Kenya has introduced the Virtual Asset Service Providers (VASP) Regulations, 2026. The regulations provide the country’s first comprehensive framework for the licensing, supervision and regulation of virtual asset activities, bringing crypto-related businesses into the formal financial regulatory ecosystem.
The new framework applies to a wide range of market participants, including virtual asset exchanges, wallet providers, stablecoin issuers, payment processors, brokers, investment advisers, virtual asset managers, token issuance platforms and providers involved in the tokenization of real-world assets. Notably, the regulations extend to entities operating in or from Kenya, including those serving Kenyan customers remotely.
At their core, the regulations seek to promote innovation while ensuring adequate safeguards for consumers, investors and the broader financial system. As virtual assets continue to gain traction globally, the framework addresses key concerns around governance, market conduct, operational resilience, cyber risk, financial crime and investor protection.
One of the most significant developments is the introduction of a mandatory licensing regime for virtual asset service providers. Firms are required to demonstrate adequate governance structures, fit-and-proper management, risk management capabilities, cybersecurity controls, AML/CFT compliance frameworks and sufficient financial resources before commencing operations.
The regulations also introduce substantial minimum capital requirements across the sector. Virtual asset exchanges and wallet providers are required to maintain paid-up capital of KSh150 million, while token issuance platforms, tokenization providers and initial coin offering providers must maintain KSh200 million. Stablecoin issuers face the highest threshold at KSh500 million, reflecting the systemic importance of reserve-backed digital assets.
Consumer protection has emerged as a cornerstone of the new framework. Licensed entities must segregate customer assets from their own assets, provide clear disclosures on fees and risks, establish complaint-handling mechanisms, maintain detailed customer records and ensure customers can access their assets when required. The regulations also prohibit the use of customer assets for proprietary purposes, a measure aimed at strengthening confidence and safeguarding consumers.
The regulations further establish a dedicated framework for stablecoins, requiring issuers to maintain fully backed reserve assets, ensure redemption at par value, conduct regular audits and provide ongoing disclosures regarding the composition and value of reserves. These requirements are intended to enhance transparency and reinforce confidence in stablecoin issuances.
Another notable feature is the formal recognition of the tokenization of real-world assets. By introducing requirements around ownership verification, valuation, custody arrangements and disclosure standards, the regulations create a foundation for the development of tokenized investment products backed by tangible assets such as real estate and other physical assets.
Cybersecurity and operational resilience receive significant attention under the framework. Virtual asset service providers are required to implement cybersecurity strategies, conduct regular vulnerability assessments and penetration testing, maintain business continuity plans and report material cyber incidents within prescribed timelines. These measures aim to strengthen the security and resilience of digital asset infrastructure.
The regulations also establish robust standards for corporate governance and market conduct. Licensees must maintain appropriate board structures, appoint compliance officers and implement effective oversight mechanisms. At the same time, the framework introduces clear prohibitions against insider trading, market manipulation, front-running, false trading and misleading disclosures, reinforcing the integrity of Kenya’s virtual asset markets.
Advertising and promotion of virtual assets are now subject to stricter standards, requiring communications to be fair, balanced and not misleading. Firms must adequately disclose risks and avoid exaggerated claims regarding performance or returns.
Taken together, the Virtual Asset Service Providers Regulations, 2026 represent a significant milestone in Kenya’s financial sector evolution. The framework provides regulatory certainty for market participants, strengthens investor and consumer protection, supports financial stability and creates an enabling environment for the responsible growth of the digital asset ecosystem. As adoption of virtual assets continues to expand, the regulations position Kenya as one of Africa’s leading jurisdictions in the regulation of digital finance.