Crypto in Kenya: regulation becomes concrete
The era of a simple draft bill is over. The Virtual Asset Service Providers Regulations 2026 were published in July, putting the law adopted in 2025 into practice. The move extends the tougher regulatory approach already observed by BrefCrypto in Kenya, where stablecoins, wallets and exchanges are gradually entering a much more closely supervised framework.
The system relies on two regulators. The Central Bank of Kenya oversees payment-related activities, certain wallets and stablecoins. The Capital Markets Authority is responsible in particular for exchanges, brokers, asset managers, tokenization platforms and virtual asset offerings.
The rules do not apply only to companies physically based in Nairobi. They also cover foreign businesses providing services to Kenyan users. This is likely one of the most significant provisions for Binance, Coinbase and other major international platforms: being based abroad is no longer enough to avoid the local framework.
Operators must notably demonstrate sound governance, cybersecurity, AML/CFT controls, the segregation of customer funds and adequate financial capacity.
Companies already operating when the law took effect have until November 4, 2026 under a transitional period. After that date, continuing a regulated activity without a license could expose a company to criminal and financial penalties.
Kenya is therefore moving quickly from regulatory tolerance to supervision.
Stablecoins reach a compromise
The process has not been entirely straightforward.
Some requirements in the first draft published in March immediately concerned industry participants. Stablecoin issuers, in particular, were required to hold 500 million shillings in minimum capital. Exchanges and wallets also faced high thresholds. Local players feared these conditions would favor large foreign companies able to mobilize several million dollars with relative ease.
The government partially responded to those concerns.
Under the final rules, the minimum capital required from a stablecoin issuer was reduced to KSh 300 million. The regulations nevertheless retain a cautious structure, including full reserves, redemption rules and broad powers for the central bank.
The requirement that part of the reserves be held within Kenya’s banking system remains under particular scrutiny. The debate had already reached Parliament, where several lawmakers questioned the rationale for requiring an international issuer to hold part of its reserve assets locally.
The issue goes beyond compliance.
Stablecoins are rapidly becoming payments infrastructure in Africa. DCS Pay and Kotani Pay are already seeking to connect USDT and USDC to local currencies and mobile money, with Kenya among their target markets.
A rule that is too strict could therefore protect the financial system while pushing users toward offshore platforms or P2P transactions that are harder to supervise.
That is precisely the balance Nairobi must strike.
November 4 will be the real test
Kenya’s framework nevertheless has an advantage that several other African countries do not yet have: it gives businesses a much clearer answer about their regulatory status.
The VASP Act defines the regulated activities and the responsible authorities. The 2026 rules add the practical licensing requirements. The CBK has even begun recruiting specialists specifically tasked with reviewing applications, approving certain new products and monitoring operators after authorization.
This institutional work is taking place in a market that is already significant. Estimates cited in several analyses put the value of crypto received in Kenya over a recent twelve-month period at nearly $18 billion to $19 billion. Stablecoins, international transfers and trading now represent a genuine economic activity, not a marginal experiment.
The risk, then, is less a lack of demand than the form that demand will take once the transitional period ends.
Large platforms will probably be able to absorb the cost of compliance. A young local fintech, by contrast, will have to fund regulatory capital, cybersecurity, compliance staff, audits, reporting and a physical presence before it has even reached significant scale.
Kenya has already experienced this tension with M-Pesa: allowing innovation enough room to breathe until it becomes useful, then building the safeguards.
Crypto is now reaching the same crossroads.
The CMA is also beginning to target unauthorized operators. BrefCrypto recently reported on a warning concerning 15 investment platforms in Kenya, several of which directly used crypto or trading to attract investors.
This offers a clear indication of Nairobi’s direction: open the door to crypto businesses while gradually closing it to anonymous or unregulated operators.
November 4, 2026 will therefore provide an initial concrete answer. How many local VASPs will apply for a license? How many international platforms will accept Kenya’s requirements? And how many operators will simply leave the market?
Kenya has already solved the first part of the problem: finally giving crypto a legal status. It must now ensure that regulation intended to professionalize the sector does not unintentionally turn local innovation into a market reserved for the deepest-pocketed players.
