Kenya mobile money transaction monitoring sits at the intersection of two things the country is known for: heavy mobile money use and a financial intelligence regime that remains under international scrutiny. Kenya was placed on the FATF grey list in February 2024, and its Financial Reporting Centre has published typologies that include mobile money layering.
Payment service providers and mobile money operators are reporting institutions under the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA), supervised for AML purposes by the Central Bank of Kenya. This article sets out the instruments that apply and what effective monitoring needs to cover.
The framework providers work under
POCAMLA 2009 is the core statute. It establishes the Financial Reporting Centre (FRC) as Kenya's financial intelligence unit and obliges reporting institutions to apply customer due diligence, monitor transactions and report suspicious activity. The Central Bank of Kenya supervises banks, microfinance banks and payment service providers, and its August 2025 Guidance on Customer Due Diligence applies to payment service providers, money remittance providers, foreign exchange bureaus and non-deposit-taking credit providers, among others.
The CBK also publishes AML guidelines specifically for mobile money providers, covering matters such as the risk created by consumers holding multiple accounts without identity verification. Mobile money operators are licensed under the National Payment System framework, and their AML duties sit alongside those licence conditions.
Reporting expectations
Section 44(2) of POCAMLA, as amended by the Anti-Money Laundering and Combating of Terrorism Financing Laws (Amendment) Act, 2023, requires suspicious transactions to be reported to the FRC within two days after the suspicion arose, down from seven days under the earlier text. The same reforms raised the cash transaction reporting threshold from USD 10,000 to USD 15,000 or equivalent, and the Proceeds of Crime and Anti-Money Laundering Regulations, 2023 (Legal Notice 153 of 2023) set out the supporting requirements. Commentary reports that cash transaction reports are due by the end of the week in which the transaction occurred.
Record keeping is a further obligation. Providers should keep transaction and identity records for the period POCAMLA requires, commonly cited as at least seven years, and should be able to reconstruct an investigation from alert to decision.
Why mobile money needs its own monitoring logic
Mobile money activity differs from bank account activity in speed, size and pattern. Funds can move between a bank account and a wallet and onward in minutes, a common layering technique across East and West Africa, and the FRC's typologies for the Kenyan market include this pattern. Transactions are often small, frequent and agent-assisted, so rules designed for large, infrequent bank transfers will miss the signals that matter.
Effective monitoring therefore looks at velocity and pass-through behaviour, such as value entering and leaving a wallet within a short period, at agent-level patterns, at accounts sharing devices or identity data, and at the corridors between bank accounts and wallets. It should also be integrated with fraud controls, since SIM-swap and social engineering often precede laundering.
Monitoring in a grey-list context
Kenya's FATF status raises the stakes. FATF's plenary, which concluded on 30 October 2026, left Kenya on the list of jurisdictions under increased monitoring, and the next plenary is scheduled for 22 to 26 February 2027. Whatever the timetable, supervisors are likely to look for evidence that monitoring works, which means documented calibration, tested rules, complete case records and timely reporting.
Providers should rely on their own volume data and on CBK and FRC publications when sizing their risk. Practical Kenya mobile money transaction monitoring combines pass-through detection, agent analytics and a documented reporting trail.
