What CBK licensing actually involves
A Kenyan banking licence is a supervisory determination, not a registration. This is what the Central Bank of Kenya assesses, what the statutes require, and what a firm may and may not say while an application is pending.
The statutes that govern it
Banking in Kenya is governed principally by the Banking Act, with the Central Bank of Kenya as supervisor. Deposit-taking business is reserved to licensed institutions, and conducting it without a licence is an offence.
Three further regimes sit alongside it and are frequently confused with it:
- The National Payment System Act governs payment service providers, which are authorised on a different basis and are not banks.
- POCAMLA — the Proceeds of Crime and Anti-Money Laundering Act — imposes anti-money-laundering duties, with suspicious transaction reporting to the Financial Reporting Centre. It applies to a wide set of reporting entities, not only banks.
- The Data Protection Act 2019 governs how customer data is processed, with registration duties and restrictions on cross-border transfer.
The distinction matters because a firm can hold one of these and not the others. Holding a payment authorisation does not make you a bank. Having AML obligations does not mean you are licensed. And a banking licence does not by itself satisfy the data protection regime.
Institution classes and what each may do
The framework distinguishes between institution types rather than treating all deposit-takers alike. Commercial banks, microfinance banks and foreign bank subsidiaries are licensed on different terms, with different capital, governance and reporting requirements.
Payment service providers are authorised under the National Payment System Act with their own categories, and mobile money operations carry additional requirements around agent networks and customer safeguarding. SACCOs are regulated under dedicated legislation with a separate supervisory structure.
The practical consequence: the question is this entity allowed to hold customer deposits? has a different answer for each class. That answer determines what the firm may say about itself, what it may do with money, and which supervisor it answers to.
What the supervisor actually assesses
An application is a substantive supervisory review, not a registration. In broad terms the Central Bank assesses:
- Corporate structure and ownership, with every beneficial owner identified up the chain to natural persons
- Minimum capital, and evidence of the legitimate source of that capital
- Fit and proper status of directors and senior management, including prior regulatory history
- A business plan with projected financials, funding strategy and stated risk appetite
- Systems and controls — the AML programme, ICT resilience, internal audit and governance arrangements
- Physical infrastructure, and for a branch model, premises
None of these is a formality. The source-of-funds question in particular is where applications most often slow down, because tracing capital through corporate layers takes time the applicant does not control.
Capital, ownership and fit and proper
Capital requirements exist so that a licensed institution can absorb losses without depositors losing money. They are tiered by institution class and are subject to periodic review, so any figure quoted should be checked against the current CBK framework rather than taken from a secondary source.
More demanding than the number is the source of capital. The supervisor must be satisfied that funds are legitimately obtained and not borrowed in a way that creates hidden leverage. This is why the beneficial ownership chain matters: an applicant whose ownership runs through several corporate layers or offshore entities will be asked to evidence each layer.
Fit and proper assessment covers directors and senior managers individually. Prior regulatory action, disqualification, insolvency involvement or criminal history are all relevant and all disclosable. Concealing any of them is materially worse than disclosing it.
What a firm may say while pending
This is the question most firms get wrong, and the answer is unambiguous.
While an application is pending, a firm may: publish information about the banking services it intends to offer; state clearly that licensing is in progress; and explain the regulatory framework to prospective customers.
A firm may not: represent itself as currently licensed; invite deposits; imply it is already subject to prudential supervision; or suggest a launch date it does not control.
The language test is simple. "We are applying for a licence" is accurate. "We are a bank" is not, unless the licence exists. The gap between those two sentences is where regulatory and advertising exposure lives — and it is the first thing a diligent counterparty notices, whether that counterparty is a customer, a payment processor, an ad network or a sponsor.
This is why DirvenBank Kenya's pages state that operations are subject to licensing by the Central Bank of Kenya, that the licence reference will be published when issued, and that deposits are held with licensed partner institutions. Those are not marketing caveats. They are an accurate description of current status, and stating them plainly is what makes the rest of the site credible.
Why the process takes as long as it does
The process is slow by design. A supervisor deciding whether to let an institution hold other people's money is not performing a compliance ritual; it is making a judgement about the people, the capital and the controls behind an applicant.
Three things drive the timeline: the depth of the beneficial ownership chain, the completeness of the documentation at first submission, and the supervisor's own capacity. Of those, only the first two are within an applicant's control.
The useful posture is to assume the review will take longer than expected and to submit a complete file rather than a fast one. An application returned for missing documents restarts the clock; an application that is slow because it was thorough does not.
Questions
Does an application permit deposit-taking?
No. Being in the licensing process confers no permission whatsoever. Accepting deposits before a licence is granted is unauthorised deposit-taking under the Banking Act.
Can a foreign banking licence be used in Kenya?
No. Each jurisdiction licenses separately. A licence from another regulator has no standing in Kenya and does not shorten the Kenyan process.
Does selling software to banks require a licence?
No. Supplying compliance or settlement software to a licensed institution is not deposit-taking. The institution remains the regulated counterparty.
What is the difference between CBK licensing and POCAMLA?
They are separate regimes. Licensing governs permission to operate; POCAMLA imposes anti-money-laundering duties with reporting to the Financial Reporting Centre. Complying with one does not satisfy the other.