Kenya

Crypto Licensing

Kenya's Virtual Asset Service Providers Act, 2025 requires any entity offering virtual asset services in or from Kenya to obtain a licence from either the Central Bank of Kenya or the Capital Markets Authority, depending on the activity class, mandating licensing of exchanges, custodial wallets and brokers among other categories. The Act commenced on 4 November 2025, and its implementing Regulations, 2026 were gazetted as Legal Notice No. 134 of 2026 on 22 July 2026, finalising a capital schedule considerably softened from the draft figures that preceded it: a virtual-asset wallet provider must hold KES 150,000,000 in capital under CBK supervision, a fiat-referenced stablecoin issuer KES 300,000,000 also under CBK, and a virtual-asset payment processor KES 10,000,000 under CBK. Under CMA supervision, an exchange requires KES 100,000,000, a broker KES 10,000,000, a virtual-asset manager KES 20,000,000, an ICO provider KES 20,000,000, a tokenisation provider KES 10,000,000 and a token-issuance platform KES 20,000,000.

Section 47 of the Act gives persons already providing virtual-asset services one year from the Act's commencement to come into compliance, placing the transition deadline at 4 November 2026. Together, the Act and the Regulations are described by commentators as creating the first comprehensive licensing regime for virtual asset service providers in Kenya, replacing what had previously been an unregulated space. The exact statutory pinpoint for the licensing perimeter and penalty provisions within the Act was not independently confirmed against primary gazette text this cycle, and that gap is noted rather than filled with inference.

One practical constraint persists notwithstanding the regime now being substantively in force: the Capital Markets Authority has continued to decline onboarding pure crypto-exchanges, stating that it must await full implementation of the VASP licensing regime before doing so. This suggests a gap between the Regulations taking legal effect and the regulator's own operational readiness to process licence applications for at least this category of intermediary.

Outlook

The 4 November 2026 transition deadline is the controlling date for the remainder of this year: virtual-asset businesses already operating in Kenya before the Act's commencement must be licensed, or have an application in train, by that date. Whether the CMA's stated reluctance to onboard exchanges resolves in time for that deadline, or creates a practical bottleneck for exchange-category applicants specifically, is the open question carried into the next cycle.

Crypto Licensing

Kenya's Virtual Asset Service Providers Act, 2025 commenced on 4 November 2025, establishing a mandatory licensing perimeter for virtual-asset businesses operating in Kenya for the first time. The implementing Virtual Asset Service Providers Regulations, 2026 were gazetted as Legal Notice No. 134, Kenya Gazette Supplement No. 185, dated 22 July 2026, and took effect on publication. The Regulations split ten licensable virtual-asset activities between the Central Bank of Kenya and the Capital Markets Authority, creating a dual-regulator supervisory architecture rather than a single consolidated licensing authority.

Existing virtual-asset operators — meaning firms already active in Kenya prior to the Act's commencement — have until 4 November 2026 to obtain licences under the new framework. As of the most recent reporting available this cycle, no licence is confirmed to have been granted under Legal Notice No. 134. This creates a live gap between the statutory architecture, which is comprehensive and now in force, and demonstrated regulatory capacity, which remains untested pending the deadline.

All findings regarding the specific content of the VASP Regulations rest on secondary commentary; no direct fetch of the Kenya Gazette Supplement No. 185 text itself was possible this cycle, so findings here are held at Probable confidence pending primary-text retrieval.

Outlook

The 4 November 2026 deadline is the decisive near-term marker. Whether any licences have been granted by that date, and how the CBK/CMA split perimeter handles the transition of Kenya's existing informal virtual-asset operator base, will be the first concrete test of the new licensing regime's practical effect.

Stablecoin Regime

Kenya's Virtual Asset Service Providers Regulations, 2026 (L.N. 134) create fiat-referenced stablecoin issuance as a distinct licensed activity class under Central Bank of Kenya supervision, separate from wallet provision, payment processing and the Capital Markets Authority-supervised categories such as exchanges and brokers. A fiat-referenced stablecoin issuer must hold a minimum of KES 300,000,000 in capital, the second-highest capital figure in the finalised schedule after the exchange category, reflecting the regulator's treatment of stablecoin issuance as carrying materially greater prudential risk than custodial wallet provision or payment processing.

The Regulations were gazetted on 22 July 2026, and the stablecoin issuer category sits within the same licensing architecture established by the VASP Act, 2025, meaning a stablecoin issuer is subject to the same one-year transition deadline running from the Act's 4 November 2025 commencement, placing existing issuers' compliance deadline at 4 November 2026. Specific reserve-composition and redemption-right requirements for licensed stablecoin issuers were not located in evidence available this cycle, and that gap is recorded rather than inferred; the licensing and capital treatment is confirmed, but the operational detail of how reserves must be held and how redemption is to be guaranteed to a holder is not yet established on the record.

Outlook

The near-term question for this module is whether the Central Bank of Kenya issues further operational guidance specifying reserve-composition and redemption-right requirements before the 4 November 2026 transition deadline binds existing issuers. Absent such guidance, a licensed stablecoin issuer would be operating against a capital requirement that is clear but a reserve regime that, on the present record, is not.

Stablecoin Regime

Kenya's Virtual Asset Service Providers Regulations, 2026 establish the country's first comprehensive stablecoin-issuer regime. Stablecoin issuers must obtain separate licences distinct from general VASP licensing, publish white papers, maintain reserve assets, ensure redeemability, undergo audits, and submit ongoing reports to their supervising authority. The Regulations additionally prohibit stablecoin issuers from paying interest on stablecoins, a design choice consistent with treating stablecoins as payment-referenced instruments rather than yield-bearing investment products.

Separately from issuer-side obligations, the Central Bank of Kenya holds authority over businesses converting virtual assets into foreign currencies and vice versa; conversion-service providers require CBK authorisation that must be renewed annually. This conversion-authorisation regime sits alongside, but is analytically distinct from, the stablecoin-issuer licensing regime itself, since a firm could conceivably require one authorisation, the other, or both depending on its specific activities.

This entire regime represents a sharp reversal from CBK's pre-VASP regulatory posture. Prior to the framework's commencement, CBK had issued public notices cautioning financial institutions against dealing in virtual currencies at all, a posture that effectively excluded crypto activity of any kind from the formal banking system. The new stablecoin regime is, at this stage, entirely untested in practice: no issuer has yet been confirmed licensed under it.

Outlook

Whether any stablecoin issuer obtains a licence under this new regime, and how CBK administers the annual renewal requirement for virtual-to-fiat conversion authorisations, are the concrete developments to track as Kenya's licensing framework moves toward the 4 November 2026 compliance deadline for the broader VASP perimeter.

Consumer Protection

The Virtual Asset Service Providers Regulations, 2026 (L.N. 134) impose asset-level due-diligence duties on exchanges and token-issuance platforms operating in Kenya. Before admitting any virtual asset for trading, a licensed exchange or token-issuance platform must conduct due diligence on that asset; where the asset is smart-contract-based, the Regulations additionally require an independent audit of the smart contract before the asset may be listed, and listed assets must be subject to continuous monitoring thereafter rather than a one-time pre-listing check. These obligations sit alongside a separate, licensee-wide customer due-diligence duty: every licensee must perform customer due diligence, including identity verification, before onboarding a consumer, regardless of whether that licensee's activity is exchange-type, custodial, or advisory in nature.

Taken together, the asset-level and customer-level due-diligence obligations place Kenya's consumer-protection regime for virtual assets on a footing that addresses both the quality of the asset being offered to a retail participant and the identity of the participant being onboarded. The Regulations do not appear, on the evidence available this cycle, to extend general consumer-protection concepts such as dispute resolution or cooling-off rights specifically to virtual-asset transactions; the obligations identified here are due-diligence and audit requirements rather than consumer-redress mechanisms.

Outlook

What remains to be seen is how actively the Capital Markets Authority and Central Bank of Kenya supervise the independent-audit requirement for smart-contract-based assets in practice, particularly for exchanges still working through onboarding ahead of the 4 November 2026 transition deadline. The consumer-protection posture established by the Regulations is substantively in force, but its enforcement intensity in the first full compliance cycle has not yet been evidenced.

Tax Treatment

Kenya's Finance Bill, 2026 proposes new sections 6C and 6D of the Tax Procedures Act, which would require virtual asset service providers to file information returns with the Kenya Revenue Authority identifying users classified as 'reportable users'. This is a proposed information-reporting framework for the crypto sector specifically, distinct from Kenya's general tax code, and it has not been confirmed enacted this cycle — it remains at Bill stage.

The proposed framework carries meaningful criminal exposure for non-compliance: a false statement made in an information return under the framework would carry a fine of KES 100,000 per false statement, or imprisonment of up to three years, or both. The pairing of a civil information-reporting obligation with a criminal false-statement penalty is a notable design feature, signalling that Kenyan authorities intend the VASP reporting regime to carry real deterrent weight from the outset rather than functioning as a purely administrative filing requirement.

As a proposed rather than enacted measure, this tax-reporting framework should be read as forward-looking rather than as a current compliance obligation for VASPs. Its ultimate enactment, and any amendments made during the Finance Bill's legislative passage, remain open questions.

Outlook

Whether the Finance Bill 2026's proposed sections 6C and 6D are enacted in their current form, amended, or dropped during the legislative process is the key marker to track for this module. If enacted, the reporting deadline and its interaction with the broader VASP licensing compliance deadline of 4 November 2026 would be worth monitoring together.

Cross-Border Transfer

Kenya's Virtual Asset Service Providers Regulations, 2026 carry extraterritorial scope, bringing offshore platforms that target Kenyan users within the domestic regulatory perimeter. This is a significant design choice: rather than confining the licensing regime to entities incorporated or physically operating within Kenya, the framework asserts jurisdiction over offshore platforms based on their targeting of Kenyan users specifically.

Alongside this extraterritorial assertion, Kenya is developing a blockchain-surveillance system intended to generate automated alerts for high-risk wallets, suspicious transactions, coin mixers, darknet-linked addresses and sanctioned entities. This surveillance tooling is being built ahead of the 4 November 2026 VASP compliance deadline, suggesting it is intended to support enforcement of both the domestic licensing perimeter and its extraterritorial extension once the deadline passes.

The practical enforceability of the extraterritorial scope against genuinely offshore platforms — those with no physical presence or licensed local counterparty in Kenya — remains unproven at this stage. A stated extraterritorial rule and an operative surveillance capability are necessary but not sufficient conditions for effective cross-border enforcement; the framework's actual reach against non-compliant offshore platforms will only become clear once enforcement action, if any, is taken after the compliance deadline.

Outlook

Whether Kenya's authorities take any enforcement action against offshore platforms under the extraterritorial scope provision, and whether the blockchain-surveillance system becomes operative in time to support the 4 November 2026 deadline, are the two developments to track for this module going forward.