Section 47 of Kenya's Virtual Asset Service Providers Act, 2025 gives every existing VASP one year from commencement to comply. The Act commenced on 4 November 2025 (Kenya Law). The deadline is therefore 4 November 2026. The implementing regulations were gazetted as Legal Notice 134 of 2026 on 22 July 2026, so the countdown now runs against a final rulebook.
The sequence so far: presidential assent on 15 October 2025; commencement on 4 November 2025; the National Treasury's draft Virtual Asset Service Providers Regulations, 2026, published with a Regulatory Impact Statement on 17 March 2026 (Bowmans; Treasury RIS); public participation closed 10 April 2026 (Treasury notice); a Multi-Agency Task Force finalised the text with the Central Bank of Kenya and the Capital Markets Authority; and the final Regulations were gazetted as Legal Notice 134 of 2026 on 22 July 2026. The CBK began recruiting virtual-asset licensing and supervision staff in April 2026 (HapaKenya), which is what a regulator does when it expects to process applications soon.
What the regime looks like. The Act splits supervision two ways: the CBK takes issuance, custody and payment-side services including stablecoin dealers; the CMA takes exchanges, brokers and trading platforms. An earlier draft's standalone crypto regulator was dropped. The draft regulations published in March set out licensing categories with governance, capital, liquidity and insurance requirements, shareholding limits, AML/CFT obligations built on FATF Recommendation 15 and the Travel Rule, market-conduct and consumer-protection standards, and mandatory incident reporting. On tax, the 3% digital asset tax was repealed in favour of excise duty on VASP service fees under the Finance Act 2025. This is not a niche market being regulated; stablecoin rails already carry a meaningful share of Kenya's payments flows.
Why it matters. The compression is the risk. With gazettement on 22 July 2026, the interval between rules known and compliance due is roughly fifteen weeks, and nothing published so far says the 4 November statutory deadline moves. Kenya also remained on the FATF grey list at the June 2026 plenary (FATF outcomes); a functioning VASP licensing regime is part of Kenya's exit case, which means political pressure runs toward enforcing the deadline, not relaxing it.
Who is affected. Every exchange, broker, custodian, wallet provider and crypto payment processor serving Kenyan users, local or offshore; banks and payment providers that bank them; and stablecoin issuers, who land on the CBK side of the split.
What to do now:
- Build your licence file against the gazetted Regulations today: corporate structure, fit-and-proper documentation for shareholders and officers, capital plan, AML/CFT programme with Travel Rule tooling.
- Decide your regulator. If your product mixes custody, payments and trading, you may face both CBK and CMA; structuring that choice deliberately beats having it imposed.
- Put 4 November 2026 on the board agenda now, with a go/no-go date for the Kenyan market. Operating unlicensed past the transition window is the scenario to have already decided against.