Kenya -- Enforcement Actions Regulatory Overview

Significant Cryptocurrency Enforcement Actions in Kenya (April 2023–April 2026)

Search results reveal limited details on formal enforcement actions with specific penalties imposed, focusing instead on investigations, arrests, service suspensions, and regulatory bans. No high-value fines or finalized monetary penalties are documented within the timeframe. Below are the most notable cases, structured by requested fields where available.

1. Worldcoin (Tools for Humanity, Worldcoin Foundation, World Assets Limited, Platinum De Plus Limited)

• Regulator name: Office of the Data Protection Commissioner (ODPC); High Court of Kenya; Ministry of Interior and National Administration.
• Entity targeted: Tools for Humanity (parent company), Worldcoin Foundation, World Assets Limited, Platinum De Plus Limited.
• Violation type: Unauthorized collection, processing, and transfer of biometric data (iris scans) without proper registration as data controllers/processors; misrepresentation in registration; potential public safety risks.[5]
• Penalty amount: No monetary fine specified; potential fines up to KES 3 million (~USD 20,000) or 10 years imprisonment for registration violations; possible equipment forfeiture.[5]
• Date: Operations halted in 2023; registration revoked and full activities banned recently (post-2023, exact date unspecified).[5]
• Outcome: High Court restraining order issued pending judicial review; ODPC revoked Tools for Humanity's data processor registration; all Worldcoin activities banned in Kenya for one year.[5]
• Source URL: https://iapp.org/news/a/worldcoin-case-a-watershed-moment-for-data-protection-in-kenya [5]

2. Bitpesa (via Lipisha Consortium Limited)

• Regulator name: Central Bank of Kenya (CBK); upheld by courts under National Payments Systems Act (NPSA) and money remittance regulations.
• Entity targeted: Bitpesa (operating through Lipsha Consortium Limited).
• Violation type: Operating money remittance business via Bitcoin without CBK authorization; AML/KYC non-compliance due to cryptocurrency anonymity.[2]
• Penalty amount: None specified (service termination, not direct fine).
• Date: Pre-2023 court case (Lipisha Consortium Limited & another v Safaricom Limited), but relevant to ongoing CBK enforcement precedent.[2]
• Outcome: Safaricom legally suspended M-PESA services; court upheld termination to avoid AML liability for facilitating unauthorized crypto transactions.[2]
• Source URL: https://freemanlaw.com/cryptocurrency/kenya/ [2]

Additional Notable Enforcement Activities (Aggregate, No Specific Entities)

• Directorate of Criminal Investigations (DCI) Crypto Fraud Unit: Handled over 500 crypto-related cases in past three years; dozens of arrests in 2024. High-profile busts in Nairobi and Nakuru targeted scams worth $119,000, $100,000, and $30,000 (no named entities or penalties detailed). Losses totaled $43.3 million in 2024 scams.[1]
  • Source URL: https://openexo.com/l/f3ed363e [1]

Context and Limitations: Kenya lacks comprehensive crypto-specific laws until the proposed VASP Bill 2025, which outlines future penalties (e.g., KES 20 million fines for unlicensed operations, KES 30 million for ICO fraud) but imposes no past actions.[4] Enforcement emphasizes criminal probes (DCI) and service restrictions (CBK) over fines. Results show no actions post-2024 or major penalties; broader regulatory efforts (e.g., Treasury working group) are preparatory.[3][4] For complete records, consult official CBK/DCI reports.