Kenya is moving from crypto lawmaking to crypto enforcement, and the Capital Markets Authority is now looking for blockchain analytics software to help police the new regime.
- More than 20 chains: The CMA wants software that works across Bitcoin, Ethereum, and 20+ networks
- Real-time and historical: Regulators want live monitoring and backtracking
- AML first: The target list includes mixers, darknet-linked addresses, and sanctioned entities
- Licensing still pending: No crypto firms have been licensed yet
The tender shows Kenya is no longer just writing crypto rules. It is building the machinery to enforce them.
According to crypto.news, citing tender documents reviewed by Capital FM Africa, Kenya’s Capital Markets Authority (CMA) is seeking a blockchain analytics platform that can monitor activity across more than 20 blockchain networks. Bitcoin and Ethereum are specifically required.
The system would monitor transactions both in real time and retrospectively. In plain English: regulators want to watch flows as they happen and also rewind the ledger when something looks off. Because on public blockchains, the data is visible. The hard part is figuring out what it means and who is behind it.
The tender calls for software that can flag high-risk wallets, unusually large transfers, coin mixers, darknet-linked addresses, and entities appearing on sanctions lists maintained by the United Nations and the U.S. Office of Foreign Assets Control. It would also map wallet relationships, rebuild transaction histories, trace funds across multiple blockchains, and assign risk scores tied to money laundering, ransomware, fraud, and terrorism financing.
That is not a decorative dashboard. It is enforcement infrastructure.
The idea is straightforward: if Kenya is going to license crypto businesses, it wants the ability to see what those businesses are doing and where money is moving. That is a sensible goal if the country wants a regulated market instead of a noisy free-for-all. It is also the kind of setup that makes privacy advocates reach for a stiff drink.
Kenya signed its Virtual Assets Service Providers Act into law in October, and it took effect the following month, according to the material provided. Oversight is split between the Central Bank of Kenya and the CMA.
The central bank oversees payment services, stablecoins, and custodial wallet providers, meaning firms that hold users’ crypto keys on their behalf. The CMA oversees exchanges, brokers, investment advisers, and tokenization platforms. That split matters because it shows Kenya is treating crypto as both financial plumbing and a market activity, not one giant undifferentiated mess.
The country is also aligning its framework with anti-money laundering standards set by the Financial Action Task Force, the global standard-setter for cleaning up dirty money. That usually means stricter customer checks, transaction monitoring, suspicious activity reporting, and a lot more compliance paperwork than the average crypto libertarian would call fun.
No crypto firms have received licences yet. The National Treasury released draft regulations in March, and existing operators have until November 2026 to meet compliance requirements. So the legal framework is in place, but the operational rules are still being finalized and the licensing process is not fully live yet.
That is an important distinction. Passing the law is the headline. Building the enforcement stack is the part that decides whether the law has teeth or just decorative fangs.
Blockchain analytics tools are now standard equipment for regulators and law enforcement around the world. Firms such as Chainalysis, TRM Labs, and Elliptic build software that clusters addresses, traces fund flows, and helps investigators infer likely common control between wallets. These tools do not magically identify the human being behind every address, despite what vendor marketing sometimes suggests. They help turn public ledger data into leads.
And that is where the tradeoff comes in.
There is a clear upside to this kind of surveillance. If Kenya wants to detect fraud, sanctions evasion, ransomware payments, and illicit finance, it needs tools that can trace funds across blockchains and spot suspicious patterns. A licensing regime without enforcement is just a polite suggestion.
But there is a downside too. Once governments can see more financial behavior, they usually want to see more of it. Systems built for anti-money laundering can drift into broader surveillance, false positives can hit legitimate users, and “suspicious activity” can become a very elastic concept when bureaucracy gets hold of it. That tension is the price of regulated crypto.
Kenya is not doing this in a vacuum. According to crypto.news, Chainalysis estimated that users in Kenya received roughly $19 billion worth of crypto between July 2024 and June 2025, ranking the country fourth in Africa by that measure. Chainalysis also estimated that more than six million Kenyans use digital assets.
That is a meaningful market. It is large enough to support legitimate businesses, but also attractive to scammers, wash traders, and the usual parade of opportunists who hear “decentralized finance” and translate it as “free buffet.”
A significant share of activity happens through peer-to-peer trading channels. That matters because P2P trading lets people move crypto directly between each other, often outside formal exchanges. It is especially important in markets where banking access is uneven or formal rails are expensive. If Kenya’s rules make licensed platforms harder to use, some activity may simply shift to P2P routes or offshore venues instead of disappearing.
That is the reality regulators often underestimate. You can tighten the front door. You cannot always close the side gate.
The compliance picture is also getting broader on the tax side. Under Kenya’s Finance Bill 2026 proposal, crypto firms would send annual reports to the Kenya Revenue Authority with information on reportable users and controlling persons. KPMG Kenya has noted that Kenya could also exchange virtual asset transaction data with foreign tax authorities under international reporting standards.
So this is not only about policing crime. It is also about visibility, tax collection, and cross-border reporting. For users who imagined crypto as a neat escape hatch from paperwork, the government’s answer is simple: not likely.
Kenya is also following a path already taken elsewhere. Similar forensic tools are used by agencies such as U.S. Immigration and Customs Enforcement, and firms like Chainalysis and TRM Labs already serve agencies including the FBI, DEA, and IRS. Britain’s HMRC has also contracted TRM Labs to help trace suspicious cryptocurrency transactions.
That comparison is useful because it cuts through the panic. Kenya is not inventing some radical new model. It is joining a familiar global pattern: legalize the market, license the businesses, then build the surveillance and reporting tools to keep the whole thing from turning into a laundering machine.
Whether that produces a healthier crypto sector or just a more watched one depends on execution. A serious regime can improve trust, push out the worst actors, and give legitimate firms clearer rules. A heavy-handed one can smother smaller players, encourage users to route around formal channels, and turn compliance into an expensive moat for incumbents.
The real test is whether Kenya can police bad actors without turning every wallet into a suspect.
Key takeaways
-
Why is Kenya seeking blockchain analytics software?
To monitor crypto activity, trace suspicious transfers, and support anti-money laundering, sanctions, fraud, and terrorism-financing enforcement under its new virtual asset framework. -
What will the system do?
It would track activity across more than 20 blockchains, including Bitcoin and Ethereum, and flag risky wallets, mixers, darknet-linked addresses, and sanctioned entities. -
Have crypto firms been licensed in Kenya yet?
No. The legal framework is in force, but no crypto firms have received licences yet. -
Who regulates what?
The Central Bank of Kenya oversees payment services, stablecoins, and custodial wallet providers, while the CMA oversees exchanges, brokers, investment advisers, and tokenization platforms. -
How big is Kenya’s crypto market?
According to Chainalysis, users in Kenya received roughly $19 billion worth of crypto between July 2024 and June 2025, and more than six million Kenyans use digital assets. -
Will surveillance stop illicit crypto use completely?
No. It can make tracing and enforcement stronger, but peer-to-peer trading and offshore platforms can still give users ways to route around formal controls. -
What is the privacy tradeoff?
Better enforcement usually means more state visibility into financial activity. That can help catch criminals, but it can also create overreach and false positives if the system is sloppy or overused.
Further reading
A few related angles worth keeping on the radar as Kenya tightens the screws.
- Kenya: A Step Forward in Virtual Asset Regulation
- Kenya's Capital Markets Authority seeks blockchain analytics for crypto crime monitoring
- The Kenya Capital Markets Regulator Floats Tender Notice for Blockchain Analytics
- Criminals Shift from Bitcoin to Stablecoins as Illicit Crypto Use Changes
- Bitcoin Lightning and Kenya’s M-Pesa Could Bridge Crypto Payments and Mobile Money
- Tando Brings Bitcoin to Kenya via Phone Numbers, Raising Custody Questions
