Kenya VASP Licensing & Compliance Resource Centre
The central hub for licence categories, CBK/CMA jurisdiction, costs, AML and the transition deadline.
Read insight →The Virtual Asset Service Providers Act, 2025 commenced on 4 November 2025. Section 47 gave persons already providing virtual asset services at that date a one-year transitional period to regularise their position under the new licensing framework, a period that closes on 4 November 2026. With the implementing Regulations now gazetted, existing operators have both a defined deadline and, for the first time, an actual process to comply with it.
Who this deadline applies to
The transitional provision is aimed specifically at businesses that were already providing virtual asset services in Kenya before the Act commenced. It is not a general grace period for new entrants to launch an unlicensed business before the deadline; a business starting virtual asset operations after commencement should assess its licensing position before launch, not treat 4 November 2026 as its own deadline.
Three distinct positions
- Existing operators (pre-commencement). Should be actively working through classification and application preparation now, with 4 November 2026 as the operative deadline for their transitional protection.
- New entrants (post-commencement). Should assess licensing requirements and, where applicable, obtain authorisation before commencing the relevant activity; the transitional window does not apply to them.
- Offshore platforms serving Kenyan customers. Should assess their own exposure under the "in or from Kenya" test discussed in our offshore VASP guide, since their position is not automatically covered by the same transitional logic as a locally operating existing business.
A practical readiness framework
With the deadline fixed, existing operators benefit from working backward from 4 November 2026 with defined internal milestones. The following is a project-management framework we use with clients, not a set of deadlines prescribed by the regulator itself:
- Immediately: complete regulatory classification and confirm which regulator and licence category applies.
- Early stage: remediate governance, ownership records and fit-and-proper documentation gaps.
- Mid stage: finalise the AML/CFT/CPF programme, risk framework and cybersecurity documentation.
- Final stage before the deadline: submit the complete application and build in time to respond to regulator queries before 4 November 2026.
What happens after 4 November 2026
Once the statutory transition period for existing operators has ended, businesses operating without the required authorisation should obtain specific legal advice on their regulatory position without delay. Continuing to operate unlicensed after the transitional protection lapses carries materially different, and higher, enforcement exposure than operating during the transition window while an application is genuinely in progress.
Evidence of good-faith progress
Operators should prioritise completing their regulatory classification exercise and preparing and submitting the required licensing application well before the transition deadline. Where timing is at risk, the operator should obtain specific legal advice and, where appropriate, engage the relevant regulator regarding its position and next steps. Documenting your compliance timeline and engagement with counsel is worthwhile in its own right, but it is not a stated legal entitlement to continue operating past the transition deadline; operators approaching or passing 4 November 2026 without a granted licence should not rely on application activity alone as a defence.
Approaching the transition deadline?
We help existing operators prioritise classification and application steps against the 4 November 2026 deadline.
Request a Transition Readiness ReviewKey legal & regulatory sources
- Kenya Law — Virtual Asset Service Providers Act, 2025 (Act No. 20 of 2025)
- Kenya Law — Virtual Asset Service Providers Regulations, 2026 (Legal Notice No. 134 of 2026)
- Central Bank of Kenya and Capital Markets Authority public guidance on VASP licensing
Frequently asked questions
Does the 4 November 2026 deadline apply to a business that launched in 2026, after the Act commenced?
No. The transitional protection under section 47 applies to persons already providing virtual asset services when the Act commenced on 4 November 2025. A business launching afterwards should assess its licensing position before commencing operations, not rely on this transitional date.
What should an existing operator do if it cannot complete its application before 4 November 2026?
Operators should prioritise completing their regulatory classification exercise and preparing and submitting the required licensing application well before the transition deadline. Where timing is at risk, the operator should obtain specific legal advice and, where appropriate, engage the relevant regulator regarding its position and next steps.
Is there a formal extension process if I miss the deadline?
Any extension or transitional accommodation beyond the statutory period should be confirmed directly against the Act, the Regulations and current regulator guidance; this page does not assume any specific extension mechanism exists.
Related insights
Fintech,
Fintech,
Can an Offshore Crypto Company Serve Kenyan Customers Without a Kenyan VASP Licence?
How the "in or from Kenya" jurisdictional test applies to platforms without a local presence.
Read insight →The information on this website is general in nature, is not legal advice, and does not create an advocate-client relationship. Figures, fees, capital thresholds and procedural requirements under the Virtual Asset Service Providers Act, 2025 and the Virtual Asset Service Providers Regulations, 2026 should be confirmed against the current Gazette text and regulator guidance before action is taken. Please contact Njau & Associates Advocates for advice on your specific circumstances.