Kenya: fintech & payments regulation

Regulated

VASP licensing via CMA/CBK under 2025 Act; CBK governs payments

Lead regulator
Central Bank of Kenya (CBK)
Also involved
CMA (crowdfunding, VASPs) · NFIU (AML reporting)
Core law
National Payment System Act, 2011
Entry capital
KES 10m (Payment Service Provider)
Approval timeline
3-6 months for PSP authorization
Customer assets
Segregated trust account required
Data protection
Data Protection Act, 2019 · ODPC
Sandbox
Yes - CBK Regulatory Sandbox

Kenya maintains a robust, dual-supervision fintech landscape. The Central Bank of Kenya (CBK) regulates payment services, e-money, and digital credit under the National Payment System Act. The Capital Markets Authority (CMA) regulates investment-based crowdfunding and, as of late 2025, Virtual Asset Service Providers (VASPs) jointly with the CBK. The regulatory direction is towards stricter AML/CFT compliance and formalization of the digital credit and crypto sectors.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Payment processing / gatewayLicencePayment Service Provider (PSP) License[1][2]

Requires ISO 20022 migration compliance

KES 10m3-6 monthsCentral Bank of Kenya
E-money & wallet issuanceLicencePayment Service Provider (PSP) License[1]

Mobile money wallets require CBK authorization

KES 10m3-6 monthsCentral Bank of Kenya
Domestic money transferLicencePayment Service Provider (PSP) License[1]

Domestic transfers fall under PSP framework

KES 10m3-6 monthsCentral Bank of Kenya
Cross-border remittanceLicenceMoney Remittance Provider License[3][4]

Cross-border remittance requires specific MRPS license

KES 10m3-6 monthsCentral Bank of Kenya
Agent networkLicencePayment Service Provider (PSP) License[1]

Agent networks must be authorized under PSP license

KES 10m3-6 monthsCentral Bank of Kenya
Open banking / account informationUncertainverify with regulator

No specific open banking framework yet

Foreign-exchange servicesLicenceForex Bureau License

Online FX trading regulated by CMA

KES 10m3-6 monthsCentral Bank of Kenya

New — what changed recently

  • 2025-11-04Virtual Assets Service Providers Act, 2025Established mandatory licensing for VASPs under CMA/CBK oversight.[5][6]
  • 2024-09-11KEPSS ISO 20022 MigrationMandated migration of domestic high-value payment system to ISO 20022 standards.[2][7]
  • 2023-11-08AML/CFT Amendment Act 2023Strengthened AML/CFT obligations and CDD/EDD requirements for financial institutions.[8]

Market-entry checklist

  1. 1Incorporate company and reserve nameRegister with Registrar of Companies and obtain name approval from CBK.
  2. 2Meet minimum capital requirementDeposit KES 10m for standard PSP authorization.
  3. 3Submit business plan and governance docsProvide detailed program of operations and fit-and-proper declarations.
  4. 4Implement AML/CFT frameworkEstablish CDD/EDD procedures compliant with POCAMLA amendments.
  5. 5Apply for PSP licenseSubmit formal application to CBK Bank Supervision Department.
This guide is compiled automatically from 8 primary-source documents published by Kenya's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.