Kenya's AML/KYC Legal Framework
Kenya's primary AML/KYC legislation is the Proceeds of Crime and Anti-Money Laundering Act 2009 (POCAMLA), as amended in 2012 and 2017. POCAMLA establishes the Financial Reporting Centre (FRC) as Kenya's national Financial Intelligence Unit and sets out the obligations of reporting institutions. The Act is supplemented by the Prevention of Terrorism Act 2012 for counter-terrorist financing obligations.
Kenya is a member of the Eastern and Southern Africa Anti-Money Laundering Group (ESAAMLG) and completed its 4th Round Mutual Evaluation in 2022. The evaluation found Kenya largely compliant with FATF Recommendations, with particular strengths in the banking sector and areas for improvement in the DNFBP sector and beneficial ownership transparency.
Supervisory Architecture
| Body | Role | Supervised Sectors |
|---|---|---|
| FRC | Financial Reporting Centre — national FIU, receives STRs/CTRs, issues AML guidelines | All reporting institutions |
| CBK | Central Bank of Kenya — prudential and AML supervision | Banks, microfinance banks, forex bureaus, payment service providers |
| CMA | Capital Markets Authority — securities sector AML supervision | Stockbrokers, fund managers, investment banks |
| IRA | Insurance Regulatory Authority — insurance sector AML supervision | Insurers, reinsurers, insurance brokers |
| SASRA | SACCO Societies Regulatory Authority — cooperative sector supervision | Savings and credit cooperatives (SACCOs) |
Reporting Institutions Under POCAMLA
| Category | Examples |
|---|---|
| Financial Institutions | Commercial banks, microfinance banks, forex bureaus, money remitters, mobile money operators (M-Pesa, Airtel Money) |
| Capital Markets | Stockbrokers, investment advisers, collective investment schemes, custodians |
| Insurance | Life and general insurers, reinsurers, insurance brokers and agents |
| SACCOs | Deposit-taking SACCOs regulated by SASRA |
| DNFBPs | Lawyers, accountants, real estate agents, dealers in precious metals and stones, casinos |
| Virtual Asset Service Providers | Crypto exchanges and VASPs (under CBK and CMA joint framework, 2023) |
Core KYC Obligations Under POCAMLA
| Obligation | POCAMLA Section | Requirement |
|---|---|---|
| Customer Due Diligence | s.44 | Verify identity of customers and beneficial owners before establishing a business relationship or conducting a transaction above KES 1 million |
| Beneficial Ownership | s.44(2) | Identify natural persons owning or controlling ≥25% of a legal entity; verify using the Business Registration Service (BRS) registry |
| PEP Screening | s.44(4) | Apply Enhanced Due Diligence to domestic and foreign PEPs; obtain senior management approval; conduct enhanced ongoing monitoring |
| Suspicious Transaction Reports | s.12 | File STRs with the FRC within 3 days of suspicion arising; file CTRs for cash transactions above KES 1 million |
| Record Keeping | s.46 | Retain CDD records and transaction records for a minimum of 7 years from the end of the relationship |
| AML Compliance Programme | s.43 | Maintain a written AML compliance programme including policies, procedures, training, and internal audit |
Kenya's National ID and Huduma Namba System
Kenya's primary identity document for KYC purposes is the National Identity Card (Kitambulisho), issued to Kenyan citizens aged 18 and above. For non-citizens, a valid passport or alien ID card is used. The government has been rolling out the Huduma Namba (National Integrated Identity Management System — NIIMS), a unique national identification number linked to biometric data, though full implementation has faced legal challenges.
For corporate customers, the primary verification documents are the Certificate of Incorporation and the CR12 form (list of directors and shareholders) issued by the Business Registration Service (BRS). Since 2021, the BRS has maintained a public beneficial ownership register as part of Kenya's commitments under the Open Government Partnership.
Mobile Money and Fintech KYC
Kenya is home to M-Pesa, the world's most widely used mobile money platform, which processes over 60% of Kenya's GDP in transactions annually. The CBN's tiered KYC framework for mobile money applies three levels of due diligence based on transaction value and account balance: Tier 1 (basic ID, KES 300,000 monthly limit), Tier 2 (enhanced ID, KES 500,000 monthly limit), and Tier 3 (full CDD, unlimited). This tiered approach is a model for other African jurisdictions and is referenced in FATF Guidance on Financial Inclusion.
Relevance for African Exporters and the Three Gates Framework
Kenyan exporters — particularly in the agriculture (tea, coffee, cut flowers, avocados) and manufacturing sectors — must complete their BRS entity verification and POCAMLA KYC obligations before accessing Gate 2 (CBAM) or Gate 3 (Digital Product Passport). The BRS Certificate of Incorporation and the beneficial ownership register are the primary documents required to establish the verified entity node at the DPP Registry.