Kenya’s Proposed Fintech Rules Put Founders Under Regulatory Scrutiny

For fintech founders, regulatory risk may soon extend beyond whether a company holds the right license to whether its leadership can demonstrate the integrity, competence, and financial standing required to oversee payment services. Kenya’s proposed changes to its payments framework place fit-and-proper assessments at the center of a broader effort to strengthen oversight of payment service providers and payment system operators. The implications could reach directors, significant shareholders, senior officers, and others who exercise management or control, making governance a central concern for founders and investors. For businesses operating without the necessary authorization, the stakes could include not only enforcement against the company but also closer examination of the people behind it.

Kenya fintech regulation could make founders’ track records matter more

The proposed fit-and-proper framework would assess individuals against several dimensions, including professional competence, integrity, reputation, criminal history, business conduct, regulatory compliance, and financial standing. Depending on the final legislation and its implementation, relevant considerations could include qualifications and experience, offences involving fraud or dishonesty, improper business practices, past regulatory breaches, and whether a person has been declared bankrupt.

The significance is that regulatory scrutiny would not stop at the corporate structure. A payment company’s owners and leadership could also come under assessment, reinforcing the principle that firms entrusted with customer funds must be led by people who meet applicable standards of competence and integrity.

For investors, this could make due diligence more consequential. A founder’s previous business activities, unresolved compliance issues or governance record may become relevant to licensing decisions, subject to the criteria ultimately enacted and applied. Companies may need to review board composition, shareholder arrangements, management responsibilities, and internal controls before seeking approval or expanding regulated services.

That does not mean every regulatory breach automatically results in a permanent personal blacklist. The legal effect will depend on the final provisions, the facts of each case and the regulator’s assessment. But the direction of travel is clear: governance and individual accountability are becoming important parts of the compliance conversation.

Kenya fintech regulation raises the stakes for unlicensed payment businesses

The proposed Bill comes as the Central Bank of Kenya seeks a more comprehensive framework for licensing and supervising payment services. Published for public consultation in September 2026, the draft National Payment System Bill is intended to replace the existing National Payment System Act. It remains a proposal, not an enacted law, so businesses should distinguish existing licensing obligations from provisions that may change during the legislative process.

For e-wallet providers, payment processors, remittance businesses, and other intermediaries, the immediate priority is to establish whether their specific activities require authorization under Kenya’s existing framework. The CBK defines payment service providers broadly, including entities involved in sending, receiving, storing, or processing electronic payments.

Foreign registration should not be mistaken for local permission. For example, registration with Canada’s Financial Transactions and Reports Analysis Centre (FINTRAC) does not, by itself, establish authorization to provide regulated payment services in Kenya. The relevant obligations depend on the services offered, transaction flows, and applicable Kenyan law.

Also Read: Solar roofs and green infrastructure reshape urban investment

For founders and boards, a practical response is to commission a regulatory health check, map products and transaction flows, review ownership and governance arrangements, and seek qualified advice on licensing requirements. Where authorization is necessary, early engagement with the regulator is preferable to assuming that an overseas registration or a technology-led business model creates an exemption.

The central issue is not whether innovation should continue. It is how to ensure that innovation operates within rules designed to protect customers and the payment system. If the proposed framework is enacted in its current form, fintech leaders may face more explicit scrutiny of both their businesses and their personal suitability to run them.