Nairobi, August 24, 2026 — Kenya has completed its legal framework for cryptocurrency regulation, giving all virtual asset businesses operating in the country until November 4, 2026 to obtain a licence or face penalties. The VASP Regulations 2026, gazetted on July 22 under Legal Notice No. 134, fill in the operational details of the Virtual Asset Service Providers Act that came into force on November 4, 2025. The rules cover exchanges, stablecoin issuers, tokenisation platforms, payment processors, and brokers across a 116-page framework administered jointly by the Central Bank of Kenya and the Capital Markets Authority. Before that Act, Kenya had no dedicated crypto law, and the Central Bank of Kenya had previously issued public warnings against cryptocurrency use.

Kenya is not a small market to walk away from. Chainalysis data shows the country received approximately $19 billion in crypto inflows between July 2024 and June 2025, more than double the roughly $7 billion recorded in the prior year. According to Triple-A research, an estimated six million Kenyans use cryptocurrency, and the country ranked fourth on the African continent in the 2026 Chainalysis Global Crypto Adoption Index, placing it inside the global top 20. Market revenue is projected to reach $110.4 million by the end of this year, according to Triple-A and Statista estimates.

A Framework Built on Two Regulators

The regulations split oversight along product lines. The Central Bank of Kenya supervises stablecoin issuers, wallet providers, and payment processors. The Capital Markets Authority handles exchanges, token issuance platforms, initial coin offerings (ICOs), and tokenisation activities. Ten licence categories exist in total, each carrying distinct minimum capital requirements. Stablecoin issuers face the highest bar at KES 300 million (roughly $2.3 million). At the other end, investment advisors are required to hold zero paid-up capital, though annual compliance costs including audits, cybersecurity systems, and a compliance officer are estimated at around KES 1.5 million per year. The regulatory architecture was shaped in part by IMF technical assistance provided in 2025, which informed the overall design of the framework now in force.

Offshore platforms that actively target Kenyan users must obtain a local licence regardless of whether they maintain a physical presence in the country. Violations carry significant penalties across both administrative and criminal tracks. Companies face administrative fines of up to KES 5 million and criminal fines of up to KES 8 million. Individuals face administrative fines of up to KES 3 million and criminal penalties of up to KES 5 million or five years in prison.

Treasury Slashed Draft Capital Costs Without Explanation

The final rules look very different from the March 2026 consultation draft. Treasury reduced capital requirements across nearly every category before gazettal, without publicly explaining the changes. Requirements for tokenisation providers fell 95 percent, from KES 200 million to KES 10 million. ICO platform requirements dropped 90 percent, from KES 200 million to KES 20 million. Exchange requirements fell by a third, landing at KES 100 million. A proposed 0.05 percent transaction levy on exchange trades and a 33.3 percent cap on foreign ownership were removed entirely from the final text.

The CEO of the Virtual Asset Association of Kenya had warned during the consultation period that the original draft "risks recreating an IPO-level regime for even modest token raises," noting that most Kenyan token raises fall between KES 50 and 100 million. The revised thresholds go some distance toward addressing those concerns and are expected to benefit smaller local firms that would have been priced out under the original requirements.

Major exchanges are already moving. Executives from Binance, Yellow Card, and VALR all confirmed they are pursuing licences. Binance Africa's legal head said: "No regulation is perfect, but this is a great start...working with regulators who understand industry dynamics is positive." Yellow Card's legal head added that Kenya is "a key economy" and that a positive licensing outcome "would increase partnerships and business expansion." VALR's Kenya Manager noted that "obtaining local authorisation is a key priority for our long-term presence and expansion efforts."

Two Kenyan-native firms are also in the queue. Kotani Pay and Roqqu, which acquired local platform Flitaa in 2025, are both pursuing licences under the new framework. Their participation illustrates that the tiered capital reductions have concrete benefits for smaller domestic players, not only for international exchanges.

The Stablecoin Question Has No Easy Answer

The most consequential provision for everyday users may be the stablecoin rules. Licensed stablecoin issuers must hold at least 30 percent of reserves in segregated trust accounts at Kenyan commercial banks, with the remaining 70 percent invested inside Kenya. No interest may be earned on reserves. Crucially, the CBK can direct licensed exchanges to delist any stablecoin not issued by a licensed local entity.

USDT, USDC, and USDm (issued by Mento Labs), which together dominate Kenyan crypto trading and cross-border payments, are all potentially affected. Stablecoin adoption across Sub-Saharan Africa surged 180 percent in the past year, with dollar-backed tokens accounting for an estimated 96 to 98 percent of global stablecoin transfer volume, according to industry data. Pankaj Bengani, co-founder of Meld and a former Block executive, cautioned that restricting dollar-backed tokens before local alternatives mature could create "a more fragmented market with higher costs for cross-border payments."

The stakes for ordinary Kenyans are direct. If no compliant local stablecoin exists before the November 4 deadline, exchanges will face a binary choice: delist USDT, USDC, and USDm or operate out of compliance. No off-ramp for that scenario is defined in the current text. Kenya is not alone in pressing the question of monetary sovereignty within crypto. Nigeria has pursued a naira-denominated stablecoin strategy, and Ghana's e-Cedi programme follows a similar logic of states asserting control over digital monetary instruments before international dollar-backed tokens become further entrenched.

What Comes Next

Kenya's framework arrives as a cluster of African regulators converge on similar VASP licensing models. South Africa's FSCA issued the continent's first licensed crypto asset service providers in 2023, and Nigeria's Securities and Exchange Commission has operated its own framework since 2024. Ghana is currently at the consultation stage. Kenya's dual-regulator structure and tiered capital approach is being watched as a potential template for East African neighbours. The framework also echoes developments in South Asia: India's offshore exchange tax regime and Pakistan's VASP licensing programme under its Securities and Exchange Commission have both required global platforms to make structural changes to how they serve local users, providing instructive precedents for the extraterritorial licensing requirement Kenya has now adopted.

The November 4 deadline is now ten weeks away. Firms that miss it face fines, potential delisting orders, and criminal exposure for executives. The Capital Markets Authority is also reportedly seeking a blockchain surveillance tool for crime tracking, a signal that enforcement capacity is being built in parallel with the licensing window, not after it. For the six million Kenyans who currently use crypto with relatively few barriers, the practical effect of compliance season will depend almost entirely on how many of their preferred platforms choose to stay.