At Oluoch Olunya & Associates, we are a premier firm for Fintech Regulation and Commercial Law in Kenya. We expertly guide Virtual Asset Service Providers (VASPs), fintech startups, financial institutions, and investors through the comprehensive lifecycle of the new VASP Act, from market entry to ongoing regulatory supervision.
Our VASP Compliance Services Include:
- Regulatory Readiness Audits: We assess your business model (Exchange, Wallet, or Payment Rail) to clarify jurisdiction under the Capital Markets Authority (CMA) or Central Bank of Kenya (CBK) and identify gaps.
- Licensing & Authorization: End-to-end support in preparing and submitting license applications, including drafting mandatory Business Continuity Plans and IT Security Policies.
- AML/CFT Framework Development: Drafting bespoke Anti-Money Laundering, Counter-Terrorist Financing (AML/CFT) manuals and KYC procedures that meet Financial Reporting Centre (FRC) standards.
- Token Classification & Legal Opinions: Providing definitive legal opinions on Token Classification (Utility vs. Security) for entities exploring Initial Coin Offerings (ICOs) or Security Token Offerings (STOs).
- Dispute Resolution & Defense: Representation in regulatory enforcement actions, investigations, or investor disputes arising under the new regulatory regime.
Virtual Asset Service Provider (VASP) Act: Frequently Asked Questions
Q: Does a foreign crypto exchange targeting Kenyan users require a license?
A: Yes. The Act applies to any entity conducting business “in or from” Kenya. Actively targeting Kenyan consumers necessitates establishing a local presence (Subsidiary or Branch) and obtaining the appropriate license.
Q: Can an individual operate as a VASP in Kenya?
A: No. The VASP Act requires providers to be companies incorporated or registered under the Companies Act. It explicitly excludes natural persons from offering virtual asset services in or from Kenya.
Q: When will VASP licensing applications open?
A: Licensing will commence upon the formal issuance of implementing regulations by the CBK and CMA, which are currently in the formulation process.
Q: Are there specific capital requirements in the Act?
A: The Act mandates compliance with capital, solvency, and insurance requirements “as may be prescribed.” The specific thresholds will be detailed in the forthcoming Regulations.
Q: What steps should businesses take immediately?
A: Entities should promptly initiate a regulatory impact assessment, begin collating licensing documentation, and design or upgrade their AML/CFT, governance, cybersecurity, and consumer protection frameworks to align with the anticipated standards.
Q: What are the risks of delaying compliance?
A: Operating without a license exposes entities to criminal prosecution, significant administrative fines, operational shutdowns, and severe reputational damage. A history of non-compliance may also adversely affect future license applications.
Navigate the new regulatory landscape with confidence. Contact Oluoch Olunya & Associates to ensure your fintech or VASP business is fully compliant and strategically positioned for success in Kenya.
Disclaimer: This content is for informational purposes only and does not constitute legal advice. Please consult qualified legal counsel for advice on your specific situation.