Kenya KE

Kenya's first-cycle onboarding to the FIM sanctions-architecture domain establishes a jurisdiction where multiple sanctions and monitoring tracks operate in parallel without converging into a single coherent regime. FATF confirmed at its 19 June 2026 Plenary that Kenya remains under increased monitoring, all seven action-plan items still open, a status unchanged since the 23 February 2024 listing. Layered on top of that grey-listing sits a distinct three-way divergence in how sanctions authorities treat Kenya. The European Commission adopted Delegated Regulation (EU) 2025/1184 in June 2025, listing Kenya as a high-risk third country and mandating enhanced due diligence for EU-regulated firms; the December 2025 update retained Kenya even as six ESAAMLG peer jurisdictions — Burkina Faso, Mali, Mozambique, Nigeria, South Africa and Tanzania — were delisted, a widening reform gap within the same regional body's own membership. HM Treasury separately listed Kenya as a High-Risk Third Country under Money Laundering Regulation 33 following the October 2025 Plenary, mandating equivalent enhanced due diligence for UK-regulated firms. OFAC, meanwhile, has issued no country-level measure against Kenya at all, relying exclusively on targeted entity and individual designations. This is not a case of one regime enforcing and others abstaining; each applies a different architecture to the same underlying facts, and the resulting asymmetry itself becomes an operational variable for institutions with cross-jurisdictional exposure.

The targeted-designation track has continued to develop independently of the country-level listings. OFAC's 28 March 2025 Specially Designated Global Terrorist listing of Kenyan national Abdikadir Mohamed Abdikadir, known as "Ikrima," links to a persistent Nairobi-based facilitation architecture using cross-border hawala and MVTS channels connecting Kenya, Somalia, the UAE and Djibouti. That designation is corroborated by an independent multilateral track: the UN Al-Shabaab Sanctions Committee added three entries to its sanctions list referencing Kenya-linked facilitation over the same period. Two separate listing bodies converging on the same underlying facilitation architecture, using different legal instruments and evidentiary thresholds, is itself a structural observation about how counter-terrorism-financing sanctions regimes operate in parallel rather than in unison.

Gold-transit architecture running through Kenya is also relevant to this domain's enabler-jurisdiction lens even though it is developed more fully under conflict-finance framing elsewhere in this brief: declared 2023 gold exports of 672kg against an estimated 2 or more tonnes per year of actual DRC- and South Sudan-sourced smuggled flow demonstrates that the sanctions and monitoring architecture applied to Kenya has not yet closed the underlying detection gap in the precious-metals trade chain that a robust enabler-jurisdiction framework would be expected to constrain.

Outlook

The FATF October 2026 Plenary review of Kenya's action plan is the pivotal near-term marker for this domain; it will determine whether Kenya remains grey-listed, faces an on-site verification visit, or is escalated, though this is an uncertain-direction outcome rather than a predetermined one. The EU Commission's next high-risk third country list update, expected around year-end 2026, will indicate whether the pattern of retaining Kenya while delisting regional peers continues into 2027. Absent a confirmed shift in OFAC's posture toward a country-level measure, the three-regime divergence identified this cycle is likely to persist as a structural rather than transitional feature of Kenya's sanctions-architecture profile.

Kenya's beneficial-ownership architecture presents a persistent structural gap rather than a single unresolved item. Every FATF and ESAAMLG statement issued between February 2024 and June 2026 has repeated, unchanged, that Kenya has designated no authority responsible for trust regulation or beneficial-ownership verification — an action-plan item open since the 2022 Mutual Evaluation. That absence sits alongside a second, related constraint: Kenya's company beneficial-ownership register, operational since 2020 with a disclosure threshold above 10% ownership, remains non-public, restricting the kind of third-party civil-society and journalistic scrutiny that might otherwise supplement Kenya's under-resourced state supervisory capacity.

The practical consequence of that combined gap is visible in the continuing use of layered corporate structures to preserve legacy corruption proceeds. OFAC's 9 December 2024 Global Magnitsky designation of Kamlesh Mansukhlal Damji Pattni, together with associated Kenya, UAE and Zimbabwe shell-network entities, evidences the continued use of layered corporate vehicles to hold and obscure proceeds of the 1990s Goldenberg fraud scheme, decades after the underlying conduct occurred. Without a designated trust-regulation authority and without public beneficial-ownership disclosure, structures of this kind face limited external verification pressure beyond the targeted sanctions actions of foreign regulators.

Not every signal in this domain points toward enablement. EACC, working with the UK National Crime Agency through the International Anti-Corruption Coordination Centre, concluded the Migori County procurement-embezzlement case (2013–2017) in December 2025, recovering KES 235.6 million (approximately USD 1.8 million) via out-of-court settlement. This demonstrates a functioning cross-border mutual legal assistance channel operating effectively within the current framework, notwithstanding the much larger scale of unresolved historic county-level corruption exposure that this single case leaves untouched.

As a standing structural backdrop against which any EU-linked beneficial-ownership signal in this domain should be read, the EU AML Package now comprises three distinct instruments operating on different timetables and through different mechanisms: the AML Regulation (AMLR, Regulation (EU) 2024/1624), which is directly applicable across EU Member States without national transposition; the sixth Anti-Money Laundering Directive (6AMLD, Directive (EU) 2024/1640), which each Member State transposes into domestic law individually; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and defines its perimeter for direct and indirect supervision of obliged entities. This architecture is shifting EU-level AML/BO supervision from a purely national-authority model toward a hybrid regime in which AMLA directly supervises a defined set of high-risk cross-border entities while indirect supervision continues to run through national authorities under harmonised standards. Kenya itself sits outside this perimeter as a non-EEA third country; its sole interface with the EU AML Package is the high-risk-third-country delegated-act mechanism under the predecessor AMLD4 framework, distinct from the AMLR/6AMLD/AMLA architecture applicable to EU Member States, and 6AMLD transposition-status tracking is accordingly not applicable to Kenya.

Outlook

Designation of a Kenyan trust-regulation and beneficial-ownership verification authority remains a prerequisite for FATF delisting and is treated here as a possible-confidence, year-band horizon item; the interpreter identifies this as a proposed rather than enacted reform absent primary confirmation of any specific bill's enactment this cycle. No reform roadmap for making Kenya's beneficial-ownership register publicly accessible has been identified in the sources reviewed this cycle, leaving the transparency gap open-ended for now. Within the EU, AMLA's supervisory perimeter continues to build out for Member States and does not extend to Kenya directly, but the EU's own periodic high-risk-third-country list update, expected around year-end 2026, remains the mechanism through which Kenya's EU-facing beneficial-ownership and due-diligence exposure will next be reassessed.

Kenya's core enabler-jurisdiction characteristic, confirmed at the 19 June 2026 FATF Plenary, is that risk-based AML/CFT supervision of financial institutions and designated non-financial businesses and professions remains inadequate — a persistent deficiency that FATF has continued to cite alongside all seven open action-plan items since the 23 February 2024 grey-listing. This is the structural condition underlying the more specific schemes documented elsewhere in this brief: the gold-transit architecture and the legacy PEP-layering pattern both depend on a supervisory environment in which DNFBP sectors, particularly precious-metals dealers and trust and company service providers, face limited scrutiny.

The persistence of this deficiency is notable precisely because it coexists with incremental technical-compliance progress. FATF's October 2025 Plenary recorded sensitisation activities, increased financial-intelligence-unit disseminations, and enhanced interagency terrorist-financing investigation cooperation at the border, and fifteen FATF Recommendations were re-rated upward in the 2024 Follow-Up Report. None of this technical progress has yet translated into the effectiveness-outcome improvement that would justify closing any of the seven action-plan items, including the core supervisory-adequacy item. This is itself an analytically significant pattern: a jurisdiction can accumulate technical-compliance credit while its underlying enforcement and supervisory effectiveness remains structurally unchanged, and Kenya's trajectory across six consecutive FATF statements illustrates exactly that divergence.

The absence of a designated trust-regulation and beneficial-ownership verification authority, examined in more depth under this monitor's beneficial-ownership domain, and the unreformed NPO regulatory framework both function as enabler-jurisdiction conditions in their own right — they define the legal and supervisory space within which professional facilitators and non-profit vehicles can be used without triggering proportionate scrutiny. Kenya's continued listing as an EU and UK high-risk third country, even as it retains this array of open structural gaps, reflects two external regulators' assessment that the enabler conditions have not yet been sufficiently addressed to warrant delisting or downgrading, notwithstanding OFAC's decision not to apply an equivalent country-level measure.

Outlook

The FATF October 2026 Plenary review will be the next formal assessment point for whether Kenya's technical-compliance progress has begun to produce effectiveness-outcome improvement sufficient to close any of the seven open action-plan items; this is an uncertain-direction, quarter-band horizon item rather than a predicted result. Absent a designated trust-regulation authority and absent revision of the NPO framework to a proportionate risk-based model, Kenya's core enabler-jurisdiction characteristics are likely to persist as the binding constraint on delisting into the next review cycle, independent of further incremental technical-compliance gains.

Kenya's role in this domain centres on a single, sharply quantified structural finding: declared 2023 gold exports of 672kg stand against an estimated actual smuggled flow of 2 or more tonnes per year, sourced from DRC and South Sudan mining zones, transiting through Kenya on its way to re-export. Bloomberg reporting, corroborated by OFAC's 2023 Africa Gold Advisory, documents Kenya's function as a consolidation and re-export point for gold moving out of conflict-affected mining zones with falsified or absent provenance documentation, exploiting weak DNFBP know-your-customer practices in the precious-metals trade chain.

Under an architecture-over-incident reading, the declared-versus-actual gap itself is the analytical finding, not any single seizure or interdiction. A roughly threefold-to-order-of-magnitude discrepancy between what is officially recorded and what industry estimates place as the actual physical flow indicates a detection capability that is functionally minimal at the point where conflict-sourced material enters the formal trade chain. Because the source material originates in DRC and South Sudan mining zones associated with ongoing conflict dynamics, this gap carries direct conflict-finance sourcing implications: revenue from gold moving through this corridor without accurate provenance documentation is, by construction, revenue whose ultimate beneficiaries and taxation status cannot be verified through the formal trade-documentation record.

This conflict-gold transit finding does not sit in isolation from Kenya's broader enabler-jurisdiction profile. It is a direct downstream consequence of the inadequate risk-based AML/CFT supervision of DNFBPs that FATF has confirmed as a persistent structural deficiency through the June 2026 Plenary; precious-metals dealers operating without proportionate scrutiny are precisely the conduit through which undeclared or under-declared gold volumes would be expected to move. The absence, in the reviewed corpus this cycle, of any aggregate financial-value estimate for the conflict-gold flow itself — as distinct from the volume estimate — leaves a quantification gap that limits assessment of this scheme's materiality in purely financial terms, even though its physical-volume materiality is well evidenced.

Outlook

No scheduled regulatory or enforcement review specific to Kenya's gold-trade supervision was identified in the horizon items collected this cycle; the closest relevant marker remains the FATF October 2026 Plenary review of Kenya's broader action plan, which includes the DNFBP supervisory-adequacy item underlying this scheme. Absent a dedicated trade-finance or precious-metals-sector reform initiative, the declared-versus-actual gold-export gap documented this cycle should be read as a standing structural condition rather than one likely to close in the near term.

Kenya's digital-asset posture this cycle shows the clearest positive trajectory of any domain in this baseline assessment, moving from an unsupervised environment toward a nascent statutory regulatory perimeter. The starting point for this trajectory is Kenya's 2023 government suspension of Worldcoin's biometric crypto-onboarding project, taken over data-protection and unlicensed-operation concerns; that suspension established the pre-framework baseline against which subsequent reform should be measured, and by the government's own account catalysed the legislative push that followed. FATF's October 2025 and February 2026 statements confirm that Kenya has since adopted a statutory legal framework for the licensing and supervision of virtual asset service providers — a structural regulatory-perimeter shift from an unsupervised environment vulnerable to layering and peer-to-peer laundering activity toward a defined licensing regime.

The framework's adoption, however, is a legislative milestone rather than an operational one. CBK and CMA operationalisation — covering exchange onboarding, licensing approvals, and supervisory examinations — is not yet complete as of this cycle. This gap between statutory adoption and operational rollout is itself analytically significant under an architecture-over-incident approach: a licensing framework that exists on paper but has not yet produced licensed, examined and supervised VASPs provides limited practical constraint on the laundering and layering risks the framework is designed to address. Rapid retail crypto adoption within what has historically been an unregulated environment, occurring ahead of full licensing-regime operationalisation, is consistent with continued exposure to layering and peer-to-peer laundering activity during this transition window.

This domain's trajectory also intersects with Kenya's broader enabler-jurisdiction profile. The same underlying supervisory-capacity constraints that FATF has flagged in relation to DNFBP and financial-institution supervision generally will bear directly on how effectively CBK and CMA are able to operationalise VASP licensing once the legal framework is formally activated; a jurisdiction confirmed to have inadequate risk-based AML/CFT supervision across its existing regulated sectors faces a nontrivial capacity challenge in standing up an entirely new supervisory function for virtual asset service providers.

Outlook

CBK and CMA operational rollout of the VASP licensing regime, expected around year-end 2026, is the key marker that will determine whether Kenya's crypto sector shifts from a nascent legal framework to a genuinely supervised environment; this is treated as an improving-direction but year-band uncertain horizon item. The primary open question for this domain going forward is whether operationalisation proceeds at a pace and depth sufficient to close the gap between statutory adoption and effective supervision before the transition window produces material laundering exposure through the retail-adoption channel.

No Kenya-specific RegTech, AI/ML transaction-monitoring, perpetual-KYC, or agentic-compliance development was identified in the research corpus reviewed this cycle. The CBK/CMA build-out of supervisory capacity for the newly adopted VASP licensing framework is a regulatory-perimeter development properly tracked under this monitor's crypto and digital-assets domain rather than a compliance-technology posture shift in its own right; it reflects a regulator building supervisory authority and process, not an institution or vendor adopting new compliance technology or active-defence capability. Kenya's confirmed structural deficiency in risk-based AML/CFT supervision of financial institutions and DNFBPs, cited consistently by FATF through the June 2026 Plenary, implies a plausible unmet demand for compliance-technology adoption within Kenya's regulated sector, but no evidence establishing actual adoption, procurement, or deployment of such technology was collected this cycle.

Outlook

This domain remains on watch status with no change in trajectory. Future cycles should specifically monitor whether CBK/CMA supervisory operationalisation for VASPs, once underway, generates any parallel compliance-technology adoption signal among Kenya-regulated obliged entities, and whether Kenya's persistent DNFBP supervisory gap prompts any vendor-side or institution-side active-defence development reportable under this domain.