Microfinance institutions in Kenya form a vital component of the country’s financial inclusion landscape, providing credit, savings, and financial services to small businesses, entrepreneurs, and households underserved by mainstream banking. The regulatory framework for microfinance institutions in Kenya has been significantly strengthened to protect depositors, ensure financial stability, and promote responsible lending. For those establishing, investing in, or advising microfinance businesses in Kenya, understanding the licensing requirements and ongoing compliance obligations is critical, and getting the basic facts right matters more than it might seem, since a misdirected licence application built around the wrong capital tier or an outdated fee schedule costs months of delay that a five-minute check against CBK’s current published guidance would have avoided.
Microfinance Institutions Kenya: The Legal Framework Under the Microfinance Act 2006
Microfinance institutions in Kenya are regulated under the Microfinance Act, No. 19 of 2006, administered by the Central Bank of Kenya (CBK). The Act creates a tiered licensing framework that distinguishes between deposit-taking microfinance institutions (DTMs), which can accept deposits from the public, and credit-only microfinance institutions (COMFIs), which lend funds sourced from equity or wholesale borrowings without accepting public deposits.
Deposit-Taking Microfinance Institutions (DTMs)
A deposit-taking microfinance institution must be incorporated as a limited liability company and must obtain a DTM licence from the CBK before commencing operations. The minimum core capital requirement for a DTM is KES 20 million for a community microfinance bank, licensed to operate within a defined geographic area, and KES 60 million for a nationwide microfinance bank. Getting this the wrong way round is an easy mistake since the two figures are close enough to misremember, but it is the nationwide licence, not the community one, that carries the higher KES 60 million threshold, and structuring a licence application around the wrong figure wastes the months it takes CBK to process it. The CBK prescribes capital adequacy ratios, liquidity requirements, and governance standards that DTMs must meet on a continuing basis.
The licensing process for a DTM involves submission of a comprehensive application to the CBK including details of proposed shareholders, directors and management, the business plan and financial projections, the proposed geographic coverage, the product range, the IT and core banking system to be used, and evidence of compliance with the minimum capital requirement. The CBK conducts a fit-and-proper assessment of proposed shareholders holding ten percent or more of the shares, directors, and senior management. Licence fees are separate from the core capital requirement: current CBK fee schedules set the licence fee at KES 150,000 for a nationwide DTM and KES 100,000 for a community DTM, on top of a smaller non-refundable application fee, and applicants should budget for these as distinct line items rather than assuming the capital requirement is the only cost of entry. The process typically takes several months from submission to licence issuance, since CBK due diligence on shareholders and the business plan is thorough rather than a formality.
Ongoing Regulatory Obligations for DTMs
Licensed DTMs must submit regular prudential returns to the CBK covering capital adequacy, liquidity, asset quality, and provisioning. They are subject to on-site and off-site CBK supervision and must comply with the CBK’s Microfinance (Prudential) Regulations and Microfinance (Establishment of Subsidiary Companies) Regulations. DTMs must also comply with anti-money laundering and combating the financing of terrorism (AML/CFT) requirements under the Proceeds of Crime and Anti-Money Laundering Act 2009 and the Prevention of Terrorism Act 2012, including customer due diligence, suspicious transaction reporting to the Financial Reporting Centre (FRC), and staff training on AML/CFT. Licensed DTMs are also required members of the Deposit Protection Fund Board, giving depositors a layer of insurance on their deposits if the institution fails; the current coverage limit should be confirmed directly with the DPFB or CBK rather than assumed, since deposit insurance limits are periodically revised and a stale figure could understate the actual protection available.
Credit-Only Microfinance Institutions (COMFIs)
Credit-only microfinance institutions that do not accept deposits from the public were not subject to CBK licensing under the original Microfinance Act framework. However, regulations have progressively extended the regulatory perimeter to capture COMFIs, particularly those of significant size, in response to concerns about predatory lending, excessive interest rates, and consumer protection failures. Credit-only MFIs must comply with the Business Laws (Amendment) Act, the Consumer Protection Act 2012, and any regulations applicable to their specific activities.
The 2024 Extension of CBK Oversight to Non-Deposit-Taking Lenders
The Business Laws (Amendment) Act, 2024 significantly narrowed the gap between deposit-taking and credit-only microfinance regulation. Non-deposit-taking credit providers whose capital, borrowings, or loan book exceed KES 20 million are now required to obtain a full CBK licence rather than simply registering, with lower-threshold operators still required to register even if a full licence is not yet triggered. This brought digital lenders within the same broad oversight umbrella as deposit-taking institutions, following widespread concerns about predatory digital lending practices; our guide to digital credit provider licensing in Kenya covers the specific regime that applies to app-based and mobile lenders, which overlaps with but is not identical to the credit-only MFI framework discussed here.
Interest Rate Disclosure and Consumer Protection
The Consumer Protection Act 2012 imposes obligations on microfinance institutions in Kenya to disclose interest rates, charges, and all costs of borrowing to customers in a clear and understandable manner before the credit facility is advanced. The Central Bank has issued guidelines on responsible lending practices requiring lenders to assess borrowers’ ability to repay, avoid encouraging over-indebtedness, and implement fair debt collection practices, and both licensed and registered non-deposit-taking credit providers are expected to meet the same substantive standard even though their capital and prudential requirements are lighter than a full DTM licence. Non-compliant lenders face regulatory sanctions and reputational damage.
Digital Credit Providers
The proliferation of digital credit products, mobile loan apps and platform-based lenders, prompted the CBK to extend its regulatory perimeter to digital credit providers under the Central Bank of Kenya (Amendment) Act 2021. Digital credit providers that offer credit to the public via digital channels must be licensed by the CBK, meet fit-and-proper requirements for their key personnel and shareholders, comply with CBK-prescribed consumer protection and data privacy standards, and submit periodic returns. The CBK has licensed a number of digital credit providers and continues to review applications from the significant number of platforms that were operating before the licensing requirement came into force.
For legal advice on microfinance institution licensing, CBK regulatory compliance, consumer credit law, and digital credit regulation in Kenya, consult our financial services legal advisory practice. Our team advises financial institutions and fintech businesses on the full spectrum of CBK and regulatory requirements from our offices at Nextgen Mall, Nairobi. Regulatory guidance is also available from the Central Bank of Kenya.
