What happened

The Central Bank of Kenya (CBK) has publicly indicated its intention to acquire direct intervention powers over the country’s expanding digital payments industry. The announcement, made in a recent policy briefing, outlines a shift from the current supervisory model to one that allows the regulator to intervene swiftly in operational or compliance matters. CBK officials said the move is aimed at safeguarding financial stability, protecting consumer funds, and ensuring a level playing field for all market participants. The proposal is still under discussion and will be subject to further stakeholder consultations before any formal rule‑making is issued.

Context and background

Kenya’s digital payments landscape has evolved dramatically since the launch of mobile money services such as M‑Pay and later M‑Pesa, which now handle billions of shillings in transactions each month. The sector’s rapid growth has attracted a host of fintech startups, banks, and non‑bank payment service providers, creating a vibrant but complex ecosystem. CBK, as the nation’s monetary authority, has traditionally focused on licensing, AML/KYC compliance, and macro‑prudential oversight, leaving day‑to‑day operational decisions largely to the firms themselves.

In the past two years, the regulator has introduced several measures to tighten oversight, including stricter liquidity requirements for mobile money agents and mandatory reporting of large transactions. However, these steps have been largely reactive, triggered by specific incidents such as service outages or fraud cases. The current proposal represents a proactive stance, seeking authority to intervene directly when systemic risks emerge, without waiting for a formal breach to be identified.

Key stakeholders have voiced mixed reactions. Established banks appreciate the prospect of clearer rules that could curb unfair competitive practices by unregulated players. Conversely, fintech innovators warn that overly aggressive intervention could stifle innovation and delay the rollout of new services that benefit underserved communities. Consumer advocacy groups have called for safeguards that ensure any intervention does not disrupt access to essential payment services.

The legal framework for such powers would likely draw on existing provisions in the Central Bank of Kenya Act and the National Payment Systems Act. Amendments may be required to grant the regulator explicit authority to order temporary suspensions, mandate corrective actions, or impose penalties without prior court approval. Draft legislation is expected to be tabled in parliament later this year, following a public consultation period.

Internationally, several central banks have adopted similar powers to manage the rise of digital finance, citing the need for real‑time oversight in a fast‑moving sector. CBK’s move aligns Kenya with global best practices, but it also raises questions about the balance between regulation and the entrepreneurial spirit that has driven the sector’s success.

Compared with what is normal

Historically, CBK’s intervention toolkit has been limited to supervisory inspections, licensing decisions, and macro‑prudential directives such as reserve ratio adjustments. Direct operational interventions—such as ordering a service shutdown or mandating immediate system upgrades—have been rare and typically reserved for extreme cases like systemic fraud or major cyber‑attacks. The proposed powers would expand the regulator’s reach to everyday operational issues, a departure from the norm.

  • Previous interventions were mainly post‑incident, focusing on penalties after a breach was confirmed.
  • Current supervisory approach relies on periodic reporting rather than real‑time monitoring.
  • The new framework would allow CBK to act pre‑emptively, similar to emergency powers used in the banking sector during liquidity crises.
  • Other African regulators, such as the South African Reserve Bank, have introduced comparable measures only after repeated system failures.
  • Adoption of such powers in Kenya would place the country among the few in the region with a proactive digital payments oversight regime.

These changes contrast sharply with the more hands‑off approach that has characterized Kenya’s fintech environment, where innovation has often outpaced formal regulation.

Why it matters

For small and medium‑sized enterprises (SMEs), digital payments are a lifeline, enabling quick receipt of customer funds and smoother cash flow management. Enhanced regulatory oversight could improve trust in the system, encouraging more businesses to adopt electronic payment methods and reducing reliance on cash handling. However, tighter controls may also impose additional compliance costs, such as upgraded IT infrastructure or more frequent audits, which could strain limited resources.

Consumers stand to benefit from stronger consumer protection measures, including faster resolution of disputes and reduced exposure to fraud. Yet, there is a risk that abrupt regulatory actions—such as a temporary suspension of a popular mobile money service—could disrupt daily transactions for millions of Kenyans who depend on instant transfers for household expenses.

From a macroeconomic perspective, a more stable digital payments ecosystem supports financial inclusion goals and aligns with Kenya’s Vision 2030 agenda. By mitigating systemic risks, the regulator helps preserve confidence in the broader financial system, which is essential for attracting foreign investment and fostering economic growth.

Nevertheless, the balance between oversight and innovation will be critical. Over‑regulation could deter new entrants, slowing the development of novel payment solutions that address gaps in the market, especially in rural areas where traditional banking services are scarce.

Practical steps
  • Review your current payment processing arrangements and ensure they meet existing AML/KYC standards; early compliance reduces the likelihood of future disruptions.
  • Engage with industry associations or legal counsel to stay informed about forthcoming regulatory drafts and provide feedback during the consultation period.
  • Invest in basic cybersecurity hygiene—regular software updates, staff training, and incident response plans—to demonstrate readiness for any direct CBK intervention.
  • Consider diversifying payment channels (e.g., integrating both mobile money and bank transfers) to mitigate the impact of a potential service interruption.
  • Maintain clear documentation of all payment‑related contracts and service level agreements, as these will be scrutinised under the new regulatory framework.

Beavoren Ventures offers a Financial Management & Analysis service that can help SMEs assess the financial impact of regulatory changes, optimise payment workflows, and ensure compliance with emerging CBK directives.

Need help with compliance? Email info@beavorenventures.co.ke or call +254 716 296 857.

Disclaimer: This article is informational and does not constitute formal tax, audit or legal advice. For guidance specific to your circumstances, please contact Beavoren Ventures.