Kenya's Central Bank has issued 32 additional digital lending licences this week, bringing the total number of licensed digital lenders to 227 as the regulator continues its systematic cleanup of the country's credit market.
The Central Bank of Kenya (CBK) announced the new licences on Tuesday, marking another milestone in its ongoing effort to regulate what was once a chaotic digital lending space plagued by predatory practices and data misuse.
Strict Vetting Process Takes Hold
Notably, how thorough the CBK's assessment process has become. The regulator evaluates digital lenders based on business model, ownership structure, consumer protection standards, and management composition before granting licences.
Licensed digital lenders must comply with anti-money laundering (AML) monitoring requirements and face strict limits on how they report borrowers to credit bureaus. These measures directly address the predatory practices that gave Kenya's digital lending sector a bad reputation in its early years.
Tighter Rules Coming in 2025
The regulatory screws are tightening further. In 2025, the CBK published draft Non-Deposit Taking Credit Providers Regulations that will impose even stricter requirements on digital lenders operating in Kenya.
Under the proposed rules, credit-only providers with at least KES 20 million ($155,000) in capital, borrowings, or loan book must obtain a licence. The regulations also introduce stricter data protection practices, limiting what information digital lenders can collect and setting clear boundaries on data sharing with credit bureaus.
Market Growth Drives Regulatory Response
The numbers tell the story of why Kenya needs tight oversight. As of 2025, digital lenders in the country had disbursed 5.5 million loans worth KES 76.8 billion ($594 million) over the previous three years alone.
I have observed that this rapid growth necessitates the kind of regulatory framework the CBK is building. The industry has grown large enough that loose oversight could harm millions of Kenyan borrowers who rely on these digital credit services for everything from emergency expenses to business capital.
Nigeria's Corporate Registry Hit by Security Breach
Meanwhile, Nigeria's Corporate Affairs Commission (CAC) confirmed this week that unauthorised access affected parts of its system in a security breach. The CAC, which maintains records of companies and businesses operating in Nigeria, said it has implemented containment measures and additional safeguards following the incident.
The timing is particularly concerning given Nigeria's upcoming 2027 general elections and the heightened focus on digital infrastructure security across African tech systems.
Looking Ahead
Kenya's methodical approach to digital lending regulation serves as a model for other African countries grappling with similar challenges. The combination of strict licensing requirements, consumer protection standards, and data privacy rules creates a framework that balances innovation with user safety.
As the digital lending market continues expanding across Africa, Kenya's experience shows that proactive regulation, rather than reactive cleanup, produces better outcomes for both lenders and borrowers.