Kenya’s virtual asset market has entered a new regulatory phase following the gazettement of the Virtual Asset Service Providers Regulations, 2026 in July. The regulations operationalise the Virtual Asset Service Providers Act, 2025 and establish Kenya’s first comprehensive licensing and supervisory framework for businesses providing virtual asset services in or from the country. The framework creates a clearer basis for businesses, investors and consumers to participate in the sector while introducing capital, governance, cyber-security and consumer-protection requirements.
The regulations divide oversight between the Central Bank of Kenya (CBK) and the Capital Markets Authority (CMA). CBK supervises virtual asset wallet providers, payment processors and stablecoin issuers, while CMA oversees exchanges, brokers, investment advisers, investment managers, initial coin offering providers, tokenisation activities and token issuance platforms. This creates 10 distinct licensing categories across the two regulators.
One of the most significant developments is the formal recognition of activities that can connect digital assets with traditional financial and investment markets. The framework provides for tokenisation of real-world assets, subject to requirements such as proof of ownership, independent valuation and evidence that the underlying asset is free from encumbrances. Smart contracts must also specify matters such as ownership, transferability and profit distribution. This creates a regulated pathway for digital representations of real-world assets, although implementation will depend on licensing, valuation, legal ownership and investor-protection requirements.
Stablecoins also receive a dedicated regulatory framework. Issuers must fully back outstanding stablecoins with reserve assets of equivalent nominal value. Eligible reserves include cash, short-dated government securities, repurchase agreements and other assets approved by CBK. The reserves must remain segregated, while holders have a statutory right to redeem their stablecoins at par within two working days. Issuers must conduct quarterly stress tests, undertake independent reserve audits and provide CBK with monthly information on circulation, transaction volumes and de-pegging events.
The framework also establishes financial thresholds that could shape the structure of Kenya’s virtual asset industry. Minimum paid-up capital ranges from Kshs 10.0 mn for brokers, payment processors, ICO providers and token issuance platforms to Kshs 20.0 mn for investment managers and tokenisation activities. Exchanges require Kshs 100.0 mn, wallet providers Kshs 150.0 mn, while stablecoin issuers require Kshs 300.0 mn. Application fees range from Kshs 10,000 for investment advisers to Kshs 100,000 for most other categories, while licence fees range from Kshs 50,000 for investment advisers to Kshs 2.0 mn for stablecoin issuers.
Consumer protection represents another important component of the framework. Licensed providers must segregate client assets from their own holdings and cannot lend, pledge or otherwise encumber customer assets. They must reconcile on-chain assets with internal records every month and provide customers with quarterly statements. Providers must also disclose their licensing status, fees, risks and complaint procedures.
The regulations further raise operational standards through cyber-security and business-continuity requirements. Licensed firms must appoint a chief information security officer or equivalent, conduct vulnerability assessments and penetration tests twice a year during the first year and at least annually thereafter. Cyber-security incidents must be reported within 24 hours, followed by detailed reports within five working days. These requirements increase compliance costs but also create clearer operational standards for a market previously characterised by limited formal oversight.
The framework also creates opportunities for foreign and cross-border virtual asset businesses, although these firms must assess their Kenyan obligations carefully. The regulations apply to providers operating “in or from Kenya”, including businesses that target Kenyan consumers or derive economic benefit from Kenya even without maintaining a physical presence locally. This gives the framework an important cross-border dimension.
The regulatory development follows growing adoption of virtual assets in Kenya. The National Treasury’s Regulatory Impact Statement notes that Kenyans have increasingly explored virtual assets for investment and transfer-of-value purposes, citing factors such as speed, convenience, cross-border functionality and transaction costs. At the same time, the government identified risks including capital flight, money laundering, terrorism financing, cyber-crime, fraud and consumer-protection concerns. The regulations therefore seek to balance market development with financial integrity and stability.
For existing virtual asset service providers, the transition period is particularly important. The regulatory framework provides existing operators with one year from the commencement of the Act on 4 November 2025 to obtain the relevant licence, placing the transition deadline on 4 November 2026. New entrants must obtain the appropriate licence before commencing regulated operations.
Overall, Kenya’s Virtual Assets Regulations move the sector from a largely emerging market environment towards a defined licensing and supervisory structure. The framework opens regulated avenues for exchanges, investment services, payment processing, stablecoins, token issuance and real-world asset tokenisation, while placing greater emphasis on capital adequacy, asset safeguarding, cyber-security, disclosure and market integrity. The extent to which these opportunities translate into deeper investment markets and new financial products will depend on licensing implementation, regulatory guidance, compliance capacity and market adoption.
