Regulatory & Compliance · Kenya

Kenya AML/CFT Compliance

Kenya's AML/CFT framework under POCAMLA and the Financial Reporting Centre (FRC) imposes comprehensive compliance obligations on financial institutions, payment providers, and designated non-financial businesses operating in Kenya.

KenyaAMLCFTFRCPOCAMLAFinancial IntelligenceCompliance

Overview

Kenya's AML/CFT Framework

Kenya's primary AML/CFT legislation is the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA) 2009, amended 2012 — implementing FATF standards in East Africa's largest financial market. The Financial Reporting Centre (FRC) is Kenya's Financial Intelligence Unit (FIU) — receiving Suspicious Transaction Reports (STRs), Currency Transaction Reports (CTRs), and maintaining Kenya's beneficial ownership information.

Marensa Advisory advises on Kenya AML/CFT compliance programme design for financial institutions, payment service providers, fintech companies, and designated non-financial businesses — ensuring POCAMLA and FRC regulatory compliance.

Design Your Kenya AML/CFT Programme

What We Cover

FRC registration as a reporting institution
POCAMLA-compliant AML/CFT policy and procedures
Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) procedures
Suspicious Transaction Report (STR) filing system and process
Cash Transaction Report (CTR): cash transactions KES 1 million+
Beneficial ownership register maintenance
AML/CFT Officer (AMCO) appointment and training
FRC Annual Compliance Report filing
FATF Recommendation 15 (Virtual Assets) compliance for crypto businesses

Key Considerations

Kenya AML/CFT — Key Requirements

POCAMLA and FRC regulations impose comprehensive AML/CFT obligations on reporting institutions operating in Kenya.

Reporting Institutions

POCAMLA identifies reporting institutions — financial institutions, designated non-financial businesses and professions (DNFBPs), and virtual asset service providers — subject to AML/CFT obligations. All must register with FRC.

Customer Due Diligence (CDD)

Reporting institutions must identify and verify customers, understand the nature and purpose of business relationships, and conduct ongoing monitoring. Enhanced due diligence (EDD) applies to high-risk customers, PEPs, and unusual transactions.

Suspicious Transaction Reports (STRs)

All reporting institutions must file STRs with FRC within 3 business days of identifying or suspecting money laundering or terrorist financing. Tipping off the customer about an STR is prohibited under POCAMLA.

Cash Transaction Reports (CTRs)

Transactions involving cash of KES 1 million or more must be reported to FRC through the Cash Transaction Report system — helping identify cash-based money laundering activity.

Beneficial Ownership

Kenya introduced beneficial ownership registration requirements — companies must maintain and file beneficial owner information with the Registrar of Companies. Financial institutions must verify beneficial ownership of corporate clients.

VASP Obligations

Virtual asset service providers (crypto exchanges, digital wallets) operating in Kenya must comply with Kenya's FATF Recommendation 15 obligations — including VASP registration, CDD for virtual asset transactions, and Travel Rule compliance for transfers above applicable thresholds.

Our Process

How We Work

POCAMLA Gap Assessment

We assess your current AML/CFT programme against POCAMLA and FRC requirements — identifying gaps and priority remediation areas.

FRC Registration

We manage FRC reporting institution registration.

AML Programme Design

We design the complete AML/CFT compliance programme — policies, CDD procedures, STR process, and AMCO role definition.

Staff Training

We design and deliver AML/CFT training for Kenya-facing staff.

FRC Annual Report

We prepare the annual AML/CFT compliance report for FRC submission.

Why Marensa

Kenya AML. FRC Compliant.

Kenya's FRC is an active financial intelligence unit — with enforcement powers and an increasing number of AML prosecutions. Inadequate AML/CFT compliance creates real regulatory and criminal risk for financial institutions operating in Kenya.

Marensa Advisory provides Kenya AML/CFT programme design as part of comprehensive East Africa compliance support — covering Kenya, Uganda, Tanzania, and broader EAC regulatory requirements.

Start the Conversation

FRC

Kenya FIU

POCAMLA 2009

Primary Legislation

STR

3 Days Filing

FATF

Standards Applied

FAQ

Common Questions

Is Kenya FATF blacklisted or greylisted? +

Kenya was placed on the FATF grey list (enhanced monitoring) in 2024 — signalling deficiencies in Kenya's AML/CFT framework that require remediation. Financial institutions dealing with Kenya should apply enhanced due diligence as required by FATF guidance on high-risk jurisdictions.

Who is a reporting institution under POCAMLA? +

POCAMLA's Second Schedule identifies reporting institutions — including banks, insurance companies, microfinance institutions, forex bureaux, saccos, payment service providers, real estate agents, lawyers (in specified transactions), accountants, and dealers in precious metals.

What is the penalty for failing to file an STR in Kenya? +

Failure to file a required STR is an offence under POCAMLA — carrying fines and potential imprisonment for responsible officers. CBK and FRC have both issued enforcement actions against financial institutions with inadequate STR filing processes.

How often does FRC inspect reporting institutions? +

FRC conducts on-site inspections of reporting institutions on a risk-based basis. Higher-risk institutions (banks, payment providers) are inspected more frequently. FRC also conducts joint inspections with sector regulators (CBK, CMA, IRA).