Capital Markets Authority (CMA) — Kenya

Overview

The Capital Markets Authority of Kenya (CMA) is Kenya's independent statutory regulator responsible for supervising, licensing, and monitoring the activities of the capital markets sector. Established on December 15, 1989, under the Capital Markets Act, the CMA operates as an independent public agency under the National Treasury and Planning ministry.

The CMA's core mandate is to regulate and develop an orderly, fair, and efficient capital markets system while promoting market integrity and investor confidence. The authority regulates all licensed entities operating under the Capital Markets Act, including the stock exchange, central depository and settlement corporation, market intermediaries, and online forex and commodities dealers.

Basic Identity

Classification

Inclusion Justification

What This Entity Oversees

Licensing and Supervision

The CMA licenses and supervises a wide range of capital markets intermediaries and operators, including:

• Securities Dealers and Brokers

• Fund Managers and Investment Advisers

• Stock Exchange Operators: Nairobi Securities Exchange (NSE)

• Central Depository and Settlement Corporation (CDSC)

• Insurance Brokers and Agents

• Corporate Trustees

• Forex and Commodities Dealers

All market intermediaries must obtain CMA licenses and comply with ongoing regulatory requirements including capital adequacy, conduct of business rules, and governance standards.

Market Surveillance and Enforcement

The CMA maintains active market surveillance capabilities to monitor trading activities, detect market abuse, and investigate violations. The authority publishes a public registry of licensed entities and regularly disseminates enforcement actions and investor advisories regarding unauthorized operators.

Investor Protection Mechanisms

The CMA enforces comprehensive investor protection rules requiring market intermediaries to:

• Segregate client funds and securities

• Maintain adequate capital reserves

• Implement anti-money laundering (AML) and know-your-customer (KYC) procedures

• Comply with conduct of business and suitability rules

• Maintain professional liability insurance

Digital Asset Regulation

Cryptocurrency and Virtual Assets Framework

Kenya has entered a new regulatory era for digital assets through the Virtual Asset Service Providers (VASP) Act, 2025, which received presidential assent on November 15, 2025. This landmark legislation establishes a comprehensive regulatory framework for cryptocurrency and virtual asset service providers.

Regulatory Responsibilities

Under the VASP Act 2025:

• Capital Markets Authority: Supervises virtual asset exchanges, brokers, and market operators. The CMA is responsible for licensing and ongoing oversight of these entities under its extended mandate.

• Central Bank of Kenya (CBK): Handles licensing and regulation of stablecoins and other virtual assets, while the CMA manages the securities and exchange aspects.

Regulatory Objectives

The VASP Act 2025 aims to:

• Align Kenya with international standards, particularly Financial Action Task Force (FATF) recommendations on AML/CFT and countering proliferation financing (CPF)

• Protect consumers from fraud and scams in the digital asset ecosystem

• Enhance investor confidence in virtual asset markets

• Prevent money laundering and terrorist financing through digital asset channels

• Establish clear licensing and operational standards for VASP providers

Public Participation and Implementation

The CMA is currently in the public participation phase for draft regulations implementing the VASP Act 2025. Stakeholders and the public may submit views on proposed rules governing virtual asset exchange operators, broker-dealers, and other market participants in the digital assets space.

Consumer Risk Framework

The CMA acknowledges that virtual assets are widely used in Kenya but recognizes that most service providers historically operated outside regulated environments, creating exposure to fraud, theft, and market manipulation. Regulation aims to address these consumer protection gaps.

Complaint Handling and Resolution

The CMA administers a comprehensive investor complaint mechanism:

• Anonymous Reporting Portal: Investors may file complaints confidentially through the CMA's online portal

• Walk-in Policy: Investors can submit complaints in person at CMA offices

• Fraud Investigations Unit: Handles unresolved complaints and investigates alleged misconduct

• Public Advisories: CMA publishes warnings regarding unauthorized operators and investment schemes

Consumer Education

The CMA operates the CMA Resource Center Portal (www.cmarcp.or.ke) providing educational resources, information about licensed operators, and investor guidance on capital markets participation and fraud prevention.

Regulatory Registry

The CMA maintains and publishes:

• Public registers of all licensed market intermediaries

• Lists of approved products and issuers

• Cautionary lists of unauthorized operators

• Current regulatory sanctions and enforcement actions

Regulatory Powers

Disciplinary and Enforcement Authority

The CMA possesses comprehensive enforcement powers under the Capital Markets Act to address regulatory violations and market misconduct:

• Fines and Penalties: Monetary sanctions for violations of regulatory rules

• License Actions: Suspension or revocation of licenses for serious breaches

• Disqualifications: Disqualification of individuals and entities from holding positions or engaging in licensed activities

• Censures and Warnings: Public censures and conditional orders

• Prosecution: Referral of criminal violations to law enforcement agencies

Investigation Powers

The CMA's Fraud Investigations Unit conducts investigations into suspected misconduct and securities violations. The authority possesses powers to:

• Compel testimony and obtain evidence

• Access and review audit workpapers and financial records

• Subpoena documents and records from market participants

• Access telecommunications and ISP records for investigation purposes

• Issue interim asset freezing orders during investigations

Information Sharing Framework

The CMA operates under the Enhanced Multilateral Memorandum of Understanding (EMMoU) signed with other IOSCO members, which enables:

• Real-time information sharing with foreign regulators

• Enhanced cooperation on cross-border investigations

• Exchange of audit workpapers and compelled testimony

• Asset freezing coordination in international cases

Regulatory Role and Function

Legal Foundation

Statutory Framework

The CMA derives its regulatory authority from the Capital Markets Act, Chapter 485A (Revised Edition 2012), which provides the legal foundation for securities regulation in Kenya. The Act empowers the CMA to:

• Supervise and license market intermediaries

• Monitor capital markets activities and participants

• Establish regulatory frameworks and guidelines

• Conduct investigations and enforcement actions

• Protect investors and maintain market integrity

Institutional Structure

The CMA operates as an independent public agency with governance structure comprising:

• Chief Executive Officer: Wyckliffe M. Shamiah

• Board of Directors: [UNVERIFIED - see official website for current composition]

• Department Structure: Various operational and regulatory divisions overseeing specific market segments

Regulatory Philosophy

The CMA employs a risk-based regulatory approach that encourages self-regulation to the maximum practical extent while maintaining oversight of market activities and participant conduct. The regulatory framework is codified through the Capital Markets Act, related regulations, and published guidelines that govern market intermediaries and participants.

Licensing and Authorization Relevance

Regulatory Approach to Innovation

The CMA recognizes the role of financial technology in capital markets development and adopts a balanced approach encouraging legitimate innovation while maintaining consumer protection and market integrity standards.

Securities Technology Regulation

The CMA supervises technology-enabled securities services including:

• Online Trading Platforms: Digital securities trading infrastructure and operators

• Digital Custody Solutions: Technology-based asset custody and settlement

• Automated Investment Services: Robo-advisors and algorithm-based investment management

• Blockchain and Distributed Ledger Technologies: Emerging settlement and registry technologies (framework under development)

Digital Asset Innovation

Through the VASP Act 2025 framework, the CMA establishes pathways for:

• Licensed cryptocurrency exchanges and brokers

• Decentralized finance (DeFi) service providers (framework under development)

• Digital asset custody and settlement services

• Tokenized securities and blockchain-based issuance (Requires verification from official sources)

Regulatory Sandboxing

[UNVERIFIED - CMA's specific fintech sandbox or innovation testing framework has not been independently confirmed as of this report date]

Payments and Money Movement Relevance

The Entity Metadata has the following relevance to payments and money movement in Kenya:

Payment Systems Governed or Overseen

The Entity Metadata has the following relationship to payment infrastructure in Kenya:

This entity's role in payment systems is primarily regulatory and supervisory rather than operational. It does not directly operate national payment infrastructure but contributes to the regulatory framework governing payment activities in Kenya.

Relationship to Other Regulators

IOSCO Membership

The CMA is a member of the International Organization of Securities Commissions (IOSCO), which represents 95 percent of the world's securities regulators and serves as the standard-setting body for securities regulation globally.

Enhanced Multilateral MOU (EMMoU)

Kenya became the 28th IOSCO member to sign the Enhanced Multilateral Memorandum of Understanding, joining 130 jurisdictions in the framework. The EMMoU represents Kenya's commitment to:

• Enhanced information sharing and mutual assistance in investigations

• Real-time cooperation on cross-border enforcement actions

• Asset identification and freezing coordination

• Protection of investigations through confidentiality safeguards

Committee Participation

CMA leadership actively participates in IOSCO governance:

• Growth and Emerging Markets (GEM) Committee: CMA's CEO holds the position of Vice Chairman, representing the interests of over 75 percent of IOSCO's membership

• Africa/Middle-East Regional Committee (AMERC): Active participation in regional regulatory coordination

International Regulatory Alignment

The CMA has committed to aligning Kenya's regulatory framework with international best practices established by IOSCO, including:

• Standards on market integrity and surveillance

• Cross-border cooperation and information exchange protocols

• Investor protection and conduct of business rules

• AML/CFT and sanctions compliance frameworks

Regional Cooperation

[UNVERIFIED - Extent of bilateral MOU arrangements with other African regulators beyond IOSCO framework not fully confirmed]

Geography and Jurisdiction Notes

Important Departments and Divisions

Key Public Resources

Main Office

Capital Markets Authority of Kenya

Embankment Plaza, 3rd Floor

Longonot Road, off Kilimanjaro Avenue

Upperhill

P.O Box 74800 – 00200

Nairobi, Kenya

Contact Information

• General Phone: +254 20 2264900

• Corporate Affairs Phone: +254 20 2264400

• Email: [email protected]

• Corporate Affairs Manager: Antony Mwangi ([email protected])

• Website: https://www.cma.or.ke/

Useful Links

• Main Website: https://www.cma.or.ke/

• Investor Protection Portal: https://www.cma.or.ke/investor-protection/

• Resource Center Portal: https://www.cmarcp.or.ke/

• Licensee Directory: https://licensees.cma.or.ke/

• eCitizen Portal: https://cma.ecitizen.go.ke/

• Social Media: @CMAKenya (X/Twitter)

Leadership

• CEO: Wyckliffe M. Shamiah

• Board of Directors: [UNVERIFIED - see official website for current members]

Notes on Naming and Language