TLDR
Kenya has moved its new licensing regime for crypto firms forward by completing consultation on detailed Virtual Asset Service Provider (VASP) regulations, paving the way for formal oversight.
- Kenyas Treasury has finished public participation on the 2026 VASP Regulations, which implement the 2025 VASP Act for crypto and other virtual asset providers.
- The draft rules require licenses, capital thresholds, AML/CTF controls, market conduct standards, and segregation of client funds for exchanges, brokers, custodians, and similar firms.
- The next phase is finalizing and activating the rules, which could force unlicensed platforms out of the Kenyan market while giving compliant firms clearer banking and regulatory footing.
Deep Dive
1. Kenyas VASP Rulemaking
Kenyas National Treasury has completed public participation on the 2026 VASP Regulations, following the 2025 VASP Act, and is now reviewing submissions before finalizing the framework for virtual asset service providers.
The regulations create a legal perimeter for firms dealing in cryptocurrencies, tokenized assets, and stablecoins by defining VASPs and setting out authorization and ongoing compliance requirements.
Oversight is set to be shared by the Central Bank of Kenya, the Capital Markets Authority, and the Treasury, aiming for coordinated supervision across payments, trading, and capital markets.
Kenya is shifting from informal warnings toward a structured licensing regime that brings crypto businesses into the regulated financial system instead of leaving them in a grey zone.
2. Key Requirements For Firms
The draft rules require VASPs to obtain licenses, meet minimum capital thresholds, pass ownership fit and proper checks, and put in place governance, risk management, and internal control systems.
They embed antimoney laundering and counterterrorism financing obligations, including customer due diligence and reporting, aligning Kenya with global virtual asset standards.
Consumer protection is central: firms must give clear risk disclosures, use transparent pricing, maintain complaint-handling processes, and segregate client assets from operational funds to reduce misuse risk.
Market conduct rules require due diligence before listing assets, continuous monitoring of trading, and explicit bans on market manipulation, insider trading, and false trading, with audits, cybersecurity standards, and insurance to cover operational risks.
Any exchange or wallet provider serving Kenyan users will need bank-grade controls, not just a website and order book, to keep operating legally.
3. What Crypto Users Should Watch
Authorities still need to consolidate feedback and publish the final regulations, after which a start date and transition period for existing providers will become critical.
Users should watch which global and local platforms apply for and receive licenses, since unlicensed services may be required to stop serving Kenyan residents once the rules are in force.
For businesses, the key signals will be how strictly Kenya enforces capital, AML, and conduct standards and whether banks become more willing to support licensed VASPs with payment and fiat on/off-ramp services.
If you rely on a particular exchange or broker in Kenya, it will be important to see whether it becomes licensed or whether you need to migrate to a regulated provider once the regime is live.
Conclusion
Kenyas progress on VASP regulations marks a shift from an informal, high-risk environment toward a clearer, license-based regime for crypto firms.
Stricter requirements on capital, conduct, and AML controls could squeeze out weaker or offshore platforms, while giving compliant providers and users more legal certainty and potentially easier access to local financial infrastructure.
