Kenya is moving to clamp down on crypto crime with a mix of regulation, investigator training, and what amounts to blockchain analytics software for the state. The pitch is simple: if digital assets are going to be licensed, monitored, and taxed, regulators want better eyes on the rails.
- Kenya is building a tougher crypto enforcement regime
- The CMA wants analytics software for blockchain monitoring
- Fraud losses and privacy concerns are driving the push
According to reporting from Capital FM Africa, Kenya’s Capital Markets Authority (CMA) is seeking a blockchain monitoring system as the country prepares to license and supervise virtual asset firms under the Virtual Asset Service Providers Act of 2025. The tool is meant to help regulators track digital asset activity, flag suspicious wallets and entities, and support anti-money laundering and counter-terrorism financing enforcement.
That sounds neat on paper. In practice, these systems are not magic. They do not “see” a person’s identity on-chain. They analyze public blockchain data, look for patterns, and try to connect wallet activity to known services or risky behavior using exchange records and other intelligence. Useful? Absolutely. Omniscient? Not even close.
What Kenya is trying to build
The CMA is Kenya’s securities regulator, and the reported procurement is part of a wider push to bring virtual asset firms under formal oversight. In plain terms, Kenya wants crypto businesses licensed, monitored, and subject to compliance rules instead of operating in a legal fog with a “trust me bro” business model.
Tender documents seen by Capital FM Africa say the system would help the CMA monitor digital currency transactions, investigate suspicious activity, and enforce the new VASP framework. The documents reportedly describe coverage across Bitcoin, Ethereum, and at least 20 other blockchain networks, with both real-time and retrospective monitoring.
That distinction matters. Real-time monitoring means alerts can fire as transactions move. Retrospective monitoring means investigators can go back through transaction history after something looks off. That combination is standard for blockchain analytics products and makes sense for compliance work.
The system is also expected to generate alerts for high-risk wallets, large transfers, sanctioned entities, cryptocurrency mixers, darknet-linked addresses, and activity linked to high-risk jurisdictions. It would also support wallet attribution by linking blockchain addresses to exchanges, decentralized finance protocols, over-the-counter trading desks, gambling platforms, scam wallets, sanctioned entities, and suspected criminal networks.
That list is broad for a reason. The point is to surface risk, not to pretend every wallet has a name tag attached. Wallet attribution is often probabilistic, not absolute. A deposit to an exchange can suggest ownership. It does not prove it. Compliance teams know that. Spammers and scam operators, less so.
The legal framework behind the crackdown
The reported surveillance push sits inside Kenya’s new virtual asset regime under the Virtual Asset Service Providers Act of 2025. According to the reporting, the law divides oversight between the Central Bank of Kenya and the CMA.
In practical terms, the central bank handles payments and stablecoins, while the CMA oversees exchanges, brokers, investment advisers, and tokenization rules. Tokenization means representing an asset on a blockchain as a digital token. It can apply to financial products, real-world assets, and other items that regulators want brought into a formal structure.
The law is also meant to align with the Financial Action Task Force (FATF), the intergovernmental body whose anti-money laundering and counter-terrorism financing standards heavily shape national crypto rules. FATF does not write local laws, but its pressure is often enough to make regulators sit up straight.
No firm has been licensed yet, which tells you Kenya is still at the start of this rollout, not the finish line.
Why Kenya is pushing this now
Crime is the obvious answer. Kenyan investors reportedly lost Sh5.6 billion, or about $43.3 million, in 2024 to crypto fraud, according to CoinGeek, citing an internal report seen by Daily Nation. That figure is specific to reported crypto-fraud losses in that account, not all forms of financial crime in the country.
That kind of damage gets attention fast. It also explains why Kenya’s law-enforcement response is getting more organized. The country’s criminal intelligence agency created a special unit to police digital asset crime in 2025, and the Directorate of Criminal Investigations (DCI) has also launched a training program with the European Union called the Blockchain and Cryptocurrency Investigation Training Module.
According to CoinGeek, the training is designed to help investigators trace blockchain transactions, study digital wallets, work with exchanges, handle digital forensics, and cooperate across borders. That is the unglamorous backbone of real enforcement. It is not sleek. It is not sexy. It is also the part that actually matters when scammers have already drained the wallet and vanished into a stack of mixers and offshore accounts.
Rosemary Kuraru, head of the forensic lab at the DCI, framed the problem bluntly:
“We are forming a specialised unit to crack down on cryptocurrency fraud. The DCI is committed to staying ahead of criminal syndicates. As criminals migrate to digital spaces that offer anonymity, law enforcement must innovate with equal speed, ”
That is hard to argue with. Crypto crime is often less about genius-level hacking and more about old-fashioned fraud dressed up in digital costume. The scams are usually simple. The laundering is the annoying part.
Where the benefits are real
There is a legitimate case for blockchain analytics when it is used carefully. Transparent public chains like Bitcoin and Ethereum leave transaction trails that can be examined, clustered, and traced. That gives investigators something cash never did: a public record of movement.
If stolen funds hit a known exchange, move to a mixer, and then bounce through a series of wallets, analytics software can often spot the pattern and flag it. That is valuable for anti-money laundering work, sanctions screening, and fraud investigations.
Kenya’s reported interest in screening against sanctions lists from the United Nations and the U.S. Office of Foreign Assets Control (OFAC) fits that logic. So does the goal of identifying unlicensed offshore platforms operating in Kenya. If a foreign exchange is courting local users while ignoring local rules, regulators will not exactly send it a thank-you note.
Where the alarms start ringing
The downside is equally obvious. Once a state buys tools that can cluster wallets, infer relationships, and flag suspicious activity at scale, the privacy debate stops being theoretical.
That matters because these systems are not perfect. A wallet can be tagged because it interacted with a risky service, not because the owner is a criminal. An innocent user can receive tainted funds without knowing it. Someone can share infrastructure with bad actors and get swept into the same risk bucket. Compliance teams call that a signal. Privacy advocates call it a problem. Both are right, depending on how the system is used.
That is the real tradeoff. Better enforcement can protect users and help shut down scams. It can also widen financial surveillance and make ordinary transactions less private. The line between “finding criminals” and “building a dragnet” is thinner than regulators like to admit.
And yes, the machines sold for this purpose are often marketed with all the subtlety of a casino ad in a hurricane. Real-world use is more mundane than the sales pitch. The software is a tool, not a crystal ball.
Key questions and takeaways
-
Why is Kenya moving on this now?
Because it is formalizing crypto regulation while also dealing with real fraud losses and growing digital-asset crime. The state wants licensing on one side and enforcement on the other. -
What would the monitoring system do?
According to the reporting, it would track activity across multiple blockchains, flag suspicious wallets and entities, and help investigators trace illicit flows and compliance risks. -
Is blockchain analytics the same as knowing who owns a wallet?
No. Analytics can suggest links to exchanges, DeFi protocols, or other entities, but attribution is often inferential rather than absolute. -
How bad is the fraud problem?
Severe enough that Kenyan investors reportedly lost Sh5.6 billion, or about $43.3 million, to crypto fraud in 2024, according to reporting cited by CoinGeek. -
Does this mean Kenya is banning crypto?
Nothing in the reporting suggests a ban. The direction appears to be licensing, supervision, and stronger enforcement rather than prohibition.
The bigger picture
Kenya is doing what many governments eventually do once crypto gets too large to ignore: bring the legitimate parts into the open and put the criminal parts under a microscope. That can help clean up the market and protect people from the endless parade of fraudsters, fake investment schemes, and offshore operators who treat regulation like an optional suggestion.
But there is a cost. Once compliance tech becomes policy infrastructure, it rarely stays small. The same tools that help catch scammers can also normalize deeper financial surveillance. That is not a reason to avoid enforcement altogether. It is a reason to keep the scope tight, the standards clear, and the state’s appetite for overreach on a leash of its own.
Kenya’s approach looks coordinated: a licensing regime, a specialist enforcement unit, and training for investigators. That is more serious than the usual “we’ll figure it out later” posture. Whether it becomes a model for responsible oversight or a cautionary tale about surveillance creep will depend on how carefully the system is implemented, and how much restraint officials show once the dashboards light up.
For context, this push fits into a broader pattern that has already been flagged in Kenya regulator seeks blockchain surveillance system, alongside earlier reporting on Kenya Seeks Blockchain Analytics to Police New Crypto Regime. It also echoes the government’s earlier response to fraud through the creation of a specialist unit, as covered in Kenya Establishes Special Unit to Tackle Rising Crypto Fraud.
At the same time, Kenya is not just swinging a regulatory hammer. There are still genuine innovation angles worth watching, including payment rails and adoption experiments such as Bitcoin Lightning and Kenya’s M-Pesa Could Bridge Crypto. That kind of overlap between crypto and mobile money is where things can get interesting instead of just bureaucratic.
But there is also a sharper edge to the local Bitcoin scene, especially when phone-number-based transfers enter the chat. Tando Brings Bitcoin to Kenya via Phone Numbers, Raising shows why custody, privacy, and user control still matter when “easy onboarding” starts sounding a lot like “someone else holds the keys.”
