Kenya’s cryptocurrency industry is approaching a major regulatory turning point. The one-year transition period under the Virtual Asset Service Providers Act, 2025, expires on November 4, 2026.
The deadline requires businesses that were already providing covered virtual asset services when the law commenced to comply with the new regulatory framework.
Now the question is: which cryptocurrency businesses have secured the necessary authorisation, and what happens to those that have not?
The expiry of the transition period does not automatically mean every international exchange will stop serving Kenyan customers. It does, however, put greater pressure on existing operators to demonstrate that their activities comply with the law.
Kenya’s Crypto Licensing Transition Period Comes to an End
The Virtual Asset Service Providers Act, 2025, came into force on November 4, 2025. Section 47 gave existing virtual asset service providers one year from commencement to comply with its requirements.
That transition period expires on November 4, 2026.
The government subsequently published the Virtual Asset Service Providers Regulations, 2026, under Legal Notice No. 134 on July 22. The regulations provide the operational requirements for licensing and supervising businesses covered by the Act.
The Central Bank of Kenya (CBK) and the Capital Markets Authority (CMA) are responsible for regulating different categories of virtual asset services.
The framework covers activities including cryptocurrency exchanges, custodial wallet services, virtual asset payment processing, stablecoin issuance and token-related services.
The end of the transition period therefore marks a shift from preparation and compliance towards the enforcement of the licensing framework.
Have Any Crypto Companies Received Kenyan Licences?
The status of licensing approvals remains one of the biggest unanswered questions surrounding the deadline.
In a public notice issued on November 18, 2025, the CBK and CMA confirmed that no virtual asset service providers had been licensed under the Act.
The regulators explained that licensing would commence after the relevant regulations were issued.
Those regulations were subsequently published in July 2026, opening the way for the licensing framework to be implemented.
However, publicly available information reviewed ahead of the November 4 deadline does not provide a clear, consolidated list confirming which cryptocurrency exchanges. Other virtual asset businesses have received authorisation under the new framework.
The absence of a clearly identifiable listing should not be interpreted as proof that no applications have been submitted or that no approvals have been granted.
It does, however, leave businesses and customers with an important practical question: where can they verify whether a cryptocurrency service provider is authorised to operate in Kenya?
The CBK and CMA will need to provide clear information about licensing decisions to reduce uncertainty across the market.
What Happens to Crypto Businesses That Miss the Deadline?
The end of the transition period makes compliance with the Act particularly important for businesses that were already operating when the legislation commenced.
Section 8 establishes the requirement for a person to obtain the relevant licence before carrying out regulated virtual asset service provider activities in or from Kenya.
Businesses that continue offering covered services without the required authorisation could face regulatory and legal consequences.
Section 40(3) provides for penalties upon conviction for operating without the required licence. Companies can face fines of up to KSh25 million. Individuals can face fines of up to KSh10 million, imprisonment for up to five years, or both.
The law does not establish a general automatic exemption simply because a business has submitted a licence application.
Companies with pending applications will therefore need to obtain clarity from the relevant regulator about their position after the transition period.
The practical response may differ depending on the services offered, the regulator responsible and the circumstances of the business.
Will International Exchanges Still Serve Kenyan Customers?
International cryptocurrency platforms are another important part of the discussion.
Many Kenyan traders use exchanges and wallet providers headquartered outside the country. The VASP Act’s scope is not limited to businesses incorporated in Kenya. It also covers relevant virtual asset services provided in or from the country.
Foreign companies may therefore need to assess whether their activities fall within the law and what authorisation is required.
The regulations also establish requirements for foreign companies seeking to provide covered services in Kenya, including local registration and compliance arrangements.
However, the November 4 deadline should not be interpreted as confirmation that every international exchange will immediately block Kenyan accounts.
Any changes will depend on the services offered, the provider’s regulatory position and how the CBK and CMA implement the framework.
Customers should avoid assuming that a platform is authorised simply because it continues to accept Kenyan users or supports deposits through local payment channels.
What Should Kenyan Crypto Users Do?
The new licensing framework is primarily directed at businesses providing virtual asset services, not individuals who simply hold cryptocurrency.
Kenyan investors do not need to obtain a VASP licence to own Bitcoin, Ethereum or other digital assets.
However, the regulatory status of the platforms they use remains important.
Customers should consider the following precautions:
- Verify licensing claims: Check whether a provider appears on the relevant regulator’s official records.
- Be cautious of fake announcements. Do not trust social media posts or messages claiming that an exchange has received a Kenyan licence without verifiable evidence.
- Avoid paying verification fees. Be suspicious of anyone demanding money to register, unlock or protect a cryptocurrency account because of the new regulations.
- Review platform communications: Exchanges may issue notices explaining changes to their Kenyan services or compliance arrangements.
- Keep control of account security: Use strong passwords and two-factor authentication, and remain alert to phishing attempts.
A regulatory licence can provide a stronger framework for supervision and customer protection, but it does not eliminate the risks associated with cryptocurrency investments.
Kenya’s Crypto Market Enters a New Regulatory Phase
The November 4 deadline is an important test of Kenya’s ability to move from establishing a regulatory framework.
The VASP Act provides a legal structure for supervising cryptocurrency businesses, while the 2026 regulations set out additional licensing and operational requirements.
The next challenge will be ensuring that businesses understand their obligations and that regulators communicate licensing decisions clearly.
For established operators, the cost of compliance could influence whether they continue serving the Kenyan market. The main concern will be knowing which platforms are authorised and what protections are available if something goes wrong.
The deadline itself will not resolve every question surrounding Kenya’s cryptocurrency industry. The more important test will be how the CBK and CMA enforce the new framework and whether the licensing process provides enough clarity for businesses and users.
Related reading: Kenya’s Crypto Licensing Deadline Is November 4: What Exchanges and Investors Need to Know
About the Author
