Kenya’s KSh50 Million Digital-Lender Push Was Not the Barrier It Seemed.

In August 2025, a group representing digital lenders asked the Central Bank of Kenya to move one number from KSh20 million to KSh50 million.

The Digital Financial Services Association of Kenya (DFSAK) said the higher threshold would distinguish serious operators from idle licensees and “briefcase outfits”. The obvious reading was that established lenders wanted the regulator to raise the ladder after they had climbed it. FINTAK published that argument.

It was a forceful piece. Its central legal premise was also wrong.

There was no KSh20 million minimum-capital requirement in the [Central Bank of Kenya (Digital Credit Providers) Regulations, 2022] Those regulations required an applicant to disclose the source of funds, submit its business model, policies and systems, and pass fit-and-proper scrutiny. They did not prescribe a numerical capital floor.

The KSh20 million figure arrived in the draft Non-Deposit-Taking Credit Providers Regulations, published for consultation on 7 August 2025. Even there, it was not a universal toll at the market gate. A provider with initial capital above KSh20 million would apply for a licence. One below KSh20 million could apply for registration. A registered provider would have to convert to a licence if its capital, borrowings or loan book later exceeded KSh20 million.

DFSAK’s proposal, as [reported by the *Business Daily*](https://www.businessdailyafrica.com/bd/economy/why-digital-lenders-seek-a-higher-sh50m-threshold-for-licensing-5162740), was to move the licensing threshold to KSh50 million. The same report expressly said providers below the threshold could still register. No public copy of DFSAK’s full submission was located, so it would be unsafe to claim that the association wanted every sub-KSh50 million provider closed.

That correction does not make the competition question disappear. It reveals the more consequential one.

The 2025 draft says a digital credit provider licensed under the 2022 regulations would not be affected by the new registration requirements and would continue operating as if licensed under the new regime. A later entrant below the dividing line would begin as a registered provider. If the threshold moved to KSh50 million while that transition clause remained, the immediate effect would not necessarily be to eject smaller incumbents. It could be to preserve their licence while requiring tomorrow’s competitors to grow into the same credential.

The capital debate was never only about how much money a lender had. It was about who would be licensed, who would merely be registered, what each status would permit, and whether a rule intended to sort risk would quietly sort competitors instead.

Part I · The Rule That Never Became a Rule

The legal sequence matters.

In March 2022, the CBK brought previously unregulated app-based lenders into a licensing regime after complaints about high costs, abusive debt collection and misuse of personal information. The regulations required every covered digital credit provider to obtain a licence. They asked for evidence of funding, but set no KSh20 million minimum.

The [Business Laws (Amendment) Act, 2024](https://new.kenyalaw.org/akn/ke/act/2024/20/eng%402024-12-13) then widened the perimeter. CBK’s mandate no longer stopped at loans delivered through an app. It extended to non-deposit-taking credit more broadly, including credit offered digitally or otherwise, asset finance, buy-now-pay-later, credit guarantees, pay-as-you-go arrangements and specified peer-to-peer models. The Act authorised both registration and licensing. It did not set a KSh20 million or KSh50 million threshold.

CBK’s August 2025 draft tried to operationalise that wider mandate. It created two routes:

- Initial capital **above KSh20 million**: apply for a licence.

- Initial capital **below KSh20 million**: apply for registration.

- A registered provider whose **capital, borrowings or loan book** later exceeds KSh20 million: apply to convert to a licence.

The wording leaves exactly KSh20 million in neither category. That is a drafting defect, not a policy principle.

The KSh50 million figure entered this architecture as industry advocacy during consultation. It was not a Bill, a legal notice or a CBK decision. On the public record reviewed for this article, it has not become law. In February 2026, the National Treasury was still describing the 2025 instrument in the Senate as a [recently issued draft](https://parliament.go.ke/sites/default/files/2026-02/Wednesday%2C%2025th%20February%2C%202026%20at%209.30%20a.m..pdf), while explaining that CBK continued to assess pricing under the 2022 regulations. Searches of the Kenya Law and CBK public records through 20 August 2026 did not locate a gazetted replacement.

The status is therefore less dramatic and more important than the old story suggested: Kenya expanded the statutory perimeter, drafted a new two-tier system, consulted on a higher boundary and continued licensing firms under the earlier framework while the replacement remained unresolved.

The unresolved transition is not neutral, particularly for businesses newly drawn into the wider perimeter and applicants whose future treatment depends on the proposed tiers. It tends to reward firms able to secure funding, make product decisions and negotiate partnerships despite uncertainty. But that burden cannot be measured by the KSh50 million number alone.

Part II · Four Questions Hidden Inside One Number

The original debate collapsed four different regulatory decisions into a single capital figure.

The first is **permission**: may a provider operate at all? Under the draft, the answer is yes if it is either licensed or registered. That makes the threshold a boundary between routes, not necessarily a prohibition below it.

The second is **entry capital**: how much financial commitment must the promoters show before operating? Capital can absorb early losses, pay for systems and compliance, and support an orderly wind-down. It can also signal that shareholders have something meaningful at risk.

The third is **supervisory intensity**: at what scale should a provider move from registration to a full licence? The draft does not rely on capital alone. Borrowings and loan-book size can also trigger conversion. That is an acknowledgement that risk can grow through leverage and activity even when paid-in capital does not.

The fourth is **ongoing resilience**: after entry, how much capital should a lender hold against the credit, operational, cyber, conduct and concentration risks it is actually taking? A fixed amount at incorporation cannot answer that question indefinitely. KSh50 million may be substantial for a lender with a KSh10 million book and immaterial for one rotating hundreds of millions in short-term credit.

Moving one threshold cannot perform all four jobs.

This does not make DFSAK’s concern frivolous. A licence that is obtained and left dormant creates supervisory clutter. A weakly funded provider may fail before it can repair systems, resolve complaints or transfer customer records. A regulator with finite staff has a legitimate interest in distinguishing a credible operating plan from a shell.

But money is evidence of capacity, not proof of conduct. A well-capitalised lender can still conceal the total cost of credit, approve unaffordable borrowing, misuse personal data or harass a customer. A smaller lender can fail for lack of funding while treating every borrower fairly. The two risks overlap, but they are not interchangeable.

The competition danger begins when capital ceases to be calibrated to risk and becomes a shorthand for seriousness.

Part III · The Market Grew While the Draft Waited

Kenya’s licensed market did not freeze after the consultation.

CBK had licensed 126 digital credit providers when it published the draft in August 2025. The total reached 195 by December, 227 in April 2026 and [252 in July 2026](https://www.the-star.co.ke/news/2026-07-14-cbk-licenses-25-more-digital-lenders). The Bank said it had received more than 800 applications since March 2022.

As at May 2026, CBK was [reported as saying](https://www.the-star.co.ke/news/2026-07-14-cbk-licenses-25-more-digital-lenders) that licensed providers had granted 8.37 million loans worth KSh150.56 billion. That is the regulator’s description; it should not be converted into 8.37 million unique borrowers, an annual flow or a current loan book without further data. A person can take several loans and short-duration credit can turn over repeatedly.

The stock measure is smaller. In [evidence to the Senate](https://www.parliament.go.ke/node/25264), Treasury put digital credit providers’ private-sector credit at KSh110.5 billion in December 2025, against KSh4.37 trillion for commercial banks and KSh32.7 billion for microfinance banks. Within those three categories, digital lenders accounted for 2.4 per cent.

That creates two simultaneous truths. Digital credit is economically significant to the households and small firms using it, and the standalone provider segment is not systemically dominant beside commercial banking.

Provider count is not proof of competition. Two hundred and fifty-two legal entities can still depend on the same mobile-money rails, customer-acquisition channels, credit data and wholesale funding. In its FY2020/21 digital-credit inquiry, the Competition Authority of Kenya identified [dependence on telecommunications and big-technology firms](https://www.cak.go.ke/decade-later-how-can-policy-support-consumer-protection-and-competition-kenyas-digital-credit) for customers, payment channels and appraisal data as a competition concern. Bank-linked digital products also sit under different institutional regulation from standalone providers.

The missing evidence is provider-level: market shares, active borrowers, loan-book concentration, effective prices, approval rates, funding costs, exits and acquisitions. Without it, claims that a threshold will force mass closure, guarantee consolidation or protect competition are scenarios rather than findings.

The licensing numbers tell us that entry continued under the 2022 regime. They do not tell us whether customers can switch easily, whether new firms reach viable scale, or whether the market is contestable where distribution actually resides.

Part IV · Capital Can Absorb Losses. It Cannot Identify Ethics.

The strongest case for capital is not depositor protection. These providers do not take deposits. It is operational resilience and loss absorption.

Digital credit books can deteriorate quickly. In its [2024–first-half 2025 Financial Sector Stability Report](https://www.centralbank.go.ke/uploads/financial_sector_stability/1556846189_FSR%202024%20Sept.%20Final%202025.pdf), CBK reported an aggregate non-performing-loan ratio of 16.02 per cent for digital credit providers in December 2024 and 15.9 per cent in March 2025, slightly below the corresponding commercial-bank ratios of 17.1 and 17.2 per cent.

The aggregate concealed an extreme gradient. Loans below KSh1,000 had an NPL ratio of 83.1 per cent. Those from KSh1,000 to KSh5,000 were at 69.4 per cent. Loans from KSh50,001 to KSh100,000 were at 16.4 per cent.

That is the clearest argument against treating every lender’s risk as the same. The smallest ticket is not necessarily the lowest-default-risk segment, although default frequency alone does not measure the capital required against it. The right buffer depends on exposure, loss severity, book size, maturity, repeat borrowing, vintage losses, concentration, funding structure and the lender’s ability to keep operating when collections disappoint.

Capital should therefore rise with measurable risk. A minimum net-worth requirement can establish a base. Ongoing capital, provisioning or leverage constraints can then respond to the portfolio. Ghana’s 2025 architecture illustrates the principle: its [licensing requirements set GHS2 million in minimum capital](https://www.bog.gov.gh/wp-content/uploads/2025/09/Licensing-Requirement_Digital-Credit-Services-Provider-Updated_04_09_25-NOTICE-30.pdf), while a [separate directive adds an 8:1 gearing ceiling and a GHS10,000 transaction cap](https://www.bog.gov.gh/wp-content/uploads/2025/09/FINAL-DIRECTIVE-FOR-DIGITAL-CREDIT-SERVICES-PROVIDERS_After-Stakeholder_15_09_25-NOTICE-30.pdf). The important comparison is not the foreign-currency amount. It is that one number is not asked to govern the whole business.

Conduct requires a different instrument. CBK’s 2022 framework was introduced precisely because public complaints concerned price, collection tactics and personal information. Those problems did not end with licensing. The Competition Authority says it handled [180 complaints involving digital lenders and microfinance institutions](https://www.cak.go.ke/unsettling-digital-lending-and-digital-applications-financing) in the year to June 2023, rising by ten the following year. In separate investigations into more than 60 complaints against non-deposit-taking microfinance institutions, it found that most concerned hidden fees, predatory lending and coercive recovery.

A lender with KSh50 million can commit every one of those harms.

The universal rules should therefore attach to the activity, not the balance-sheet label: truthful total-cost disclosure, affordability assessment, lawful data use, ethical collection, complaint resolution, credit-information reporting, cyber controls and accountable outsourcing. Capital can keep a provider alive long enough to meet those duties. It cannot substitute for enforcing them.

Part V · The Barrier Already in the Draft

The draft’s most important competition provision appears near the end.

Under the [draft’s transition clauses](https://www.centralbank.go.ke/wp-content/uploads/2025/08/Draft-Central-Bank-of-Kenya-Non-Deposit-Taking-Credit-Providers-Regulations-2025.pdf), an existing DCP licensed under the 2022 regulations “shall not be affected” by the registration requirements and “shall continue to operate as if licensed” under the new rules. Pending applications, by contrast, would be processed under the new licensing or registration route.

Grandfathering has a legitimate purpose. Forcing 126 then-licensed firms to stop, reapply and wait would disrupt borrowers and consume supervisory capacity. Legal continuity also protects investments made in reliance on the earlier regime.

The counter-risk is status asymmetry. A current provider may retain the market signal of a licence without proving that it crosses the new dividing line. A later provider below it may be legally permitted to lend but carry a registration certificate until its capital, borrowings or book reaches the threshold. If banks, payment partners, investors or customers treat “licensed” as safer or more credible than “registered”, the distinction can have commercial value beyond the legal text.

That effect is plausible, not yet demonstrated. It depends on what registrants may do, what limits CBK places on them, how counterparties respond, and how routinely conversion occurs. The final instrument should make those differences explicit. A two-tier regime becomes an entry barrier when the lower tier is legally open but commercially stranded.

The fees are less ambiguous. The 2022 regulations charge KSh5,000 for an application and KSh20,000 on the grant of a licence and annually thereafter. The [2025 draft’s fee schedule](https://www.centralbank.go.ke/wp-content/uploads/2025/08/Draft-Central-Bank-of-Kenya-Non-Deposit-Taking-Credit-Providers-Regulations-2025.pdf) proposes KSh100,000 to apply, KSh500,000 for a licence and each annual renewal, and KSh250,000 for a registration certificate and each annual renewal.

The application fee would rise twenty-fold. The annual full-licence fee would rise twenty-five-fold. Even the lighter registration tier would cost twelve-and-a-half times the current annual licence fee.

Those charges may be defensible if they reflect supervisory cost. They may also be more immediate to a small entrant than the KSh50 million argument that consumed the public debate. CBK has not published, in the materials reviewed for this article, a regulatory-impact assessment showing the cost of supervising each tier, the likely distribution of firms or the effect on entry.

The draft already contains a targeted response to idle licences: CBK may suspend or revoke a licence or registration where a provider fails to commence business within 12 months. It also permits action where a provider is not viable, fails to pay fees, breaches conditions or acts against customers’ interests. Those tools address dormancy directly. A higher capital boundary should not be made to do their work indirectly.

Part VI · A Rule Designed Around Outcomes

Kenya does not need to choose between no capital requirement and a KSh50 million badge of seriousness. It needs to allocate each risk to the instrument capable of controlling it.

First, preserve a genuine registration route for small providers that demonstrably present lower risk. State clearly what registrants may offer, what portfolio or leverage limits apply, and what service providers may refuse them. The route must be capable of supporting a viable firm rather than functioning as a waiting room.

Second, retain objective conversion triggers. Capital, borrowings and loan-book size are more informative together than capital alone. The final text should close the exact-KSh20 million drafting gap and specify how each measure is calculated, how often it is tested and what transition period follows a breach.

Third, separate entry capital from ongoing prudential requirements. A base net-worth test can screen financial capacity. Additional capital, provisioning or gearing limits should scale with loan-book risk, loss experience, funding concentration and operational exposure.

Fourth, impose core conduct duties on every provider and equivalent consumer-facing credit activity, regardless of tier or institutional wrapper. The borrower should not lose price transparency, privacy or fair collection because the loan sits inside a bank partnership, an app, a pay-as-you-go contract or a registered small lender.

Fifth, review grandfathering after a defined transition. Continuity need not become permanent privilege. Existing licensees should meet the same ongoing financial, conduct and disclosure standards as new firms, even if they are not forced through a fresh entry process.

Sixth, scale fees to the supervisory burden or the provider’s size and publish the reasoning. A flat annual amount is easiest to administer and hardest on the smallest balance sheet.

Seventh, publish the outcomes. For each provider or in a sufficiently granular public dataset, CBK and CAK should report active borrowers, loan-book size, vintage NPLs by ticket band, total cost of credit, repeat borrowing, complaints per 1,000 accounts, resolution time, data breaches, exits and ownership changes. Competition cannot be protected using a provider count that conceals distribution and power.

Finally, preserve the draft’s 12-month commencement test and strengthen its voluntary-liquidation provisions with explicit orderly run-off and customer-data continuity requirements. If the concern is inactivity or speculative licence-holding, regulate inactivity and transfers. Do not use founder wealth as a proxy for intent.

Part VII · The Precursor

The old warning was simple: a KSh50 million floor would push small lenders out and leave large firms behind. The record does not sustain that certainty. The proposal concerned the threshold for a licence inside a draft that retained registration below it. Existing licensees were set to be grandfathered. The KSh50 million figure never became law.

The updated warning is narrower and stronger.

Kenya is designing a market in which permission, regulatory status and supervisory intensity may no longer be the same thing. That can be intelligent proportionality. It can also create a class of firms with inherited credentials and another that must overcome higher fees, uncertain status and a conversion line before counterparties treat it as equivalent.

The distinction will be visible in the next data, not in the rhetoric.

If registration remains commercially viable, partners treat registrants as credible, conversion occurs promptly when objective triggers are crossed, entry continues and concentration does not rise, the barrier thesis will weaken.

If registrants are legally admitted but commercially stranded, conversion is delayed, partners favour grandfathered licensees and acquisition replaces entry, it will strengthen.

The number to watch is not KSh50 million. It is how many firms can enter and compete below the line—and cross it when their scale requires.