Kenya Crypto Firms Face November 4 Deadline Under New VASP Rules
Crypto businesses already operating in Kenya when the country’s virtual-asset law began are approaching a significant compliance deadline: November 4, 2026.
The Central Bank of Kenya and Capital Markets Authority’s commencement notice confirms that the Virtual Asset Service Providers Act took effect on November 4, 2025. Section 47 gives existing service providers one year to comply, a transition deadline also identified in ENS’s analysis of the Act.
What does the November 4 deadline mean?
The date marks the end of the transition period for existing businesses. It is not the date the law first comes into force.
That distinction matters. A transition provision gives established operators time to adjust. It should not be read as a blanket exemption for every new business entering the market during that year.
Companies should check the current requirements with their regulator rather than assume that submitting an application alone guarantees permission to keep operating. This article does not establish the status of any individual platform or predict a specific enforcement action.
Which regulator handles which services?
According to Oraro & Company’s review of the 2026 regulations, CBK supervises custodial wallet providers, virtual-asset payment processors and stablecoin issuers. CMA handles exchanges, brokers, investment advisers, managers and specified token-offering and tokenisation activities.
A company offering several products therefore needs to map its actual activities to the relevant permissions. Calling itself a fintech or blockchain company does not settle that question.
For example, a platform that safeguards customers’ assets and also operates a trading market should examine both functions. Customers should likewise ask which legal entity provides each service.
What changed after the law commenced?
The November 2025 joint notice said licensing would begin after implementing regulations were issued. Its statement that no VASP had yet been licensed belongs to that historical date, not automatically to October 2026.
Oraro reports that the regulations were gazetted on July 22, 2026. Its review describes application documentation covering governance, financial resources, anti-money-laundering controls, cybersecurity and consumer protection.
Businesses should consult the CMA regulatory framework and the relevant regulator’s latest notices for the controlling documents and any subsequent implementation guidance.
Could foreign platforms be affected?
Oraro’s interpretation says the rules can capture foreign providers targeting Kenyan customers or deriving economic benefit from Kenya, even without a local physical presence.
That makes the location of a company’s headquarters only part of the analysis. The services offered and the customers targeted matter too.
It does not prove that every overseas website accessible in Kenya has identical obligations. Individual business models need their own assessment.
Frequently asked questions
When is the Kenya VASP transition deadline?
November 4, 2026, based on the one-year transition from the Act’s November 4, 2025 commencement.
Is November 4 the start of the law?
No. It is the end of the transition period for existing operators.
Does a foreign licence automatically cover Kenya?
Businesses should assess Kenyan requirements separately. Authorisation elsewhere should not be assumed to replace local obligations.
