Kenya's National Treasury published the Finance Bill 2026 on May 12, proposing to require cryptocurrency platforms to file annual reports with the Kenya Revenue Authority that include the names, wallet activity, and full transaction histories of Kenyan users. The bill, introduced by Treasury Cabinet Secretary John Mbadi, marks the country's most direct tax oversight attempt yet, targeting a market that recorded nearly $19 billion in crypto inflows in the year to June 2025. The bill also contains broader digital economy measures, including an expansion of the royalty tax base to cover digital platform fees and payment gateways, and extended definitions covering wallet-based gambling; this article focuses on its virtual asset reporting and information-exchange provisions.

Under proposed amendments to the Tax Procedures Act, including new sections 6C and 6D, virtual asset service providers (VASPs) operating in Kenya would be obligated to submit detailed information returns to the KRA each calendar year. Those returns must cover every Kenyan user the platform maintains a relationship with, including individuals who hold controlling interests in entities that are themselves classified as reportable. Platforms that fail to file face civil penalties of up to KES 1 million (roughly $7,750). Those who file false or misleading returns face criminal penalties of KES 100,000 (roughly $775) per violation, up to three years in prison, or both.

The bill also authorizes Kenya to enter automatic information-exchange agreements with foreign governments, targeting cross-border tax evasion involving virtual assets. That provision aligns Kenya explicitly with the OECD Cryptoasset Reporting Framework (CARF), a global standard that took effect on January 1, 2026. More than 40 countries, including South Africa, EU member states, Brazil, the UAE, and Singapore, are scheduled to begin exchanging data under CARF by 2027. Kenya's first exchanges are expected by 2028, approximately one year behind South Africa's first CARF reporting deadline of May 2027. South Africa began its own CARF implementation on March 1, 2026.

The scale of Kenya's crypto market gives the bill significant practical weight. KRA has previously estimated that Kenyan crypto volumes reached KES 2.4 trillion (approximately $18.5 billion) during 2021 and 2022 alone, representing roughly one-fifth of GDP at the time. Crypto inflows for the year ending June 2025 came in near $19 billion. On-chain stablecoin transactions in Kenya reached KES 426.4 billion (approximately $3.3 billion) in the year to June 2024. Chainalysis ranked Kenya 13th globally in its 2026 Crypto Adoption Index, the country's first appearance in the top 20, with a 12th-place ranking specifically for retail decentralized finance activity. More than 6 million Kenyans are estimated to be active crypto users.

For those users, the bill's most immediate effect is the end of pseudonymity on centralized platforms. Any Kenyan using a custodial exchange, VASP-operated wallet, or similar service should expect their identity and transaction records to flow to KRA annually and, eventually, to tax authorities across more than 40 countries committed to CARF exchanges by 2027, part of a total of 75 jurisdictions that have signed on to the framework. Users of non-custodial wallets who interact only with decentralized protocols fall outside the bill's current scope, but the international data-exchange clause extends the longer-term risk beyond any single platform. Concerns about the bill's provisions have already drawn public comment. Faith Odhiambo, former president of the Law Society of Kenya, said the bill contains "several measures" that "risk overburdening ordinary Kenyans, small businesses and investors," though her statement was a broad critique of the Finance Bill as a whole rather than a comment directed specifically at its crypto or privacy provisions. Mbadi, in response to privacy questions about the bill, was reported to have stated that "there was no amendment in the Bill interfering with data privacy," though that attribution had not been confirmed against a primary source at the time of publication.

The bill also creates a practical problem for the industry: Kenya's VASP licensing regime is not yet operational. The VASP Act 2025 took effect in November 2025 and established a dual-regulator model, splitting oversight between the Central Bank of Kenya (for wallet providers, payment processors, and stablecoin issuers) and the Capital Markets Authority (for exchanges and investment platforms). As of April 2026, no licenses had been issued. Legal observers describe the Finance Bill as creating what amounts to a compliance requirement without a corresponding legal status, imposing reporting obligations on businesses that have not yet been formally authorized to operate. The extent of that tension depends in part on how many VASPs are currently operating without licenses, a figure that has not been publicly established. Pan-African law firm Bowmans has warned broadly that the Finance Bill risks raising costs. Analysts note that this burden would fall hardest on smaller exchanges and Web3 startups that lack the compliance infrastructure required to build and maintain structured KRA reporting systems, though Bowmans' own statement addressed the bill broadly rather than its crypto reporting provisions specifically. No major Kenyan crypto exchange or industry association had publicly commented on the VASP reporting provisions at the time of publication.

Kenya's move fits a broader regional pattern. Nigeria, ranked second globally in the 2026 Adoption Index, has its own CARF commitment with first exchanges expected by 2028. Sub-Saharan Africa as a region recorded 180 percent year-on-year stablecoin growth and 184 percent DeFi growth in the most recent period tracked, with four African countries now in the global top 20 for adoption: Nigeria at second, Ethiopia at tenth, Kenya at thirteenth, and Ghana at twentieth. That growth has been driven in part by stablecoins serving remittance and savings needs for unbanked users. Analysts note that mandatory VASP identification requirements tend to affect this population most directly, given that pseudonymous access has been central to crypto adoption in underserved communities. Kenya's own stablecoin activity, reaching approximately $3.3 billion in the year to June 2024, illustrates the local scale of that exposure.

Kenya's regulators are moving toward a framework that looks increasingly like the one governing mobile money, a system the country has operated at scale since M-Pesa launched in 2007. Whether the crypto industry adapts smoothly or pushes activity toward less regulated channels will depend heavily on how quickly the VASP licensing process concludes. The compliance tension between existing reporting obligations and the absence of a functioning licensing framework will grow more acute with each month the two remain out of alignment. How much burden the final KRA reporting rules actually impose remains an open question. The Finance Bill still requires parliamentary passage before it becomes law.