Africa's Crypto Regulatory Landscape in 2026: Kenya, Mauritius, South Africa, Nigeria

In roughly three years, Africa moved from a patchwork of central-bank cautions to a set of purpose-built virtual-asset statutes. Between late 2024 and mid-2026 alone, four countries the size of continents in economic terms - Kenya, Mauritius, South Africa and Nigeria - either passed comprehensive crypto laws or brought virtual assets into an existing financial-services perimeter. For any bank, licensed EMI, custodian or CASP looking at the continent, that means one thing: 'wait until the rules exist' is no longer the correct posture. The rules exist. They differ in structure, capital thresholds and who supervises what, and understanding those differences is the whole game. This memo maps the four regimes that matter, measured against MiCA and the EU E-Money Directive (EMD2) as the reference framework. It is deliberately comparative - the questions a bank must answer ("which licence?", "what capital?", "can a bank hold it or must we spin up a subsidiary?", "what happens to foreign stablecoins?") have different answers in Nairobi, Port Louis, Johannesburg and Lagos, and the differences are decisive.

The EU regime is the natural comparator because it is the only mature, in-force framework covering the full stack - service providers, stablecoins, e-money and the deposit-token carve-out. For a full breakdown see our MiCA CASP guide and state-of-the-market snapshot. In one page:

Kenya is the most consequential recent move on the continent. The Virtual Asset Service Providers Act, 2025 (Act No. 20) commenced on 4 November 2025, and its implementing VASP Regulations, 2026 (Legal Notice No. 134) were gazetted on 24 July 2026. In under a year, Kenya went from the 2015 "soft ban" on banks touching crypto to a fully articulated, FATF-recognised framework. Structurally, the regime is best understood as a MiCA-style activity-licensing regime bolted onto a dual regulator. Where MiCA vests a single CASP authorisation in one national competent authority, Kenya splits ten licensable activities between the Central Bank of Kenya (CBK) and the Capital Markets Authority (CMA) by function:

The 2026 Regulations set minimum paid-up capital by category. Kenya cut most thresholds sharply between the March 2026 draft and the July 2026 gazettal after industry pushback - a signal worth reading. Reported final figures (verify against LN 134): On stablecoins Kenya did not adopt MiCA's EMT/ART split. Instead it created a single stablecoin issuer licence, placed it with CBK, and - through CBK's stated "same function, same regulation" approach - is treating fiat-pegged stablecoins with the same economic logic as its existing e-money regime. The substantive rules map almost one-to-one onto MiCA's EMT requirements: full 1:1 reserve backing, at-par redemption within two working days, no interest to holders, bankruptcy-remote reserves, and a specific 30% minimum in segregated trust accounts at Kenyan banks. Two divergences matter: Kenya opens issuance to any licensed stablecoin issuer meeting the capital test (not restricted to banks/EMIs), and it imposes a foreign-stablecoin listing gate - an exchange may not list a stablecoin unless it is CBK-approved and issued by a licensed issuer, creating real delisting risk for USDT and USDC on Kenyan venues.

Mauritius is the most useful African precedent because it did what Kenya has now done, four years earlier, and because it is a FATF-compliant, off-grey-list jurisdiction (grey-listed February 2020, removed 21 October 2021). The Virtual Asset and Initial Token Offering Services Act 2021 (VAITOS) came into force on 7 February 2022, with the Financial Services Commission (FSC) as sole regulator - a cleaner, single-authority design than Kenya's dual model, and closer to MiCA's one-competent-authority structure. The most interesting design choice: the definition of "virtual asset" in VAITOS expressly excludes digital representations of fiat currencies. On a plain reading, a fiat-backed stablecoin therefore falls outside VAITOS entirely and would be analysed under the Bank of Mauritius' payments/e-money regime (National Payment Systems Act 2018). This is the opposite design choice to Kenya, which pulled stablecoins expressly into its VASP statute under CBK. Mauritius is separately piloting a retail CBDC "Digital Rupee", and - relevant for any cross-border structuring - is not just an alternative jurisdiction but a plausible parent-company or fund-vehicle jurisdiction for African crypto operations, given its financial-services centre status.

South Africa was the first African jurisdiction to move from cautions to a functioning licensing regime, and remains the most mature. In FSCA General Notice 1350 (19 October 2022) it declared crypto assets a "financial product" under the Financial Advisory and Intermediary Services Act (FAIS), bringing every crypto intermediary into a conduct-licensing net as a Crypto Asset Service Provider (CASP). As of January 2026 the FSCA reported 512 applications, roughly 300 approved - by far the largest licensed CASP population on the continent. On stablecoins, SARB and the FSCA issued a joint communication (June 2026) signalling they are unlikely to approve foreign-currency-pegged stablecoins (USDT/USDC) for domestic payments - a dollarization concern - while assessing rand-referenced stablecoins separately. SARB's draft e-money framework (November 2025) may pull fiat-referenced stablecoins into the "e-money" perimeter. The upshot: South Africa runs a dual conduct (FSCA/CASP) + payments/prudential (SARB) architecture, with a restrictive line on foreign stablecoins that Kenya's listing-gate echoes.

Nigeria's Investments and Securities Act 2025 gives statutory recognition of virtual assets as securities under SEC Nigeria. Its interim onboarding window is the Accelerated Regulatory Incubation Programme (ARIP), issued 21 June 2024, for VASPs and digital investment service providers pending full registration. Note the actual name is "Incubation," not "Incentive," as frequently misreported. The Central Bank of Nigeria reversed its February 2021 banking ban in December 2023, issuing guidelines that let banks service SEC-registered VASPs - the same ban-to-regulated-access arc as Kenya, two years earlier. Nigeria also runs the continent's most-quoted private stablecoin, cNGN (1:1 to the naira, issued by a licensed consortium in a CBN sandbox), which is distinct from the eNaira CBDC. The Africa Stablecoin Consortium behind cNGN brands itself pan-African with ambitions across Nigeria, Ghana, Kenya and Uganda - though cNGN itself is naira-denominated and Nigeria-regulated, so the "pan-African" claim is aspirational reach rather than a live multi-currency network today.

The consolidated view across the dimensions that actually decide strategy:

There is, as yet, no continental harmonised crypto rulebook. But there is a continent-wide payment infrastructure that materially changes the strategic map. The Pan-African Payment and Settlement System (PAPSS), operated by Afreximbank with the African Union and the AfCFTA Secretariat, lets African institutions clear and settle cross-border payments in local currencies rather than routing through offshore USD/EUR correspondents. Adoption has accelerated sharply: from roughly 19 countries and 150+ banks in late 2025 to about 28 countries, 190+ banks and 16 payment switches by mid-2026, with the Bank of Central African States (BEAC) joining in July 2026 to bring all six CEMAC states in. The Central Bank of Kenya is publicly supportive, positioning Nairobi as an East African hub. Two nuances matter for a bank. First, PAPSS is a conventional centralised settlement system, not a blockchain or tokenised network. Talk of a "pan-African digital currency" is explicitly exploratory and long-horizon, not committed policy. Second, PAPSS is increasingly framed as the regulated, central-bank-backed complement (and alternative) to stablecoins for intra-African settlement - which, combined with Kenya's stablecoin-reserve-in-local-banks rule, points to a genuine commercial opening for banks in reserve custody and settlement services rather than token issuance alone. This is a fundamentally different competitive dynamic than what we covered in cross-border payments: SWIFT vs blockchain - here the regulated rail is winning the intra-continental leg.

Kenya's AML/CFT baseline is the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA), supervised by the Financial Reporting Centre. The VASP Act 2025 and 2026 Regulations impose CDD/KYC, transaction monitoring, 7-year record-keeping and regulatory reporting directly on licensees - the standard FATF Recommendation 15 apparatus. One open technical point: commentary suggests POCAMLA may still need a consequential amendment to formally list VASPs as FRC reporting institutions - verify before relying on VASP-to-FRC reporting flows. On FATF status: Kenya was grey-listed in February 2024 and, as of the 13 February 2026 plenary, remains on the increased-monitoring list. The important nuance is that FATF's February 2026 statement expressly credits Kenya with "adopting a legal framework for the licensing and supervision of virtual asset service providers" - the VASP Act is counted as progress, not a gap. Remaining action-plan items are broader (risk-based supervision, STR filing, TFS, NPO oversight). Practically, grey-list status means enhanced correspondent-bank due-diligence expectations persist, but the crypto framework is a completed, FATF-recognised deliverable, and exit is being actively pursued. Regionally, ESAAMLG's Fintech First Follow-Up Report (September 2025) found FATF Recommendation 15 compliance across the region to be weak - only Mauritius and Namibia rated largely compliant, and only four members (Botswana, Mauritius, Namibia, Seychelles) had Travel-Rule legislation. Kenya was assessed non-compliant on R.15 with its AML/CFT framework not yet applied to VASPs - precisely the gap the 2025 Act and 2026 Regulations are designed to close.

Five moves that follow from the analysis above, in order of decisiveness:

These are the points where primary texts are silent, sources conflict, or the fast-moving 2026 Regulations should be read line-by-line. Ranked by decision-weight for a bank entering the market:

Kenya - primary: Virtual Asset Service Providers Act 2025 (Kenya Law) · CBK VASP Act commencement notice · Draft VASP Regulations 2026 · CBK E-Money Regulations 2013 · IMF Technical Assistance Report: Kenya Crypto Regulation (2025) Kenya - analysis: TechCabal: Kenya gazettes VASP Regulations 2026 · Business Daily: Treasury cuts crypto capital limits · TechCabal: offshore stablecoin delisting risk Mauritius: VAITOS Act text · FSC VAITOS FAQ · FSC Capital and Other Financial Requirements Rules 2022 South Africa & Nigeria: DLA Piper: FSCA update on CASP licensing (Jan 2026) · SARB/FSCA Joint Communication on crypto assets (June 2026) · SEC Nigeria ARIP Framework FATF & regional: FATF Jurisdictions under Increased Monitoring (Feb 2026) · ESAAMLG Fintech First Follow-Up Report (Sep 2025) · Afreximbank: BEAC joins PAPSS (Jul 2026) · African Business: PAPSS network expands (Nov 2025)