Kenya has finished what it started nine months ago. On July 24, 2026, the National Treasury gazetted the Virtual Asset Service Providers Regulations, 2026 — Legal Notice No. 134, Gazette Supplement No. 185 — completing the licensing architecture for the Virtual Asset Service Providers Act, which President William Ruto signed into law on October 15, 2025 and which commenced November 4, 2025. For the first time, cryptocurrency exchanges, wallet providers, stablecoin issuers, and token-offering platforms serving Kenyan customers have an actual legal pathway to operate — and a legal obligation to seek one.
A Split-Regulator Model, Not a Single Crypto Czar
The design choice that will shape everything downstream is the division of labor. The Central Bank of Kenya supervises virtual asset-to-fiat conversion services and stablecoin issuers — the parts of the system that touch money creation and settlement risk. The Capital Markets Authority regulates exchanges, token issuance platforms, initial coin offerings, and tokenization activity — the parts that look more like securities markets. Both agencies fed into the drafting process through a National Treasury-led Multi-Agency Task Force, and the Cabinet Secretary opened the draft for public comment in March 2026 before ministries finalized the text.
This is the correct instinct. Stablecoins genuinely function as payment rails and carry monetary-stability implications that belong with a central bank; tokenized securities and exchange conduct belong with a markets regulator built to police disclosure and market manipulation. Countries that have tried to cram both functions into one undersized agency — or left the question unresolved for years, as Nigeria did for much of the early 2020s — have produced exactly the kind of regulatory ambiguity that drives capital and talent offshore. Kenya avoiding that trap on paper is a genuine point in its favor.
The Steelman: Kenya Has a Real Money-Laundering and Consumer-Harm Problem to Solve
The case for regulation here is not abstract. Kenya recorded roughly $19 billion in cryptocurrency inflows between July 2024 and June 2025, ranking second in East Africa by transaction value behind Ethiopia, according to blockchain analytics firm Chainalysis as reported by TechCabal. A market that size, operating with zero licensing framework, zero mandated custody standards, and zero AML/CFT obligations, is a market that regulators — and ordinary users who've lost funds to unregulated platforms — have legitimate reason to worry about. The regulations require licensed VASPs to maintain governance frameworks, conduct customer due diligence, safeguard client assets, retain transaction records for at least seven years, and report material incidents like breaches. None of that is exotic; it mirrors baseline expectations already imposed on Kenya's banks and licensed payment providers under the CBK's existing prudential regime. Bringing crypto intermediaries into that tent, rather than leaving them permanently exempt, is defensible policy — and it also protects Kenya's genuinely innovative mobile-money and fintech sector from being tarred by association with a lawless adjacent market.
Where the Framework Risks Overreach
The concern is calibration, not the existence of rules. The regulations extend licensing obligations to firms with no physical presence in Kenya at all — any platform serving Kenyan customers must obtain approval — while also requiring foreign exchanges to establish local offices, stacking extraterritorial reach on top of a physical-presence mandate. During the public consultation window that closed April 10, 2026, industry participants told regulators the proposed capital requirements and transaction levies "risked pricing smaller operators out" of the legal market, in TechCabal's paraphrase. Peter Mwangi of Valr made the sharper version of that argument to Capital Business: overly high thresholds "could disadvantage startups and push activity into informal peer-to-peer channels" — the opposite of the consumer-protection goal the regulations are meant to serve.
That is the pattern regulators consistently underweight: compliance costs are regressive. A well-capitalized exchange backed by international investors absorbs a seven-figure minimum-capital requirement as a line item. A Nairobi-based startup serving the same retail user base cannot, and either exits the licensed market or relocates registration to a friendlier jurisdiction while continuing to serve Kenyan users informally — the exact outcome the CBK and CMA are trying to prevent, just with the compliant firms filtered out first. Kenya's own success as a fintech hub, built on M-Pesa-era experimentation happening at a scale regulators only formalized after the fact, argues for a licensing tier that scales obligations to firm size rather than a single capital bar calibrated to the largest players in the room.
What to Watch
With the regulations now gazetted, the practical test begins: how the CBK and CMA set actual capital thresholds and levy schedules in implementing guidance, and whether either agency builds a lighter-touch tier for early-stage platforms. A regulator-industry "clash over cost and compliance," as Capital Business framed the pre-gazettement debate, doesn't end because the text was published — it starts. Kenya has built a defensible institutional structure. Whether that structure produces a regulated market that keeps its $19 billion in activity onshore, or one that pushes the most price-sensitive users back into informal channels, depends entirely on numbers neither agency has yet made public.