What Is CBK Digital Credit Provider Regulation?
Before 2022, borrowing from a mobile loan app in Kenya was a lot like stepping into a market with no price tags — you only discovered the real cost after you’d already committed. Dozens of apps, many operating out of anonymous offshore entities, lent freely with no legal accountability: interest rates that ballooned overnight, debt collectors who texted your employer, and CRB listings that came without warning.
Parliament decided enough was enough. The Central Bank of Kenya (Amendment) Act, 2021 expanded the CBK’s mandate to cover non-bank digital credit providers for the first time. The Central Bank of Kenya (Digital Credit Providers) Regulations, 2022 — published in the Kenya Gazette — then set out the precise rules every digital lender must follow: how they apply for a licence, how they disclose fees, how they collect debts, and how they handle your personal data.
Simply put, if a lender wants to legally offer mobile credit in Kenya today, they must first receive a DCP (Digital Credit Provider) licence from the CBK. Operating without one is a criminal offence under Section 33F of the CBK Act.
The Central Bank of Kenya (CBK) is the primary regulator. Commercial bank products like M-Shwari, Fuliza, and KCB M-Pesa are separately governed by the Banking Act under CBK oversight — which means they carry equal legal protections for borrowers.
Why CBK Licensing Actually Matters to You
A licence isn’t a bureaucratic formality. It’s a legal contract between the lender and the Kenyan state — one that directly shapes your experience as a borrower. Here’s what changes the moment you borrow from a licensed versus unlicensed provider:
Interest rates exceeding 300% APR on some apps. Debt collectors texting employers and family members. CRB listings issued within days of a missed payment. No disclosed fee schedule before disbursement. No legal body to complain to.
Full fee disclosure before you accept a loan. A ban on accessing your contact list. A mandatory 30-day written warning before any CRB listing. The In Duplum rule capping total interest at 100% of the principal. A formal complaints channel directly with CBK.
The practical consequence? Borrowing from an unlicensed app still operating in the Kenyan market puts you outside the protection of every one of those rules. If things go wrong, you have no legal recourse. That’s why verifying licensing — before you tap “Apply” — is non-negotiable.
Your 6 Legal Rights as a Digital Borrower in Kenya
These aren’t suggestions. They are enforceable protections under Kenyan law that every licensed digital credit provider is legally obligated to uphold. If any lender violates them, you have grounds for a formal complaint and potential legal remedy.
Licensed lenders cannot legally request access to your phonebook, call logs, or messages to pressure repayment. Debt shaming contacts — your boss, family, or friends — is a criminal act.
Before you accept any loan, the app must display the total repayment amount, the interest rate or facility fee, all processing charges, and the exact due date. No hidden deductions after disbursement.
CBK DCP Regulations 2022 — Reg. 17
A licensed lender cannot list you on Metropol CRB or TransUnion Kenya without first sending you a written notice giving you 30 days to pay or negotiate a payment plan.
CBK DCP Regulations 2022 — Reg. 19
Total interest, fees, and penalties on any loan cannot legally exceed the original principal borrowed. If you borrowed KES 5,000, you can never owe more than KES 10,000 in total — even after months of default.
Kenyan Banking Law — In Duplum Doctrine
Every licensed lender must maintain an internal dispute resolution mechanism. If they fail to resolve your complaint within 30 days, you can escalate directly to the CBK Consumer Protection Department.
CBK DCP Regulations 2022 — Reg. 21
Your personal and financial data can only be collected for purposes you explicitly consented to. Any unlawful sharing or processing of your data — including selling it to third parties — is a violation of the Office of the Data Protection Commissioner (ODPC) regulations.
Data Protection Act 2019 — S.25
Top CBK-Licensed & Bank-Regulated Loan Apps in Kenya (2025)
The eight apps below are either licensed by the CBK under the DCP Regulations 2022 or operate as regulated products of a fully licensed Kenyan commercial bank — which carries equivalent legal protections. Rates and limits are indicative; always confirm the exact terms in-app before accepting any offer.
✓ CBK Licensed
One of Kenya’s most established mobile lenders. Tala uses alternative data to build your credit profile — meaning no payslip is needed. Funds land in M-Pesa within minutes of approval, and repeat borrowers unlock progressively higher limits over time.
4.1 / 5 · 200K+ reviews
✓ CBK Licensed
Branch stands out for its longer repayment windows — up to 12 months — and higher loan limits that grow with your repayment history. The AI-driven underwriting means experienced borrowers get some of the lowest rates in the market.
4.3 / 5 · 180K+ reviews
✓ Bank Regulated
Built directly into the M-Pesa ecosystem, M-Shwari combines a savings account with a credit facility. Your loan limit is based on your M-Pesa activity history. The 9% one-off facility fee is fixed — no compounding surprises. Accessible to any M-Pesa subscriber.
4.5 / 5 · Millions of users
✓ CBK Licensed
Zenka offers a compelling first-loan promotion — 0% interest on your first 7-day loan — making it a smart entry point for new borrowers. Its loan top-up and extension features are well-designed for borrowers who need repayment flexibility.
3.9 / 5 · 50K+ reviews
✓ Bank Regulated
A fully bank-backed product accessible via *334# or the KCB app. Because it’s a KCB Bank product, limits tend to be higher than standalone apps, and the fee structure is straightforward. Trusted by millions of M-Pesa users for over a decade.
4.2 / 5 · Millions of users
✓ Bank Regulated
Fuliza isn’t a traditional loan — it’s an M-Pesa overdraft that activates automatically when your balance falls short during a transaction. Repayment is auto-deducted the moment money hits your M-Pesa wallet. Convenient, but daily fees can accumulate quickly if left unpaid.
4.0 / 5 · Millions of users
✓ CBK Licensed
OKash operates on short 14-to-30-day cycles with fast disbursement to M-Pesa. It’s backed by the OPay Group — one of Africa’s largest fintech operators — which gives it technical depth but also means repayment expectations are fairly strict.
3.6 / 5 · 30K+ reviews
✓ Absa Bank Regulated
Timiza is Absa Bank’s fully digital financial platform — not just a loan product. Beyond credit, it offers savings accounts, insurance, and bill payments. For borrowers with thin credit histories, Timiza’s bank-backed underwriting can unlock limits that standalone apps won’t offer.
4.1 / 5 · 80K+ reviews
Use our Loanely App Finder to filter by loan amount, repayment term, and required documents. Or run any offer through the Kenya Loan Cost Calculator to see the true total repayment before you commit.
Official CBK Digital Credit Provider Registry
The table below lists registered Digital Credit Providers as published in the Kenya Gazette and updated via CBK public notices. Bank-regulated products appear separately because they operate under the Banking Act rather than the DCP Regulations — but carry equal or stronger consumer protections.
| Registered Entity (CBK) | Consumer Brand | Regulatory Type | Head Office | Max Loan | Status |
|---|---|---|---|---|---|
| Inventure Mobile Limited | Tala | DCP Licence | Nairobi | KES 50,000 | ✓ Licensed |
| Branch International Financial Services | Branch | DCP Licence | Nairobi | KES 300,000 | ✓ Licensed |
| Zenka Finance Limited | Zenka | DCP Licence | Nairobi | KES 30,000 | ✓ Licensed |
| EGoleaps Limited | OKash | DCP Licence | Nairobi | KES 50,000 | ✓ Licensed |
| Ceres Tech Limited | Ceres | DCP Licence | Nairobi | KES 50,000 | ✓ Licensed |
| Jijenge Credit Limited | Jijenge | DCP Licence | Nairobi | KES 200,000 | ✓ Licensed |
| Kwara Limited | Kwara | DCP Licence | Nairobi | Varies (SACCO) | ✓ Licensed |
| Absa Bank Kenya PLC | Timiza | Banking Act | Nairobi | KES 150,000 | ✓ Bank Regulated |
| NCBA Bank Kenya PLC & Safaricom | M-Shwari | Banking Act | Nairobi | KES 100,000 | ✓ Bank Regulated |
| NCBA Bank Kenya PLC & Safaricom | Fuliza M-Pesa | Banking Act | Nairobi | KES 70,000 | ✓ Bank Regulated |
| KCB Bank Kenya PLC & Safaricom | KCB M-Pesa | Banking Act | Nairobi | KES 50,000 | ✓ Bank Regulated |
Source: CBK DCP Registry & Kenya Gazette. Table is updated periodically. Always cross-check the official CBK list before borrowing.
Interest Rate Comparison: What Are You Actually Paying?
Nominal rates — the number you see advertised — can be deceptive. A “5% flat fee” on a 30-day loan translates to a 60% annual rate. The chart below shows approximate annualised cost (APR) for each lender, helping you compare apples to apples.
*APR estimates are indicative and based on typical short-term usage. Fuliza’s effective rate is high because daily fees apply even on tiny amounts held for short periods. Branch’s long-term product has the lowest effective APR. Use our Loan Cost Calculator to input your exact offer.
*Fuliza daily fee annualised assumes continuous daily balance.
A lender advertising “5% per month” sounds manageable. But on a KES 10,000 loan, that’s KES 500 in fees — and if you roll it over three times, you’re paying KES 1,500 extra. Use the Loanely Loan Calculator to see the real cost of any offer in seconds.
The CRB Listing Timeline: What Happens When You Miss a Payment
Missing a mobile loan payment doesn’t immediately destroy your credit score — but the sequence of events that follows moves faster than most borrowers realise. Here’s exactly what the law requires licensed lenders to do, and when.
Your repayment date passes. A licensed lender will typically send an in-app notification and an SMS reminder. Late fees, where disclosed upfront, begin accruing.
Licensed lenders are required to attempt contact and offer a payment plan before proceeding. This is also your window to negotiate a restructure or request an extension before things escalate.
Under CBK DCP Regulation 19, the lender must send a formal written notice (SMS, email, or letter) stating their intent to list you on a Credit Reference Bureau. You now have 30 days to respond, pay, or negotiate before any listing occurs.
If no resolution is reached, the lender submits your details to Metropol CRB or TransUnion Kenya. This affects your ability to access credit from banks, SACCOs, and other regulated lenders.
Once you pay in full, the lender must notify the CRB within 5 working days to update your status. You can obtain a clearance certificate from Metropol for KES 50 to confirm the update. If a lender delays removal, file a complaint with CBK.
Predatory unregulated apps have been known to list borrowers on third-party shaming databases — not official CRBs — within 24 hours of a missed payment, with zero prior notice. This is illegal but unenforceable against an entity that isn’t registered with any Kenyan authority. Another reason to only borrow from CBK-licensed lenders.
⚠️ Red Flags: 8 Signs a Loan App Is Predatory
Kenya’s app stores still host lenders that operate outside CBK oversight. Some are legitimate businesses awaiting licence approval; others are deliberately predatory. These are the warning signs to watch for before you install anything.
Any app that asks for “Read Contacts” or “Read Call Logs” during install is flagging its intent to use your phonebook for debt harassment.
If you can’t see the total repayment amount before tapping “Accept,” the lender is hiding something — legally and practically.
Unlicensed operators often list Singapore, Seychelles, or anonymous P.O. boxes as their address — deliberately outside Kenyan legal jurisdiction.
Any lender threatening CRB listing within 7 days of a missed payment is either unlicensed or lying — both are red flags requiring immediate complaint filing.
This is a violation of the Data Protection Act 2019, Section 72. Document the message and report it to the ODPC immediately.
“Pay KES 200 processing fee first, then we release your loan” is a classic advance-fee fraud pattern. Walk away.
If the entity name does not appear in the CBK’s official DCP list, lending to you from Kenya is technically illegal under the CBK Act.
Low ratings with recurring complaints about harassment, hidden fees, or unexplained deductions are real borrower experiences — not isolated incidents.
How to Verify Any Loan App Before Applying (5 Steps)
This takes less than 5 minutes and could save you from a predatory lending situation. Make it a habit before you borrow from any new app.
The brand name on the app (e.g., “QuickCash”) is not necessarily the legal name registered with CBK. Check the app’s Google Play page, the in-app “About” section, or the loan agreement for the registered company name. For example, Tala’s registered name is Inventure Mobile Limited.
Visit the CBK’s official Digital Credit Provider list and search for the registered entity name. If it’s not there, the lender is unlicensed. You can also check the Kenya Gazette for licensing notices.
Before installing, review the required permissions on the Google Play Store (scroll to “App permissions” on the app listing page). Legitimate lenders only need camera (for ID verification), storage, and SMS (for OTP). If you see Read Contacts or Read Call Logs — do not install.
Search the lender’s name on our Loanely App Directory. Each listed app includes verified licensing status, a summary of Play Store permissions, user-submitted reviews, and a direct link to the official app. Unlicensed apps are flagged with a warning banner.
Use the Loanely Loan Calculator to input the principal, rate, and term. Confirm the total repayment figure matches exactly what the app displays before you accept. Any discrepancy is a red flag and should be reported to the CBK Consumer Protection Department at cpd@centralbank.go.ke.
How to File an Official Complaint Against a Predatory Lender
If a lender has violated your rights — whether through contact harassment, undisclosed fees, an illegal CRB listing, or data misuse — you have three official channels available. Use all three simultaneously for the fastest resolution.
The primary regulator for all licensed DCP lenders. File a complaint if a lender violates DCP Regulations — hidden fees, contact harassment, premature CRB listing, or aggressive debt collection. The CBK targets a 30-day resolution timeline.
🌐 centralbank.go.ke
File here if an app accessed your contacts, shared your data without consent, or used your personal information beyond the purpose you agreed to. The ODPC can impose fines of up to KES 5 million on violating entities.
🌐 odpc.go.ke
File here for consumer protection violations — deceptive advertising, price manipulation, or unfair contract terms that disadvantage borrowers. The CAK enforces the Consumer Protection Act 2012.
🌐 cak.go.ke
Submit a lender report through our platform. Reports are reviewed by the Loanely editorial team, flagged in the App Directory for other borrowers, and — where warranted — escalated to CBK or ODPC on behalf of users.
Screenshot every message, save call logs, preserve your loan agreement screenshots, and record the exact dates of every communication from the lender. Regulators need a documented evidence trail to act. The stronger your evidence, the faster the resolution.
Frequently Asked Questions
Visit the CBK’s official Digital Credit Provider registry. Search the company’s registered name (not the app’s brand name — they often differ). You can also check our Loanely App Directory, which cross-references the CBK list and displays verified licensing status for every listed app.
No. Under Section 72 of the Data Protection Act 2019, accessing your contacts without explicit consent for a specified, lawful purpose is illegal. The CBK DCP Regulations 2022 further prohibit licensed lenders from using contact data for debt collection purposes. If an app requests this permission, refuse and report it to the ODPC.
The In Duplum Rule is a principle of Kenyan banking law that caps total interest, fees, and penalties at 100% of the original loan principal. If you borrowed KES 5,000, you can never legally owe more than KES 10,000 — even after months of default. No licensed lender can exceed this threshold. If they claim you owe more, dispute it formally with the CBK.
A negative CRB listing typically remains on your credit file for 5 years from the date of listing. However, once you settle the debt in full, the lender is required to update your status to “cleared” within 5 working days. You can get a clearance certificate from Metropol CRB or TransUnion Kenya to confirm your cleared status.
A DCP licence is issued by CBK specifically to non-bank digital credit providers under the DCP Regulations 2022 — companies like Tala, Branch, and Zenka. Bank-regulated products (M-Shwari, Fuliza, KCB M-Pesa, Timiza) are issued by commercial banks licensed under the Banking Act. Both carry strong consumer protections; bank products arguably carry stronger backing given the capital requirements imposed on banks.
On an annualised basis, Branch offers the lowest effective rates for long-term borrowers (up to 12 months), with rates as low as 2% per month on repeat loans. For short-term 30-day loans, Timiza (5% monthly) and KCB M-Pesa (8.64% per 30 days) are competitive. Always calculate total repayment using our Loan Calculator rather than comparing headline rates alone.
Technically yes — there is no legal prohibition. But licensed lenders share data with CRBs, so multiple active loans will be visible to any new lender you apply to and may result in lower limits or rejections. More critically, managing multiple high-interest short-term loans simultaneously is one of the most common pathways into a mobile loan debt spiral in Kenya. We strongly advise against it.
Document the messages immediately (screenshots with timestamps). Then file complaints simultaneously with the ODPC (data breach), the CBK at cpd@centralbank.go.ke (DCP regulation violation), and the Competition Authority of Kenya (consumer protection). Also submit a report on our Report a Lender page so other Kenyan borrowers are warned.
Ready to Borrow Safely?
Browse 50+ verified, CBK-licensed loan apps — with real rates, user reviews, and instant eligibility filters. No predatory apps. No surprises.