Kenya unveils tough crypto rules: zero tolerance for manipulation, strict asset safeguards

A new era for virtual asset regulation in Kenya

The VASP Regulations are intended to enforce the Virtual Asset Service Providers Act, passed in 2025, and establish a licensing regime for all businesses dealing with virtual assets—including cryptocurrencies, tokenized assets, and stablecoins—operating in or from Kenya.

Following Kenya’s growing influence as an East African fintech hub, these regulations respond to rising adoption of digital assets among individuals and companies. Authorities seek to balance innovation with investor safety and market stability.

Under the proposed rules, providers must meet rigorous fit and proper tests for ownership and governance. Financial thresholds and ongoing risk assessments will be expected from all applicants.

Each provider is required to implement robust anti-money laundering and counter-terrorism financing controls, in line with global standards for digital finance.

A central aspect of the regulations is consumer protection. Clear risk disclosures must be provided to all clients before engagement. Transparency in pricing, along with strong complaint-handling procedures, is mandatory.

Operators must segregate customer assets from their own holdings, enhancing security and safeguarding user funds. These provisions mirror those that apply to regulated financial institutions worldwide.

Kenya’s National Treasury presented these details, stating the framework is designed to ensure a competitive, transparent, and fair marketplace while guarding against instability and protecting users’ interests.

Market oversight and coordinated enforcement efforts

The draft regulations impose strict rules designed to eliminate market manipulation, insider trading, and fake trading on all licensed crypto platforms—aligning Kenya’s market integrity standards with major economies.

All virtual assets must undergo due diligence prior to being listed on exchanges or platforms, while ongoing monitoring is mandated to detect and address any irregular trading patterns.

Licensed VASPs will be subject to continuous reporting and disclosure obligations. Oversight will be conducted both on site and through remote processes, increasing transparency and reducing systemic risk.

Cybersecurity policy requirements ensure businesses develop comprehensive incident reporting frameworks and maintain adequate insurance policies. Regular independent audits will help uphold operational resilience.

Collectively, these standards address common risks in global digital asset markets, including hacks and fraud, and are expected to attract more institutional interest in Kenya’s growing crypto space.

Supervision of VASPs will be managed collaboratively by the National Treasury, the Central Bank of Kenya, and the Capital Markets Authority. These three entities play a leading role in financial system oversight: the National Treasury provides fiscal policy leadership, the Central Bank of Kenya manages monetary stability and banking regulation, and the Capital Markets Authority oversees the securities and investments industry.

The next step involves integrating stakeholder feedback, after which the regulations will move toward final approval. Industry players and observers have been closely following this process, as Kenya aims to deliver a robust legal environment for digital assets in the region.