DCP Licence Kenya — Complete Guide to Digital Credit Provider Licensing

What Is a Digital Credit Provider Licence?

A Digital Credit Provider (DCP) licence is required for any business that provides credit through digital channels in Kenya. The Central Bank of Kenya (CBK) introduced DCP licensing through the Central Bank of Kenya (Amendment) Act, 2021, which brought digital lenders under formal regulation.

If your app or platform offers loans, salary advances, buy-now-pay-later services, or any form of digital credit, you must obtain a DCP licence from the CBK. Operating without this licence is now illegal and can result in penalties or being barred from operating.

Who Needs a DCP Licence?

The CBK's DCP regulations apply broadly to digital lending activities.

• Mobile lending apps offering personal or business loans
• Salary advance platforms providing credit to employees
• Buy-now-pay-later (BNPL) services
• Peer-to-peer lending platforms facilitating digital credit
• E-commerce platforms offering credit at checkout
• Any business using digital channels to originate, disburse, or collect loans

CBK DCP Licensing Requirements

The CBK has established clear requirements for DCP licensing. Applicants must demonstrate they meet standards for corporate governance, financial capacity, technology security, data protection, and responsible lending practices.

Key requirements include incorporation in Kenya, adequate minimum capital, fit and proper directors and management, comprehensive compliance policies, secure technology infrastructure, and data protection compliance under Kenya's Data Protection Act.

Capital Requirements

The CBK prescribes minimum capital requirements for DCPs based on the scale and nature of lending activities. All DCPs must maintain minimum paid-up capital and ongoing net worth requirements throughout their operations.

The capital requirements are designed to ensure DCPs have adequate financial resources to absorb losses and continue operations even during periods of high defaults. The CBK reviews capital adequacy during periodic examinations.

Interest Rate and Fee Regulations

Digital lenders in Kenya must comply with interest rate regulations. The CBK has taken action against lenders charging excessive rates and using predatory practices. Your lending model must demonstrate fairness and transparency in pricing.

All fees, interest rates, and charges must be clearly disclosed to borrowers before loan disbursement. The total cost of credit must be transparent, and borrowers must understand exactly what they will repay. Hidden fees and ambiguous charges are prohibited.

Data Protection and Privacy Compliance

Data protection is a critical compliance area for DCPs. The CBK and the Office of the Data Protection Commissioner closely monitor how digital lenders collect, use, and share borrower data.

DCPs must obtain explicit consent before accessing borrower data, especially contact lists and device information. Sharing borrower data with third parties without consent is prohibited. You must have a privacy policy that complies with the Data Protection Act and appoint a Data Protection Officer.

The DCP Application Process

The CBK DCP application process follows these stages.

• Company Setup — Incorporate your Kenyan company and build initial capital.
• Policy Development — Create lending policies, credit risk frameworks, data protection policies, and complaint handling procedures.
• Technology Preparation — Build your lending platform with proper security, audit trails, and reporting capabilities.
• Application Submission — Submit your complete application to the CBK with all supporting documents.
• CBK Review — The CBK reviews your application over 3–6 months.
• Inspection — The CBK may inspect your operations and technology.
• Approval — Upon satisfaction, the CBK issues your DCP licence.
• Ongoing Compliance — Submit periodic returns and maintain compliance standards.

Responsible Lending Obligations

The CBK expects DCPs to practice responsible lending. This includes assessing borrower affordability before granting loans, providing clear terms and conditions, offering grievance mechanisms, and avoiding harassment in debt collection.

Your platform must implement credit scoring models that fairly assess repayment capacity. Loan terms must be appropriate for the borrower's income level. Aggressive collection practices, including shaming borrowers on social media or contacting their contacts without consent, are prohibited and can result in licence revocation.

Why Mofintech for DCP Licensing

Mofintech Africa has extensive experience helping digital lenders navigate CBK regulation. We understand the unique challenges of digital lending — from technology compliance to responsible lending frameworks — and provide practical solutions.

Our DCP licensing service covers application preparation, policy documentation, technology review, CBK engagement, and ongoing compliance support. We have helped lending platforms of all sizes obtain their licences and maintain good standing with the regulator.