Kenya’s Crypto Rules Need Tiered Capital, Not Flat Barriers

That distinction matters. Because as the country advances its Virtual Asset Service Providers, VASP, framework, a growing number of industry participants argue that without tiered capital, regulation may end up excluding the very startups it is meant to formalise.

The Case for Tiered Capital

The argument for tiered capital is straightforward. Not all virtual asset businesses operate at the same scale, and not all carry the same level of risk. A non custodial payments API or early stage on ramp does not present the same exposure as a large exchange holding customer funds. Yet flat capital thresholds treat them as if they do. Proposals from Kenyan industry participants suggest a more proportionate approach, where capital requirements increase alongside operational scale. Under one such model:

● KES 1 million applies to early stage firms ● KES 5 million to growing operators ● KES 20 million to mid sized providers ● KES 50 million to high volume, systemically relevant players

This mirrors Kenya’s own E Money regulatory framework, which has successfully governed payment providers through proportional requirements. By aligning capital with scale, a tiered approach lowers entry barriers while maintaining safeguards where risk is highest.

A More Ambitious Approach Than Most African Markets

Across the continent, regulators are taking varied approaches to crypto. Nigeria has oscillated between restriction and gradual reintegration through banking channels, South Africa has focused on classification and AML compliance, and Ghana remains largely in an exploratory phase. Kenya’s approach is more expansive.

Rather than regulating crypto at the edges, it is attempting to fully integrate virtual asset businesses into the formal financial system. The proposed framework introduces multiple VASP licence categories, capital thresholds across each category, and governance, insurance, and compliance obligations.

Oversight is also split between the Central Bank of Kenya and the Capital Markets Authority, signalling an intent to treat digital assets as part of mainstream financial infrastructure. This positions Kenya as a potential regulatory benchmark, but also raises the stakes if calibration is off.

A Market Built by Small Players, Facing Large Barriers

Kenya’s crypto ecosystem did not begin with large institutions. It grew through peer to peer, P2P, trading desks, small wallet providers, and early stage fintech startups. Under the draft rules, however, capital requirements scale steeply.

Payment processors require KES 50 million, brokers and managers KES 30 million, exchanges and wallet providers KES 150 million, token issuers KES 200 million, and stablecoin issuers KES 500 million. These thresholds sit far above typical early stage funding levels in Africa, where startups often raise between $50,000 and $1 million at pre seed and seed stages.

The Core Concern, Misaligned Cost of Compliance

Industry conversations are now converging around a single issue. The cost of compliance is misaligned with the structure of the market. This concern reflects three realities.

First, capital formation constraints, most local startups do not have access to the required capital. Second, market structure mismatch, the ecosystem is built on small, modular, and often non custodial players. Third, exclusion risk, a significant portion of current operators may not qualify for licences under the proposed thresholds. The implication is clear, regulation may not eliminate activity, but it could redefine who is allowed to participate.

Beyond Capital, The Full Compliance Burden

Capital requirements are only one layer of the regulatory stack. Firms must also contend with turnover based renewal fees, mandatory insurance covering asset loss and cyber risk, licensing fees and ongoing compliance obligations, and governance standards aligned with traditional financial institutions. Together, these requirements compound into a system where the total cost of compliance becomes a significant barrier to entry, particularly for early stage companies.

Consumer Protection or Financial Control

Regulators often frame VASP legislation as a tool for consumer protection. Kenya’s framework clearly includes such elements, safeguarding user assets, enforcing governance standards, and reducing fraud and operational risk. But structurally, the framework also functions as a high control system, with strict licensing thresholds, intensive compliance requirements, and broad regulatory oversight powers.

In practice, this creates a hybrid model, but one that leans toward financial control infrastructure rather than light touch oversight. The risk is that overly stringent entry conditions may push activity into informal or offshore channels, where consumer protection is weaker.

What Founders Must Decide Now

For startups currently operating in Kenya, the most urgent question is no longer abstract. Can we realistically meet licensing requirements locally, or do we restructure before enforcement begins? This decision involves assessing capital readiness, understanding how their business model will be classified, and determining whether to remain locally incorporated or adopt hybrid or offshore structures. In effect, regulation is beginning to shape not just compliance, but company architecture.

Enforcement, Structured but Not Fully Predictable

Kenya’s fintech regulatory track record offers some reassurance. Institutions like the Central Bank of Kenya have historically taken a measured approach, supporting innovation through mechanisms such as regulatory sandboxes. However, the VASP framework introduces multiple regulators, a new asset class, and broad discretionary powers. This suggests enforcement is likely to be structured but evolving, with early stage uncertainty as rules are interpreted in practice.

The Risk of Innovation Moving Offshore

If compliance requirements remain misaligned with market realities, the likely outcome is not a reduction in activity, but a relocation of it. Startups may incorporate in jurisdictions with lower entry barriers, build products for global markets, and later re enter Kenya as external providers rather than locally rooted companies. Over time, this shifts not just where companies are registered, but where value is created and captured.

A Regional Lesson in Real Time

For observers in markets like Nigeria and Ghana, Kenya’s VASP process offers a real time case study. The positives are clear, movement toward regulatory clarity and formal integration of crypto into financial systems. But the risks are equally instructive, over calibrating requirements ahead of market maturity and designing frameworks for institutions rather than ecosystems. The broader lesson is simple. Regulation should scale with the market, not pre empt it.

Final Thought

Kenya is not deciding whether to regulate crypto. It is deciding how participation in that system will be structured. A tiered capital framework offers a path that balances oversight with inclusion, ensuring that innovation is not just regulated, but allowed to exist. The alternative is a compliant system with fewer builders, and over time, less ownership of the financial infrastructure being created.

By: Michael Kazungu