KE · run world-payments-2026-06-24 v13.3.0
content: ai_generated 99 sources retrieved model claude-opus-4-8 ·

Kenya

KE schema world-payments-v1 trajectory: not recorded

Last updated · 14 modules · 58 sourced findings · 99 sources in the cumulative register

14Modulesbaseline.modules[]
58Findingsmodules[].findings[]
15Tier-1 sourcesrun_metadata.t1_source_count
Confidence mix (sums to 14 rendered modules; click to filter)

Jurisdiction brief

Lead Signal

Kenya's payments operating environment now turns on a single, sharply defined gap: a digital-money statute that is in force against implementing rules that are not. The Virtual Asset Service Providers (VASP) Act 2025 was assented in October 2025 and came into force on 4 November 2025, establishing a dual-regulator model in which the Central Bank of Kenya licenses payment-related virtual assets — stablecoin dealers, virtual asset wallet providers, payment processors and stablecoin-issuance providers — while the Capital Markets Authority supervises exchanges, brokers and tokenisation platforms. The operationalising regulations, however, remain in draft. The draft National Treasury rules would set the heaviest capital requirement on stablecoin issuers at KES 500 million (~USD 3.8m), counting only fully paid-up funds, with licensing fees ranging from KES 100,000 to KES 2 million. Consultation on those rules closed on 10 April 2026, but gazette had not been confirmed as of 24 June 2026, and no VASP had been licensed. The framework exists; operational certainty does not. We assess this split — in-force Act, pending subsidiary rules — as the defining commercial-certainty gap for any issuer planning Kenya entry, and we hold confidence at Assessed rather than High precisely because the licensing mechanics are unresolved.

14 of 14 modules
Signal
Density

Selections OR within a group, AND across groups. Press / to search.

#

CBK single-tier non-bank PSP authorisation regime under NPS Act 2011 / NPS Regulations 2014; four PSP categories with First Schedule capital floors (KES 5m / 50m / 20m / 1m); no EMI/PI passporting; foreign licences not recognised; local incorporation mandatory; enforcement against unlicensed operators intensifying since 2023.

Movement — NEWPSP licensing categorisation and non-resident licensing requirements confirmed.First-cycle establishment of the W1a standing position for KE.
Standing sub-brief313 words · last cycle wpm-2026-08-21

Licensing, Authorisation & Market Access

Kenya runs a mature, single-tier non-bank PSP authorisation regime administered by the Central Bank of Kenya under the National Payment System Act 2011 and the NPS Regulations 2014. The framework defines four PSP categories — Electronic Retail Payment Service Provider, Designated Payment Instrument Issuer, E-Money Issuer, and Small E-Money Issuer. Section 12 of the NPS Act prohibits the conduct of PSP business without CBK authorisation. Critically for non-bank payment institutions and e-money issuers, there is no EMI or PI passporting, and the CBK does not recognise other central banks' licences: each applicant must be locally incorporated and separately CBK-authorised. Banks, by contrast, are licensed under the Banking Act (Cap 488), a distinct prudential track from the non-bank PI/EMI regime described here.

Periodic update · new data 2026-08-25 · run wpm-2026-08-21

Licensing, Authorisation & Market Access

Kenya's payment service provider licensing regime, administered by the Central Bank of Kenya under the National Payment System Act 2011 and the National Payment System Regulations 2014, is structured around four categories defined by transaction type and volume rather than a single generic payment-services licence: Electronic Retail PSP, Designated Payment Instrument Issuer, E-Money Issuer, and Small E-Money Issuer. This category-based design means an applicant's obligations, capital expectations and conduct requirements are calibrated to the specific licence category it falls into, rather than a uniform standard applied across all payment providers.

The most material market-access finding this cycle concerns non-resident fintechs. Any non-resident firm seeking to serve Kenyan customers must obtain CBK licensing regardless of whether it maintains a physical presence in Kenya, and must additionally establish a local registered office and appoint a resident compliance officer or agent. CBK does not recognise foreign-issued payment licences as a substitute for local authorisation. This bears with particular weight on the non-bank PI/EMI segment: a bank-affiliated PSP typically already carries a banking charter and local presence, whereas a pure non-bank fintech seeking Kenya-facing distribution faces the local-incorporation and resident-officer requirement as the binding constraint on market entry, with no lighter-touch cross-border passporting route available.

For an operator assessing entry, this licensing structure should be read as a moderate-to-high market-access barrier for non-resident non-bank players specifically, while posing a lower incremental barrier for firms that already hold, or can obtain, a Kenyan banking licence.

Outlook

Whether CBK moves toward any form of streamlined or passported authorisation for non-resident PSPs already licensed in comparable regimes is not indicated by this cycle's evidence; the current posture is one of full local licensing with no recognised foreign-licence equivalence. Continued growth in Kenya's digital-payments market may increase pressure for a more efficient non-resident onboarding pathway, but no such reform is signalled this cycle.

Sources and findings (5)
  1. T1CBK — National Payment System Act 2011 (No. 39 of 2011), s.12 PSP authorisation (centralbank.go.ke)
  2. T1National Payment System Regulations 2014 — PSP licensing/fees; core capital KES 5m (centralbank.go.ke)
  3. T1CBK NPSA 2011 / NPSR 2014 — PSP authorisation framework (centralbank.go.ke)
  4. T1CBK NPSA 2011 — authorisation of payment service providers (centralbank.go.ke)
  5. T3https://www.businessdailyafrica.com/bd/corporate/companies/kcb-to-acquire-minority-stake-in-payment-service-pesapal-5252190 [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]

#

Safeguarding of customer/e-money funds in Kenya is achieved through a mandatory trust structure: PSPs must establish a trust with a CBK-licensed bank to hold customer funds, supported by a trust deed required under the NPS Act. Conduct and consumer obligations layer the Consumer Protection Act 2012, Data Protection Act 2019, and POCAMLA. Promotions/product names require CBK approval. The supervising authority is the CBK; banks follow a separate Banking Act conduct track.

Open gap — wpm-int-4Settlement-finality / insolvency treatment of safeguarded e-money funds held under the bank-trust structure is not fully resolved in the available sources; legal-infrastructure depth is partial.Legal-infrastructure vector under-indexed; deepen safeguarding-insolvency treatment in periodic runs.
Standing sub-brief226 words · last cycle wpm-2026-06-24

Conduct, Safeguarding & Financial Promotions

Safeguarding of customer funds in Kenya runs through a mandatory bank-trust model. Non-bank PSPs must establish a trust with a CBK-licensed bank to hold customer and e-money funds, supported by a trust deed required under the NPS Act. This determines where the float sits and the insolvency-remoteness of customer funds for Kenyan e-money issuers. Conduct is layered by the Consumer Protection Act 2012, the Data Protection Act 2019 and POCAMLA, with data-controller registration and a Fit-and-Proper assessment also required of applicants.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T1CBK E-Money Regulations 2013 — e-money issuer conduct/safeguarding (centralbank.go.ke)
  2. T1National Payment System Regulations 2014 — customer data/conduct (centralbank.go.ke)
  3. T1https://new.kenyalaw.org/akn/ke/act/ln/2014/109/eng@2022-12-31
  4. T1https://www.centralbank.go.ke/images/docs/legislation/NPSRegulations2014.pdf

#

VASP Act 2025 in force 4 Nov 2025; dual-regulator model (CBK payment-related virtual assets/stablecoins; CMA exchanges/tokenisation). Implementing VASP Regulations 2026 in draft (consultation closed 10 Apr 2026), not confirmed gazetted as of 24 Jun 2026; stablecoin-issuer capital floor ~KES 500m proposed.

Open gap — wpm-int-1As of the 24 Jun 2026 collection date, whether the VASP Regulations 2026 were finalised/gazetted after the 10 Apr 2026 consultation deadline is unconfirmed; status remains draft per mid-May 2026 sources. Diff against first periodic run.Emerging-market crypto-rule operationalisation under-indexed; confirm gazette/licensing-commencement status next run.
Standing sub-brief272 words · last cycle wpm-2026-06-24

Stablecoins & Digital Money

The defining digital-money development for Kenya is the Virtual Asset Service Providers Act 2025, assented in October 2025 (Act No. 20 of 2025, gazetted 21 October 2025) and in force from 4 November 2025. The Act establishes a dual-regulator model that crosses the bank and non-bank lines: the CBK licenses payment-related virtual assets — stablecoin dealers, virtual asset wallet providers, virtual asset payment processors and stablecoin-issuance providers — while the Capital Markets Authority supervises exchanges, brokers and tokenisation platforms. The Act brings stablecoin payment rails into a supervised perimeter.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T1Kenya VASP Act 2025 (in force 4 Nov 2025); draft VASP Regs 2026 (CBK/CMA) (centralbank.go.ke)
  2. T1Draft VASP Regulations 2026 — consultation closed 10 Apr 2026 (centralbank.go.ke)
  3. T3https://thecurrencyanalytics.com/altcoins/new-kenyan-regulations-demand-capital-buffers-for-crypto-companies-252352 [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]
  4. T3https://www.afriwise.com/blog/kenya-now-has-a-crypto-law-virtual-asset-service-providers-vasp-bill-2025 [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]

#

Operational resilience for non-bank PSPs is anchored in the CBK Guideline on Cybersecurity for Payment Service Providers (July 2019), issued under s.31(2)(b) NPS Act, mandating board-level cyber governance, a CISO, written policies, dependency/third-party risk management and a 24-hour incident-notification obligation to CBK plus quarterly reporting. Banks follow the separate 2017 Guidance Note on Cybersecurity. The Kenya Electronic Payment and Settlement System (KEPSS) is the systemically important RTGS. M-Pesa's September 2025 'Fintech 2.0' core migration reflects active resilience/critical-infra modernisation.

Movement — NEWKEPSS extended hours and FPS development confirmed.First-cycle establishment of the W3 standing position for KE.
Open gap — wpm-int-6No domestic DORA-style consolidated operational-resilience statute; resilience runs through CBK 2019 cyber guideline and ICT risk-management guidelines. Confirm whether a consolidated resilience instrument emerges.Searched, none in force per absent_field_provenance.
Standing sub-brief231 words · last cycle wpm-2026-08-21

Operational Resilience & Critical Infrastructure

Operational resilience for non-bank PSPs in Kenya is anchored in the CBK Guideline on Cybersecurity for Payment Service Providers (July 2019), issued under section 31(2)(b) of the NPS Act. The guideline mandates board-level cyber governance, a non-outsourceable CISO, written policies, third-party and dependency risk management, a 24-hour incident-notification obligation to the CBK and quarterly incident-handling reporting. Banks follow a separate 2017 Guidance Note, maintaining the bank/non-bank distinction at the resilience layer. No consolidated DORA-equivalent statute has been identified; resilience runs through the cyber guideline and ICT risk-management guidelines rather than a single instrument, a gap relative to EU peers.

Periodic update · new data 2026-08-25 · run wpm-2026-08-21

Operational Resilience & Critical Infrastructure

Kenya's core settlement infrastructure is being incrementally modernised. The Kenya Electronic Payment and Settlement System extended its operating hours to 7:00am-7:00pm on business days from July 2025, a bank-side change to the country's high-value interbank settlement rail intended to improve liquidity management and settlement efficiency, part of the broader National Payments Strategy 2022-2025 modernisation programme.

Separately, and at an earlier stage of development, CBK is building a Fast Payment System intended to enable instant transfers across banks, mobile wallets and fintechs. Unlike KEPSS, which is bank-anchored, the Fast Payment System is explicitly conceived to span both bank and non-bank participants; however, its institutional governance framework and the technology-infrastructure options underpinning it are still being established, and no operative system exists this cycle. This is best characterised as an early-stage, UPI-like ambition rather than a near-term deliverable.

Outlook

The resolution of the Fast Payment System's governance and technology-infrastructure questions is the clearest medium-term marker for Kenya's resilience and instant-payments trajectory. Whether the system is built as a CBK-operated utility or delegated to an industry consortium, and whether non-bank participants receive direct access or must connect through sponsoring banks, will determine how far it departs from today's bank-anchored settlement model.

Sources and findings (4)
  1. T1https://www.centralbank.go.ke/2019/07/05/cybersecurity-guideline-for-payment-service-providers/
  2. T3https://cms.law/en/int/expert-guides/cms-expert-guide-to-data-protection-and-cyber-security-laws/kenya [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]
  3. T3https://bowmanslaw.com/insights/cybersecurity-in-the-payment-service-space/ [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]
  4. T3https://moseskemibaro.medium.com/m-pesa-reloaded-the-reasons-why-safaricoms-fintech-2-0-02348f2eefe4 [CAVEAT: Tier 3 secondary source — Assessed; verify vs primary pre-publication]

#

Card-scheme compliance in Kenya operates through the global Visa/Mastercard rulebooks and PCI DSS enforced via acquirers; Kenyan PSPs such as Pesapal hold PCI DSS Level 1 certification. Kenya completed an EMV chip migration ('Great Migration to EMV Chip', 2013). Scheme programmes including Visa's consolidated Acquirer Monitoring Program (VAMP, effective April 2025 with tighter thresholds in January 2026) and Mastercard SDP apply to Kenyan acquirers. There is no domestic interchange-cap regulation comparable to the EU IFR identified; interchange is governed by scheme rules.

Open gap — wpm-int-3No domestic statutory interchange-cap regulation equivalent to EU IFR identified for Kenya; interchange governed by Visa/Mastercard scheme rules. Confirm whether national-switch/FPS rollout introduces domestic interchange/pricing rules.Searched, none in force per absent_field_provenance.
Standing sub-brief205 words · last cycle wpm-2026-06-24

Scheme & Network Compliance

Card-scheme compliance in Kenya operates through the global Visa and Mastercard rulebooks and PCI DSS, enforced via acquirers. Visa's consolidated Acquirer Monitoring Program (VAMP) took effect on 1 April 2025, with tighter thresholds from January 2026 and merchant assessment from October 2025; Mastercard's Site Data Protection programme applies in parallel. These scheme rules flow down to Kenyan acquirers — both bank-led and non-bank gateways — and interchange is governed by scheme rules rather than statute. No domestic interchange-cap regulation comparable to the EU Interchange Fee Regulation has been identified.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T2https://corporate.visa.com/en/resources/security-compliance.html
  2. T3https://www.pesapal.com/security
  3. T3https://www.decta.com/company/media/how-visa-and-mastercard-ensure-compliance-for-acquirers-and-issuers
  4. T1https://www.centralbank.go.ke/national-payments-system/

#

Kenya's principal corridors are intra-African and diaspora remittance flows, plus regional East African trade. Domestic rails are mobile-money (M-Pesa dominant) and the bank-owned Pesalink real-time network. Cross-border integration is led by PAPSS: Kenya (via CBK) became the 10th African central bank on PAPSS, and in February 2026 Pesalink became a PAPSS Technical Connectivity Provider, linking 80+ Kenyan institutions to 160+ PAPSS banks for instant local-currency cross-border settlement, reducing reliance on correspondent banking and USD. A CBK Fast Payment System (FPS) was targeted for 2025.

Movement — NEWMandated mobile-money interoperability confirmed.First-cycle establishment of the W5 standing position for KE.
Open gap — wpm-int-2CBK Fast Payment System (national switch) launch status unconfirmed; 2025 target apparently not met, industry estimates up to four-year build. Current operational status not reported.EM instant-payment-rail launch timelines under-indexed; verify FPS go-live in periodic runs.
Standing sub-brief242 words · last cycle wpm-2026-08-21

Payment Corridor Dynamics

The material corridor development is the integration of Pesalink with PAPSS. Announced on 26 February 2026, Pesalink became a PAPSS Technical Connectivity Provider, connecting 80+ Kenyan bank, fintech, SACCO and telco participants to 160+ commercial banks and fintechs on PAPSS and enabling instant 24/7 cross-border payments settled in local currencies. Kenya, via the CBK, is the 10th African central bank on PAPSS. The strategic effect is to displace USD correspondent chains for intra-African flows, addressing the friction of intra-African remittance costs that averaged 7-8% in 2023 with 3-7 day settlement.

Periodic update · new data 2026-08-25 · run wpm-2026-08-21

Payment Corridor Dynamics

Kenya's domestic payment-corridor dynamics are increasingly defined by mandated interoperability rather than by open competition among siloed networks. Under CBK's National Payments Strategy 2022-2025, wallet-to-wallet interoperability is mandated between M-Pesa, Airtel Money and T-Kash, Kenya's three principal mobile-money networks, alongside merchant till-number interoperability across mobile network operators. This mandated interoperability enables seamless instant transfers between customers of different mobile-money providers and materially simplifies payment acceptance for small and medium merchants, who no longer need to maintain separate till arrangements for each network's customer base.

This interoperability mandate sits on the non-bank PI/EMI side of Kenya's payments architecture, since mobile-money issuers operate as e-money issuers rather than banks; it complements, rather than substitutes for, the bank-anchored KEPSS settlement rail addressed elsewhere in this cycle's coverage.

Outlook

The durability of Kenya's interoperability mandate as a competitive-neutrality tool will be tested as CBK's Fast Payment System develops; if the FPS incorporates the existing mobile-money interoperability architecture directly, corridor dynamics may consolidate further around a single instant-payments rail, whereas a parallel build could preserve today's more federated model.

Sources and findings (4)
  1. T2https://www.afreximbank.com/pesalink-and-papss-unlock-cross-border-payments-in-local-currencies-in-kenya/
  2. T3https://www.microsave.net/2025/07/08/the-next-chapter-in-kenyas-digital-payment-revolution/
  3. T3https://ibsintelligence.com/ibsi-news/pesalink-and-papss-unlock-cross-border-payments-in-kenya/
  4. T3https://www.dawan.africa/news/pesalink-and-papss-eliminate-cross-border-payment-barriers-in-kenya

#

Kenya's payments market is telco-mobile-money-dominated: Safaricom's M-Pesa holds ~89.7% of mobile-money market share (Airtel Money ~10.3%), with mobile-money penetration ~91% (June 2025) and ~48.6m subscriptions. M-Pesa transacts activity equivalent to ~8% of GDP and ~44% of Safaricom service revenue. Banks (KCB, Equity, NCBA) participate largely via telco-partnered products (M-Shwari, KCB M-Pesa, Fuliza) and the bank-owned Pesalink rail. The structure is a closed-ecosystem incumbency long criticised for limited interoperability; CBK's national-switch/FPS agenda targets opening it.

Standing sub-brief164 words · last cycle wpm-2026-06-24

Industry Structure & Commercial Dynamics

Kenya's payments market structure is a near-monopoly mobile-money ecosystem. Per Communications Authority Q1 FY2025/2026 statistics, M-Pesa holds approximately 89.7% mobile-money market share against Airtel Money's roughly 10.3%, with 48.6 million mobile-money subscriptions and around 91-93% penetration. M-Pesa, a non-bank operator, handles transaction activity equivalent to roughly 8% of Kenya's GDP and processes over 61 million transactions daily, anchoring a long-criticised closed ecosystem. Banks participate via telco-partnered products such as M-Shwari, KCB M-Pesa and Fuliza, and through the bank-owned Pesalink rail.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T3https://www.ecofinagency.com/news-finances/2412-51647-safaricom-and-airtel-money-licensed-to-facilitate-capital-markets-access-in-kenya
  2. T3https://business.cornell.edu/article/2025/12/why-fintechs-are-winning-in-nigeria/
  3. T3https://techweez.com/2026/03/28/how-mobile-money-became-kenyas-core-banking-system/
  4. T3https://sdk.finance/blog/fintech-kenya-2025-landscape-overview-growth-drivers-and-barriers/

Payments-relevant litigation/enforcement in Kenya clusters around (a) scope-of-licensing disputes (a 2022 High Court decision extending the PSP definition to SWIFT-infrastructure users; CBK action against unlicensed players such as Flutterwave and Chipper Cash in 2022), and (b) data-protection enforcement against digital lenders by the ODPC (e.g. Mulla Pride Ltd / KeCredit / FairKash; White Path Company). The CBK has run public cautionary notices and enforcement against unlicensed PSPs since 2023.

Standing sub-brief230 words · last cycle wpm-2026-06-24

Legal & Litigation

Two litigation clusters define the W7 picture. First, a landmark 2022 High Court decision extended the PSP definition to companies utilising SWIFT banking infrastructure, meaning back-end processors may require licensing. In July 2022 the CBK cautioned banks against dealing with Flutterwave and Chipper Cash as unlicensed, and at the end of 2023 issued a cautionary notice against unlicensed fintechs. The broad judicial reading pulls infrastructure and back-end processors into the licensing perimeter, a material market-access risk for cross-border fintechs serving Kenya. T3-only sourcing keeps this at Assessed.

No periodic updates recorded against this sub-brief.

Sources and findings (3)
  1. T3https://lawzana.com/legal-questions/kenya/what-licenses-are-required-to-operate-a-mobile-payments-service-in-kenya-and-how-do-i-stay-compliant-with-cbk-regulations-1935
  2. T3https://riskhouse.co.ke/digital-credit-and-data-protection-in-kenya/
  3. T3https://mukambalaw.com/digital-lenders/

#

Merchant acquiring in Kenya spans bank-led acquiring (Equity/Jambopay, KCB) and non-bank gateways (Pesapal, DPO Group/Tingg via Cellulant, Flutterwave, Paystack, i&M/Direct Pay). Acceptance is dominated by Lipa na M-Pesa till/paybill plus card (Visa/Mastercard/Amex) and QR. Onboarding/risk obligations run through PSP authorisation, PCI DSS, AML/KYC under POCAMLA, and scheme high-risk/BRAM programmes; chargeback/dispute mechanics follow Visa/Mastercard rules. Fraud risk is concentrated in mobile-money social engineering and SIM-swap.

Standing sub-brief144 words · last cycle wpm-2026-06-24

Merchant Acquiring & Risk

Kenyan merchant acquiring spans bank-led acquiring (Equity/JengaPay, KCB) and non-bank gateways (Pesapal, DPO Group, Cellulant Tingg, Flutterwave, Paystack), carrying the bank/non-bank distinction directly into the acquiring layer. Acceptance is dominated by Lipa na M-Pesa till and paybill, supplemented by card and QR. Scheme high-risk programmes — Visa BRAM and Mastercard QMAP — require acquirers to manage or terminate offending merchants. Fraud risk is concentrated in mobile-money social engineering and SIM-swap rather than classic card-present fraud.

No periodic updates recorded against this sub-brief.

Sources and findings (3)
  1. T3https://payatlas.com/countries/kenya-ke
  2. T3https://cnbcode.com/blog/payment-gateways-kenya-complete-guide
  3. T3https://www.decta.com/company/media/how-visa-and-mastercard-ensure-compliance-for-acquirers-and-issuers

#

Innovation is rail- and product-led: the CBK Fast Payment System (national switch) initiative, the M-Pesa 'Fintech 2.0' core re-platform (Sept 2025), the Pesalink–PAPSS cross-border rail (Feb 2026), open-banking/open-finance discussions, and embedded credit (Fuliza, M-Shwari, KCB M-Pesa). The CMA licensed Safaricom and Airtel Money as Intermediary Service Platform Providers (Dec 2025) to channel capital-markets products via mobile. M-Pesa's Daraja API (now Daraja 3.0, Nov 2025) underpins developer integration despite long-standing openness criticism.

Standing sub-brief182 words · last cycle wpm-2026-08-21

Product Innovation & Market Development

Two product-access developments stand out. On 22 December 2025 the Capital Markets Authority granted Safaricom and Airtel Money Kenya licences to operate as Intermediary Service Platform Providers (ISPPs), connecting mobile-money users to regulated capital-markets products via apps, USSD and agent networks — expanding access to investments, savings and insurance. This turns telco wallets into capital-markets distribution channels, widening the addressable product set for mobile-money incumbents.

Periodic update · new data 2026-08-25 · run wpm-2026-08-21

Product Innovation & Market Development

Kenya's digital-payments market is projected to grow at a compound annual growth rate of between 14.1% and 26.16% from 2024 to 2029, reaching approximately USD 24 billion in transaction value by the end of that period, with M-Pesa remaining the anchor product underpinning the projection. This scale of projected growth is significant less for the number itself than for what it implies about CBK's regulatory posture: the central bank has positioned itself as a policy-led enabler of this growth trajectory, investing in settlement-hours extension and Fast Payment System development ahead of continued mobile-money-led expansion, rather than regulating reactively in response to disruption after the fact.

Open banking and related product-innovation frameworks remain at an early stage in Kenya relative to this growth trajectory, though no specific open-banking instrument or timeline was identified in this cycle's evidence base beyond the general policy-enabler characterisation.

Outlook

Whether CBK's enabler posture converts into a formal open-banking or broader product-innovation regulatory framework, as opposed to continued informal policy support for market-led growth, is the development to watch. The scale of projected market growth increases the stakes of getting that framework right, particularly for how non-bank product innovators are treated relative to incumbent mobile-money operators.

Sources and findings (4)
  1. T3https://www.ecofinagency.com/news-finances/2412-51647-safaricom-and-airtel-money-licensed-to-facilitate-capital-markets-access-in-kenya
  2. T3https://www.microsave.net/2025/07/08/the-next-chapter-in-kenyas-digital-payment-revolution/
  3. T3https://techtrendske.co.ke/2025/11/18/m-pesa-platform-overhaul-safaricom-strategy/
  4. T3https://cnbcode.com/blog/payment-gateways-kenya-complete-guide

#

No UK-PSR-style mandatory APP-fraud reimbursement in force; CBK developing a formal e-money/digital-wallet fraud compensation framework under NFIS 2025-2028 targeted end-2026 (pending). DCP Regulations 2022 + Business Laws Amendment 2024/2025 (interest cap, harassment ban) in force.

Standing sub-brief253 words · last cycle wpm-2026-06-24

Consumer Protection & APP Fraud

The forward-looking consumer-protection signal is the CBK's plan, developed under the Kenya National Financial Inclusion Strategy 2025-2028 with the Competition Authority, to establish formal compensation rules for e-money and digital-wallet fraud. It is committed for implementation by end-2026 and would add digital complaint systems, pricing transparency and provider capacity-building. Crucially, no UK-PSR-style mandatory APP-fraud reimbursement regime is in force yet — this is a pending framework, against a backdrop where FinAccess 2024 found 9.8% of mobile-money users experienced direct fraud loss, well above banking channels. A mandatory fraud-redress regime would shift liability onto mobile-money providers and materially alter fraud-cost economics.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T3https://serrarigroup.com/cbk-to-roll-out-compensation-rules-for-e-money-and-digital-wallet-fraud/
  2. T3https://nation.africa/kenya/blogs-opinion/blogs/easy-money-endless-misery-the-dark-side-of-kenya-s-digital-lending-apps-5081400
  3. T3https://manwaadvocates.com/legal-protections-for-consumers-in-unfair-lending-practices-in-kenya/
  4. T3https://techtrendske.co.ke/2025/09/28/cbk-digital-fraud-compensation-plan-mobile-money/

#

SENTINEL-FED CARRY: Kenya on FATF grey list (placed Feb 2024, retained Jun 2026 plenary) and EU high-risk third-country list (10 Jun 2025); AML Amendment Act 2025 + VASP Act remediation; payments impact is EDD + correspondent-banking de-risking pressure.

Standing sub-brief234 words · last cycle wpm-2026-06-24

AML/CFT & Financial Crime (Sentinel-fed)

This module is sourced from the Sentinel feed; WPM carries the payments-context impact only and does not re-analyse illicit finance. Per the Sentinel-fed FATF record, Kenya is a jurisdiction under increased FATF monitoring (grey list), placed in February 2024 and retained through the June 2026 plenary cycle, working with FATF on an agreed AML/CFT/CPF action plan. Kenya is also on the EU high-risk third-country list (added 10 June 2025). For payments, the consequence is enhanced due diligence and correspondent-banking de-risking pressure on Kenyan flows. (Source: FATF country detail, via Sentinel feed.)

No periodic updates recorded against this sub-brief.

Sources and findings (8)
  1. T3https://www.fluxforce.ai/jurisdictions/kenya
  2. T?FIM (sentinel.gi) per-JID baseline profile — Kenya — Kenya's AML/CFT regime rests on the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA) as amended post-2022 MER, supervised by the Financial Reporting Centre (FIU), Central Bank of Kenya and Capital Markets Authority. Grey-listed by FATF since February 2024; reforms since include a VASP licensing framework and increased TF investigations, but core supervisory, BO/trust and NPO gaps persist.
  3. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-005) — Gap: regulatory-failure
  4. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-001) — Gap: enforcement-absence
  5. T1FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-005) — Enforcement: FATF / ESAAMLG — Kenya's national AML/CFT regime
  6. T1FIM (sentinel.gi) enforcement_action_register (issue FIM-BASE-ENF-004) — Enforcement: FATF / ESAAMLG — Kenya's virtual-asset and CFT regime
  7. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-004) — Gap: capacity-deficit
  8. T?FIM (sentinel.gi) gaps_register_cumulative (issue FIM-BASE-GAP-002) — Gap: legal-gap

#

KEPSS RTGS settlement with bank accounts at CBK; correspondent-banking de-risking pressure from FATF grey/EU high-risk listing; Pesalink as PAPSS Technical Connectivity Provider (26 Feb 2026) enabling local-currency cross-border settlement displacing USD chains.

Standing sub-brief238 words · last cycle wpm-2026-06-24

Correspondent Banking, Settlement & Access

The analytical spine of this structural module is the bank versus non-bank access asymmetry at the settlement layer. The Kenya Electronic Payment and Settlement System (KEPSS) is Kenya's Real Time Gross Settlement system, where transactions are cleared and settled continuously with commercial banks holding settlement accounts at the CBK. Non-bank PSPs do not access KEPSS directly; they settle via banks holding KEPSS accounts — a structural dependency for fintech settlement. Bank licensing, including foreign-bank subsidiary or branch entry, sits under the Banking Act (Cap 488), with additional scrutiny and longer approval where the parent sits in a FATF grey- or black-list jurisdiction.

No periodic updates recorded against this sub-brief.

Sources and findings (4)
  1. T1https://www.centralbank.go.ke/national-payments-system/
  2. T3https://www.crowdfundinsider.com/2026/03/264410-kenyas-pesalink-pan-african-payment-and-settlement-system-target-cross-border-payment-simplicity/
  3. T3https://sanctionslawyers.net/blog-en/the-fatf-grey-list-and-blacklist-complete-guide/
  4. T3https://www.fluxforce.ai/jurisdictions/kenya

#

Trailing-12-month KE commercial intelligence dominated by KCB Group vertical integration into payments: 75% of Riverbank Solutions (~KES 2bn, Mar 2025, completed) and an announced minority stake in Pesapal (31 Oct 2025, undisclosed, pending CBK approval as of Mar 2026).

Open gap — wpm-int-5KCB-Pesapal deal value undisclosed and CBK approval still pending as of 11 Mar 2026 briefing; closing terms and completion date not yet available.Private-company deal terms under-indexed; track completion and disclosed value next run.
Horizon · 2026 (±year)KCB-Pesapal minority-stake acquisition CBK regulatory approvalin_force_pending · T3
Standing sub-brief222 words · last cycle wpm-2026-06-24

Commercial Intelligence (M&A, Investment & Product)

The W13 commercial picture is dominated by a single bank-into-fintech vertical-integration pattern led by KCB Group, rendered here as two discrete M&A events.

First, a completed deal: in March 2025 KCB acquired a 75% controlling stake in Riverbank Solutions for about KES 2 billion (~USD 15.4m, disclosed value), bringing agency-banking, revenue-collection and payments infrastructure into the group as the first leg of its full-stack payments platform strategy.

No periodic updates recorded against this sub-brief.

Sources and findings (3)
  1. T3https://techcabal.com/2025/11/03/kcb-group-buy-minority-payments-firm-pesapal/
  2. T3https://kenyanwallstreet.com/kcb-expands-payment-infrastructure-footprint-with-pesapal-minority-stake
  3. T3https://techcabal.com/2026/03/11/kcb-plans-to-aquire-pesapal-underway/
No modules match.

Filters combine as OR inside a group and AND across groups.

Editorial metadata

Provenance only. Nothing below gates publication or affects the render.

Editorial metadata for Kenya
FieldValue
trust.lawyer_review.statusnever_reviewed
trust.lawyer_review.reviewernot recorded
trust.content_sourceai_generated

Provenance and declared absence

Disclosure model: module cards load OPEN; standing positions render in full; sub-briefs and jurisdiction briefs load as a clamped teaser with an explicit “read full” control carrying the true word count; earlier updates stay collapsed behind a counted summary. No text is hidden without disclosing how much of it there is.

Sentinel-fed modules receive no special rendering treatment. sentinel_feed is an attribution chip only: it does not suppress content, does not generate an absence reason code, and does not exclude the module from any count, filter, search index or export on this page.

Family taxonomy is renderer-level presentation config, not a JID field. Colour is always duplicated in text and is never the sole carrier of meaning.

Suppressed by doctrine: derived risk score; per-module RAG traffic light; derived_scores = {}.

Band honesty: uncertainty bands are computed against a frozen build clock of 2026-08-26. A year-precision row is never promoted into a tighter band.

Orphan deltas: 0 cycle_delta row(s) target non-module objects and are listed in the rail rather than attached to a card.

Envelope: baseline resolved at jurisdiction_json.baseline; 14 module(s), 58 finding(s), 96 source(s) in the cumulative register.