Crypto Trading Apps and Front-Ends in Kenya: Licensing

A growing number of crypto businesses never hold a customer’s coins. They build the app or website, route the customer’s orders to someone else’s exchange or protocol, and earn a fee on each trade. Founders often assume that without custody there is nothing to license. Under Kenya’s Virtual Asset Service Providers Act, 2025, that assumption is unsafe. This article explains which licence categories a crypto front-end can fall into, and what follows from earning fees from Kenyan users.

What we mean by a front-end

A front-end is the interface between a user and a trading venue. It may be a mobile app, a web dashboard or a Telegram bot. The user connects a wallet or signs orders, the front-end sends them to an exchange or on-chain protocol, and the front-end adds its own fee. Some on-chain exchanges build this in: the user approves a maximum fee once, and the venue pays the front-end its share automatically on every fill. The front-end owns the customer relationship without ever touching the customer’s money.

The licence categories that can apply

The First Schedule to the Act lists the licensable activities. Three are relevant to front-ends.

Virtual asset broker (CMA). The Schedule describes brokerage as facilitating the exchange between one or more forms of virtual assets through a virtual asset exchange and wallet providers for and on behalf of clients. A front-end that takes a user’s order and sends it to an exchange for a fee fits that description closely. Custody is not part of it.

Virtual asset payment processor (CBK). The Schedule describes this as arranging transactions involving virtual assets and fiat currency, or between virtual assets. The wording is broad enough to reach apps that arrange swaps, even without custody, and it places them under the Central Bank of Kenya rather than the Capital Markets Authority.

Virtual asset exchange (CMA). If the front-end runs its own matching or settlement, rather than routing to someone else’s, it is closer to an exchange than a broker.

Where a front-end also holds private keys for users, even temporarily, it becomes a custodial wallet provider under section 2 and needs a CBK licence for that too.

Earning fees from Kenyans brings you in scope

Section 8(2) of the Act prohibits carrying on virtual asset services in or from Kenya without a licence. Regulation 4(2) of the Virtual Asset Service Providers Regulations, 2026 (Legal Notice 134 of 2026) deems a person to operate in or from Kenya where it actively solicits or targets local consumers, or derives an economic benefit or income from Kenya, whether or not it has a physical presence here.

A front-end’s whole business model is fee income from users. If those users are in Kenya, the economic-benefit limb is likely met. A front-end incorporated abroad, with no Kenyan staff, is therefore not outside the regime merely because of where it sits.

What a licensed front-end must do

A broker or payment processor licence is the lightest of the trading licences. The Fifth Schedule to the Regulations sets paid-up capital at KES 10 million for each, against KES 100 million for an exchange. The other obligations are substantial:

• a Kenyan company limited by shares, or a foreign company registered in Kenya (section 8(1));
• a physical office in Kenya and a Kenyan bank account (sections 19 and 24(h));
• at least three directors, with directors limited to two VASP boards (section 20(1));
• a chief executive officer approved by the regulator (section 30);
• customer due diligence and suspicious transaction reporting as a reporting institution under the Proceeds of Crime and Anti-Money Laundering Act, as amended by the Act’s Second Schedule;
• advertising that complies with Part XIII of the Regulations, including the licence number in every advertisement (regulations 123 and 125).

Separately, the Finance Act, 2025 imposed excise duty at 10% on fees charged by virtual asset service providers on virtual asset transactions. Front-end fees are the obvious target. Our article on Kenya’s digital asset tax covers the excise position.

Routing to an unlicensed venue

A licensed front-end still has to think about where it sends orders. Outsourcing operational functions needs the regulator’s approval at least 30 days in advance (regulation 113), and section 26(2)(f) treats outsourcing of virtual asset service functions as a material change requiring a no-objection. Sending Kenyan client orders to an offshore venue that is not licensed in Kenya is something the regulator will want explained.

Leveraged products raise a harder problem. Perpetual futures are derivatives, not virtual assets, so a VASP licence does not cover them, and a licensed derivatives broker may only deal through a licensed derivatives exchange. See our article on crypto perpetual futures in Kenya.

The realistic options

1. License as a broker or payment processor and route only to venues the regulator will accept.
2. Partner with a licensed Kenyan exchange that owns the customer relationship, with the front-end supplying technology under an outsourcing arrangement the regulator approves under regulation 113. The gazetted Regulations contain no general agency regime, so the structure has to be cleared with the regulator.
3. Geoblock Kenya and refuse Kenyan users, Kenyan KYC documents and shilling rails.

Frequently asked questions

This article is general information on Kenyan law as at its publication date, not legal advice. Reading it does not create an advocate and client relationship.