New Digital Asset Regulations in Kenya: What Crypto & Web3 Users Need to Know
Kenya’s cryptocurrency and Web3 industry is moving into a new regulatory era after the country established a legal framework for virtual asset service providers. The changes affect crypto exchanges, wallet providers, token issuers and other businesses offering virtual asset services in or from Kenya.
The shift is significant because the sector has grown rapidly while regulation remained less developed than the technology itself. Kenya now has the Virtual Asset Service Providers Act, 2025, which commenced on November 4, 2025 and provides the legal framework for licensing and regulating virtual asset service providers.
The government is also developing detailed rules to operationalise the Act. In March 2026, the National Treasury published the draft Virtual Asset Service Providers Regulations, 2026 for public participation. The draft regulations are therefore important, but users should distinguish them from the Act and from rules that have already taken effect.
What Kenya’s New Crypto Law Covers
The Virtual Asset Service Providers Act defines a virtual asset broadly as a digital representation of value that can be digitally traded or transferred and used for payment or investment purposes.
The law creates a framework covering businesses that provide specified virtual asset services. These include virtual asset exchanges, custodial wallet services, tokenisation activities, certain virtual asset offerings and stablecoin-related activities.
Not every blockchain project automatically falls under the Act. The legislation excludes certain closed-ecosystem digital representations and some non-financial non-fungible tokens, among other categories. The actual nature and use of a digital asset therefore matters when determining whether the law applies.
The distinction is particularly important to Web3 developers. A company building blockchain software may face different obligations from a business that holds customers’ assets or operates an exchange.
Which Regulator Handles Crypto Businesses?
Kenya has assigned regulatory responsibilities to different authorities depending on the type of virtual asset service.
The Capital Markets Authority and Central Bank of Kenya are identified as relevant regulatory authorities under the Act.
The law assigns virtual asset exchanges to the CMA and custodial wallet services to the CBK. Stablecoin issuance is also assigned to the CBK, while activities such as virtual asset tokenisation and certain virtual asset offerings fall under the CMA framework.
This division means a crypto company cannot simply assume that one regulator will oversee every digital asset activity.
Businesses need to establish which services they provide and which authority has jurisdiction before beginning operations or expanding an existing service.
Crypto Exchange Licensing in Kenya
One of the biggest changes concerns crypto exchanges.
The Act states that a person cannot carry on or present itself as carrying on virtual asset services in or from Kenya without the required licence. Eligible applicants must meet requirements set under the law and regulations.
The licensing process can involve scrutiny of a company’s ownership, management, financial position, technical systems and compliance arrangements.
Regulators can also consider whether the applicant has adequate skills, cybersecurity measures, consumer protection systems and procedures for combating money laundering and terrorism financing.
The law requires licensed virtual asset service providers to operate prudently and maintain adequate systems and records. It also provides for capital, solvency and insurance requirements to be prescribed.
Businesses already operating in the sector therefore need to pay close attention to licensing requirements rather than assuming that registration as an ordinary company is sufficient.
What Crypto Users Should Know About Exchanges
Kenyan cryptocurrency users should become more careful when selecting an exchange.
A platform being accessible through a mobile phone or website does not automatically mean that it is authorised to provide every type of virtual asset service in Kenya.
Users should verify the status of the service provider and understand who operates the platform. They should also review its terms, fees, withdrawal procedures and policies governing customer assets.
The new framework is designed partly to strengthen consumer protection. The Act requires licensed providers to take measures to safeguard customer virtual assets, handle complaints and provide fair and transparent information.
These measures can improve accountability, but they do not eliminate investment risk.
Cryptocurrency prices can still rise or fall sharply, while scams, hacking and poor investment decisions remain possible.
What the Rules Mean for Crypto Wallets
Wallet regulation is another important area.
A personal wallet controlled directly by an individual is different from a custodial service where a company holds and manages private keys on behalf of customers.
The Act specifically recognises custodial wallet services and assigns their regulation to the CBK.
Crypto companies offering custody services should therefore examine their business model carefully and determine whether they require authorisation.
Customers should also understand whether an exchange is holding their assets or whether they control the relevant private keys themselves.
New Compliance Requirements for Crypto Businesses
Licensed virtual asset service providers will face several compliance responsibilities.
The Act requires providers to comply with anti-money laundering, counter-terrorism financing and counter-proliferation financing measures. Businesses must also maintain appropriate technological, financial and human resources.
Other requirements cover customer asset protection, financial statements, data handling, cybersecurity, advertising, complaints management and business continuity.
These obligations mean that running a crypto exchange is becoming more similar to operating other regulated financial businesses.
A company cannot simply focus on developing a trading platform. It also needs governance, compliance systems, appropriate records and controls capable of protecting customers and meeting regulatory requirements.
Crypto and Anti-Money Laundering Rules
Anti-money laundering compliance is a major part of Kenya’s digital asset framework.
Virtual asset service providers are brought into the country’s broader anti-money laundering regime. Regulators can supervise compliance and require information relevant to detecting suspicious activity.
Customers using regulated platforms may therefore encounter stronger know-your-customer checks.
Requests for identification documents, information about transactions or additional verification should not automatically be interpreted as a problem. Such procedures are common within regulated financial services and form part of efforts to identify financial crime risks.
The framework also places restrictions on certain anonymity-enhancing activities. The Act specifically prohibits licensed providers from undertaking mixer or tumbler services and anonymity-enhancing services.
What About Crypto Taxes in Kenya?
Tax compliance remains a separate but important issue for cryptocurrency users.
The introduction of virtual asset regulation does not mean that crypto transactions automatically become tax-free. Kenyan taxpayers should continue to consider their obligations under the country’s tax laws.
The Kenya Revenue Authority remains the institution responsible for administering tax laws and collecting revenue.
Tax treatment can depend on the nature of the activity. Someone investing occasionally in digital assets may have different tax considerations from a person conducting a crypto trading business or earning income through a digital asset enterprise.
Crypto users should therefore keep detailed records of purchases, sales, transfers, fees and other transactions.
Professional tax advice can also be useful where the tax treatment of a particular digital asset activity is unclear.
Why Record-Keeping Matters
Blockchain transactions create permanent digital records, but that does not mean taxpayers automatically have a complete accounting record.
Users should keep exchange statements, transaction histories, bank records, wallet information and details of fees paid.
A clear record can help establish the value and timing of transactions and make tax reporting easier.
Businesses have even greater record-keeping responsibilities because they may need to satisfy regulatory, accounting, tax, cybersecurity and customer-protection requirements.
What Web3 Companies Need to Know
Web3 companies should assess their activities rather than relying on their branding.
A business calling itself a blockchain technology company could still fall within the regulatory framework if it provides a service covered by the Act.
Tokenisation platforms, exchanges, wallet providers and businesses involved in virtual asset offerings should examine their activities against the law.
The National Treasury’s draft VASP Regulations provide further detail on areas intended to operationalise the Act, including licensing, supervision, market conduct, consumer protection and other compliance matters. The document was issued as a draft for public participation, so businesses should check the latest official position before relying on proposed provisions as final rules.
Will the New Rules Ban Cryptocurrency?
Kenya’s regulatory framework does not amount to a blanket ban on cryptocurrency.
The law instead establishes rules for businesses and activities falling within the virtual asset sector.
That distinction is important. Regulation can provide greater oversight without turning cryptocurrency into a risk-free investment.
Bitcoin, Ethereum and other digital assets can remain highly volatile even when the platforms through which they are traded are subject to regulatory requirements.
Investors should therefore treat licensing and consumer protection separately from investment performance.
What Crypto Users Should Do Now
Kenyan crypto users should start treating compliance as part of responsible digital asset ownership.
Users should verify the service providers they deal with, keep transaction records and understand how their assets are stored.
People running crypto businesses should assess whether their activities require licensing and identify the regulator responsible for their particular service.
Investors should also be cautious about promises of guaranteed returns. No regulatory framework can eliminate fraudulent schemes or investment losses entirely.
Official information should take priority over claims circulating on social media, messaging groups and cryptocurrency forums.
What Happens Next?
Kenya’s virtual asset regulatory framework is still developing.
The National Treasury published the draft 2026 regulations in March and invited public participation. The Treasury’s regulatory impact statement says the proposed regulations are intended to operationalise the 2025 Act while strengthening licensing, supervision, anti-money laundering controls, consumer protection, cybersecurity and financial safeguards.
The implementation stage will therefore be closely watched by exchanges, investors, technology companies and financial institutions.
Kenya’s move toward formal regulation gives the digital asset industry a clearer legal foundation, but it also raises the compliance bar.
Crypto users should understand that regulation is not a guarantee against losses. Businesses should understand that operating in the sector now comes with defined legal responsibilities.
Anyone participating in Kenya’s cryptocurrency or Web3 economy should follow updates from the Kenya Law legal database, the National Treasury, CMA and CBK rather than relying on outdated information.
The most important change is simple: Kenya’s digital asset market is no longer operating in a regulatory vacuum. Businesses and users now need to understand where their activities fit within the law and prepare for a more formal, closely supervised crypto ecosystem.
