Kenya’s new crypto rules raise the cost of staying local

Kenya’s new crypto rules are creating a difficult calculation for local startups: raise substantial capital before the November 4 compliance deadline or consider establishing the business elsewhere.

Founders of digital-asset companies say the minimum paid-up capital requirements are beyond the reach of many early-stage firms, including businesses that already have products and users in the Kenyan market. Some are therefore weighing South Africa and Mauritius, where they say smaller firms have more room to operate, raise capital and build toward full regulatory compliance.

The dispute goes deeper than the size of the cheques required. Kenya is trying to bring virtual assets into a formal supervisory framework, with capital requirements designed to ensure that licensed providers can withstand losses, protect customers and maintain adequate operational capacity. The difficulty is that the same requirements can become a substantial barrier for companies that are still validating products, building customer bases and looking for their first significant institutional investment.

Under the new framework, stablecoin issuers face a minimum paid-up capital requirement of Sh300 million, while wallet providers need Sh150 million and virtual asset exchanges Sh100 million. Crypto asset managers face a Sh20 million threshold and payment processors Sh10 million. For a large financial institution, such amounts may be manageable as part of a broader balance sheet. For a seed-stage company, they can determine whether the business qualifies to enter the regulated market at all.

Kenya’s capital rules create a difficult entry point

The regulatory rationale is straightforward. A company holding customer assets, facilitating payments or operating an exchange should have enough financial strength to absorb operational losses and meet its obligations. Capital requirements can also discourage poorly funded operators from taking customer money before they have the systems, governance and controls needed to manage those risks.

The harder question is whether a single fixed threshold adequately reflects the different risks posed by different businesses. An exchange with a large customer base and substantial assets under custody does not necessarily present the same exposure as a small company operating a narrowly defined payment product. A wallet provider, stablecoin issuer, payment processor and advisory business can also have very different operational and balance-sheet profiles.

That is why the industry’s earlier proposal for tiered capital requirements matters. The Virtual Assets Chamber of Commerce has argued for a system that takes account of factors such as the scale and maturity of a company rather than applying the same logic across businesses at very different stages. The argument follows a basic principle of proportional regulation: safeguards should rise with the risks created by the activity.

The concern has been present in Kenya’s digital-asset debate well before the current licensing deadline. A 2025 report associated with Yellow Card’s African regulatory work described a continent where governments were pursuing very different approaches to digital assets, while stressing the need to combine consumer protection and financial transparency with innovation. South Africa and Mauritius were already among the African jurisdictions with formal digital-asset frameworks.

That history matters because Kenyan founders are not asking regulators to leave the industry untouched. They are operating in an environment where regulatory recognition is increasingly accepted as necessary for institutional adoption. Their concern is whether the cost of entering that regulated system is proportionate to the size and risk of an early-stage business.

The licensing and fundraising trap

For startups, the most difficult part of the new regime may be the sequence rather than the headline figures.

A young company generally needs to demonstrate a credible product, attract users, prove that the business can generate revenue and convince investors that it has a path to scale. Regulation adds another consideration: investors want confidence that the company can legally operate in the market it is targeting.

That creates an awkward loop when substantial paid-up capital is required before the licence can be secured. A founder may need outside financing to satisfy the regulator, while the investor may want greater regulatory certainty before committing a large amount of money.

The problem becomes more acute when the deadline is fixed. Raising institutional capital can involve due diligence, negotiations, valuation discussions, legal documentation and the eventual transfer of funds. A company starting that process close to November 4 has considerably less room to absorb delays than an established financial institution with access to existing capital.

This is where the argument that November 4 could become an “expiry date” for some startups gains force. The issue is not simply whether Sh100 million can theoretically be raised. It is whether a young company can identify investors, complete the transaction and satisfy the licensing requirements within the available period.

Kenya’s Web3 funding environment makes that question more significant. The ecosystem remains concentrated around early-stage companies, while later-stage funding is much thinner. That means the regulatory regime is asking some businesses to demonstrate a level of financial capacity that the domestic startup-financing market may not consistently provide at their current stage of development.

South Africa and Mauritius offer alternatives

This is where the issue becomes one of regulatory competition.

South Africa and Mauritius already have established digital-asset regulatory structures, giving Kenyan founders alternatives that are closer to home than relocating to Europe, North America or Asia. The difference is not simply whether cryptocurrency is legal. Founders are comparing the cost of compliance, regulatory certainty, access to investors and the ability to build a business around a licence.

South Africa’s model provides an important contrast because its regulatory approach assesses financial adequacy in relation to the nature and scale of a business rather than relying on the same type of broad fixed capital floors described in Kenya’s framework. Mauritius, meanwhile, has lower statutory thresholds for several virtual-asset activities, with some categories relying on demonstrated working capital rather than a fixed minimum.

That can matter enormously to a startup. A company that needs to commit tens or hundreds of millions of shillings before it can obtain full regulatory recognition has less money available for engineering, compliance staff, customer acquisition and regional expansion. A lower upfront burden allows founders to allocate more of their scarce capital toward proving that the business works.

The two jurisdictions also have existing digital-asset ecosystems. South Africa has become home to major cryptocurrency platforms and regulated service providers, while Mauritius has established itself as a financial-services and corporate structuring centre for businesses operating across borders. That existing infrastructure makes the relocation option more credible because a founder would not be moving into an entirely untested market.

The risk for Kenya is therefore broader than losing a company registration.

If a Kenyan startup establishes its parent company, investment vehicle or regulated operating entity elsewhere, some of the economic value associated with the business can move with it. Kenya may continue to provide developers, customers and technical talent, while another jurisdiction captures a larger share of corporate investment, intellectual property ownership and regional decision-making.

Africa is testing different routes into regulated crypto

Nigeria adds another useful comparison to the debate.

The Central Bank of Nigeria has opened a dedicated VASP track within its regulatory sandbox for companies working on stablecoins, wallets, custody, payment processing and settlement infrastructure. The programme sits alongside the Securities and Exchange Commission’s digital-asset incubation framework, giving early-stage companies a supervised environment in which to test products before pursuing full authorisation.

The Nigerian example matters because it deals with the same basic problem facing Kenya: how to bring new digital-asset businesses into the regulatory perimeter without requiring every young company to arrive with the capital base of an established financial institution.

It also highlights the growing importance of stablecoins. African regulators are no longer dealing only with cryptocurrency exchanges and speculative trading. Stablecoins are being used for cross-border payments, remittances and business transactions, while the infrastructure around them could become part of the region’s wider payments system.

Nigeria’s approach should not be romanticised. A sandbox only has value if companies can move from supervised experimentation to predictable licensing, and Nigeria’s earlier fintech sandbox attracted criticism over the limited public visibility of its outcomes. But the model illustrates a policy option Kenya can examine as it considers how to accommodate smaller firms.

The comparison also makes one point clear: African countries are experimenting with different ways of regulating the same emerging industry. Kenya is therefore competing for founders, capital and digital-asset infrastructure within a regional market, rather than setting rules in isolation.

Kenya risks exporting more than startups

That possibility matters because Kenya already has a substantial digital-asset user base. Chainalysis ranks Kenya among the world’s leading markets for crypto adoption, placing it 21st globally and fourth in Africa in the figures cited by the Business Daily report.

The significance is not simply that Kenyans trade cryptocurrencies. Stablecoins are becoming useful for cross-border transfers, payments and other financial activity, giving the sector a connection to the wider fintech economy. TechTrends reporting has previously highlighted the practical use of stablecoins for cross-border payments and remittances, while industry participants have argued that regulation should account for their utility as well as their risks.

That raises a strategic question for policymakers. If Kenyan users continue demanding digital-asset services while locally founded companies find it easier to obtain licences elsewhere, the underlying market does not necessarily disappear. Instead, more of the infrastructure serving Kenyan demand could be owned and regulated outside the country.

There is also a consumer-protection consideration. A tightly regulated domestic market gives Kenyan authorities clearer visibility over licensed operators, governance arrangements and customer safeguards. If legitimate businesses are pushed toward offshore structures or informal peer-to-peer activity, supervision can become more complicated.

That outcome is not inevitable, but it is a risk worth considering when designing entry requirements.

A sandbox could offer Kenya a middle ground

Kenya already has an institutional mechanism that could help bridge the gap between experimentation and full licensing.

The Capital Markets Authority’s Innovation Sandbox has been presented as a potential route for virtual-asset startups to test products under regulatory supervision. Material presented at the Africa Fintech Forum indicated that sandbox participants could operate within agreed parameters, demonstrate compliance and, during pilot phases, potentially benefit from temporary exemptions or reduced thresholds before moving toward broader authorisation.

That makes the sandbox more than a technology-testing programme. Properly connected to the VASP licensing process, it could become a controlled entry route for companies that are too small to satisfy full capital requirements but have a credible product and manageable risk profile.

A more graduated system could divide the market according to exposure and scale. Small providers could operate under restricted transaction volumes, customer limits and product scope, while companies exceeding defined thresholds would face higher capital, governance, custody, cybersecurity and reporting requirements.

The relevant measures could include assets under custody, transaction volumes, customer exposure, counterparty risk and operational complexity. Such a model would not remove prudential safeguards. It would align them more closely with the risks the regulator is trying to control.

The industry’s proposal for tiered requirements therefore deserves consideration as part of the wider regulatory architecture. It offers a possible middle ground between allowing poorly capitalised operators into the market and requiring every early-stage business to raise the kind of capital expected of a mature financial institution

Regulation still has a legitimate job to do

There is a strong case for resisting the idea that lower barriers are automatically better.

Digital-asset markets have experienced exchange failures, hacks, insolvencies, fraud and losses for customers. Companies handling other people’s assets cannot be treated like ordinary software startups, and regulators have legitimate reasons to demand financial resilience, effective governance and controls against money laundering and other forms of abuse.

The objective, therefore, should not be to create a low-cost route into the market regardless of risk. A company holding significant customer assets should face substantially stronger requirements than a business testing a limited payment product with a small user base.

That distinction is central to the policy debate.

The question Kenya now faces is whether the capital thresholds are calibrated to the risks of each activity and the scale at which companies operate. If they are, the requirements can serve as a useful barrier against weak operators. If they are too blunt, they may become a barrier against legitimate innovation as well.

The experience of other African markets provides a useful comparison. Yellow Card’s 2025 regulatory report described a continent where approaches ranged from bans and regulatory uncertainty to sandboxes and comprehensive VASP regimes, with regulators attempting to balance financial integrity and innovation. Kenya therefore has room to refine its approach without abandoning the principle of formal supervision.

November 4 puts the debate on a clock

For the founders now considering South Africa or Mauritius, the policy debate is unusually immediate. They have a deadline, a capital target and investors who may need time to decide whether the businesses are commercially and legally investable.

That gives regulators a narrow window to consider whether the licensing pathway can accommodate companies that have viable products but have not yet reached the capital base of established financial institutions.

The CMA sandbox could help if it provides a practical bridge into the regulated market. A tiered framework could help if capital requirements rise alongside transaction volumes and customer exposure. Greater clarity around qualifying capital could also address some of the concerns raised by businesses whose revenues are generated in digital assets rather than conventional fiat currencies.

Tando’s argument for allowing crypto-denominated capital is worth considering, although it raises a genuine prudential problem. Bitcoin and other digital assets can fluctuate sharply in value, so allowing volatile assets to satisfy a fixed capital requirement without safeguards could weaken the very financial resilience the rules are designed to provide. A more workable approach could involve approved digital assets subject to conservative valuation haircuts alongside minimum fiat or highly liquid reserves.

None of these measures would require Kenya to abandon prudential supervision. They would recognise that regulation can influence where innovation happens.

The larger economic question is consequently not whether Kenya should regulate virtual assets. The country has already made that choice. The question is whether its regulatory architecture can protect customers and the financial system while keeping enough room for Kenyan companies to grow into the market they are being licensed to serve.

If the answer is no, November 4 could mark more than the deadline for compliance with Kenya’s VASP rules. It could become the point at which some of the country’s next generation of digital-asset companies decide that their future is easier to build somewhere else.

Download the FREE Kaspersky Next Enterprise Security Guide here to explore the complete framework for simplifying security operations and building cyber resilience.

Go to TECHTRENDSKE.co.ke for more tech and business news from the African continent and across the world.

Follow us on WhatsApp, Telegram, Twitter, and Facebook, or subscribe to our weekly newsletter to ensure you don’t miss out on any future updates. Send tips to editorial@techtrendsmedia.co.ke