If you are choosing between an offshore domicile and a Kenyan company for your crypto business, the single most important rule is this: serving Kenyan users does not switch off Kenyan law. The Virtual Asset Service Providers Act, 2025 reaches any business that carries on, purports to carry on, or holds itself out as carrying on virtual asset services “in or from Kenya”, regardless of where the company is incorporated. So the real question is not “Kenya or offshore”. It is where you incorporate and hold capital, and what you still owe the Kenyan regulators because you are touching Kenyan customers. A Dubai, Seychelles, BVI or Mauritius entity can be the right vehicle for tax, banking or multi-jurisdiction reach, but it cannot exempt you from a Kenyan licence once your platform onboards or markets to Kenyan users. Offshore is a structuring tool, not a compliance escape hatch.

Short answer

This is a spoke. For the full Kenyan licensing framework (the eleven regulated activities, the dual CBK and CMA regime, the application process and the draft Regulations), read the pillar: VASP licensing in Kenya.

Does incorporating offshore exempt me from Kenyan crypto law?

No, and this is where most founders get the analysis wrong.

The VASP Act applies by activity and by reach, not by the location of the company register. Section 8(2) provides that no person may “carry on, or purport to carry on, the business of virtual asset services, or hold itself out as carrying on that business in or from Kenya” without a licence. “In Kenya” catches a platform physically operated here. The “from Kenya” and holding-out limbs catch a platform that markets to, onboards or processes for Kenyan users even if every server and director sits in Dubai or Tortola. So a BVI exchange with a Swahili landing page, M-Pesa on and off ramps and Kenyan KYC fields is “purporting to carry on” virtual asset services in or from Kenya. The BVI incorporation is irrelevant. The company is in scope.

The penalty band is the same offshore or not: under section 40(3), a company faces a fine of up to KES 25,000,000 and an individual up to KES 10,000,000 or five years’ imprisonment or both. Section 41 then pulls in any director, partner or senior officer who knowingly authorised, permitted or aided the contravention. Negligence alone is not enough; knowledge plus one of those acts is. A founder who deliberately structures offshore to dodge the licence while chasing Kenyan users is squarely inside that “knowingly” hook. See the penalties for operating an unlicensed VASP.

Can a foreign company hold a Kenyan VASP licence?

Yes, but on conditions that kill the pure-offshore model.

Section 8(1) restricts eligibility to “a company limited by shares registered under the Companies Act or a foreign company limited by shares and registered under the Companies Act (Cap. 486)”. So your Dubai or Mauritius parent can apply, but only after registering as a foreign company in Kenya. A company with no Kenyan registration cannot hold the licence, and sole proprietorships, partnerships, LLPs and unlimited companies cannot apply in any form.

Registration alone is not the end of it. The Act layers on substance requirements a shell offshore structure does not meet:

So even a founder who wants an offshore holding company for tax or fundraising reasons will, to serve Kenyan users lawfully, need a Kenyan-registered operating entity with a real office, local directors and segregated custody. The offshore parent sits above that; it does not replace it. See how to register a crypto company in Kenya.

What are the common offshore domiciles, and what is each good for?

This is general structuring guidance, not Kenyan primary law and not legal advice on any foreign regime. Rules in these jurisdictions change quickly, so confirm the current position with local counsel.

The takeaway: each is good for something specific, but none is good for the one thing founders most often want, making the Kenyan licence go away when the users are Kenyan.

Where exactly does Kenyan law still reach an offshore crypto business?

Three Kenyan regimes can bite an offshore-incorporated crypto business that touches Kenyan users, and incorporation elsewhere switches off none of them.

Kenyan law follows the Kenyan user, not the company register.

What are the real limits of regulatory arbitrage here?

Regulatory arbitrage, routing your business through the most permissive jurisdiction, has hard limits when your customers sit in a country that has legislated.

Legitimate arbitrage chooses a domicile for genuine tax, capital, treaty or non-Kenyan-market reasons while separately holding the Kenyan licence for the Kenyan-facing operation. Routing Kenyan users through an offshore shell to avoid it is unlicensed operation with extra steps.

So what is the honest decision tree?

Work through it in order.

  1. Who are your users? If they are in or from Kenya, you need a Kenyan licence pathway once the channel opens, full stop, and offshore incorporation does not remove this. If your users are genuinely non-Kenyan, the Kenyan VASP Act may not reach you and the question becomes a pure foreign-jurisdiction one.
  2. Can you be licensed in Kenya today? Not yet. The Regulations are still in draft and no VASP has been licensed as of 30 June 2026. This affects timing, not the eventual obligation. See the VASP compliance deadline in Kenya for the 4 November 2026 cliff.
  3. Do you need an offshore layer at all? If the business is Kenyan users, revenue and banking, an offshore holding company often adds cost and scrutiny without clear benefit. The default for a Kenya-first business is a Kenyan operating company, with an offshore parent only for a real fundraising, tax or multi-market reason. If you do go offshore, use it for the holding company, token-issuance SPV or non-Kenyan operating entity, and keep a Kenyan-registered operating company (physical office, three natural-person directors, segregated custody) for the Kenyan-facing activity.
  4. Capital. The draft Kenyan figures are scaled by activity. They are DRAFT (proposed in the Virtual Asset Service Providers Regulations, 2026, published for comment 17 March 2026, not yet gazetted, may change): about KES 2.5 million for an investment adviser to KES 500 million for a stablecoin issuer, with separate paid-up capital per licensed activity. See crypto capital requirements in Kenya.

The structure follows the user base and the activity, not the other way around. For the activity-to-regulator mapping, see VASP licence categories in Kenya.

Frequently asked questions

If I incorporate in Dubai, do I still need a Kenyan VASP licence? If you serve users in or from Kenya, yes. Section 8(2) reaches activity targeting Kenya regardless of incorporation. A Dubai VARA or ADGM licence regulates your Dubai operation; it does not exempt your Kenyan-facing activity.

Can my offshore parent company apply for the Kenyan licence directly? Only if it registers as a foreign company limited by shares under the Companies Act (Cap. 486), under section 8(1), and it must still meet the substance requirements: a physical office in Kenya (s.19), three natural-person directors (s.20) and segregated client assets (s.31). A pure offshore shell cannot hold the licence.

Does the AML obligation apply to my offshore entity? If it is a VASP serving Kenya, yes. From 4 November 2025 every VASP is a reporting institution under POCAMLA with full CDD, monitoring, STR, CTR, MLRO and Financial Reporting Centre registration duties, independent of incorporation.

Can I just block Kenyan IP addresses and serve everyone else? Geo-blocking Kenyan users, declining Kenyan onboarding and not marketing to Kenya is a genuine way to stay outside “in or from Kenya”, but it has to be real, not cosmetic. A platform that geo-blocks while still accepting Kenyan KYC documents, M-Pesa funding or Swahili-language marketing is still holding itself out to Kenyan users.

Is the EU MiCA licence useful for a Kenya-focused business? Rarely, on its own. MiCA passports across the EU, not into Kenya. For a Kenyan or East African user base it is expensive credibility that does not address the Kenyan licensing obligation, and makes sense only if you genuinely target European users alongside your African base.

Get the structuring right before you incorporate

The structuring decision is reversible only at significant cost: assuming an offshore wrapper removes the Kenyan obligation is cheap to avoid at the planning stage and expensive to unwind after you have onboarded users and raised capital. We advise founders and foreign groups planning a Kenyan or Africa-facing crypto business across the full stack: the holding and operating structure, which activities need CBK versus CMA, the foreign-company registration, the AML and POCAMLA build-out, and the data protection registration. Book a consultation and we will scope it against your actual user base and activity. See also fintech lawyer Kenya.

Related reading: VASP licensing in Kenya, is cryptocurrency legal in Kenya, how to register a crypto company in Kenya, and VASP licence categories in Kenya.