CBK Digital Lending Regulations Kenya 2026: What Borrowers Must Know About Licensed Lenders
Since September 2022, all digital lenders in Kenya must be licensed by the Central Bank of Kenya. This changed everything — from data privacy to debt collection practices. Here's what every Kenyan borrower needs to know about their rights under the new regulations.
Why Digital Lending Regulations Were Needed
Before 2022, Kenya's digital lending space was a wild west. Over 100 mobile loan apps operated without oversight, many engaging in:
- Contact shaming — Sending messages to borrowers' phone contacts about unpaid debts
- Predatory rates — Some apps charged 100%+ monthly APR
- Hidden fees — Processing fees, insurance, and "service charges" not disclosed upfront
- Data harvesting — Selling borrower data to third parties without consent
- Unfair CRB listing — Listing borrowers for amounts as low as KES 100 without notice
The CBK Digital Credit Providers Regulations, 2022 (under the CBK Act, Cap 491) established a licensing framework that all digital lenders must follow. As of 2026, 32 digital credit providers are CBK-licensed.
Your 7 Rights as a Digital Borrower
1. Right to Full Cost Disclosure
Before accepting any loan, the lender must show you: total amount payable, interest rate (monthly and annual), all fees (processing, insurance, late payment), and the exact repayment schedule. If an app doesn't show this before you click "Accept" — it's violating the law.
2. Right to a 48-Hour Cooling-Off Period
After accepting a loan, you have 48 hours to cancel by repaying the principal. No fee or interest should be charged during this period. This protects against impulsive borrowing or accepting wrong amounts.
3. Right to Privacy (No Contact Shaming)
Lenders cannot contact people in your phone book to collect debts. This was the single most-requested protection. Violation carries penalties up to KES 10 million or revocation of CBK license.
4. Right to Data Protection
Your personal data (phone, M-Pesa, contacts, location) can only be used for credit assessment. It cannot be sold, shared with marketers, or used for purposes beyond lending. Governed jointly by CBK regulations and the Data Protection Act, 2019.
5. Right to CRB Notice Before Negative Listing
A lender must notify you (SMS or app notification) before submitting your name to CRB as a defaulter. You must be given reasonable time (typically 30 days) to remedy the default before listing.
6. Right to Complaint Resolution
Licensed lenders must have a documented complaints process. They must acknowledge your complaint within 3 days and resolve it within 14 days. If unresolved, you can escalate to CBK directly. Lenders must report all complaints to CBK quarterly.
7. Right to Fair Pricing
While there's no fixed rate cap, CBK monitors pricing and can intervene if rates are deemed predatory. Licensed lenders must justify their pricing models to CBK during annual reviews. This has led to meaningful rate reductions since 2022.
How to Verify a Lender Is CBK-Licensed
- Check the CBK register: Visit
centralbank.go.ke→ Financial Inclusion → Digital Credit Providers - Look for the license number: Licensed apps must display their CBK license number in the app's About/Legal section
- Check Google Play listing: Licensed apps usually mention "Licensed by Central Bank of Kenya" in the app description
- Call CBK: +254 20 2860000 or email
info@centralbank.go.ke
Major Licensed Digital Lenders (2026)
| Lender | CBK Status | Backing |
|---|---|---|
| M-Shwari | ✅ Licensed (NCBA Bank) | Safaricom + NCBA |
| KCB M-Pesa | ✅ Licensed (KCB Bank) | KCB Group |
| Fuliza | ✅ Licensed (NCBA + KCB) | Safaricom consortium |
| Tala | ✅ Licensed | Tala Mobile Technology |
| Branch | ✅ Licensed | Branch International |
| Zenka | ✅ Licensed | Zenka Finance |
| Timiza | ✅ Licensed (Absa Bank) | Absa Bank Kenya |
Red Flags: Signs of an Unlicensed or Predatory Lender
- No CBK license mentioned anywhere — Legal requirement to display this
- Requests you download from outside Google Play — APK files are often unregulated apps
- Asks for guarantor contacts before showing loan terms — Harvesting contacts for shaming
- No cooling-off period option — CBK mandates 48 hours
- Fees not shown until after acceptance — Illegal under disclosure rules
- Threatening messages mentioning contacts/employer — Illegal under CBK regulations
- Interest rate above 30% per month — While no cap exists, this signals predatory intent
- App has fewer than 100 downloads — Likely a fly-by-night operation
How to File a Complaint
| Authority | Complaint Type | Contact |
|---|---|---|
| Central Bank of Kenya (CBK) | Licensed lender violations, unfair practices | info@centralbank.go.ke / +254 20 2860000 |
| Data Protection Commissioner (ODPC) | Data privacy violations, unauthorized sharing | complaints@odpc.go.ke |
| Communications Authority (CA) | Spam messages, unauthorized contact access | info@ca.go.ke |
| Google Play Store | Unlicensed apps, policy violations | Flag app → Report → Inappropriate content |
| National Police Service | Criminal harassment, threats | OB report at nearest station |
What Changed Since the 2022 Regulations
| Before 2022 | After CBK Regulations |
|---|---|
| 100+ unregulated apps | 32 licensed providers (rest removed from Play Store) |
| Contact shaming widespread | Prohibited with KES 10M penalty |
| Hidden fees common | Full disclosure mandatory before acceptance |
| Instant CRB listing for KES 100 defaults | Notice required before listing |
| No complaint mechanism | 14-day resolution requirement |
| Data sold freely | Protected under DPA 2019 + CBK rules |
| Average rates: 20-40%/month | Average rates: 7.5-19%/month (significant decline) |
Borrow only from licensed, regulated lenders
Credizen only features CBK-licensed digital credit providers. Compare safe, regulated loan options.
Compare Licensed Lenders →Frequently Asked Questions About Digital Lending Regulations
1. How do I check if a loan app is licensed by CBK?
Visit the Central Bank of Kenya website (centralbank.go.ke) and look for the 'Digital Credit Providers' register under the 'Financial Inclusion' section. As of 2026, 32 digital credit providers are licensed. You can also send an email to info@centralbank.go.ke with the app name to verify. Any app not on the register is operating illegally if it lends to Kenyan residents.
2. What rights do I have under CBK regulations?
Key borrower rights: (1) Full cost disclosure before accepting a loan — total amount payable, interest rate, all fees, (2) 48-hour cooling-off period to cancel a loan after acceptance, (3) No contact shaming — lenders cannot contact your phone book contacts for debt collection, (4) Data protection — your data cannot be sold or shared without consent, (5) Fair CRB reporting — you must be notified before negative listing, (6) Complaint resolution — lender must respond within 14 days.
3. Can unlicensed apps still lend in Kenya?
Technically no — the CBK Digital Credit Providers Regulations (2022) require all digital lenders to be licensed. However, enforcement is ongoing. Google Play Store has removed hundreds of unlicensed apps, but new ones keep appearing. If you borrow from an unlicensed lender: (1) They cannot legally list you on CRB, (2) They cannot legally seize your property, (3) Their debt collection practices may violate the law. But you still received the money and should repay per agreement.
4. What should I do if a loan app harasses me?
Step 1: Document everything (screenshots of messages, call logs). Step 2: File a complaint with CBK via their portal or email. Step 3: Report to Communications Authority of Kenya (ca.go.ke) if the app accessed your contacts. Step 4: Report to Data Protection Commissioner (odpc.go.ke) for data privacy violations. Step 5: If the app is unlicensed, report to Google Play Store for removal. You may also file a police report for criminal harassment under the Kenya Information and Communications Act.
5. What is the maximum interest rate a digital lender can charge?
As of 2026, Kenya does not have a fixed interest rate cap for digital lenders (the 2016 rate cap was repealed in 2019). However, CBK regulations require: (1) Full APR disclosure before lending, (2) No hidden fees, (3) Reasonable pricing — CBK can revoke licenses of predatory lenders. In practice, licensed apps charge 5-22% per month. CBK has warned several lenders about excessive pricing but has not set a specific cap.
Responsible borrowing notice
Legal information: All consumer loans in Kenya are regulated by the Central Bank of Kenya (CBK). Lenders must comply with the Digital Credit Providers Act 2022 and be registered with the appropriate regulatory bodies.
Before applying: Check the total repayment amount (principal + fees + interest), Annual Percentage Rate (APR), repayment schedule, and penalties for late payment. Read the loan agreement carefully before signing.
Borrow responsibly: Only borrow what you can afford to repay. Your monthly repayment should not exceed 35% of your net monthly income. Consider your existing financial commitments before taking a new loan.
Data privacy: Loan apps will access your phone data (contacts, SMS, location) for credit assessment. Your data is protected under Kenya law and overseen by the Office of the Data Protection Commissioner (ODPC).
If you have problems: Contact the lender first to discuss repayment options. For complaints, reach out to the CBK or ODPC.
Disclaimer: Credizen.net is a comparison platform and not a lender. We help you find and compare loan offers but do not provide loans directly. All information is for educational purposes and should not be considered financial advice.
AI Orchestrator & Loan Specialist
Financial technology expert with 25+ years of experience in consumer lending, credit risk modeling, and AI-powered loan comparison platforms. Founder of Credizen, operating across 13 countries. Master's in Informatics (Czech Technical University), certified in Credit Risk Management (EBA) and AI & Machine Learning in Finance (Stanford/Coursera).