Virtual Asset Service Provider (VASP) Advisory in Kenya

1. What is a VASP and Why Licensing Matters

A Virtual Asset Service Provider (VASP) is any natural or legal person who conducts one or more of the following activities for or on behalf of another person:

• Exchange between virtual assets and fiat currencies
• Exchange between one or more forms of virtual assets
• Transfer of virtual assets
• Safekeeping or administration of virtual assets
• Participation in and provision of financial services related to virtual asset issuance

In Kenya, the Capital Markets Authority (CMA) is the designated regulator for virtual assets. The proposed regulatory framework aims to bring Kenya in line with FATF (Financial Action Task Force) recommendations and provide consumer protection in the rapidly growing digital asset market.

2. Kenya's Proposed VASP Regulatory Framework

Kenya is in the process of establishing a comprehensive regulatory framework for virtual assets. The key legislative developments include:

• The Virtual Assets Service Providers Bill — currently under parliamentary review
• CMA guidelines on digital asset regulation — expected 2026
• Integration with existing AML/CFT frameworks under POCAMLA
• Coordination with the Central Bank of Kenya on stablecoin and CBDC policies

3. Who Will Need a VASP Licence in Kenya

The following businesses will require VASP authorisation once the framework is fully operational:

• Cryptocurrency exchanges (centralised and decentralised)
• Crypto wallet providers (custodial and non-custodial)
• Stablecoin issuers and operators
• DeFi protocol operators with Kenyan nexus
• NFT marketplaces and tokenisation platforms
• Crypto payment processors
• Virtual asset custody services
• Token issuance and ICO/STO platforms

4. Licensing Expectations & Requirements

While the final regulations are pending, expected licensing requirements based on CMA consultations and regional precedents include:

Requirement	Expected Standard
Minimum Capital	-50 million (depending on service type)
Company Registration	Kenyan incorporated entity
Local Presence	Physical office and local staff in Kenya
Fit & Proper Test	Directors and significant shareholders
Technology Audit	Security assessment and penetration testing
AML/CFT Framework	Comprehensive policies and procedures
Cybersecurity	ISO 27001 or equivalent certification
Insurance	Cyber liability and fidelity insurance

5. AML/CFT Compliance Obligations

VASPs will be subject to stringent anti-money laundering and counter-terrorism financing requirements:

• Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) for high-risk clients
• Transaction monitoring and suspicious activity reporting (SARs) to FRC
• Travel Rule compliance for cross-border transfers (FATF Recommendation 16)
• Record keeping for minimum 7 years
• Regular AML risk assessments
• Appointment of a Money Laundering Reporting Officer (MLRO)
• Staff training on AML/CFT obligations

6. Governance & Operational Requirements

Expected governance standards for VASPs in Kenya:

• Board of Directors with at least one independent director
• Clearly defined risk management framework
• Segregation of customer assets from operational funds
• Cold storage requirements for custody providers (typically 80%+ offline)
• Regular third-party security audits
• Incident response and business continuity plans
• Clear terms of service and user agreements
• Consumer complaint handling procedures

7. Foreign Ownership Considerations

Kenya's VASP framework is expected to permit foreign ownership with certain conditions:

• Foreign ownership up to 100% may be permitted (subject to final regulations)
• At least one resident director required
• Local data residency requirements expected
• Tax obligations on virtual asset transactions (consult KRA guidance)
• Potential restrictions on specific asset types or services

For international VASPs seeking to enter the Kenyan market, partnership with a local entity or establishment of a Kenyan subsidiary is the recommended pathway. M&O FinTech advises on optimal structuring to balance control, compliance, and tax efficiency.

8. Application Process & Timeline

9. How M&O FinTech Assists VASP Applicants

M&O FinTech Consultant Group provides comprehensive VASP advisory services:

Our team maintains active engagement with the CMA and understands the evolving regulatory landscape for virtual assets in Kenya. We help crypto and blockchain businesses position themselves for compliance success in one of Africa's most promising digital asset markets.