PSP Licence Kenya — Complete Guide to Payment Service Provider Licensing

What Is a PSP Licence in Kenya?

A Payment Service Provider (PSP) licence authorises a company to offer payment services in Kenya. The Central Bank of Kenya (CBK) issues PSP licences under the National Payment System Act. This licence is required for any company that facilitates payments, transfers, or remittances as a business.

If your platform handles customer funds for payment purposes, processes transactions between parties, or offers electronic money services, you likely need a PSP licence. Operating without one exposes your business to enforcement action and potential shutdown.

Types of PSP Licences in Kenya

The CBK categorises PSP licences based on the nature of payment services offered.

• Payment Service Provider (General) — For platforms facilitating payments, transfers, and collections.
• Electronic Money Issuer — For companies issuing e-money stored value products like digital wallets.
• Money Remittance Provider — For businesses facilitating domestic and international money transfers.
• Payment Facilitator — For platforms that enable merchants to accept electronic payments.

Minimum Capital Requirements

The CBK sets minimum capital requirements for PSPs based on licence category. These requirements ensure licensed providers have adequate financial resources to operate safely and protect customer funds.

Applicants must demonstrate paid-up capital meeting CBK thresholds, plus ongoing maintenance of minimum capital throughout operations. The CBK may also require a security bond or guarantee as additional protection for customer funds.

CBK Application Process

The PSP licence application process involves several stages with the CBK.

• Preliminary Consultation — Engage the CBK to discuss your proposed payment service model.
• Incorporation — Set up your Kenyan company with appropriate share capital structure.
• Documentation — Prepare business plan, IT systems documentation, compliance policies, risk framework, and governance structure.
• Application Submission — Submit your complete application to the CBK with all required fees.
• CBK Review — The CBK reviews your application, typically over 3–6 months.
• Systems Demonstration — Present your technology platform and operational procedures.
• Approval — Receive your PSP licence and commence operations within the stipulated timeline.

Technology and Security Standards

The CBK places heavy emphasis on technology infrastructure and cybersecurity. Your platform must demonstrate PCI-DSS compliance (or equivalent), secure data handling, encryption standards, and disaster recovery capabilities.

Key requirements include multi-factor authentication for users, real-time transaction monitoring, fraud detection systems, and secure API integrations. The CBK expects comprehensive documentation of all systems and regular security audits by accredited firms.

Compliance Obligations for Licensed PSPs

Licensed PSPs must comply with ongoing regulatory obligations including submitting periodic returns to the CBK, maintaining capital requirements, conducting external audits, and implementing AML/CFT measures.

Additional requirements include customer fund segregation, complaint handling procedures, service level agreements, and business continuity testing. The CBK conducts periodic inspections to verify compliance.

Common PSP Licensing Mistakes

Having worked with numerous payment startups, we see founders repeatedly make the same errors.

• Starting development before understanding licence requirements — leading to expensive redesigns.
• Underestimating capital requirements — insufficient funding delays or derails applications.
• Weak compliance frameworks — the CBK rejects applications with inadequate AML policies.
• Poor technology documentation — generic IT policies fail to meet CBK standards.
• Going it alone — without regulatory expertise, applications often take longer and face more queries.

Launching Your PSP Business

Once licensed, you must launch operations within the CBK's stipulated timeframe. This includes onboarding your first merchants or customers, activating your payment infrastructure, and commencing transaction processing.

Post-launch, focus on scaling while maintaining compliance. The CBK monitors licensed PSPs closely, especially in their first year of operation. Having experienced compliance support during this period is invaluable.