Kenya’s digital credit market grew fast over the past few years. Borrowers now get loans through mobile apps in just minutes. This quick access sometimes brought high costs, unclear rules, and tough collection tactics. The Central Bank of Kenya stepped in with specific updates to create order and fairness. The Draft Non-Deposit-Taking Credit Providers Regulations, 2025 represent an important step in that process. These rules extend supervision past the first group of digital-only lenders. They lay out firm standards for every non-deposit credit operation. The aim stays direct. Protect regular borrowers and hold the market steady while new ideas keep coming. Providers that supply a fintech solution now work within set limits. This move backs the reliable spread of financial technology among digital banks in Kenya.
The Evolution of Regulatory Reforms in Kenya’s Digital Credit Sector
Initial rules for digital credit appeared in 2022. They targeted mainly mobile app lenders and addressed pressing matters such as interest charges and data handling. As time passed, the market became more layered. Fresh companies arrived with buy-now-pay-later plans, asset finance, and peer-to-peer setups. Quite a few ran without fitting the usual banking oversight. This opened up supervision holes. Parliament tackled the matter in the Business Laws (Amendment) Act 2024. The act dropped the tight ‘digital credit’ tag and switched to the wider ‘non-deposit-taking credit’ business. It handed the Central Bank stronger power to watch the whole field. In August 2025, the Central Bank put out the draft rules for comments. The update stretches coverage to online and offline credit firms that sit outside other laws.
Core Provisions of the Draft Non-Deposit-Taking Credit Providers Regulations 2025
Licensing and Capital Requirements
Businesses that plan to provide non-deposit credit need to approach the Central Bank. The rules set a simple dividing line. Those with a starting capital of over 20 million shillings apply for a licence. Smaller operations complete a registration process instead. Submissions include company registration papers, information on directors and key owners, funding sources, and outline policies. Review takes up to 60 days. The Central Bank may grant approval with conditions or ask for extra details. Current operators receive six months from the effective date to file their documents. This procedure helps keep out underfunded or unsuitable participants.
Governance and Risk Management
Solid internal arrangements sit at the heart of the rules. Providers have to keep proper corporate governance. The board decides direction, splits main jobs, and watches day-to-day work. A set risk management plan becomes required. It handles credit risk, day-to-day problems, tech dangers, and image issues. Companies shape the plan to match their size and type of work. Directors, top managers, and main owners pass fit-and-proper tests. These look at skills, earlier actions, and money honesty. Any shift in leaders or owners needs notice within 30 days. Providers also keep a real office in Kenya and have ready business-continuity steps. Safe data systems with locks and backup tools stay necessary. These actions lower the risk of quick breakdowns that hurt borrower trust.
Consumer Protection and Code of Conduct
Borrower rights stay front and centre in the changes. Providers give full loan facts before any deal. Customers get receipts, steady updates, and simple ways to see their files. Complaints get looked at within seven days and fixed within 30 days. The rules stop unfair moves such as pressure, bias, or threats. Lenders cannot use public shaming or humiliation as a debt-collection tactic. Early payback stays open without added fees. A code of conduct sets the tone for daily activities. It rests on fairness, openness, responsibility, and dependability. Staff training covers these points. Records of customer contacts stay available. The code helps ensure consistent respect in every deal.
Market Conduct and Interoperability
Activities that are permitted cover ordinary loans, asset finance, buy-now-pay-later plans, and credit guarantees. Peer-to-peer lending arrangements follow capital market guidelines where relevant. Deposit taking and foreign currency services remain excluded. Providers inform the Central Bank before they introduce new channels or agents. Their platforms support basic interoperability for necessary data flows. Non-essential tasks can go to outside partners, but responsibility stays with the main provider. Pricing must stay transparent to avoid surprise charges. These standards encourage open competition and reduce uneven practices across the sector.
Benefits for Consumer Protection and Market Stability
Borrowers gain several practical advantages. They receive complete details at the start of any loan. Repayment tracking becomes simpler. Structured channels exist for raising issues. Prohibited collection methods reduce stress and protect personal dignity. Fee structures turn more predictable and reduce the chance of mounting debts. From the stability angle, capital rules and governance checks limit sudden failures. Risk systems allow earlier identification of problems. Central Bank involvement creates similar conditions for all participants. Competition shifts towards service quality instead of quick gains. Controlled data sharing supports better lending decisions overall. Over time, these elements can lead to fewer defaults and steadier credit availability at reasonable terms.
Implementation Roadmap and Compliance Strategies
Credit providers benefit from a structured approach when meeting the standards.
Phase 1: Gap Assessment and Preparation
Teams start by comparing existing setups against the draft rules. They examine capital positions, governance documents, complaint records, and security arrangements. Training sessions introduce the code of conduct and expected treatment standards. This review stage normally lasts two to three months. It identifies specific areas that require updates ahead of formal steps.
Phase 2: Licensing or Registration Application
After closing identified gaps, providers compile the submission package. Documents include forms, financial proofs, and supporting policies. Filing occurs through the Central Bank channel within the allowed period to avoid penalties. Quick replies to any follow-up questions help move the process along. Successful review results in the appropriate licence or registration certificate.
Phase 3: Operational Integration and Continuous Improvement
Approved providers then apply the changes in daily work. Staff complete updated training on borrower rules. Technology adjustments improve access to statements and support required connections. Internal checks occur at regular intervals. Periodic reports go to the Central Bank. Customer input guides further refinements. This ongoing effort keeps operations aligned as conditions develop.
Learn more about Regulatory Compliance at WFIS Kenya
WFIS Kenya provides a direct forum for keeping up with regulatory developments affecting the financial sector. The event brings together fintech leaders, regulators, financial institutions, and technology providers to discuss how financial technology can adapt to evolving compliance requirements.
Sessions will cover licensing, risk management, consumer protection, and the practical implications of regulatory changes. Discussions will also highlight technology solutions that can help institutions meet compliance requirements more efficiently. Participants can take away practical insights and clear next steps for implementation, with discussions grounded in the latest guidance from the Central Bank of Kenya.
Taking place on 2 March 2027 at the Edge Convention Centre, Nairobi, WFIS Kenya offers financial institutions and credit providers an opportunity to turn regulatory requirements into practical improvements in their operations.