Kenya’s Crypto Licensing Deadline Is Over. Now What?
Kenya gave cryptocurrency businesses one year to comply with its new licensing law. That deadline expired on November 4, 2026. But days later, there is still no publicly available register showing which crypto exchanges have been approved to operate in the country. So what happens to existing platforms, what does the law actually say, and should Kenyan crypto users be worried?
Imagine visiting your favourite cryptocurrency exchange today.
You can still log in, check your Bitcoin balance, and perhaps even buy or sell USDT.
Everything appears normal.
But behind the familiar trading screens, something important has changed in Kenya’s cryptocurrency industry.
The one-year transition period under Kenya’s Virtual Asset Service Providers Act has officially ended.
Businesses that were already providing regulated cryptocurrency services when the law took effect were given until November 4, 2026, to comply with its requirements.
That date has now passed.
Yet one of the most important questions remains unanswered publicly.
Which cryptocurrency companies have actually received licences to operate in Kenya?
As of November 10, Blockwisely’s review had not identified a dedicated public register of licensed Virtual Asset Service Providers (VASPs) published by either the Central Bank of Kenya (CBK) or the Capital Markets Authority (CMA).
An independent review by VASP Tracker, updated on November 9, similarly reported no published VASP licence register.
This does not necessarily mean regulators have received no applications or approved no businesses.
It means that the public still lacks a straightforward way to independently verify which cryptocurrency companies have received authorisation under the new framework.
For an industry that has long called for regulatory clarity, that creates an uncomfortable situation.
The deadline is over, the law is in force, and businesses face licensing obligations.
But consumers are still waiting for a public list showing who is officially authorised.
How Did Kenya Get Here?
Kenya’s cryptocurrency regulatory journey did not begin this month.
For years, cryptocurrency businesses operated in an environment where Bitcoin and other digital assets were not expressly prohibited, but there was no dedicated licensing framework governing the entire virtual asset industry.
The Central Bank of Kenya had previously warned consumers about cryptocurrency risks, while businesses continued developing services around digital asset trading, payments, custody, and blockchain technology.
Things began changing when Kenya introduced the Virtual Asset Service Providers Act, 2025.
The law was assented to on October 15, 2025, published in the Kenya Gazette on October 21, and took effect on November 4, 2025.
According to the official Act published by Kenya Law, its main purpose is to provide a legal framework for licensing and regulating virtual asset service providers operating in and from Kenya.
The law introduced requirements covering licensing, corporate governance, consumer protection, financial soundness, and the prevention of money laundering and terrorist financing.
But the government recognised that existing businesses would need time to comply.
Section 47 therefore introduced a transition period.
It required businesses already providing virtual asset services when the Act commenced to comply with the law within one year.
Since the Act took effect on November 4, 2025, that one-year period ended on November 4, 2026.
The legislation did not create a separate, indefinite grace period for businesses whose applications might still be under review.
That distinction has now become particularly important.
The Problem: Kenya’s Crypto Rules Arrived Months Into the Transition
Although the VASP Act took effect in November 2025, the detailed regulations needed to implement it were not immediately available.
On November 18, 2025, the CBK and CMA published a joint public notice.
The regulators explained that licensing would begin after the National Treasury issued the implementing regulations.
At the time, they also confirmed that neither institution had licensed any VASPs under the new Act.
That statement was accurate in November 2025. It should not be mistaken for confirmation that no licences have been issued since then.
The government subsequently published draft regulations for public consultation in March 2026.
The final Virtual Asset Service Providers Regulations, 2026, were published on July 22, 2026, under Legal Notice No. 134.
The Capital Markets Authority’s official regulatory framework includes the final regulations.
But the timing created a significant challenge.
Between July 22, when the final regulations became available, and November 4, when the transition period ended, businesses had approximately 105 days.
That is roughly three and a half months.
During that time, companies potentially needed to satisfy requirements involving capital, corporate governance, compliance procedures, financial reporting, cybersecurity, and customer protection.
Some of those requirements can take considerable time to implement.
For established international exchanges, compliance may involve restructuring local operations and coordinating with regulators across different countries.
For smaller Kenyan cryptocurrency businesses, the costs and administrative demands could be even more challenging.
This does not excuse non-compliance.
But it helps explain why the transition has become a major concern for an industry still adjusting to its first comprehensive licensing regime.
Has Kenya Licensed Any Crypto Exchanges Yet?
This is the question many Kenyan cryptocurrency users want answered.
Unfortunately, the publicly available information does not provide a complete answer.
When the CBK and CMA issued their joint statement in November 2025, they explicitly said no licences had been granted under the Act.
However, that statement is now nearly a year old.
The implementing regulations have since been published, and the licensing framework is operational.
As of November 10, 2026, Blockwisely had not identified a publicly accessible, dedicated VASP register published by either regulator.
The independent VASP Tracker also reported no published licence entries in its latest review.
A November 9 Crypto Africa report highlighted the same regulatory uncertainty.
But there is an important distinction.
No publicly confirmed licences does not necessarily mean no licences have been issued.
It is possible that applications have been submitted and remain under review.
It is also possible that regulatory decisions have been made but have not yet appeared in publicly accessible records.
Without updated statements or registers from the CBK and CMA, those possibilities cannot be conclusively resolved.
For that reason, it would be premature to claim that every cryptocurrency exchange serving Kenya is operating illegally.
What can be established is that the public has not been given sufficient information to independently verify the licensing status of these businesses.
And that raises another question.
Doesn’t the Law Require Regulators to Publish a Licence Register?
Yes.
This is one of the most important provisions in Kenya’s new crypto law.
Section 17 of the Virtual Asset Service Providers Act requires each relevant regulatory authority to maintain a register of licences it has issued.
The register must include information such as the name and address of the licensed company, the services it is authorised to provide, the date the licence was issued, and its current status.
The law also requires regulators to publish an updated version of the register on their websites.
This is not merely an administrative detail.
A public licensing register helps customers distinguish legitimate regulated businesses from companies making misleading claims about their authorisation.
For example, imagine a cryptocurrency platform advertising that it is licensed and approved by the Kenyan government.
How would an ordinary customer verify that claim?
Without an accessible official register, the customer may have to rely on documents provided by the company itself or contact the regulator directly.
That is hardly ideal in an industry where fraudulent investment platforms have sometimes used claims of regulatory approval to gain public trust.
At the same time, the absence of a published register does not, by itself, establish that the regulators have violated the Act. The precise legal position depends partly on whether licences have been issued and how the statutory publication obligations apply.
Nevertheless, publishing a clear, searchable register would address a major transparency concern.
What Happens to Crypto Exchanges That Are Not Licensed?
Under the VASP Act, businesses carrying out regulated virtual asset services in or from Kenya are required to hold the appropriate licence.
Section 8 establishes the licensing restriction, while Section 47 provided the transition period for existing operators.
Now that the transition has expired, businesses continuing regulated operations without the required authorisation face potential legal consequences.
The Act provides for serious penalties.
Under the relevant offence provisions, corporate offenders may face fines of up to KSh25 million, while individuals may face fines of up to KSh10 million, imprisonment of up to five years, or both, depending on the offence and the court’s determination.
This means licensing is not optional for businesses that fall within the Act.
However, it is important to avoid confusing legal exposure with an actual enforcement decision.
The end of the transition period does not automatically mean every unlicensed exchange has been shut down.
Nor does it prove that authorities have already begun prosecuting particular companies.
Those would require separate evidence, such as official enforcement notices, court proceedings, or regulator announcements.
For now, the legal position is that regulated businesses must comply with the licensing framework.
The unresolved practical question is how the authorities will handle existing operators whose applications may still be pending.
What if an Exchange Applied for a Licence but Has Not Received Approval?
This is where things become complicated.
Imagine a cryptocurrency company submitted all its documents before November 4.
It paid the required application fees, completed the necessary compliance work, and began communicating with the regulator.
But by the time the deadline arrived, the company had not received a decision.
Can it continue operating while waiting?
The published Act and regulations do not appear to provide an automatic extension simply because a licensing application is pending.
This is important because submitting an application is not the same as receiving a licence.
The implementing regulations provide a 30-day decision period after the regulator has received all required documents and completed the relevant due diligence.
That qualification matters.
A company could submit an application several weeks before the deadline, yet the decision period might not begin immediately if documentation is incomplete or checks remain outstanding.
The regulations also do not appear to create a general transitional exemption for businesses waiting for approval after November 4.
Under a strict reading of the legislation, an application alone would not authorise continued regulated operations.
However, the specific treatment of pending applicants could still depend on formal regulatory directions, individual decisions, or legal interpretation.
As of this review, Blockwisely had not identified a public CBK or CMA notice granting a general extension beyond November 4.
This leaves businesses facing an important compliance decision and highlights the need for regulators to clarify their position.
Who Is Responsible for Licensing Crypto Businesses in Kenya?
Kenya has divided responsibility between two major financial regulators.
The Central Bank of Kenya supervises certain virtual asset activities connected to payments, custody, and stablecoins.
The Capital Markets Authority handles activities more closely associated with cryptocurrency trading, investment, brokerage, and token offerings.
Under the Act’s licensing framework, the responsibilities generally look like this:
| Central Bank of Kenya | Capital Markets Authority |
|---|---|
| Stablecoin issuers | Virtual asset exchanges |
| Virtual asset wallet providers | Virtual asset brokers |
| Virtual asset payment processors | Virtual asset managers |
| Virtual asset investment advisers | |
| Tokenisation providers | |
| Initial coin offering providers | |
| Token issuance platforms |
This division matters because not every cryptocurrency business performs the same function.
An exchange matching buyers and sellers of Bitcoin is different from a company issuing stablecoins.
A custodial wallet provider is also different from an investment adviser recommending digital assets.
Businesses offering multiple regulated services may need to satisfy requirements involving more than one licence category.
The objective is to create regulatory oversight that reflects the actual risks involved in each activity.
Will Kenyans Still Be Allowed to Buy and Sell Bitcoin?
Yes. The passing of the VASP licensing deadline does not, by itself, mean that personal ownership or trading of cryptocurrency has become illegal.
Kenya’s VASP law primarily regulates businesses that provide specified virtual asset services.
It is not a blanket prohibition on Bitcoin, Ethereum, USDT, or other digital assets.
For example, someone holding Bitcoin in a personal wallet is not automatically operating a virtual asset service business.
Likewise, a person buying cryptocurrency for their own investment is not necessarily required to obtain an exchange licence.
The distinction becomes more important when a person or company begins providing regulated services to other people as a business.
That may include operating an exchange, providing custodial wallet services, processing virtual asset payments, or conducting brokerage activities.
The exact classification depends on what the business does, not simply what it calls itself.
For ordinary users, this means the VASP framework is principally about the regulation of service providers rather than banning cryptocurrency ownership.
What About Peer-to-Peer Crypto Traders?
Peer-to-peer trading, commonly called P2P, has become an important part of Kenya’s cryptocurrency market.
It allows individuals to buy and sell digital assets directly, often using local payment methods such as M-Pesa.
But the new licensing rules raise difficult questions about where ordinary personal trading ends and regulated commercial activity begins.
Consider two examples.
A person occasionally selling some of their own Bitcoin is different from a business that systematically facilitates transactions for customers, handles client assets, or provides exchange services for a fee.
The second activity may fall within the VASP framework, depending on its structure.
That means not everyone using P2P platforms automatically needs a licence.
But neither should every commercial crypto trader assume that describing an activity as P2P puts it outside regulation.
The relevant issue is the actual business model and whether it falls within one of the activities covered by the Act.
Further regulatory guidance would help clarify the position of Kenya’s growing community of professional P2P merchants and independent cryptocurrency service providers.
Could Foreign Crypto Exchanges Also Be Affected?
Yes.
Kenya’s framework is not concerned only with businesses that have offices in Nairobi.
The implementing regulations extend their scope to certain businesses that provide virtual asset services in or from Kenya, including foreign companies targeting Kenyan customers.
This matters because cryptocurrency is inherently cross-border.
An exchange can offer services to Kenyan customers without necessarily operating from a physical location within the country.
Its website might be hosted abroad. Its management team might live elsewhere. Its technology infrastructure might also be located outside Kenya.
Yet the company could still actively market its services to Kenyan users or derive revenue from the Kenyan market.
The regulations make such commercial connections relevant when determining whether a business falls within the Kenyan licensing regime.
For international exchanges, this could mean reviewing their local operations, marketing strategies, payment integrations, and licensing requirements.
For Kenyan users, it means that a platform’s foreign registration should not automatically be treated as proof that it is outside Kenya’s regulatory framework.
Could the Deadline Lead to Exchange Shutdowns?
It is possible that some businesses may eventually suspend or restructure their Kenyan operations if they cannot meet the licensing requirements.
But this is a potential consequence, not a confirmed outcome across the industry.
Different businesses could respond in different ways.
Some may complete the licensing process and continue operating under formal supervision.
Others may need additional capital, revised corporate structures, improved compliance systems, or new technology before obtaining authorisation.
Some smaller companies might decide that the cost of compliance is too high.
Foreign platforms could also reconsider how they serve the Kenyan market.
However, predicting a wave of shutdowns would be premature without evidence of actual regulatory decisions or business announcements.
The more immediate issue is uncertainty.
When companies cannot clearly determine their authorisation status or understand the treatment of pending applications, investment and operational decisions become more difficult.
This could affect the industry’s development even before regulators take enforcement action.
Why Does This Matter for Kenya’s Crypto Industry?
Kenya has long been associated with digital financial innovation.
M-Pesa helped demonstrate how mobile technology could transform payments and financial access.
Cryptocurrency and stablecoins have since created additional opportunities for cross-border transfers, online earnings, financial services, and blockchain-based businesses.
The VASP Act was intended to give these activities a clearer legal foundation.
A predictable regulatory framework could help attract serious investment, protect customers, and improve relationships between cryptocurrency companies and traditional financial institutions.
But regulations must also be practical.
If licensing requirements are unclear, expensive, or difficult to complete, smaller businesses may struggle to compete.
And if consumers cannot establish which providers have been approved, one of the key promised benefits of regulation becomes harder to realise.
The current situation therefore presents an important test of Kenya’s approach to digital asset oversight.
The question is no longer simply whether the country should regulate cryptocurrency.
That decision has already been made.
The question is whether Kenya can implement its framework in a way that provides clarity, fairness, and protection without unnecessarily limiting innovation.
Frequently Asked Questions (FAQs)
1. When did Kenya’s crypto licensing deadline expire?
The one-year transition period under Section 47 of the Virtual Asset Service Providers Act, 2025, ended on November 4, 2026. The Act commenced on November 4, 2025.
2. Has Kenya licensed any cryptocurrency exchanges?
As of November 10, 2026, Blockwisely had not identified a publicly available CBK or CMA VASP licence register confirming approved exchanges. This does not conclusively prove that no licences have been issued or that no applications have been submitted.
3. Is cryptocurrency illegal in Kenya after November 4?
No. The deadline does not create a blanket ban on cryptocurrency ownership or personal trading. It concerns compliance by businesses providing regulated virtual asset services.
4. Can Binance and other foreign exchanges continue operating in Kenya?
Foreign platforms targeting Kenyan customers may fall within the VASP licensing framework. Their ability to provide regulated services depends on their specific operations and applicable authorisations. The licensing status of an individual platform should be verified with the relevant regulator.
5. What happens if a crypto company operates without a licence?
A company carrying on regulated virtual asset business without the required licence may face legal enforcement and penalties under the VASP Act. Actual liability depends on the facts and the applicable legal provisions.
6. Does submitting a licence application allow a company to continue operating?
The published Act and regulations do not establish a general automatic extension simply because an application is pending. Companies should seek formal clarification from the relevant regulator regarding their specific circumstances.
7. Do P2P crypto traders need licences in Kenya?
Not every individual trading their own cryptocurrency requires a VASP licence. However, P2P businesses providing regulated services to other people may be subject to licensing requirements, depending on their activities and structure.
8. How can I check whether a crypto exchange is licensed in Kenya?
Check official information from the Central Bank of Kenya and Capital Markets Authority. If no public VASP register is available, contact the relevant regulator to verify a company’s claims. Do not rely solely on a company’s promotional materials or certificates.
9. Who regulates cryptocurrency exchanges in Kenya?
The Capital Markets Authority generally regulates virtual asset exchanges, brokers, and investment-related activities. The Central Bank of Kenya oversees designated activities such as custodial wallets, virtual asset payment processing, and stablecoin issuance.
10. What happens next for Kenya’s crypto industry?
The immediate priorities include clarifying the licensing status of existing businesses, addressing pending applications, publishing official licence information, and explaining how the regulators will enforce the new requirements.
