Is Binance Legal in Kenya? VASP Act 2026 Explained

In October 2025, Kenya's parliament passed the Virtual Asset Service Providers Act, and it took effect the following month — a fast turnaround for a law of this scope, and a genuinely significant shift for a market that had operated for years without a dedicated crypto framework at all. This guide walks through what the law actually does, which regulator handles which part of it, and what changed for someone using Binance in Kenya specifically, including a direct M-PESA channel that arrived just two months after the law took effect.

If you have not opened a Binance account yet, our account setup guide covers registration and KYC end to end, and our KYC documents guide covers exactly which ID works for Kenyan readers. For the mechanics of trading with M-PESA specifically, both through P2P and the newer direct channel, our M-PESA guide is the deeper reference, and our P2P basics guide covers escrow and counterparty selection more broadly.

October 2025: the headline that changed everything

Before the VASP Act, Kenya's regulatory relationship with cryptocurrency was similar to many markets this site covers before their own recent changes: no dedicated law, occasional cautionary statements from the central bank, and a large, active user base trading anyway through P2P and other channels without a clear licensing path for exchanges wanting to operate formally in the market. The VASP Act changed that structurally rather than incrementally — it is a purpose-built statute naming virtual asset service providers directly and setting out a licensing regime, not a reinterpretation of older, unrelated law the way some neighboring markets have approached the same problem.

Kenya has one of the highest rates of everyday crypto and mobile-money engagement in East Africa, largely because M-PESA already normalized digital, phone-based money movement for millions of people well before crypto entered the picture. That existing comfort with mobile-first financial services is part of the backdrop that made a dedicated licensing law feel less like regulating an unfamiliar fringe activity and more like formalizing something a large share of the population already understood the shape of, even if crypto specifically was new to many of them.

It is worth being precise about what changed and what did not. The Act did not legalize something that was previously criminal — Kenya never had a specific law banning personal crypto ownership the way some jurisdictions do. What it did was replace an absence of formal structure with an actual regulatory framework, which is a different kind of change: less "now permitted" and more "now defined, licensed, and overseen," with the practical effect of giving both users and exchanges a clearer set of rules to operate within.

What the VASP Act actually regulates

The Act establishes a licensing framework covering entities that provide virtual asset services in Kenya — exchanges, wallet providers, and related service categories — bringing them under formal regulatory oversight for the first time. It sets out the concept of a "virtual asset service provider" as a defined, licensable category, which is the legal foundation everything else in the framework builds on. Consumer protection provisions, anti-money-laundering alignment, and standards for how licensed providers must operate are all part of the Act's broader scope, though the fine detail of several of these areas is still being fleshed out through secondary rules and guidance rather than appearing complete in the original text alone.

For an everyday reader, the practical significance is that Kenya now has a defined legal category for this activity at all, which is a meaningfully different starting point than operating in the kind of undefined space that Bangladesh, by contrast, still occupies as of this writing.

A licensing framework of this kind typically works by requiring any entity offering the defined services — running an exchange, custodying client funds, providing a wallet product — to hold a license before operating, with the regulator able to set conditions around capital adequacy, security practices, and reporting obligations as part of that license. The Act creates the legal basis for all of this; the specific numeric thresholds and procedural detail come later, through secondary regulations and guidance that CMA and CBK issue under the powers the Act grants them. This is a normal sequence for financial regulation generally — the primary law establishes what is being regulated and who has authority, and the operational detail follows afterward.

CBK and CMA: two regulators, two jobs

Kenya split oversight between two existing regulators rather than creating a single new standalone authority, and understanding which one does what clarifies a lot of the coverage you might read elsewhere.

This split-regulator model is not unique to Kenya — several markets divide crypto oversight between a payments-focused central bank and a markets-focused securities regulator, since the activity genuinely touches both domains. The practical upshot for a Binance user is that the exchange side of the business (order books, custody, trading) answers primarily to CMA's framework, while the M-PESA payment rail itself continues operating under CBK's existing mobile-money oversight, largely unchanged by the new Act.

This division also explains a detail that sometimes confuses readers comparing news coverage: a headline about CMA licensing an exchange and a separate headline about CBK issuing mobile-money guidance are not contradictory or evidence of regulatory confusion — they are two different regulators doing two different parts of the same overall job, and both matter to a complete picture of how a service like Binance's M-PESA integration is overseen.

Where licensing stands as of July 2026

As of this writing, detailed licensing rules and the application process for virtual asset service providers are still being finalized by CMA, working alongside CBK on the payment-related pieces. This is normal for a law barely nine months old at the time of publication — building out a full licensing regime, from application forms to review timelines to ongoing compliance requirements, takes time even when the underlying legislation is clear and well-drafted.

What is already clear is the direction: Kenya is building toward a licensed-exchange model rather than leaving the market informally regulated indefinitely, and the pace so far — law passed, law in effect, a major exchange rolling out a new integrated payment channel, all within about four months — suggests the framework is being actively used rather than sitting dormant after passage.

Readers sometimes ask whether an exchange needs to complete full licensing before it is safe to use at all. In practice, most regulatory transitions of this kind include a period where existing market participants continue operating while formal licensing processes complete, rather than an overnight cutover that halts all activity the moment a law takes effect. That is consistent with what has been observed in Kenya so far — trading, P2P activity, and now the direct M-PESA channel have all continued through the transition rather than pausing while CMA finalizes every licensing detail.

The M-PESA integration and what it signals

In January 2026, Binance introduced a direct M-PESA channel for Kenyan users, letting them buy or sell crypto against Binance's own liquidity rather than only through P2P. This is a meaningful vote of confidence in the market's regulatory direction — exchanges generally do not invest in deeper local payment integrations in markets where the legal footing feels unstable or where a licensing crackdown seems imminent.

Our M-PESA guide covers the mechanics of both the P2P route and the new direct channel in full detail, including when each makes more sense for a given trade size. From a regulatory-status standpoint, the existence of the direct channel is best read as a signal that Kenya's framework is developing in a direction exchanges are comfortable building further into, rather than a separate legal guarantee in its own right.

Digital asset tax: from 3% DAT to a 10% excise duty

Separately from the VASP Act's licensing framework, Kenya's tax treatment of crypto activity changed in 2025. The Finance Act 2023 introduced a 3% digital asset tax (DAT), charged on the transfer or exchange value of crypto assets — that provision was repealed under section 8 of the Finance Act 2025, effective 1 July 2025. In its place, Kenya now applies a 10% excise duty on the transaction fees that licensed virtual asset service providers charge, rather than a percentage of the value being moved. In practical terms, the tax now falls on what an exchange charges for facilitating a trade, not on the value of the crypto asset itself.

This changes who is directly liable in the first instance — the excise duty is collected from the VASP on its fee income — but it does not necessarily settle every question for an individual trader. Income from crypto trading may still be subject to ordinary income tax under separate rules, and how any of this applies to peer-to-peer trades specifically, as opposed to transactions through a licensed exchange's own order book or the direct M-PESA channel, is a detail worth confirming directly rather than assuming. This guide is not a substitute for tax advice, and a tax professional familiar with the Kenya Revenue Authority's current rules is the right person to confirm what applies to your own trading pattern, particularly if you trade with any regularity rather than occasionally.

Keeping your own simple record of trades — dates, amounts, and counterparty order IDs for P2P, or transaction confirmations for the direct M-PESA channel — is a sensible habit regardless of how the tax mechanics ultimately settle for peer-to-peer activity specifically. It costs nothing to maintain as you go and is considerably easier to hand to a tax professional at filing time than reconstructing months of activity from memory or from scattered app notifications.

Sources — last verified: July 2026: Finance Act 2025 (Kenya Law) · Kenya Revenue Authority

What this means if you trade today

For a reader simply opening a Binance account, completing KYC, and trading through P2P or the direct M-PESA channel for ordinary personal amounts, Kenya's regulatory picture in mid-2026 is considerably clearer than it was even a year earlier. A dedicated law exists, two established regulators have defined roles, and a major exchange has invested in deeper local payment integration since the law took effect — all reasonable signals that this market is moving toward, not away from, a functional, regulated crypto ecosystem.

What has not happened yet is a fully mature, years-tested licensing regime with every detail settled — that takes time under any legal system, and Kenya's framework is still in its early operational phase. None of that changes the legality of ordinary personal use today, but it is a reasonable basis for keeping an eye on CMA and CBK's ongoing announcements rather than assuming the picture is permanently fixed as described here.

Compared with the other three markets this site covers, Kenya's trajectory in 2026 sits closer to Pakistan's — both moved from an unclear or informal footing to a purpose-built licensing law within roughly the same window — than to Bangladesh, where the underlying legal basis is still an older, general-purpose foreign exchange framework rather than dedicated crypto legislation. None of that ranking is a guarantee about how any of these frameworks finish developing, but it is a reasonable way to understand why this guide describes Kenya's position with more confidence than Bangladesh's.

Questions people ask about Binance and Kenyan law