Kenya's National Treasury has introduced legislation that would require all virtual asset service providers (VASPs) operating in the country to file annual reports with the Kenya Revenue Authority, disclosing the names, wallet records, and complete transaction histories of Kenyan customers. The Finance Bill 2026, tabled in May 2026 and championed by Treasury Cabinet Secretary John Mbadi, marks one of the most significant expansions of state oversight into Kenya's crypto sector to date, adding the KRA as a third regulatory authority alongside the Central Bank of Kenya (which supervises stablecoins, payment tokens, and wallets) and the Capital Markets Authority (which licenses exchanges, brokers, and tokenization platforms).

The bill inserts two new sections, 6C and 6D, into the Tax Procedures Act. Under the proposed language, VASPs, a term covering exchanges, brokers, wallets, and related platforms, must submit user identification data and activity records on a yearly basis. Platforms that file false returns face a penalty of KES 100,000 (roughly $775) per false entry, up to three years in prison, or both, at the court's discretion. Failure to file at all carries a separate penalty of KES 1,000,000 (roughly $7,750) per occurrence. These penalties sit within a broader enforcement architecture: the VASP Act (No. 20 of 2025) already carries a maximum non-compliance penalty of KES 10 million (roughly $77,000) or up to ten years imprisonment, giving regulators substantial combined leverage. The bill also grants the KRA authority to negotiate information-sharing agreements with foreign tax agencies, providing the legal basis to pursue cross-border crypto data exchanges.

The scale of what regulators are trying to reach is significant. More than six million Kenyans are estimated to use cryptocurrency. The KRA estimates that crypto transactions in Kenya totalled KES 2.4 trillion, roughly $18.5 billion and approximately 20 percent of GDP, between 2021 and 2022. More recent data from Chainalysis shows Kenya received approximately $19 billion in cryptocurrency inflows between July 2024 and June 2025. The KRA collected KES 10 billion from crypto traders by 2024, a milestone in absolute terms but a fraction of actual market activity, which illustrates the compliance gap the Finance Bill is designed to close. Across Sub-Saharan Africa, on-chain value flows topped $205 billion in that same 12-month period, up 52 percent year-over-year, making the region the third fastest-growing crypto market globally, trailing only Asia-Pacific and Latin America.

The bill is the enforcement layer on top of the VASP Act (No. 20 of 2025), which Kenya's president signed into law in October 2025 and which established the licensing framework for crypto businesses for the first time. The Finance Bill 2026 adds the tax reporting architecture that the VASP Act did not cover. In March 2026, the government published Draft VASP Regulations 2026 for public comment, with a deadline of April 10, 2026, meaning the Finance Bill arrives on top of a still-active rulemaking process that compounds compliance uncertainty across the industry. The combined pressure behind both measures is Kenya's placement on the Financial Action Task Force grey list in February 2024, a designation that signals deficiencies in anti-money laundering and counter-terrorism financing controls. Grey-list status increases scrutiny from correspondent banks and raises the cost of cross-border remittances, a pressure point in a country where diaspora payments represent a meaningful share of household income. The Finance Bill also aligns Kenya with the OECD Cryptoasset Reporting Framework (CARF), which took effect globally on January 1, 2026. Kenya and Nigeria are targeting their first international data exchanges under CARF by 2028; South Africa is aiming for 2027.

The practical burden of the new rules will not fall equally across the industry. Larger centralized exchanges already maintain KYC infrastructure under the VASP Act, so the annual KRA filing requirement adds compliance overhead rather than a fundamental operational change. The heavier impact will be felt by smaller fintech startups without enterprise-grade data systems, and by peer-to-peer traders. P2P activity represents a significant and above-average share of crypto activity in Kenya, with Chainalysis data showing that retail transactions under $10,000 account for more than 8 percent of all Sub-Saharan Africa crypto volume, above the global average of 6 percent. KYC mandates built around institutional platforms will reach deep into everyday micro-transactions. For foreign platforms serving Kenyan users without a local entity registered, the new provisions create clear legal exposure.

The privacy dimension of the bill has not yet produced a formal legal challenge, but Kenya's constitution contains strong privacy protections, and mandatory wallet-to-identity linkage at the KRA level is likely to draw scrutiny from digital rights organizations. Legal analysts note that the government has not published a data storage security framework for the information VASPs would be required to submit, a gap that advocates will likely raise before the bill is finalized.

If the Finance Bill passes in its current form, the most immediate forward-looking question is whether implementation accelerates Kenya's FATF grey list exit. Exit would lower risk premiums on remittance corridors and reduce the transaction costs currently baked into diaspora payment channels, a concrete benefit for ordinary Kenyans and an outcome the government has signalled as a key rationale for the compliance push. As of publication, the KRA had not gazetted the specific data schemas that VASPs must use for annual returns, meaning developers and compliance teams at crypto platforms will be watching the regulatory gazette closely through the rest of 2026.