sentinel (AML/CFT), World Payments

Last updated · 8 categories · 55 sourced findings · 32 sources in the cumulative register

Evidence re-verified: ·Position last changed: ·
Record history & provenance ▾

Methodology & record provenance: Module confidence is derived from the underlying claims (source tier and primary excerpt retention), while statutory legal force is tracked independently.

Review status: AI-synthesised · Tier-1/2 verified · As-of date: 2026-10-26

Framework postureIn transition8 of 9 modules populated · AI-synthesised · Tier-1/2 verified
Lead supervisory authorityThe BlockPrimary statutory & supervisory perimeter
Next milestone (> 2026-10-26)2026-11-04VASP Act 2025 transitional compliance deadline
Module coverage & confidence8 / 9 modules assessed0 Confirmed · 8 Probable · 0 Uncertain · 1 Not yet assessed

Jurisdiction lead brief

Latest update · 4 November 2026

Lead Signal

Kenya has moved from having no dedicated virtual asset statute to operating a fully enacted and gazetted licensing architecture. The Virtual Asset Service Providers Act, 2025, together with the Virtual Asset Service Providers Regulations gazetted in 2026, creates ten distinct licence categories allocated between the Central Bank of Kenya and the Capital Markets Authority according to the type of activity conducted. A one-year transitional period that began on 4 November 2025 closes on 4 November 2026; from that date, offering virtual asset services in or from Kenya without the licence appropriate to that activity becomes a criminal offence. What makes this moment consequential rather than merely procedural is the gap between the law's completeness and its operation: as at the most recent secondary reporting, neither regulator had confirmed that any provider had actually been licensed. Firms currently operating in the Kenyan market, or planning to target Kenyan users, are approaching a hard compliance cliff with the supervisory machinery for approving them seemingly not yet fully running.

Key regulatory facts for Kenya
Regulatory DimensionKenya Standing Position
JurisdictionKenya (KE)
Regulatory ScopeCrypto & Digital Asset Regulation (8 modules, 55 sourced findings)
Crypto LicensingKenya moved from no comprehensive crypto statute to a dual-regulator licensing regime within the past year.
Token ClassificationKenya's framework does not yet operate a MiCA-style multi-category token taxonomy.
On-Chain Activity RegimeNo sector-specific operating rules for staking, DeFi lending, DEX operation, mining, node/validator activity, or discrete tokenization mechanics have been identified in the VASP Act 2025 or the draft 2026 Regulations...
Stablecoin RegimeThe most developed component of Kenya's forthcoming VASP framework concerns stablecoins.
Primary Instruments CitedThe Block, The Block, Virtual Asset Service Providers Act, 2025, Virtual Asset Service Providers Act, 2025, CBK / CMA
Last Confirmed / Updated2026-11-04 (32 sources in cumulative register)

#

Kenya moved from no comprehensive crypto statute to a dual-regulator licensing regime within the past year. The Virtual Asset Service Providers Act, 2025 (No. 20 of 2025) commenced 4 November 2025, and its implementing Virtual Asset Service Providers Regulations, 2026 were gazetted as Legal Notice No. 134 on 22 July 2026. Ten licensable activities are split between the Central Bank of Kenya and the Capital Markets Authority. Capital requirements were substantially reduced between the draft and final Regulations. Existing operators have a transition deadline of 4 November 2026 to come into compliance.

Open gap — crypto-int-2Whether any VASP has been licensed by CBK or CMA ahead of the 4 November 2026 deadline was not confirmed this cycle.no under-indexing note recorded
Horizon · 2026-Q4 (± six months)VASP Regulations 2026 (implementing regulations) expectedConsultation · Tier 1 source
Horizon · 2026-11-04 (± a quarter)VASP licensing compliance deadline for existing operatorsIn force · Tier 3 source
Horizon · 2026-11-04 (± a quarter)VASP Act 2025 transitional compliance deadlineAdopted, not yet in force · Tier 3 source
Horizon · 2026-11-04 (± a quarter)VASP transitional compliance deadlineAdopted, not yet in force · Tier 3 source
Horizon · 2026-11-04 (± a quarter)VASP Act/Regulations transitional compliance window closesAdopted, not yet in force · Tier 1 source
Standing sub-brief · as of 25 August 2026 138 words · last cycle 2026-10-18

Crypto Licensing

The Virtual Assets Service Providers Act, 2025 requires any business offering virtual asset services to obtain a licence from the Central Bank of Kenya or the Capital Markets Authority before operating in or from Kenya. The Act has been in force since 4 November 2025, a statutory fact confirmed by CBK's own public notice. Despite this, neither CBK nor CMA has licensed any virtual asset service provider, and licensing will commence only once implementing regulations are issued; the National Treasury unveiled draft VASP Regulations 2026 in March 2026, still moving through consultation as of this cycle.

Periodic update · new data 2026-10-18

Crypto Licensing

Kenya's Virtual Asset Service Providers Act, 2025, commenced 4 November 2025, prohibits any person from carrying on or holding itself out as carrying on virtual asset services in or from Kenya without a licence. The implementing Virtual Asset Service Providers Regulations, 2026, gazetted 22 July 2026 as Legal Notice 134 of 2026, operationalise this requirement through a dual-regulator structure split between the Central Bank of Kenya and the Capital Markets Authority, creating ten distinct licence categories covering the range of virtual-asset business models from exchange operation to custody to stablecoin issuance. Existing operators that were active before the Act's commencement have a one-year transitional window, expiring 4 November 2026, within which to regularise their operations and obtain the appropriate licence.

The regime is comprehensive in scope and already in force, which is why it is treated here as a material development rather than a stable baseline: the combination of a dual-regulator model, ten licence categories, and a hard compliance deadline represents a significant shift from Kenya's prior unregulated virtual-asset environment. A penalty schedule for unlicensed virtual-asset activity, covering fixed-amount and turnover-percentage maxima, was not located in the research underlying this brief, leaving one open question about the regime's enforcement teeth as the transitional deadline approaches.

Outlook

The 4 November 2026 deadline is the immediate test of this regime's practical reach. The proportion of existing operators that secure licences by that date, versus those that cease Kenyan operations or continue unlicensed, will indicate whether the comprehensive legal architecture translates into comprehensive practical supervision.

2 earlier distinct update(s)
Periodic update · new data 2026-10-11

Crypto Licensing

Kenya's Virtual Asset Service Providers Act, 2025 requires any entity offering virtual asset services in or from Kenya to obtain a licence from either the Central Bank of Kenya or the Capital Markets Authority, depending on the activity class, mandating licensing of exchanges, custodial wallets and brokers among other categories. The Act commenced on 4 November 2025, and its implementing Regulations, 2026 were gazetted as Legal Notice No. 134 of 2026 on 22 July 2026, finalising a capital schedule considerably softened from the draft figures that preceded it: a virtual-asset wallet provider must hold KES 150,000,000 in capital under CBK supervision, a fiat-referenced stablecoin issuer KES 300,000,000 also under CBK, and a virtual-asset payment processor KES 10,000,000 under CBK. Under CMA supervision, an exchange requires KES 100,000,000, a broker KES 10,000,000, a virtual-asset manager KES 20,000,000, an ICO provider KES 20,000,000, a tokenisation provider KES 10,000,000 and a token-issuance platform KES 20,000,000.

Section 47 of the Act gives persons already providing virtual-asset services one year from the Act's commencement to come into compliance, placing the transition deadline at 4 November 2026. Together, the Act and the Regulations are described by commentators as creating the first comprehensive licensing regime for virtual asset service providers in Kenya, replacing what had previously been an unregulated space. The exact statutory pinpoint for the licensing perimeter and penalty provisions within the Act was not independently confirmed against primary gazette text this cycle, and that gap is noted rather than filled with inference.

One practical constraint persists notwithstanding the regime now being substantively in force: the Capital Markets Authority has continued to decline onboarding pure crypto-exchanges, stating that it must await full implementation of the VASP licensing regime before doing so. This suggests a gap between the Regulations taking legal effect and the regulator's own operational readiness to process licence applications for at least this category of intermediary.

Outlook

The 4 November 2026 transition deadline is the controlling date for the remainder of this year: virtual-asset businesses already operating in Kenya before the Act's commencement must be licensed, or have an application in train, by that date. Whether the CMA's stated reluctance to onboard exchanges resolves in time for that deadline, or creates a practical bottleneck for exchange-category applicants specifically, is the open question carried into the next cycle.

Periodic update · new data 2026-09-28

Crypto Licensing

Kenya's Virtual Asset Service Providers Act, 2025 commenced on 4 November 2025, establishing a mandatory licensing perimeter for virtual-asset businesses operating in Kenya for the first time. The implementing Virtual Asset Service Providers Regulations, 2026 were gazetted as Legal Notice No. 134, Kenya Gazette Supplement No. 185, dated 22 July 2026, and took effect on publication. The Regulations split ten licensable virtual-asset activities between the Central Bank of Kenya and the Capital Markets Authority, creating a dual-regulator supervisory architecture rather than a single consolidated licensing authority.

Existing virtual-asset operators — meaning firms already active in Kenya prior to the Act's commencement — have until 4 November 2026 to obtain licences under the new framework. As of the most recent reporting available this cycle, no licence is confirmed to have been granted under Legal Notice No. 134. This creates a live gap between the statutory architecture, which is comprehensive and now in force, and demonstrated regulatory capacity, which remains untested pending the deadline.

All findings regarding the specific content of the VASP Regulations rest on secondary commentary; no direct fetch of the Kenya Gazette Supplement No. 185 text itself was possible this cycle, so findings here are held at Probable confidence pending primary-text retrieval.

Outlook

The 4 November 2026 deadline is the decisive near-term marker. Whether any licences have been granted by that date, and how the CBK/CMA split perimeter handles the transition of Kenya's existing informal virtual-asset operator base, will be the first concrete test of the new licensing regime's practical effect.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (14)
  1. T4The Block — Kenya's Virtual Asset Service Providers Act entered into force on 4 November 2025, establishing a licensing regime jointly supervised by the Central Bank of Kenya and the Capital Markets Authority. retrieved M5 binding in force
  2. T4The Block — Draft 2026 VASP Regulations, developed by a CBK/CMA multi-agency task force under the VASP Act, were opened for public comment (closing 10 April 2026) to operationalize licensing, reserve and disclosure requirements. retrieved M4 non-binding
  3. T4The Block — The draft 2026 Regulations would expand license eligibility beyond companies to include limited liability partnerships, widening the original bill's scope. retrieved M2 non-binding
  4. T4The Block — Under the draft Regulations, the licensing authority would have 90 days to provide feedback on license applications, and license validity would shift from a fixed 31 December expiry to a 12-month term measured from date of issuance. retrieved M3 non-binding
  5. T1Virtual Asset Service Providers Act, 2025 — any person offering virtual asset services in or from Kenya requires a CBK or CMA licence depending on activity class; one-year transition from 4 Nov 2025 closes 4 Nov 2026 retrieved M5 binding enacted not yet effective
  6. T3Virtual Asset Service Providers Act, 2025 — No person may carry on or hold itself out as carrying on virtual asset services in or from Kenya without a licence retrieved M5 binding in force
  7. T1Virtual Assets Service Providers Act, 2025 — Businesses offering virtual asset services must obtain a licence from CBK or CMA before operating in or from Kenya. retrieved M5 binding enacted not yet effective
  8. T3CBK / CMA — Neither CBK nor CMA has licensed any VASP to operate in or from Kenya as of the November 2025 joint notice; licensing will commence only once implementing regulations are issued. retrieved M4 non-binding
  9. T3Virtual Asset Service Providers Act, 2025 — Any entity offering virtual asset services in or from Kenya must obtain a licence from CBK or CMA depending on activity class; mandates licensing of exchanges, custodial wallets and brokers M5 binding in force new
  10. T3Virtual Asset Service Providers Act, 2025 — operating a VASP in or from Kenya without the required licence after 4 November 2026 constitutes a criminal offence retrieved M5 binding enacted not yet effective new
  11. T3Virtual Asset Service Providers Act, 2025 — One-year transitional compliance window expiring 4 November 2026 retrieved M5 binding in force
  12. T3Virtual Asset Service Providers Regulations, 2026 (L.N. 134) — Final capital schedule: virtual-asset wallet provider KES 150m (CBK); fiat-referenced stablecoin issuer KES 300m (CBK); virtual-asset payment processor KES 10m (CBK); exchange KES 100m (CMA); broker KES 10m (CMA); virtual-asset manager KES 20m (CMA); ICO provider KES 20m (CMA); tokenisation provider KES 10m (CMA); token-issuance platform KES 20m (CMA) M5 binding in force new
  13. T3Virtual Asset Service Providers Act, 2025 — Section 47 gives persons already providing virtual-asset services one year from the Act's commencement (4 November 2025) to comply, making 4 November 2026 the transition deadline M4 binding in force new
  14. T3Existing virtual-asset operators — Existing virtual-asset operators have until 4 November 2026 to obtain licences under the new framework. retrieved M5 binding in force new

#

Kenya's framework does not yet operate a MiCA-style multi-category token taxonomy. The VASP Act 2025 and draft 2026 Regulations use a broad 'virtual asset' definition, expanded in the draft to explicitly capture tokens representing real-world assets, plus a broadened 'issuer' definition and a distinct stablecoin/reserve-backed sub-regime under CBK.

Periodic update · new data 2026-09-28

Token Classification

Kenya's Virtual Asset Service Providers Regulations, 2026 introduce two distinct, bespoke token-classification regimes rather than a single general-purpose token taxonomy. First, a dedicated regulatory category for stablecoins covers issuance, reserves, redemption, disclosure and audit. Second, the Regulations create a legal pathway for tokenized real-world assets, a feature that reportedly places Kenya among a small group of jurisdictions with bespoke tokenization rules; this second claim rests on Uncertain-confidence secondary commentary and has not been independently verified against primary gazetted text.

Beyond these two named categories, general or utility token classification under the new framework remains untested: no first-party findings on how the Regulations treat tokens outside the stablecoin and tokenized-real-world-asset categories were available this cycle. The classification regime as a whole is therefore best characterised as targeted rather than comprehensive — it addresses the two token types Kenyan regulators evidently judged most pressing (stability-referenced instruments and tokenized assets) without yet establishing a general taxonomy covering the wider token universe.

Outlook

Whether Kenya's regulators extend classification treatment to general and utility tokens, and how the tokenization pathway for real-world assets is applied in practice once the licensing regime becomes fully operative after 4 November 2026, are the open questions carried forward from this cycle.

C2 · Token Classification — Full Module Record0 sub-modules · 180 words · 5 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

No sector-specific operating rules for staking, DeFi lending, DEX operation, mining, node/validator activity, or discrete tokenization mechanics have been identified in the VASP Act 2025 or the draft 2026 Regulations beyond the broadened general 'virtual asset' definition covering real-world-asset-representative tokens. This is a genuine coverage gap in currently available primary/secondary sourcing rather than a confirmed exemption.

C3 · On-Chain Activity — Full Module Record0 sub-modules · 180 words · 2 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

The most developed component of Kenya's forthcoming VASP framework concerns stablecoins. Draft 2026 Regulations (CAUTION: pre-final, subject to public-comment revision) would impose segregated-reserve backing, restricted eligible-asset composition, and periodic IT-security audit requirements on stablecoin issuers, with CBK as the prudential lead and CMA co-involved via the joint task force.

Periodic update · new data 2026-10-18

Stablecoin Regime

Regulation 75 of the Virtual Asset Service Providers Regulations, 2026 establishes a detailed prudential regime for stablecoin issuance in Kenya. Issuers must fully back each stablecoin with reserve assets such that the value of those reserve assets is at all times at least equal to the nominal value of all outstanding units of the stablecoin, and must ensure that the reserve assets of each stablecoin are segregated both from the issuer's own operating assets and from the reserve assets backing any other stablecoin the same issuer may manage. Holders enjoy a statutory right to redeem their holdings at par value within two working days of a redemption request, and issuers are prohibited from granting interest on stablecoin holdings. Stablecoin issuance is reported to sit under Central Bank of Kenya licensing as a dedicated issuer category, distinguishing it from the broader virtual-asset licence categories that may fall to the Capital Markets Authority. Minimum paid-up capital for a stablecoin issuer is reported at KES300 million, a reduction from an earlier draft figure of KES500 million, positioning stablecoin issuance as the most capital-intensive of the ten licence categories.

This is a material and well-sourced development: the reserve-backing and redemption provisions are drawn from the primary regulatory text itself, giving this module a firmer evidentiary footing than most other components of Kenya's virtual-asset regime. One open question from secondary commentary is whether a stablecoin already licensed and compliant in a foreign jurisdiction could rely on that foreign licensing to be offered publicly in Kenya, or whether local licensing and local reserve segregation are mandatory regardless of foreign status; the Regulations appear to require the latter, but this has not been definitively confirmed.

Outlook

As the stablecoin licence category comes into practical operation, attention should turn to whether any issuer achieves licensing before the 4 November 2026 transitional deadline, and whether the foreign-licensing reliance question is clarified by the regulators.

Periodic update · new data 2026-10-11

Stablecoin Regime

Kenya's Virtual Asset Service Providers Regulations, 2026 (L.N. 134) create fiat-referenced stablecoin issuance as a distinct licensed activity class under Central Bank of Kenya supervision, separate from wallet provision, payment processing and the Capital Markets Authority-supervised categories such as exchanges and brokers. A fiat-referenced stablecoin issuer must hold a minimum of KES 300,000,000 in capital, the second-highest capital figure in the finalised schedule after the exchange category, reflecting the regulator's treatment of stablecoin issuance as carrying materially greater prudential risk than custodial wallet provision or payment processing.

The Regulations were gazetted on 22 July 2026, and the stablecoin issuer category sits within the same licensing architecture established by the VASP Act, 2025, meaning a stablecoin issuer is subject to the same one-year transition deadline running from the Act's 4 November 2025 commencement, placing existing issuers' compliance deadline at 4 November 2026. Specific reserve-composition and redemption-right requirements for licensed stablecoin issuers were not located in evidence available this cycle, and that gap is recorded rather than inferred; the licensing and capital treatment is confirmed, but the operational detail of how reserves must be held and how redemption is to be guaranteed to a holder is not yet established on the record.

Outlook

The near-term question for this module is whether the Central Bank of Kenya issues further operational guidance specifying reserve-composition and redemption-right requirements before the 4 November 2026 transition deadline binds existing issuers. Absent such guidance, a licensed stablecoin issuer would be operating against a capital requirement that is clear but a reserve regime that, on the present record, is not.

Periodic update · new data 2026-09-28

Stablecoin Regime

Kenya's Virtual Asset Service Providers Regulations, 2026 establish the country's first comprehensive stablecoin-issuer regime. Stablecoin issuers must obtain separate licences distinct from general VASP licensing, publish white papers, maintain reserve assets, ensure redeemability, undergo audits, and submit ongoing reports to their supervising authority. The Regulations additionally prohibit stablecoin issuers from paying interest on stablecoins, a design choice consistent with treating stablecoins as payment-referenced instruments rather than yield-bearing investment products.

Separately from issuer-side obligations, the Central Bank of Kenya holds authority over businesses converting virtual assets into foreign currencies and vice versa; conversion-service providers require CBK authorisation that must be renewed annually. This conversion-authorisation regime sits alongside, but is analytically distinct from, the stablecoin-issuer licensing regime itself, since a firm could conceivably require one authorisation, the other, or both depending on its specific activities.

This entire regime represents a sharp reversal from CBK's pre-VASP regulatory posture. Prior to the framework's commencement, CBK had issued public notices cautioning financial institutions against dealing in virtual currencies at all, a posture that effectively excluded crypto activity of any kind from the formal banking system. The new stablecoin regime is, at this stage, entirely untested in practice: no issuer has yet been confirmed licensed under it.

Outlook

Whether any stablecoin issuer obtains a licence under this new regime, and how CBK administers the annual renewal requirement for virtual-to-fiat conversion authorisations, are the concrete developments to track as Kenya's licensing framework moves toward the 4 November 2026 compliance deadline for the broader VASP perimeter.

C4 · Stablecoins & EMTs — Full Module Record0 sub-modules · 180 words · 12 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

Publicly available secondary reporting on the VASP Act 2025 and draft 2026 Regulations discloses limited detail on retail consumer-protection mechanics. The clearest identified provisions relate to mandatory local banking relationships and periodic technical/security audits; explicit marketing-restriction, suitability/appropriateness, and complaint-handling rules for retail VASP customers have not been located in available sourcing.

Standing sub-brief · as of 25 August 2026 83 words · last cycle 2026-10-18

Consumer Protection

The National Treasury's draft VASP Regulations 2026 frame consumer protection, specifically safeguarding Kenyans against fraud and high-risk speculative activity, as a core objective of the licensing regime. Specific disclosure requirements and custody-segregation rules for client assets are not yet detailed in binding regulations, leaving the consumer-protection objective stated in principle ahead of its operative implementation.

Periodic update · new data 2026-10-18

Consumer Protection

Two consumer-protection provisions in the Virtual Asset Service Providers Regulations, 2026 are grounded directly in the primary regulatory text. Regulation 35 requires a licensee to give priority to client orders over its own proprietary orders when executing transactions in the same virtual asset, a conflict-of-interest safeguard aimed at preventing a licensee from trading ahead of or at the expense of its own customers. Separately, licensees are required to segregate client holdings of virtual assets from the licensee's own holdings, a custody-protection measure intended to insulate client assets from the licensee's own balance-sheet risk in the event of insolvency or mismanagement.

Together these two provisions address two of the most common sources of consumer harm in virtual-asset markets: order-execution conflicts of interest and commingling of client custody assets with house assets. Both rules are in force as part of the Regulations gazetted 22 July 2026, and both apply across the licensee population regardless of which of the ten licence categories a given firm holds.

Outlook

As licensing progresses toward the 4 November 2026 transitional deadline, the practical enforcement of segregation and order-priority requirements against newly licensed firms will be the next indicator of whether these consumer-protection provisions operate as intended in practice, rather than only on paper.

1 earlier distinct update(s)
Periodic update · new data 2026-10-11

Consumer Protection

The Virtual Asset Service Providers Regulations, 2026 (L.N. 134) impose asset-level due-diligence duties on exchanges and token-issuance platforms operating in Kenya. Before admitting any virtual asset for trading, a licensed exchange or token-issuance platform must conduct due diligence on that asset; where the asset is smart-contract-based, the Regulations additionally require an independent audit of the smart contract before the asset may be listed, and listed assets must be subject to continuous monitoring thereafter rather than a one-time pre-listing check. These obligations sit alongside a separate, licensee-wide customer due-diligence duty: every licensee must perform customer due diligence, including identity verification, before onboarding a consumer, regardless of whether that licensee's activity is exchange-type, custodial, or advisory in nature.

Taken together, the asset-level and customer-level due-diligence obligations place Kenya's consumer-protection regime for virtual assets on a footing that addresses both the quality of the asset being offered to a retail participant and the identity of the participant being onboarded. The Regulations do not appear, on the evidence available this cycle, to extend general consumer-protection concepts such as dispute resolution or cooling-off rights specifically to virtual-asset transactions; the obligations identified here are due-diligence and audit requirements rather than consumer-redress mechanisms.

Outlook

What remains to be seen is how actively the Capital Markets Authority and Central Bank of Kenya supervise the independent-audit requirement for smart-contract-based assets in practice, particularly for exchanges still working through onboarding ahead of the 4 November 2026 transition deadline. The consumer-protection posture established by the Regulations is substantively in force, but its enforcement intensity in the first full compliance cycle has not yet been evidenced.

1 further periodic run re-emitted the standing brief unchanged and is not shown.

Sources and findings (7)
  1. T4The Block — The draft 2026 Regulations reportedly mandate that all virtual asset service providers open and operate a bank account in Kenya, and undergo IT-audited assessments of digital infrastructure, data security, transaction integrity, cybersecurity and operational resilience every two years. retrieved M3 non-binding
  2. T1Draft VASP Regulations 2026 — Consumer protection — safeguarding Kenyans against fraud and high-risk speculative activity — is framed as a core objective of the licensing regime. retrieved M3 non-binding
  3. T3Virtual Asset Service Providers Regulations, 2026 — mixer and tumbler services designed to obscure the origin of virtual assets retrieved M3 binding enacted not yet effective new
  4. T3Virtual Asset Service Providers Regulations, 2026 (L.N. 134) — Virtual asset exchanges and token issuance platforms must run due diligence on every virtual asset before admitting it for trading; smart-contract-based assets require an independent audit before listing; listed assets must be continuously monitored M4 binding in force new
  5. T3Central Bank of Kenya — Prior to the VASP framework, CBK issued public notices cautioning financial institutions against dealing in virtual currencies, effectively excluding crypto activity from the formal banking system. retrieved M2 non-binding
  6. T1Virtual Asset Service Providers Regulations, 2026, reg. 35 — Licensee must give priority to client orders over proprietary orders in the same virtual asset retrieved M4 binding in force

#

Kenya's crypto-specific tax treatment history is unsettled in available sourcing: a 2022 Capital Markets (Amendment) Bill proposed capital-gains taxation plus CMA disclosure of crypto holdings, and the 2023 Finance Bill separately proposed a 3% tax on digital-asset transfers based on gross fair market value at exchange. Neither proposal's current enactment/rate status as of August 2026 could be confirmed in the sources reviewed. Separately, the draft 2026 VASP Regulations introduce new regulatory transaction fees (not general tax-code provisions) tied to token issuance and initial virtual asset offerings.

Horizon · 2026-Q4 (± six months)Finance Bill 2026 VASP tax-reporting provision expected finalisationProposed · Tier 3 source
Horizon · 2026-Q4 (± six months)Finance Bill 2026 VASP tax-reporting provision expected finalisationProposed · Tier 3 source
Horizon · 2026-Q4 (± six months)Digital Asset Tax repeal advocacy outcome expectedConsultation · Tier 3 source
Periodic update · new data 2026-10-11

Tax Treatment

Kenya's Finance Bill 2026 would require virtual asset service providers to submit annual user and transaction reports to the Kenya Revenue Authority, containing reportable-user and controlling-person details, and would enable cross-border exchange of virtual-asset transaction information consistent with an international tax-transparency standard. This reporting obligation is enacted but not yet effective; the final enactment and effective date of this specific provision within the broader Finance Act 2026 was not independently confirmed this cycle, and that uncertainty is recorded rather than resolved by assumption.

A separately proposed 3% Digital Asset Tax is contested before the Finance Committee by an industry coalition opposing the levy. The final legislative outcome of that repeal advocacy had not been confirmed as of this cycle's research; the tax, if it proceeds unchanged, would apply on top of the KRA reporting obligation now proposed for VASPs, compounding the compliance burden on licensed providers already subject to the capital and due-diligence requirements under the VASP Act and Regulations.

Outlook

The Digital Asset Tax outcome is expected within the current quarter, pending the Finance Committee's resolution of the industry coalition's objections. Until that process concludes, licensed Kenyan VASPs face a tax-treatment picture that is directionally tightening, through the new KRA reporting duty, but not yet finally quantified in its total rate, pending resolution of the contested 3% levy.

Periodic update · new data 2026-09-28

Tax Treatment

Kenya's Finance Bill, 2026 proposes new sections 6C and 6D of the Tax Procedures Act, which would require virtual asset service providers to file information returns with the Kenya Revenue Authority identifying users classified as 'reportable users'. This is a proposed information-reporting framework for the crypto sector specifically, distinct from Kenya's general tax code, and it has not been confirmed enacted this cycle — it remains at Bill stage.

The proposed framework carries meaningful criminal exposure for non-compliance: a false statement made in an information return under the framework would carry a fine of KES 100,000 per false statement, or imprisonment of up to three years, or both. The pairing of a civil information-reporting obligation with a criminal false-statement penalty is a notable design feature, signalling that Kenyan authorities intend the VASP reporting regime to carry real deterrent weight from the outset rather than functioning as a purely administrative filing requirement.

As a proposed rather than enacted measure, this tax-reporting framework should be read as forward-looking rather than as a current compliance obligation for VASPs. Its ultimate enactment, and any amendments made during the Finance Bill's legislative passage, remain open questions.

Outlook

Whether the Finance Bill 2026's proposed sections 6C and 6D are enacted in their current form, amended, or dropped during the legislative process is the key marker to track for this module. If enacted, the reporting deadline and its interaction with the broader VASP licensing compliance deadline of 4 November 2026 would be worth monitoring together.

C6 · Tax Treatment — Full Module Record0 sub-modules · 180 words · 6 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

No explicit cross-border transfer, outbound-restriction, or Travel-Rule cross-border threshold specific to VASPs has been located in the VASP Act 2025 or draft 2026 Regulations text reviewed. The clearest cross-border-adjacent provision is a domestic-banking-localization requirement (mandatory Kenya bank account for VASPs), which constrains fund custody location rather than setting a formal cross-border transfer rule. Formal Travel Rule implementation is expected to align with Kenya's FATF grey-listing remediation, which sits under the FIM aml_ctf baseline.

Periodic update · new data 2026-10-18

Cross-Border Transfer

The Virtual Asset Service Providers Regulations, 2026 adopt a broad extraterritorial scope test: the Regulations apply to anyone deriving economic benefit or income from Kenya regardless of that person's physical presence in the country, meaning a foreign-based virtual-asset business serving Kenyan customers can fall within the licensing requirement even without a local establishment. Licensees are also subject to a seven-year record-retention duty covering all platform activity.

Whether this framework amounts in substance to the FATF Travel Rule, requiring originator and beneficiary information to accompany virtual-asset transfers above a threshold, is disputed in the secondary sources reviewed this cycle. One legal commentary states the Travel Rule is not explicitly referenced in the Regulations as gazetted. A separate secondary source describes Travel Rule compliance, specifically the requirement that originator and beneficiary information accompany transfers above prescribed thresholds, as an expected component of Kenya's AML build-out for virtual assets. No primary regulatory text or Financial Reporting Centre guidance was retrieved this cycle to resolve this disagreement, so the claim is treated as disputed pending primary clarification.

Outlook

Primary clarification on whether, and in what form, Travel-Rule-equivalent originator/beneficiary information requirements apply to Kenyan virtual-asset transfers would resolve the principal open question in this module. The extraterritorial reach test itself is on firmer footing and will shape how foreign virtual-asset businesses serving Kenyan customers approach the 4 November 2026 licensing deadline.

Periodic update · new data 2026-09-28

Cross-Border Transfer

Kenya's Virtual Asset Service Providers Regulations, 2026 carry extraterritorial scope, bringing offshore platforms that target Kenyan users within the domestic regulatory perimeter. This is a significant design choice: rather than confining the licensing regime to entities incorporated or physically operating within Kenya, the framework asserts jurisdiction over offshore platforms based on their targeting of Kenyan users specifically.

Alongside this extraterritorial assertion, Kenya is developing a blockchain-surveillance system intended to generate automated alerts for high-risk wallets, suspicious transactions, coin mixers, darknet-linked addresses and sanctioned entities. This surveillance tooling is being built ahead of the 4 November 2026 VASP compliance deadline, suggesting it is intended to support enforcement of both the domestic licensing perimeter and its extraterritorial extension once the deadline passes.

The practical enforceability of the extraterritorial scope against genuinely offshore platforms — those with no physical presence or licensed local counterparty in Kenya — remains unproven at this stage. A stated extraterritorial rule and an operative surveillance capability are necessary but not sufficient conditions for effective cross-border enforcement; the framework's actual reach against non-compliant offshore platforms will only become clear once enforcement action, if any, is taken after the compliance deadline.

Outlook

Whether Kenya's authorities take any enforcement action against offshore platforms under the extraterritorial scope provision, and whether the blockchain-surveillance system becomes operative in time to support the 4 November 2026 deadline, are the two developments to track for this module going forward.

C7 · Cross-Border & Travel Rule — Full Module Record0 sub-modules · 180 words · 8 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Red), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

#

This module is subscribed from the Financial Integrity Module (FIM) aml_ctf baseline; crypto-consumer research does not independently source AML/CFT claims here. Disambiguation context only: Kenya's VASP Act 2025 was developed substantially in response to the FATF's February 2024 grey-listing citing AML/CFT deficiencies, and the CBK/CMA joint task force is incorporating Travel Rule and CDD design elements into the pending 2026 Regulations; full AML/CFT claim ownership sits with FIM, not this crypto baseline.

C8 · AML/CFT Regime — Full Module Record0 sub-modules · 180 words · 1 traced claims · Re-verified 2026-11-04

The decision headline, regulatory posture (Amber), primary framework, and supervisory authority above are open on the Free Explore layer. Register free with a business email for 3 full-record passes a month, or unlock all 170 jurisdictions with Pro (£39/mo · £99/mo all products) or Firm (£199/mo · £449/mo all products).

No categories match.

Filters combine as OR inside a group and AND across groups.

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light. Not shown on this page.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-11-04. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 8 module(s), 55 finding(s), 32 source(s) in the cumulative register.

Audit trail

Machine checkChallenged on 24 Oct 2026: not upheld (9 confirmed against the cited source; 1 contradicted by the cited source; 8 could not be checked). An automated, adversarial test run by a second model; no person has assessed the result.

Think something on this page is wrong? Report an error.