How to Check If a Digital Lender Is Licensed by CBK

More than 500 loan apps were pulled from the Google Play Store in Kenya in a single enforcement wave, after operating without a licence. By one industry count, of roughly 800 lending apps that have applied for a Central Bank of Kenya licence since digital lending took off, only around a quarter actually made it through. If you've ever downloaded a loan app on a friend's recommendation without checking whether it's actually regulated, here's how to find out in under two minutes.

Why This Actually Matters

An unlicensed lender isn't just operating in a legal grey area, it typically means none of Kenya's borrower protections apply to you. Licensed Digital Credit Providers are legally required to disclose the full Total Cost of Credit upfront, give borrowers a 24-hour cooling-off period, and are barred from harassment tactics like messaging everyone in your phone contacts over a missed payment. Unlicensed lenders routinely ignore all of it, and because they're not authorised to report to Kenya's credit bureaus, paying them back diligently won't even help build the credit history we covered in How to Check Your CRB Status in Kenya.

How to Actually Verify a Lender

The Central Bank of Kenya maintains the only source that matters: its official register of licensed Digital Credit Providers, published on centralbank.go.ke. Search the register for the lender's exact registered company name, not just the app's marketing name, since scam apps frequently mimic the branding of legitimate ones. A genuinely licensed lender will also display its official DCP licence number directly inside the app or on its website, typically formatted like DCP/01/2021. If you can't find that number anywhere, or the app avoids naming its actual registered company, treat that as a serious warning sign on its own.

Kenya's licensed lender count has grown quickly as CBK works through its backlog, from 195 providers in February 2026 to 227 by April and roughly 252 by July, so a list that's more than a few months old shouldn't be trusted as current. Always check the live CBK register rather than a saved screenshot or an old blog post, this one included.

How Kenya's Licensing System Actually Came About

Digital lending in Kenya grew from roughly 10 apps in 2016 to well over 800 by 2026, largely unregulated for most of that period. The Central Bank of Kenya only gained direct authority over digital lenders through the Central Bank of Kenya (Amendment) Act 2021, followed by the Digital Credit Providers Regulations 2022, which created the licensing framework and began issuing the first licences in September 2022. Before that, digital lenders operated with essentially no oversight, no rate caps, no data protection obligations, no restrictions on debt collection tactics, which is exactly why so many of the harassment and predatory-lending horror stories Kenyans still talk about date from that earlier period.

That gap is also why so many unlicensed lenders remain in circulation years later. In 2020, CBK formally barred 62 digital lenders from accessing Kenya's credit reference bureaus over licensing violations, and many of those same names have continued operating illegally in the years since, simply outside the formal system rather than shutting down.

What "Licensed" Actually Verifies

A CBK licence isn't just a formality, it comes with real, enforceable obligations that unlicensed apps simply ignore. Since April 2026, every licensed Digital Credit Provider has been required to complete full identity verification before disbursing any loan: a valid national ID check, a live selfie, and a biometric face match against government records, part of a broader anti-money laundering framework under Kenya's Proceeds of Crime and Anti-Money Laundering Act. Licensed lenders must also register on the Financial Reporting Centre's goAML platform, file suspicious transaction reports within two to three business days when required, and submit an annual compliance report to CBK by 31 January.

None of that is optional paperwork. It's the practical difference between a lender that can be held accountable when something goes wrong and one that can simply disappear, rebrand, and relaunch under a new name the moment regulators or angry borrowers start paying attention.

Names Worth Recognising, and Why That's Not Enough on Its Own

Some of Kenya's most established licensed lenders include Tala, M-KOPA, Zenka, Jumo Kenya, Pezesha, Letshego Kenya, and 4G Capital, alongside bank-linked products like M-Shwari and KCB M-Pesa, which sit under separate banking regulations rather than the DCP licensing regime specifically. Recognising a familiar name is a reasonable first signal, but it isn't a substitute for actually checking, scam operators regularly clone the branding, app icon, and even the name of legitimate lenders closely enough to fool a quick glance, sometimes right down to a nearly identical app store listing.

This is also why relying on a list published even a few months ago is risky. CBK continues to licence new providers in waves throughout the year, and it also suspends or revokes licences from providers that breach the rules, meaning a name that appears "licensed" on last year's blog post could easily have lost that status since. The only reliable source is a live check against CBK's current register at the moment you're actually about to borrow.

Know Your Rights as a Borrower

Kenyan digital lending regulation isn't just about keeping bad actors out, it also spells out specific protections every borrower is entitled to once dealing with a licensed provider. You have the right to see the full loan terms, including the Total Cost of Credit, clearly stated before you accept anything. You're entitled to a 24-hour cooling-off period after taking a loan, during which you can cancel without penalty. You're protected from unfair or abusive debt collection practices, including the phonebook-shaming tactics that made headlines in Kenya's early, unregulated lending years and are now explicitly prohibited. And if a licensed lender violates any of this, you can lodge a formal complaint directly with CBK.

Red Flags Worth Knowing

A few warning signs show up consistently across unlicensed lenders operating in Kenya: demanding an upfront "processing fee" before disbursing any loan, requesting access to your entire phone contact list as a condition of borrowing, refusing to state a licence number when asked directly, and charging interest rates that work out to well above 200% annualised. Legitimate, CBK-licensed lenders, the kind we compared directly in Tala vs. Branch vs. M-Shwari vs. Fuliza: Which Kenyan Loan App Is Actually Cheapest?, publish their rates clearly and never require blanket access to your contacts as a loan condition.

If You're Already Dealing With an Unlicensed Lender

Stop making payments through the app immediately and report the lender directly to CBK's Consumer Protection Desk via email at dcps@centralbank.go.ke. If the lender has been harassing your contacts or misusing your personal data, you can also file a complaint with the Office of the Data Protection Commissioner, and Kenyan borrowers have successfully won damages in civil court under the Consumer Protection Act for exactly this kind of harassment.

The Bottom Line

Checking a lender's licence status takes less time than filling out the loan application itself. Before you borrow from any app that isn't already a household name, search its exact company name on CBK's official register first, not after a payment's already gone missing and your contacts start getting messages about it.

Read next: How to Check Your CRB Status in Kenya