Digital loans hit Ksh 150B as 25 more lenders secure licenses

The Central Bank of Kenya (CBK) has significantly expanded its oversight of the digital lending sector by licensing an additional 25 Digital Credit Providers (DCPs), bringing the total number of regulated entities to 252. This ongoing regulatory drive, initiated under the Central Bank of Kenya (Digital Credit Providers) Regulations, 2022, aims to formalize a previously largely unregulated market. As of May 2026, licensed DCPs have collectively disbursed 8.37 million loans valued at Ksh 150.56 billion, underscoring the sector's substantial contribution to financial inclusion. The licensing framework focuses on consumer protection, ethical business practices, and data privacy, addressing past concerns about predatory lending and misuse of personal information.

Kenya's digital lending landscape continues its rapid transformation, marked by the Central Bank of Kenya's (CBK) recent announcement of 25 newly licensed Digital Credit Providers (DCPs). This latest cohort elevates the total number of regulated digital lenders in the country to 252, signaling a robust and sustained effort by the CBK to bring order and accountability to a burgeoning financial segment. The scale of this sector is immense, with licensed DCPs having issued 8.37 million loans amounting to Ksh 150.56 billion as of May 2026, highlighting its critical role in providing accessible credit to millions of Kenyans.

This concerted licensing drive is more than a mere administrative exercise; it represents a pivotal moment in Kenya's financial regulatory history. For years, the digital lending space operated with minimal oversight, leading to widespread concerns about predatory practices, exorbitant interest rates, unethical debt collection methods, and the egregious misuse of personal data. The CBK's proactive stance is designed to curb these abuses, foster a more transparent and responsible lending environment, and ultimately enhance consumer trust and financial stability.

This article will delve into the statutory and doctrinal underpinnings of this regulatory framework, analyze its impact on market conduct and consumer protection, and discuss the implications for legal practitioners and the future trajectory of digital finance in Kenya. The continuous licensing process, guided by the Central Bank of Kenya (Digital Credit Providers) Regulations, 2022, is instrumental in building a transparent, responsible, and stable digital credit ecosystem in Kenya.

The genesis of digital lending in Kenya can be traced back to around 2012 with the introduction of services like M-Shwari. This innovation rapidly expanded access to credit, particularly for the unbanked and underbanked populations, leveraging the country's high mobile penetration. However, this rapid growth occurred largely in an unregulated environment, giving rise to significant public outcry over predatory practices. These included excessively high interest rates, hidden fees, aggressive and unethical debt collection tactics such as public shaming and unauthorized access to borrowers' contact lists, and blatant disregard for personal data privacy. Many digital lenders operated without any formal license, creating a regulatory vacuum that exploited vulnerable borrowers.

In response to these escalating concerns, the Kenyan government enacted the Central Bank of Kenya (Amendment) Act, 2021, which was signed into law on December 7, 2021. This landmark legislation empowered the Central Bank of Kenya with the authority to license and oversee all Digital Credit Providers (DCPs), thereby closing the regulatory gap that had long plagued the sector. Following this amendment, the Central Bank of Kenya (Digital Credit Providers) Regulations, 2022, were gazetted on March 18, 2022, and became operational immediately, providing the detailed framework for regulation.

The Regulations mandate that all persons carrying out digital credit business in Kenya must be licensed by the CBK, unless already regulated under another written law. Key provisions of these Regulations include stringent requirements for licensing, focusing on the business models, consumer protection measures, and the 'fitness and propriety' of proposed shareholders, directors, and management. Furthermore, DCPs are required to adhere to sound corporate governance principles, maintain a registered physical office, comply with the Data Protection Act, 2019, and the Proceeds of Crime and Anti-Money Laundering Act, 2009, and establish robust consumer redress mechanisms. Crucially, the Regulations explicitly prohibit unethical debt collection practices, such as threats, shaming, or unauthorized access to a customer's phone contacts. DCPs are also restricted from taking deposits or cash collateral for loans.

The continuous licensing of Digital Credit Providers by the Central Bank of Kenya marks a significant stride towards formalizing and sanitizing the digital lending sector. With 252 licensed DCPs and over 800 applications received since March 2022, the CBK's efforts are clearly aimed at weeding out rogue operators and fostering a more responsible lending environment. This regulatory oversight is crucial given the substantial volume of digital loans, which reached Ksh 150.56 billion across 8.37 million loans by May 2026, demonstrating the sector's profound economic impact and its role in financial inclusion.

A core focus of the Central Bank of Kenya (Digital Credit Providers) Regulations, 2022, is consumer protection. The Regulations directly address the predatory practices that were rampant in the unregulated era, such as unethical debt collection, the misuse of personal information, and a lack of transparency in loan terms. Compliance with the Data Protection Act, 2019, is a cornerstone, ensuring that customer data is handled responsibly and with consent, a significant departure from previous practices where lenders would access and exploit borrowers' contact lists for debt shaming. Furthermore, the extension of the *in duplum* rule, under Section 44A of the Banking Act, to non-bank lenders helps cap excessive charges, protecting borrowers from spiraling debt.

Despite the positive impact of regulation, challenges persist. While digital lending has undeniably expanded financial access, concerns about over-indebtedness and high default rates, particularly for small loans, remain prevalent. The CBK continues to engage with applicants, urging prompt submission of outstanding documentation to expedite the licensing process. This highlights the ongoing need for robust financial literacy initiatives and continuous monitoring to prevent the emergence of new forms of predatory lending. Discussions around potentially raising minimum capital requirements for DCPs also indicate a dynamic regulatory approach aimed at further strengthening the sector.

From a comparative law perspective, Kenya's proactive and comprehensive approach to regulating digital lending is notably more advanced than that of many other African jurisdictions. The swift legislative and regulatory response to market failures demonstrates a commitment to balancing financial innovation with consumer welfare. However, the sheer volume of applications and the continuous need for enforcement underscore the complexity of regulating a rapidly evolving fintech landscape.

The Central Bank of Kenya's sustained efforts in licensing Digital Credit Providers represent a critical step towards building a more responsible, transparent, and stable digital financial ecosystem. For legal practitioners, this evolving regulatory landscape necessitates a heightened focus on compliance. Attorneys advising DCPs must ensure their clients meticulously adhere to the Central Bank of Kenya (Digital Credit Providers) Regulations, 2022, covering aspects from robust corporate governance and ethical conduct to stringent data protection protocols and effective consumer redress mechanisms. Due diligence for new market entrants is paramount, encompassing a thorough understanding of licensing requirements, anti-money laundering obligations, and the prohibition of predatory debt collection practices.

Looking ahead, the digital lending sector in Kenya will likely continue to experience dynamic shifts. Practitioners should closely monitor potential future regulatory refinements, such as adjustments to capital requirements or further guidance on interest rate caps, as well as the impact of technological advancements like open banking and artificial intelligence in credit scoring. The CBK's commitment to safeguarding consumer interests while fostering financial inclusion will shape the market's trajectory. Legal professionals must remain vigilant and adaptable, providing proactive counsel to help their clients navigate this complex and ever-changing regulatory environment, ensuring sustainable growth and responsible innovation within Kenya's vibrant digital economy.