Section 47 of Kenya's Virtual Asset Service Providers Act, 2025 gives every existing VASP one year from commencement to comply. The Act commenced on 4 November 2025 (Kenya Law). The deadline is therefore 4 November 2026, and as of 6 July 2026 the implementing regulations that would tell an exchange or wallet provider what to actually do have not been gazetted.
The sequence so far: presidential assent on 15 October 2025; commencement on 4 November 2025; the National Treasury's draft Virtual Asset Service Providers Regulations, 2026, published with a Regulatory Impact Statement on 17 March 2026 (Bowmans; Treasury RIS); public participation closed 10 April 2026 (Treasury notice); and a Multi-Agency Task Force is finalising the text with the Central Bank of Kenya and the Capital Markets Authority ahead of Cabinet Secretary sign-off. The CBK began recruiting virtual-asset licensing and supervision staff in April 2026 (HapaKenya), which is what a regulator does when it expects to process applications soon.
What the regime looks like. Kenya was the first East African country to enact standalone virtual-asset legislation. The Act splits supervision two ways: the CBK takes issuance, custody and payment-side services including stablecoin dealers; the CMA takes exchanges, brokers and trading platforms. An earlier draft's standalone crypto regulator was dropped. The draft regulations set out licensing categories with governance, capital, liquidity and insurance requirements, shareholding limits, AML/CFT obligations built on FATF Recommendation 15 and the Travel Rule, market-conduct and consumer-protection standards, and mandatory incident reporting. On tax, the 3% digital asset tax was repealed in favour of excise duty on VASP service fees under the Finance Act 2025. This is not a niche market being regulated; stablecoin rails already carry a meaningful share of Kenya's payments flows.
Why it matters. The compression is the risk. Whenever the final regulations gazette, the interval between "rules known" and "compliance due" is now measured in weeks, and nothing published so far says the 4 November statutory deadline moves. Kenya also remained on the FATF grey list at the June 2026 plenary (FATF outcomes); a functioning VASP licensing regime is part of Kenya's exit case, which means political pressure runs toward enforcing the deadline, not relaxing it.
Who is affected. Every exchange, broker, custodian, wallet provider and crypto payment processor serving Kenyan users, local or offshore; banks and payment providers that bank them; and stablecoin issuers, who land on the CBK side of the split.
What to do now:
- Build your licence file against the draft regulations today: corporate structure, fit-and-proper documentation for shareholders and officers, capital plan, AML/CFT programme with Travel Rule tooling. The final text will adjust details, not direction.
- Decide your regulator. If your product mixes custody, payments and trading, you may face both CBK and CMA; structuring that choice deliberately beats having it imposed.
- Put 4 November 2026 on the board agenda now, with a go/no-go date for the Kenyan market. Operating unlicensed past the transition window is the scenario to have already decided against.