Kenya’s fintech scene grows fast. Mobile money accounts exceed 51 million, with a penetration of nearly 98 percent of the population.
Digital lending and payment platforms serve millions of people every day. Regulators pay close attention to these services because they handle customer money and personal data.
This article explains exactly what the Central Bank of Kenya (CBK) requires before you can legally operate a fintech in Kenya.
If you are a founder, investor, or landowner exploring new opportunities, you will find clear steps here.
Fintech Meaning and Definition
The meaning and definition of fintech is simple. Fintech, short for financial technology, refers to the use of technology to improve and automate the delivery and use of financial services.
In Kenya, this includes:
- Payment apps
- Digital wallets
- Online loan platforms
- Remittance services
- Savings tools
- Payment gateways.
Fintech in Kenya is not one single license category. You receive a license according to the specific activity you carry out.
Payment services fall under one set of rules. Digital credit falls under another. Capital markets products or virtual assets bring in other regulators.
Understanding this distinction saves time and money when you apply.
Who Regulates Fintech in Kenya?
The Central Bank of Kenya is the main regulator for most payment services and digital credit. It acts under the National Payment Systems Act and the CBK (Digital Credit Providers) Regulations, 2022.
Other bodies can become involved. The Capital Markets Authority handles investment-linked platforms.
Virtual asset activities now fall under a joint framework created by the Virtual Asset Service Providers Act, 2025.
Operating without the correct license risks heavy penalties, forced shutdowns, and lasting damage to your reputation.
Many fintech companies in Kenya have learned this the hard way. We usually try to help founders avoid these outcomes by mapping the product to the appropriate regulator early on.
Which CBK License Does Your Fintech in Kenya Actually Need?
Match your product to the correct category before you contact the CBK.
Payment services
If you run wallets, payment gateways, bill-pay platforms, marketplace escrow, or any service that moves or holds customer funds, you need a Payment Service Provider (PSP) license. Capital requirements vary by category.
Electronic retail payment providers often start at KES 5 million ($38640).
E-money issuers need KES 20 million ($154,600).
Designated payment instrument issuers face higher thresholds around KES 50 million ($386,400). Always confirm the latest figures with the CBK.
Digital lending
Apps, USSD services, or online platforms that give credit need a Digital Credit Provider (DCP) license under the 2022 Regulations.
This covers instant loan apps, buy-now-pay-later platforms, and many SME digital lenders. Fintech loans in Kenya fall squarely in this group.
Application fee is KES 5,000 ($38.6). The annual license fee is KES 20,000 ($ 154.50).
Broader non-deposit-taking credit
Draft rules from 2025 propose licensing or registration thresholds, often around KES 20 million ($154,550) in capital. Watch this space if your model sits outside classic DCP activities.
Investment or capital-markets fintechs
These usually require Capital Markets Authority licensing for automated advisory or intermediary platforms.
Virtual assets
The 2025 Act and 2026 Regulations establish VASP licenses overseen by the CBK and the CMA.
Capital can range from lower amounts for advisory services up to hundreds of millions of shillings for stablecoin issuers.
Your first job is to map your product to the right license category before you even talk to CBK.
Core Requirements CBK Looks For in a Fintech License Application
1. Proper Legal Structure and Local Incorporation
Your company must be incorporated in Kenya.
Provide:
- Certified incorporation documents
- Memorandum and Articles of Association
- Full details of directors and shareholders.
Clear shareholding and good governance matter.
2. Clear Business Model and 3-Year Financial Projections
Submit a detailed business plan. It must show the target market, revenue model, pricing, distribution channels, and risk profile.
Include realistic three-year financial projections demonstrating the business can remain viable.
3. Minimum Capital Requirements
CBK sets different minimum core capital levels by license type and category. For many PSPs, the floor sits in the low millions of shillings.
E-money issuers face higher amounts. Digital credit providers must show sufficient funds and clear sources of capital. Confirm the current thresholds directly with CBK, as they can change.
4. Robust Technology, Security, and Operational Resilience
Describe your ICT systems, architecture, and delivery channels (app, USSD, API, web).
Provide an independent IT audit or assurance report, vulnerability assessments, and penetration testing results. Include business continuity and disaster recovery plans, plus incident response procedures.
5. AML/CFT and Sanctions Compliance
Prepare written policies aligned with Kenyan law. Cover customer due diligence (KYC), transaction monitoring, suspicious transaction reporting, and sanctions screening.
6. Data Protection and Customer Privacy
Comply with the Data Protection Act, 2019. Use clear privacy notices, obtain proper consent, limit data collection, and set strong access controls.
Have procedures for data breach notification and define who acts as data controller or processor.
7. Consumer Protection and Redress Mechanisms
Offer fair pricing, clear terms and conditions, and transparent disclosure of fees and risks. Maintain an effective complaints-handling process and a customer redress policy.
8. Fit-and-Proper Directors and Senior Management
Directors and key officers must meet “fit and proper” standards:
- Good conduct
- No serious regulatory breaches
- Sound financial standing.
- Submit certificates of good conduct
- Tax compliance certificates
- Recent credit reference bureau reports for significant shareholders and senior management.
9. Safeguarding Customer Funds
For payment and e-money services, set up a trust deed and custodial trust account with a licensed bank.
Maintain clear reconciliation and reporting processes so customer funds stay protected.
These requirements apply to most fintech applications in Kenya. An expert lawyer in Kenya can help you assemble the full package correctly.
The Step-by-Step Licensing Process with CBK
This is just an overview of how to license your fintech startup in Kenya with CBK. We also have a full breakdown on how to register your fintech in Kenya.
Step 1: Pre-application engagement
Contact the relevant CBK department (either the National Payment Systems or the Digital Credit Providers unit). Request a meeting and seek approval of the name.
Step 2: Create an online profile and complete forms
Register on the CBK portal. For digital credit fill Forms CBK DCP 1, 2 and 3. Use the matching NPS forms for payment services.
Step 3: Prepare and submit documentation
Gather incorporation papers, business plan, financial projections, ICT and security reports, all required policies (AML/CFT, data protection, consumer redress, credit policy, governance, pricing), and any trust deed.
Step 4: Pay application and authorization fees
Pay the non-refundable application fee (KES 5,000 ($38.6) for DCPs). Later pay the license or authorization fee (for example, KES 20,000 ($154.50) annually for many DCPs; higher amounts apply for certain PSPs).
Step 5: CBK review, queries, and possible inspections
Expect questions, requests for extra information, and sometimes site visits or system tests.
Step 6: License issuance and ongoing compliance
Once approved, you receive the license. It requires annual renewal, periodic returns, audits, and continuous supervision.
Common Mistakes That Delay or Kill Fintech License Applications in Kenya
- Vague or unrealistic business plans and financial projections cause frequent delays.
- Weak or missing IT audit and security documentation can prevent many applications from running.
- Incomplete AML/CFT or data-protection frameworks lead to rejection.
- Unclear shareholding or fit-and-proper issues with directors pose serious problems.
- Trying to launch first and fix compliance later brings enforcement action.
Best lawyers in Kenya routinely help clients avoid these pitfalls by reviewing the full file before submission.
Alternatives to a Full License Like Partnerships and White-Label Models
Some fintech companies Kenya begin by partnering with already-licensed banks, PSPs, or DCPs. They use APIs, white-label solutions, or revenue-share arrangements.
This route offers speed and lower initial capital. The trade-off is less control, ongoing dependence, and shared margins. It remains a valid path as you prepare for your own full fintech license in Kenya.
Conclusion
Do these things now:
- Map your exact product to the correct license category.
- Incorporate locally and clean up shareholding and governance.
- Draft the core policies on AML/CFT, data protection, consumer redress, credit and pricing, and risk and IT.
- Engage the CBK early and budget enough time and capital for compliance.
- Seek practical legal support from experienced professionals.
Proper licensing is what separates scalable fintech in Kenya from short-lived experiments. Chepchieng and Company Advocates stand ready as expert, best, and trusted lawyers in Kenya to guide founders, investors, and landowners through company setup, regulatory filings, and ongoing compliance for fintech in Kenya.
Frequently Asked Questions
How long does CBK licensing usually take?
A complete application often takes several months. Name approval, document preparation, review, and possible testing all add time. Early preparation shortens the process.
Do I need a license if I only partner with a bank?
Partnership models can reduce the need for a full license at the start, but you must still comply with all consumer, data, and AML rules. Check the exact arrangement with legal advice.
Is there a minimum capital requirement for every digital lending app?
The CBK requires proof of adequate capital and clear sources of funds. Specific figures depend on the exact model and any new non-deposit-taking rules. Confirm current expectations with the regulator.
Can a foreign company obtain a fintech license in Kenya?
Yes, but the company must incorporate or register in Kenya, maintain a local presence, and meet all fit-and-proper and capital rules.
What happens if I operate without a license?
The CBK can impose penalties, order shutdowns, and pursue further action. Reputational harm often follows. Licensing first is the safer route.
