Kenya VASP Licensing Guide 2026: Crypto & Fintech Regulation Under the VASP Act and Finance Act

Quick summary: Kenya’s Virtual Asset Service Providers Act, 2025 (in force since 4 November 2025) and the Finance Act, 2026 (effective 1 July 2026) together create Kenya’s first formal licensing and tax regime for crypto exchanges, wallet providers, token issuers, and stablecoin issuers. Existing operators must be licensed by 4 November 2026.

Introduction: Why Kenya Is Regulating Crypto Now

Kenya has one of Africa’s most active fintech sectors, often described as the “Silicon Savannah,” but regulation of digital assets has historically lagged behind the industry’s growth. Following Kenya’s 2024 grey-listing by the Financial Action Task Force (FATF) for deficiencies in its anti-money laundering framework, the country has moved rapidly to bring virtual asset businesses within a formal regulatory perimeter.

The Virtual Asset Service Providers Act, 2025 (Act No. 20 of 2025) came into force on 4 November 2025, and the Finance Act, 2026 has since introduced new tax obligations that apply directly to this sector. Together, these instruments mark the most significant reshaping of Kenya’s digital finance regulatory landscape to date.

What Is a VASP Under Kenyan Law?

A Virtual Asset Service Provider (VASP) is defined under the Act as any business that, on behalf of a customer, exchanges, transfers, safekeeps, administers, or participates in the issuance or offer of virtual assets.

In practice, this definition captures:

Business Type	Description
Cryptocurrency Exchanges	Bodies that facilitate the buying and selling of virtual assets for fiat currency or other virtual assets
Wallet providers and Custodians	They hold or Safeguard Virtual Assets, or the means of accessing them, on behalf of clients
Token Issuers and Initial Virtual asset offering platforms	Bodies that issue or facilitate the offer of new virtual assets to the public
Stablecoin Issuers	Subject to additional reserve and disclosure requirements given their function as a store of value
Brokers and Other Intermediaries	They facilitate the purchase, sale, or trading of virtual assets for clients.

The Act specifically excludes digital representations of fiat currency, securities, and other traditional financial instruments from the definition of a “virtual asset,” and it prohibits natural persons — as opposed to licensed entities — from conducting VASP services.

Kenya Crypto Licensing Requirements (CBK & CMA)

Oversight of VASPs is shared between the Central Bank of Kenya (CBK) and the Capital Markets Authority (CMA), coordinated through a Multi-Agency Task Force alongside the National Treasury.

The Draft Virtual Asset Service Providers Regulations, 2026, published for public participation in March 2026, set out the detailed licensing framework, including:

Local incorporation. Only locally incorporated companies (and, under later drafts, limited liability partnerships) qualify for full licensing; foreign entities must first obtain a compliance certificate.
Physical presence. Licensed VASPs must maintain a registered physical office within Kenya.
Fit-and-proper assessments. Directors and senior management are subject to background and competence review by the regulators.
Capital, governance, and AML/CFT requirements. Applicants must demonstrate adequate capital and liquidity, sound corporate governance, and compliance programmes aligned with the Proceeds of Crime and Anti-Money Laundering Act.
Stablecoin reserve requirements. Stablecoin issuers must hold at least 30% of customer funds in segregated accounts with Kenyan commercial banks, with the balance held in highly liquid, low-risk instruments such as short-term government securities.
Licensing fees. Proposals under the Finance Act, 2026 introduce a one-off licensing fee of roughly KSh 150 million, plus an annual renewal fee of approximately KSh 2 million.
Processing timelines. The regulator has up to 90 days to respond to a licence application, with licence validity running for 12 months from date of issuance.

Key deadline: Under a transitional provision in the VASP Act, businesses already operating as VASPs in Kenya must come into compliance within one year of the Act’s commencement — that is, by 4 November 2026.

CARF and Kenya’s Global Tax Alignment

The Crypto-Asset Reporting Framework (CARF) is an OECD-led initiative for the automatic international exchange of tax information relating to crypto-asset transactions, developed alongside the existing Common Reporting Standard for traditional financial accounts.

Global timeline. Jurisdictions committed to a first wave of exchanges are implementing domestic legislation from 1 January 2026, with the first international exchanges due in 2027.
Kenya’s position. Kenya has committed to CARF as part of the second wave of adopting jurisdictions, with domestic reporting frameworks expected to be in force by 1 January 2028.
Domestic alignment. The Finance Act, 2026 anticipates this obligation by requiring VASPs to file annual information returns with the Kenya Revenue Authority (KRA) covering reportable users and controlling persons, and by empowering the KRA to enter into automatic information-exchange agreements with foreign tax authorities.

A VASP operating in Kenya should now expect to collect and retain the same categories of customer tax-residence and identification data that CARF will eventually require it to report, rather than waiting until the exchange obligation formally takes effect.

Kenya’s New Digital Financial Services Excise Duty

The Finance Act, 2026 did not raise Kenya’s headline excise duty rates on digital financial services, but it substantially widened the categories of transactions that attract duty:

VASP service fees- 10% excise duty, confirming and clarifying the duty (originally introduced by the Finance Act, 2025 to replace the earlier 3% Digital Asset Tax) on fees charged by exchanges, brokers, and wallet operators — double the 5% rate applied to the betting sector.
Card and digital payment transactions– a 5% withholding tax on local card transactions, and a 20% withholding tax on certain non-resident card transactions.
VAT on digital financial services– platform-based services including money transfer, payment processing, settlement, merchant acquisition, payment gateway, and aggregation services are brought within the standard 16% VAT rate.
Interchange and payment network fees– “management or professional fees” now capture interchange and merchant service fees, and “royalty” is broadened to cover payments for software, digital platforms, and payment network services, both potentially attracting withholding tax, including on payments to international card networks.

These changes took effect on 1 July 2026, alongside the wider provisions of the Finance Act, 2026, which President William Ruto signed into law on 23 June 2026 following its passage by the National Assembly.

Compliance Checklist for the 1 July Changeover

Given that the Finance Act, 2026 provisions took effect at the start of the 2026/27 financial year, a fintech or virtual asset investor operating in or entering the Kenyan market should, as a priority:

Map excise and VAT exposure across the transaction chain — identify which fee lines (platform fees, interchange, gateway charges) now attract excise duty, withholding tax, or VAT, and update pricing and invoicing systems accordingly.
Begin VASP licence preparation now. Given the scale of the proposed licensing fee and the compliance runway required (capital, governance, AML/CFT policies, fit-and-proper documentation), don’t wait for the Regulations to be finalised.
Build CARF-ready data collection, implementing customer tax-residence and identification data capture aligned to CARF’s due-diligence categories, even though Kenya’s first exchange obligation is not due until 2028.
Reassess stablecoin reserve structuring — confirm at least 30% of customer funds are held in segregated Kenyan bank accounts, with the remainder in compliant liquid instruments.
Review agent and counterparty exposure — banks and lenders extending credit to or holding collateral from VASP businesses should conduct enhanced due diligence on licensing status and custody arrangements.
Monitor the litigation and legislative landscape — elements of the Finance Act, 2026 have already been challenged in court by consumer groups, and the draft VASP Regulations remain subject to revision.

Common VASP Structuring Mistakes to Avoid

Treating the VASP Act as optional pending final Regulations. The Act itself is already in force; the Regulations operationalise it.

Nevertheless, the licensing obligation and 4 November 2026 deadline are not contingent on their finalisation.

Underestimating the cost of formalisation. Businesses that scaled informally in Kenya’s previously unregulated environment may find licensing fees, excise duty, and VAT materially change their unit economics.
Ignoring cross-border reporting obligations. Platforms serving Kenyan users from abroad should not assume CARF and VASP reporting obligations are someone else’s problem — both regimes target cross-border virtual asset activity.

Conclusion

Kenya’s 2026 VASP regime, layered onto the tax measures introduced by the Finance Act, 2026, represents a decisive shift from an unregulated digital asset market to a licensed and taxed one, aligned with FATF and OECD expectations.

Businesses operating in this space should treat licensing, tax structuring, and cross-border reporting as an integrated compliance programme rather than three separate workstreams, and should seek up-to-date legal and tax advice given that both the Regulations and elements of the Finance Act remain subject to further legal and administrative development.

Frequently Asked Questions (FAQs)

1. What is the Virtual Asset Service Providers Act, 2025?

It’s Kenya’s first dedicated crypto law (Act No. 20 of 2025), in force since 4 November 2025, which brings crypto exchanges, wallet providers, token issuers, stablecoin issuers, and brokers under a formal licensing regime overseen by the CBK and CMA.

2. Who needs a VASP licence in Kenya?

Any business that exchanges, transfers, safekeeps, administers, or issues virtual assets on behalf of customers — including crypto exchanges, custodial wallet providers, token/IVO platforms, stablecoin issuers, and brokers. Only licensed entities may offer these services; natural persons are prohibited from doing so directly.

3. How much does a Kenya crypto licence cost?

Proposals under the Finance Act, 2026 set a one-off licensing fee of approximately KSh 150 million, plus an annual renewal fee of about KSh 2 million. These figures are drawn from the current draft framework and may be adjusted before final regulations are issued.

4. What is the deadline for existing crypto businesses to get licensed?

Businesses already operating as VASPs in Kenya must come into compliance within one year of the Act’s commencement — by 4 November 2026.

5. Can a foreign crypto company operate in Kenya without local incorporation?

Not for full licensing. Only locally incorporated companies (and, under later drafts, LLPs) qualify for a full VASP licence; foreign entities must first obtain a compliance certificate and maintain a registered physical office in Kenya.

6. What are the stablecoin reserve requirements in Kenya?

Stablecoin issuers must hold at least 30% of customer funds in segregated accounts with Kenyan commercial banks, with the remainder held in highly liquid, low-risk instruments such as short-term government securities.

7. How is crypto taxed in Kenya under the Finance Act, 2026?

VASP service fees attract a 10% excise duty. Card transactions face a 5% (local) or 20% (certain non-resident) withholding tax, and a range of digital financial services are subject to the standard 16% VAT. Interchange and payment network fees may also attract withholding tax under expanded “management fee” and “royalty” definitions.

8. What is CARF and does it apply to Kenya?

The Crypto-Asset Reporting Framework (CARF) is an OECD initiative for automatic cross-border exchange of crypto tax information. Kenya has committed to CARF as part of the second wave of adopters, with domestic reporting expected by 1 January 2028, though the Finance Act, 2026 already requires VASPs to file annual information returns with the KRA in anticipation of this.

9. When did the Finance Act, 2026 take effect?

Its digital financial services tax provisions took effect on 1 July 2026. President William Ruto signed the Act into law on 23 June 2026 after it passed the National Assembly.

10. Is the draft VASP Regulations, 2026 final?

No. The Draft Virtual Asset Service Providers Regulations, 2026 were published for public participation in March 2026 and remain subject to revision. However, the underlying VASP Act and its 4 November 2026 compliance deadline are already in force and are not contingent on the Regulations being finalised.

11. How long does a Kenya VASP licence application take to process?

Regulators are expected to have up to 90 days to respond to a licence application. Once granted, a licence is valid for 12 months from its date of issuance, not a fixed calendar year.

12. What should fintech investors do now to prepare for compliance?

Priority steps include mapping excise/VAT/withholding tax exposure across all fee lines, starting VASP licence preparation (capital, governance, AML/CFT policies) without waiting for final Regulations, building CARF-ready customer data collection, confirming stablecoin reserve compliance, and reviewing counterparty/agent exposure for banks and lenders dealing with VASPs.

This article is for general informational purposes only and does not constitute legal or tax advice. Kenya’s VASP Regulations and elements of the Finance Act, 2026 remain subject to legal and administrative development; businesses should seek up-to-date professional advice before making licensing or structuring decisions.