Crypto is now regulated in Kenya: what the VASP Act and the 2026 rules mean for you
About six million Kenyans hold digital assets. A new law and regulations gazetted in July 2026 bring exchanges, wallets and stablecoins under licensing. Here is what changed, and how to protect yourself.
For years, crypto in Kenya sat in a grey zone: popular, but largely unregulated. That has changed. The Virtual Asset Service Providers (VASP) Act, 2025 is now law, and the VASP Regulations, 2026 fill in the details.
The timeline
| When | What happened |
|---|---|
| 2015 | The Central Bank of Kenya told banks not to deal in virtual currencies, cutting crypto firms off from formal banking |
| 2023 | A digital asset tax was introduced in the Finance Act, 2023 |
| 15 Oct 2025 | The VASP Act, 2025 received presidential assent |
| 4 Nov 2025 | The VASP Act came into force |
| 22 Jul 2026 | The VASP Regulations, 2026 were gazetted by the National Treasury, completing the framework |
Who is covered
The rules cover businesses that provide crypto services in or from Kenya, including:
- crypto exchanges where people buy and sell;
- custodial wallets, where a company holds your coins for you;
- stablecoin issuers, whose coins are pegged to a currency such as the US dollar;
- tokenisation platforms and crypto investment services.
These firms will need a licence to operate, and the licensing window is expected to open soon.
Why it matters
- Scale: an estimated six million Kenyans hold digital assets, and Kenya received about US$19 billion in crypto inflows between July 2024 and June 2025.
- Protection: licensing should make it easier to know which platforms are legitimate, and harder for scams to operate openly.
- Banking: a clear legal framework could make it easier for licensed crypto firms to work with banks.
What it does not do: regulation does not make crypto safe. Prices can still fall sharply, and you can still lose everything to scams, hacks or a platform collapse.
How to protect yourself
- Once licensing opens, use only licensed providers, and check the regulator's list.
- Be suspicious of anyone promising fixed, guaranteed returns: that is the classic sign of a Ponzi scheme.
- Never share your wallet seed phrase or PIN, and use two-factor authentication.
- Only invest money you can afford to lose, and keep records for tax.
Prefer to watch? Nchiwise explains it on videoShort videos on how countries develop and scale.
Watch on YouTube
