Foreign-Owned Lenders in Kenya: CBK Ownership Rules

Foreign groups are drawn to Kenya’s lending market, but the Central Bank of Kenya (CBK) regime for non-deposit taking credit providers was not written as a foreign investment code. It is a licensing regime built around a Kenyan company, its owners and its managers, and it contains several rules that bite hardest on offshore parents. This article walks through the points a foreign-owned lender should settle before it applies under the Central Bank of Kenya (Non-Deposit Taking Credit Providers) Regulations, 2026 (Legal Notice 191 of 2026), which commenced on 29 September 2026.

Start With a Kenyan Company and an Approved Name

Regulation 4 sends promoters through name approval before anything else. They propose at least three company names to the Business Registration Service, then submit the three names to CBK in order of preference, with the name search and reservation document, the names and addresses of the proposed shareholders (with certified identification documents or certificates of incorporation for corporate shareholders) and a high-level business brief. Once CBK approves a name, the promoters obtain a letter of no objection from the Kenya Industrial Property Institute (regulation 4(3)).

The clock then starts. Regulation 4(9) requires the promoters to incorporate the company within three months of the name approval and to apply to CBK for a licence or registration within six months of incorporation. If the promoters fail to comply, the approval lapses and they must stop using the name (regulation 4(10)). A foreign group should therefore have its shareholding structure, directors and funding settled before it asks CBK to approve a name.

Documents for Offshore Shareholders and Directors

A licence application under regulation 6(2) asks for a certified copy of the certificate of incorporation and memorandum and articles of association of any corporate body with a significant shareholding in the applicant, and for a sworn declaration by the shareholders on their sources of funds and that the funds are not proceeds of crime. A significant shareholder is anyone other than the Government or a public entity who holds, directly or indirectly, or has a beneficial interest in, ten percent or more of the share capital (regulation 2), so the test reaches through holding companies to the people behind them.

Each individual significant shareholder, director, chief executive officer and senior officer must supply a certificate of good conduct, a tax compliance certificate and a credit reference bureau report, together with fit and proper forms (Form 3 for directors and officers, Form 4 for significant shareholders). For individuals who have never lived or paid tax in Kenya, these are the slowest items. In practice, expect to obtain police clearances from each country of residence and to ask the Kenya Revenue Authority how a foreign individual with no Kenyan tax history should satisfy the tax compliance certificate requirement; the Regulations do not say.

The moral suitability criteria in the Second Schedule look at convictions for fraud or dishonesty and at contraventions of laws protecting the public from financial loss. Where a significant shareholder is a company, its directors and senior officers must satisfy the fraud and dishonesty criterion (Second Schedule, Part B).

Ownership Rules That Matter to a Foreign Parent

None of the ownership provisions discussed here sets a foreign ownership cap, but together they control who may own and how ownership can change:

• Fit and proper certification. Regulation 14(1) bars anyone from being a significant shareholder, director, chief executive officer or senior officer unless CBK has certified them. CBK may reassess a person it has already certified (regulation 14(3)) and may direct a significant shareholder who no longer qualifies to dispose of shares (regulation 14(4)).
• Transfers of shares. A provider may not transfer ten percent or more of its shareholding or beneficial interest without CBK’s prior approval (regulation 22(5)), and may not transfer fifty percent or more of its shares before twelve months have passed from the date it commenced business (regulation 22(6)). A foreign group planning to sell a controlling stake soon after launch should read that rule closely.
• New investors and financiers. A person who acquires ten percent or more of the shareholding must first be certified fit and proper (regulation 22(8)), and the provider must notify CBK at least thirty days before it enters into any agreement with a third party to invest in or finance its activities (regulation 22(4)).
• Existing deposit takers. A person licensed under another law to conduct deposit taking business may not, directly or indirectly, alone or with its associates, seek a licence or registration as a credit provider, unless CBK exempts it (regulation 19). Groups that already hold a Kenyan deposit-taking licence should check this first.

Funding and Currency Limits

A non-deposit taking credit provider lends its own funds and assets. Regulation 18(1) prohibits it from, among other things, taking deposits, dealing in foreign exchange business and disbursing loans in foreign denominated currencies. A parent can fund the Kenyan company through equity or borrowings, subject to the thirty-day notice in regulation 22(4), but the loans the Kenyan company makes must be in Kenya shillings.

Using Group Technology and Services

Many foreign lenders run credit scoring, collections tooling or customer service from the group. Regulation 2 defines a third-party service provider to include a member of the group to which the provider belongs, wherever it is located, and regulation 31 governs what can be outsourced:

• A provider may not outsource the final decision to grant loans, management and control of the provider, board decision-making, determination of compliance with the law, or management of the loan portfolio (regulation 31(1)).
• It remains liable for every act and omission of the service provider (regulation 31(2)).
• It must notify CBK at least thirty days before entering the arrangement, with details of the provider and the services (regulation 31(3)).
• The contract must give CBK a right of oversight and access to the provider’s premises, books, records, systems and employees (regulation 31(5)).

An offshore group company that cannot give CBK that access will not be able to host the Kenyan provider’s core functions. Contracts between the Kenyan company and the group should be drafted to these requirements from the start.

Timing for a Foreign Entrant

A realistic plan runs in this order: settle the shareholding and funding structure, obtain name approval, incorporate within three months, assemble the offshore documents, and apply. CBK may grant a licence within sixty days of submission (regulation 7(2)), but the offshore documents and fit and proper forms usually set the real timetable. Our articles on the KES 20 million licence or registration test and on the March 2027 deadline for lenders already operating cover the route and the transition.

Frequently asked questions

This article is general information on Kenyan law as at its publication date, not legal advice. Reading it does not create an advocate and client relationship.