Subscribe
Back to News / Blockchain

Kenya Wants to Watch the Chain Before It Licenses a Single Bitcoin Exchange

ME
BY MEGASLEY
Verified Contributor
| 12M AGO | 3 MIN READ |
BLOCKCHAIN REGULATION

Kenya’s Capital Markets Authority (CMA) is shopping for a blockchain surveillance system. No exchange has been licensed yet. No firm has missed a deadline yet. Furthermore, regulators are still more than a year out from full enforcement. And yet the CMA wants eyes on the chain right now, before the rulebook even has teeth.

That sequencing tells you something important. Specifically, it reveals where Kenya’s Bitcoin policy is headed. Moreover, it matters directly to the growing number of Kenyans holding and moving Bitcoin.

The law behind the push

The surveillance plan follows from the Virtual Assets Service Providers (VASP) Act, which President William Ruto signed into law in October 2025. It was Kenya’s first real legal framework for digital assets. Furthermore, it split oversight between two regulators.

The Central Bank of Kenya handles payments, stablecoins, and custodial wallets. The CMA takes exchanges, brokers, investment advisers, and tokenisation platforms. Draft regulations came out of the National Treasury in March 2026. Existing operators have until November 2026 to get licensed. So far, nobody has.

That gap between “law on the books” and “law in practice” is exactly where the CMA now wants surveillance software to sit.

What the tool would actually do

Based on the published specifications, the platform the CMA is seeking would do several things. First, it would flag high-risk wallets, large transfers, coin mixers, and darknet-linked addresses automatically. Second, it would screen wallet activity against UN and US Treasury sanctions lists. Third, it would map relationships between wallets, reconstruct transaction timelines, and trace funds as they move across chains.

Two capabilities stand out for Bitcoin users specifically. The first would help regulators identify which exchanges Kenyans actually use. Most of these currently operate offshore, outside any Kenyan licence. The second is designed to detect unlicensed platforms serving the Kenyan market without authorisation.

For a market where a large share of activity happens peer-to-peer and off any centralised exchange, this is the part that matters most. On-chain surveillance does not need a platform’s cooperation to work. It reads the ledger directly.

Why this is bigger than it looks

Kenya is not inventing this approach. Similar blockchain forensics tools are already used by US agencies including ICE, the FBI, and the IRS. The UK’s HMRC uses them too. Firms like Chainalysis, TRM Labs, and Elliptic typically supply the software.

However, what makes Kenya’s move significant is the timing. Specifically, the CMA is deploying surveillance infrastructure during the pre-licensing window. That is more than a year before compliance deadlines hit. Most emerging markets wait until a regulated market exists before building enforcement tools. Kenya is doing the opposite. Therefore, the CMA wants a real-time map of on-chain activity in hand before it starts handing out or denying licences.

That is a more aggressive posture than most African regulators have taken. Moreover, it signals that Kenya is not treating the November 2026 deadline as the starting gun. The starting gun already fired.

The numbers that explain the urgency

Kenya’s Bitcoin market is not small. Over six million Kenyans are estimated to hold or use digital assets. Furthermore, Chainalysis data puts crypto inflows into the country at roughly $19 billion between July 2024 and June 2025, enough to rank Kenya fourth in Africa by that measure. TechAfrica News

Much of that volume moves through informal, peer-to-peer channels rather than licensed platforms. That is precisely the blind spot surveillance tools are built to close. Therefore, the CMA is not building this system to watch licensed exchanges. It is building it to see everything else.

What it means for Bitcoin holders on the ground

None of this changes the law today. No new reporting requirement applies to individual Bitcoin holders in Kenya right now. No exchange has lost or gained a licence because of this move. However, the direction of travel is clear.

Kenya is building enforcement infrastructure before it activates enforcement. As a result, the informal, offshore-exchange, and peer-to-peer patterns that have defined Bitcoin use in Kenya are the specific activity this system is designed to surface.

For self-custody users trading directly wallet-to-wallet, this changes little in the near term. Specifically, on-chain surveillance targets exchange flows and flagged wallet clusters more than individual self-custody transactions. Furthermore, Lightning Network payments leave no on-chain footprint at all thanks to onion routing. Therefore, a Kenyan using a non-custodial Lightning wallet sits largely outside the reach of chain surveillance tools.

For anyone routing through offshore platforms serving the Kenyan market without a local licence, the situation is different. The runway to formalise, or to expect friction, just got shorter than the November 2026 deadline suggests.

The broader question for African Bitcoin

The open question is not whether Kenya will build this system. It clearly will. Instead, the question is what comes next.

Specifically, how will the CMA and the Central Bank divide enforcement once the surveillance layer is live? Will Kenya’s approach become a template that other African regulators copy? Both Nigeria and Ghana have their own licensing pushes underway. Moreover, Nigeria already passed the Investments and Securities Act 2025, which classifies Bitcoin as a security and mandates transaction reporting to authorities monthly.

If Kenya’s surveillance-first approach proves effective, it is reasonable to expect similar moves across the continent. Therefore, the next 12 months will tell us whether Africa’s regulatory wave protects Bitcoin users or simply builds a more sophisticated version of the financial surveillance they were trying to escape.

The CMA wants to watch the chain. Bitcoin users in Kenya should know it is watching.

Sources

ENJOYED THIS ARTICLE?Support the authorSend a zap over Lightning or on-chain