Not every instrument is backed by its official text yet. At least one law or rulebook covered here has no official source (tier 1) retrieved for it yet. No finding on this page is shown with confidence above “Probable” until stronger sources are retrieved.

Financial Integrity Monitor

Kenya KE

Domains (D1–D6)
2
Sources
11
Role actions
8
Horizon <90d
1
Jurisdiction profile
Grey-ListTier BRisk: StableMixed

Kenya's AML/CFT regime rests on the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA) as amended post-2022 MER, supervised by the Financial Reporting Centre (FIU), Central Bank of Kenya and Capital Markets Authority.

MoreGrey-listed by FATF since February 2024; reforms since include a VASP licensing framework and increased TF investigations, but core supervisory, BO/trust and NPO gaps persist.

Key deficiencies
  • Risk-based AML/CFT supervision of financial institutions and DNFBPs remains inadequate
  • Insufficient STR filing and preventive-measures understanding among FIs/DNFBPs
  • No authority designated for regulation of trusts and verification of accurate beneficial ownership information
  • Weak use and quality of financial intelligence products
  • Insufficient ML/TF investigations and prosecutions relative to risk
  • TFS framework for terrorism (R.6) not fully compliant or effectively implemented
  • NPO regulatory framework not yet revised to a proportionate, risk-based model
Recent developments (18m)
  • FATF October 2025, February 2026 and June 2026 Plenary statements confirm continued grey-list status with unmet action-plan deadlines
  • Kenya adopted a legal framework for licensing and supervision of virtual asset service providers (noted by FATF Oct 2025/Feb 2026)
  • EU Commission added Kenya to its high-risk third country AML/CFT list via Delegated Regulation (EU) 2025/1184 (10 June 2025), retained in the December 2025 update
  • UK HM Treasury listed Kenya as a High-Risk Third Country under MLR Regulation 33 following the FATF October 2025 Plenary
  • OFAC counter-terrorism (SDGT) designation of a Kenya-linked Al-Shabaab facilitator (28 March 2025)
  • EACC/UK National Crime Agency international cooperation concluded the Migori County corruption case, recovering KES 235.6m (USD 1.8m) in property and vehicles (reported December 2025)
Brief

Lead signal

Lead Signal

Read full brief

Lead Signal

Kenya was retained on the FATF list of Jurisdictions under Increased Monitoring at the 19 June 2026 Plenary, alongside 21 other jurisdictions. FATF's statement acknowledged reform progress but kept Kenya's exit conditional on unresolved action items concerning supervision quality, STR filing standards and prosecution rates. This is the structural fact governing Kenya's financial-integrity posture this cycle: an increased-monitoring designation that has not moved toward delisting despite continued institutional reform activity. Structurally, the persistence of the grey-list designation across a Plenary cycle while reform work continues is more analytically significant than any single enforcement action, because it signals that Kenya's supervisory architecture — rather than any discrete failure — remains the object of concern.

Other Developments

A CBK/CMA split licensing perimeter is now the operative crypto architecture. Kenya's Virtual Asset Service Providers Act, 2025 commenced 4 November 2025, and the implementing Virtual Asset Service Providers Regulations, 2026 were gazetted as Legal Notice No. 134, Kenya Gazette Supplement No. 185, dated 22 July 2026. The Regulations split ten licensable virtual-asset activities between the Central Bank of Kenya and the Capital Markets Authority. FATF's February 2026 statement specifically recognised Kenya's adoption of this legal framework for licensing and supervising virtual asset service providers as a positive step in the country's reform trajectory. A compliance deadline looms. Existing virtual-asset operators must obtain licences under the new framework by 4 November 2026; as of late July 2026 reporting, no firm had yet been licensed. This creates a structural test of the new architecture's practical bite: a framework recognised by FATF as credible remains, for now, untested against an informal market that has operated without licensing to date.

Institutional coordination intensified in September. Kenya's Director of Public Prosecutions chaired a 23 September 2026 meeting of law-enforcement and financial-sector principals to review outcomes of the FATF Africa Joint Group meeting held in Abidjan on 11 September 2026, aimed at accelerating Kenya's grey-list exit. The Financial Reporting Centre remains Kenya's designated reporting entity and financial intelligence unit under POCAMLA as amended, though funding constraints have been reported as a friction point in the exit effort — an enablement-relevant signal, since a funding-constrained FIU is itself a structural limitation on supervisory capacity regardless of the legal framework's design.

Cross-Monitor Connections

The VASP licensing architecture described above is the same underlying development that the crypto monitor's licensing, stablecoin and cross-border modules address from a digital-asset-market perspective; here it is read as an AML/CFT supervisory-perimeter question rather than a market-structure one — specifically, whether a CBK/CMA split licensing regime with a not-yet-tested compliance deadline can deliver the STR filing standards and supervisory quality that FATF's continued grey-listing implicitly demands. The gambling-sector guidance to casinos on targeted financial sanctions implementation, referenced under this jurisdiction's separate D1 tracking, is a further adjacent AML/CTF obligation layered onto a non-bank sector, though it did not carry sufficient signal to warrant its own domain sub-brief this cycle.

Outlook

The near-term marker to watch is 4 November 2026, the VASP licensing compliance deadline. Whether any licences have been granted by that date will be the clearest available signal of whether Kenya's newly recognised legal framework is translating into operative supervisory capacity, which is precisely the kind of evidence FATF will weigh in any future Plenary review of Kenya's Increased Monitoring status. The 23 September 2026 coordination meeting following the Abidjan Africa Joint Group review suggests continued institutional pressure toward an exit strategy, but no confirmed delisting timeline exists as of this cycle.

weekly_brief_draft · JID KE
Domain intelligence (D1–D6)

D1 Sanctions

Not covered

Sanctions is not yet covered for this jurisdiction in this report.

D2 Beneficial Ownership

Not covered

Beneficial Ownership is not yet covered for this jurisdiction in this report.

D3 Enabler Jurisdictions

Not covered

Enabler Jurisdictions is not yet covered for this jurisdiction in this report.

D4 Conflict Finance

Not covered

Conflict Finance is not yet covered for this jurisdiction in this report.

D5 Crypto / Digital Assets / Financial Innovation

Crypto / Digital Assets / Financial Innovation

Continue reading

Kenya's Virtual Asset Service Providers Act, 2025 commenced on 4 November 2025, establishing for the first time a mandatory licensing perimeter for virtual-asset businesses operating in or serving Kenya. The implementing Virtual Asset Service Providers Regulations, 2026 followed on 22 July 2026, gazetted as Legal Notice No. 134, Kenya Gazette Supplement No. 185. The Regulations split ten licensable virtual-asset activities between two supervisory authorities: the Central Bank of Kenya and the Capital Markets Authority. This dual-regulator design is the architectural feature that most directly bears on financial-integrity assessment, because it distributes AML/CFT supervisory responsibility for digital-asset activity across two institutions with different core mandates and different historical exposure to virtual-asset risk typologies.

FATF's February 2026 statement on Kenya specifically recognised this legal framework — the Act and its Regulations together — as a positive structural step, citing Kenya's adoption of licensing and supervision arrangements for virtual asset service providers. This recognition sits inside the broader context of Kenya's continued placement on the FATF Increased Monitoring list at the 19 June 2026 Plenary: the VASP framework is treated by FATF as progress, but progress that has not yet been sufficient, on its own, to move the needle on delisting.

The framework's practical test is still ahead. Existing virtual-asset operators — meaning firms already active in Kenya's informal crypto market prior to the Act — must obtain licences under the CBK/CMA split regime by 4 November 2026. As of late July 2026 reporting, no firm had yet been licensed under the new framework. This is a materially important data point for any assessment of enablement risk: a comprehensive licensing law can exist on paper while a market it is meant to govern continues operating, for the time being, exactly as it did before the law's commencement. Under the architecture-over-incident framing this analysis applies throughout, the absence of any licensing action to date is itself a signal worth surfacing explicitly, rather than a gap to be filled in later once licences begin issuing. Whether the compliance deadline produces a wave of licence grants, a wave of market exits, or continued informal operation beyond the deadline will determine whether Kenya's VASP framework functions as effective AML/CFT control or as a structure that exists principally on the statute book.

No further first-party findings on beneficial-ownership treatment of VASP licence applicants, or on the framework's interaction with Kenya's wider AML/CFT institutional architecture beyond the licensing perimeter itself, were available this cycle; those questions remain open pending future monitoring of licensing outcomes after 4 November 2026.

Outlook

The defining marker for this domain is 4 November 2026, the compliance deadline under the VASP Regulations 2026. The gap between a FATF-recognised legal framework and an as-yet-unlicensed operator base is the central uncertainty carried into the next reporting window; whether any licences are granted by the deadline, and how many operators either comply or continue informally, will be the first hard evidence of whether the CBK/CMA split-supervision model can convert statutory design into operative AML/CFT control over Kenya's virtual-asset sector.

D6 Compliance Technology & Active Defence

Not covered

Compliance Technology & Active Defence is not yet covered for this jurisdiction in this report.

D7 AML/CTF Regime

AML/CTF Regime

Continue reading

Kenya was retained on the FATF list of Jurisdictions under Increased Monitoring following the 19 June 2026 Plenary, joining 21 other jurisdictions carrying the same designation at that sitting. FATF's statement acknowledged reform progress made by Kenya but identified outstanding action items concerning supervision quality, STR filing standards and prosecution rates as the barriers still standing between Kenya and delisting. This is a structural finding, not an episodic one: Kenya's grey-list status has now persisted across multiple Plenary cycles, and the specific gaps FATF continues to name — supervisory quality, reporting standards, prosecution outcomes — point to institutional capacity constraints rather than to any single discrete failure that a one-off remedial step could resolve.

The Financial Reporting Centre remains Kenya's designated reporting entity and financial intelligence unit under the Proceeds of Crime and Anti-Money Laundering Act as amended. Reported funding constraints affecting the FRC are a relevant friction point in Kenya's grey-list exit effort: an FIU operating under resource limitations has a direct bearing on the STR filing-standards concern FATF has specifically named, since STR quality and volume depend materially on the receiving institution's own capacity to process, analyse and act on filings.

Institutional coordination around the exit effort intensified through September 2026. Kenya's Director of Public Prosecutions chaired a 23 September 2026 meeting bringing together law-enforcement and financial-sector principals specifically to review the outcomes of the FATF Africa Joint Group meeting held in Abidjan on 11 September 2026. This meeting is best read as evidence of continued institutional attention to the grey-list exit process rather than as a substantive regulatory or enforcement development in itself; it demonstrates that Kenya's reform effort remains actively coordinated at a senior level, without yet producing the supervisory and prosecutorial outcomes FATF has identified as outstanding.

A further AML/CTF-adjacent signal, outside the core D7 designation itself, is guidance reportedly issued to casinos on targeted financial sanctions implementation (referenced BCLB/ADM/44 Vol.IV (116)), extending sanctions-related AML/CTF obligations to gambling licensees ahead of the broader grey-list exit push. This item carries limited independent signal on its own this cycle and is noted here for completeness rather than as a separate finding warranting its own domain treatment.

Outlook

Kenya's grey-list trajectory depends on demonstrable progress against the three named gaps: supervision quality, STR filing standards, and prosecution rates. The September 2026 coordination activity following the Abidjan Africa Joint Group review indicates continued institutional pressure, but no confirmed delisting timeline has been established. The FRC's funding position is worth monitoring specifically, since it bears directly on the STR filing-standards concern that FATF has named as an outstanding condition for exit.

D8 Commercial Activity

Not covered

Commercial Activity is not yet covered for this jurisdiction in this report.

Regulatory horizon
In Force Pending2026-Q4 · ±quarter

VASP Regulations 2026 full licensing rollout / compliance deadline

A CBK/CMA-split VASP licensing perimeter becomes fully binding on the existing informal crypto market.
Source
1 dated · 4 pending date · baseline fim-2026-07-05
Role action cards
MLRO

Kenya remains on FATF Increased Monitoring following the 19 June 2026 Plenary, with STR filing standards named as an outstanding gap.

FATF has specifically identified STR filing standards as a barrier to Kenya's delisting, which is directly relevant to any institution filing or receiving Kenya-related suspicious activity reports. The FRC's reported funding constraints add a capacity dimension to this exposure.

2 evidence refs
Compliance

Kenya's VASP Act and Regulations establish a CBK/CMA split licensing perimeter, but no firm had been licensed as of late July 2026, with a 4 November 2026 deadline pending.

Institutions with Kenya-facing crypto counterparties should track the 4 November 2026 compliance deadline closely, since counterparty licensing status will change materially depending on whether the deadline produces licensing action or continued informal operation.

3 evidence refs
Legal

No material change this cycle.

No material change for this persona this cycle

Board

Kenya's grey-list status persisted through the 19 June 2026 Plenary despite intensified institutional coordination in September 2026.

The persistence of Increased Monitoring status, notwithstanding visible reform activity including a DPP-chaired coordination meeting, signals that Kenya's exit remains structurally uncertain and carries continued reputational and counterparty-risk implications for Kenya-exposed business.

2 evidence refs
CTO

Kenya's CBK/CMA split VASP licensing regime creates a bifurcated technical-compliance surface for digital-asset infrastructure serving Kenyan users.

Systems supporting Kenya-facing virtual-asset activity may need to accommodate two distinct regulatory reporting and licensing tracks depending on activity type, ahead of the 4 November 2026 compliance deadline.

2 evidence refs
Risk

An untested VASP compliance deadline (4 November 2026) against a wholly unlicensed existing operator base is a concentration-of-uncertainty signal for Kenya-exposed digital-asset risk.

Risk models incorporating Kenyan virtual-asset counterparties should treat licensing status as unresolved until after the 4 November 2026 deadline, given zero licences granted as of the most recent reporting available.

2 evidence refs
Operations

No material change this cycle.

No material change for this persona this cycle

Audit

FATF has named supervision quality and prosecution rates, alongside STR filing standards, as outstanding gaps behind Kenya's continued grey-list status.

Audit scoping for Kenya-related AML/CFT controls should reflect that FATF's own stated concerns extend beyond reporting mechanics to supervisory and prosecutorial effectiveness, which are harder-to-evidence control areas.

1 evidence refs
Decision lens
MLRO

Kenya remains on FATF Increased Monitoring following the 19 June 2026 Plenary, with STR filing standards named as an outstanding gap.

Compliance

Kenya's VASP Act and Regulations establish a CBK/CMA split licensing perimeter, but no firm had been licensed as of late July 2026, with a 4 November 2026 deadline pending.

Legal

No material change this cycle.

Board

Kenya's grey-list status persisted through the 19 June 2026 Plenary despite intensified institutional coordination in September 2026.

CTO

Kenya's CBK/CMA split VASP licensing regime creates a bifurcated technical-compliance surface for digital-asset infrastructure serving Kenyan users.

Risk

An untested VASP compliance deadline (4 November 2026) against a wholly unlicensed existing operator base is a concentration-of-uncertainty signal for Kenya-exposed digital-asset risk.

Operations

No material change this cycle.

Audit

FATF has named supervision quality and prosecution rates, alongside STR filing standards, as outstanding gaps behind Kenya's continued grey-list status.

Shared evidence: 4 refs
Scenario sketches

AMLA transition and cross-border supervisory reshaping

Illustrative orientation only: as the EU moves from purely national AML supervision toward AMLA direct and indirect supervision of cross-border obliged entities under the AMLA Regulation (Reg (EU) 2024/1620), alongside the directly-applicable AML Regulation (Reg (EU) 2024/1624) and per-state transposition of the sixth AML Directive, the resulting hybrid EU-level supervisory architecture could reshape how evasion techniques migrate toward jurisdictions, such as those under FATF increased monitoring, where supervisory capacity remains comparatively constrained. This is architecture-over-incident illustration of a possible structural dynamic, not an observed fact about any specific evasion pathway.

Illustrative scenario for analytical orientation only. Not compliance advice, not a prediction, and not a statement of observed fact.

Standing trackers (T1–T6)
TrackerStatusNote
T1 · Russian Sanctions-Evasion Architectureno_changeNo material change found in UN Panel / OFAC / OFSI Russia-evasion channels with a specific Kenya nexus this cycle.
T2 · EU AML Package / AMLAno_changeNot applicable to Kenya (autonomous, non-EEA jurisdiction).
T3 · FATF Grey ListwatchKenya remains on the FATF increased-monitoring list following the 19 June 2026 plenary; FRC funding shortfall threatens the exit timeline.
T4 · Beneficial-Ownership Register StatusimprovingKenya's AML/CFT (Amendment) Act 2025 and Companies Act amendments strengthened beneficial-ownership record-keeping (10-year retention) and introduced a nominee-director register.
T5 · Crypto & Digital-Asset Integritymaterial_changeKenya's VASP Regulations 2026 operationalised the VASP Act 2025, requiring CDD, sanctions screening and STR reporting for VASPs, with CBK power to restrict foreign-stablecoin access.
T6 · Sanctions Regime Divergenceno_changeNo new EU/US/UK autonomous-listing divergence with a direct Kenya nexus found this cycle; Kenya continues to run its own domestic TFS list under UNSCR 1373 via the CFTIMC.
Registers

Enforcement actions

  • OFAC added a Kenyan national to the SDN list under counter-terrorism authority (Executive Order 13224, as amended), designating him as a senior Al-Shabaab figure subject to secondary sanctions risk. 28 Mar 2025
  • At the October 2025 Plenary, FATF reviewed Kenya's continued implementation of its February 2024 action plan, noting sensitisation activities, FIU dissemination increases and enhanced interagency TF-investigation cooperation at the border, while confirming continued grey-list status. 24 Oct 2025
  • EACC investigation established embezzlement of approximately KES 2 billion from Migori County (2013-2017) via irregular procurement; international cooperation through the IACCC enabled mutual legal assistance and asset tracing across jurisdictions, concluding in an out-of-court settlement. 9 Dec 2025
  • At the February 2026 Plenary, FATF recorded Kenya's adoption of a legal framework for licensing and supervision of virtual asset service providers and a sustained increase in TF investigations and prosecutions in line with its risk profile. 13 Feb 2026
  • At the June 2026 Plenary, FATF confirmed Kenya remains under increased monitoring, reiterating the seven outstanding action-plan items including risk-based supervision, STR filing, trust/BO authority designation, financial intelligence quality, ML/TF prosecutions, TFS compliance and NPO framework reform. 19 Jun 2026

Sanctions changes

  • The European Commission adopted Delegated Regulation (EU) 2025/1184 (10 June 2025), adding Kenya to the EU list of high-risk third countries with AML/CFT strategic deficiencies, requiring EU obliged entities to apply enhanced due diligence to Kenya-linked transactions. 10 Jun 2025
  • HM Treasury updated its Money Laundering Advisory Notice following the FATF October 2025 Plenary, listing Kenya as a 'High-Risk Third Country' under Regulation 33 of the UK Money Laundering Regulations, triggering mandatory enhanced due diligence for UK-regulated firms. 24 Oct 2025
  • OFAC updated the SDN List to add a Kenyan national (Abdikadir Mohamed Abdikadir, alias 'Ikrima') under counter-terrorism authority for links to Al-Shabaab, with secondary sanctions risk attached. 28 Mar 2025
  • The European Commission's December 2025 update (Delegated Regulations (EU) 2026/46 and 2026/83) delisted Burkina Faso, Mali, Mozambique, Nigeria, South Africa and Tanzania from the EU high-risk third country list, while Kenya was retained, underscoring Kenya's comparatively slower reform trajectory relative to regional peers. 4 Dec 2025

Regulatory horizon (register)

  • FATF October 2026 Plenary review of Kenya's action plan
  • Designation of trust-regulation and BO-verification authority
  • CBK/CMA operational rollout of VASP licensing regime
  • EU Commission next high-risk third country list update

Active schemes

  • [HIGH] Kenya as regional gold-smuggling transit hub
  • [HIGH] Nairobi-based Al-Shabaab facilitation and MVTS network
  • Legacy grand-corruption PEP layering via UAE shells
  • Emerging VASP sector amid nascent licensing regime
Sources
  1. ESAAMLG (FATF-Style Regional Body, mutual evaluation of Kenya)
  2. FATF
  3. FATF
  4. European Commission
  5. HM Treasury (UK)
  6. OFAC (US Department of the Treasury)
  7. OFAC (US Department of the Treasury)
  8. UK National Crime Agency
  9. Bloomberg
  10. ICIJ
  11. OCCRP
Coverage gaps
Despite reform commitments since February 2024, FATF's June …
Despite reform commitments since February 2024, FATF's June 2026 statement continues to flag inadequate risk-based AML/CFT supervision of financial institutions and DNFBPs in Kenya, with insufficient outreach to increase STR filing.
No authority has been designated for the regulation of trust…
No authority has been designated for the regulation of trusts and the collection of accurate, up-to-date beneficial ownership information, an outstanding action-plan item repeated unchanged across every FATF statement from February 2024 through June 2026.
Kenya's NPO oversight framework has not yet been revised to …
Kenya's NPO oversight framework has not yet been revised to ensure that mitigating measures are risk-based and proportionate, an unresolved item across all FATF statements through June 2026.
Declared Kenyan gold exports (672kg in 2023) are a small fra…
Declared Kenyan gold exports (672kg in 2023) are a small fraction of the estimated 2+ tonnes/year of gold smuggled through the country from the DRC and South Sudan, indicating minimal detection capacity in the precious-metals trade chain.
Kenya's beneficial ownership register, operational since 202…
Kenya's beneficial ownership register, operational since 2020 under Companies Act amendments, remains non-public, limiting independent verification by journalists, civil society and foreign counterparts despite pressure from transparency advocates documented by ICIJ.

Evidence

Confidence-tiered claims

Requested KES 2.49bn for FY2026/27, received allocation ceiling of KES 765.5m, leaving zero discretionary operational funds after fixed costs. SRC-fim-KE-011
Probable · 1 source
Requires CDD prior to onboarding, sanctions screening and STR reporting to the FRC; imposes seven-year transaction-information retention instead of naming the FATF Travel Rule. SRC-fim-KE-009
Probable · 1 source
VASP Regulations 2026 Regulation 83 lets CBK direct licensed intermediaries to restrict access to or trading in a foreign-issued stablecoin, a currency-control-style lever framed as a financial-stability safeguard. SRC-fim-KE-009
Probable · 1 source
Kenya remains on the FATF increased-monitoring list following the 19 June 2026 plenary (22-jurisdiction list, Iraq added); outstanding action-plan items include DNFBP risk-based supervision and beneficial-ownership transparency. SRC-fim-GLOBAL-001
Probable · 1 source
Raised beneficial-ownership and director/shareholder information retention to a minimum of 10 years from the date a person ceases to hold that status; introduced a nominee-director register. SRC-fim-KE-010
Probable · 1 source
Announced designation of 13 individuals under targeted financial sanctions linked to terrorism financing, ordering immediate asset freezes under POT-TFR 2024. SRC-fim-KE-003
Probable · 1 source