What Happens to Your Money at a Kenyan Forex Broker or Crypto Exchange (2026)

Your deposit does not sit in your trading account

The balance on your trading platform is a number in a database. It tells you what the broker says it owes you. It does not tell you where the money is, who is holding it, or what happens to it if the company behind the platform stops answering emails.

For most people that distinction never matters. It matters enormously on the one day it does. And in Kenya the answer is genuinely different depending on whether you are trading currency pairs with a licensed forex broker, holding coins on an exchange, or dealing with an offshore platform that has no Kenyan licence at all.

This is what the law actually says — not what the marketing says.

Where your money sits at a CMA-licensed forex broker

The Capital Markets (Online Foreign Exchange Trading) Regulations, 2017 are unusually direct about client money. Regulation 23(1) requires a licensed broker to:

• "maintain strict segregation between its own funds and every individual client's funds without any co-mingling between own funds and clients' funds";
• "open a segregated clients' account with a bank licensed under the Banking Act"; and
• "ensure that all deposits and withdrawals by the clients are only made through the individual client's accounts established under paragraph (b)".

Three things follow from that, and they are worth spelling out.

Your money is meant to be at a Kenyan bank, not at the broker. The segregated account has to be at a bank licensed under the Banking Act. The broker is a custodian of that balance, not the owner of it.

The broker is not allowed to trade with it. Co-mingling is prohibited outright. Client money used to fund the broker's own positions, cover its own margin, or pay its own bills is a breach of the regulation, not a grey area.

The paper trail is checked daily. Regulation 23(2) requires "daily reconciliations between the clients' account maintained at the designated bank and individual clients' account ledgers maintained by the broker or money manager". A shortfall is supposed to surface within a day, not at the annual audit.

Regulation 23(3) adds a rule that quietly kills a whole family of scams: a broker "shall not accept cash from, or pay cash to, a client for any transaction". If someone licensed asks you to hand over cash, or to pay an individual's M-Pesa number rather than the broker's own account, that is not a shortcut. It is a signal. Our guide to funding a forex account by M-Pesa walks through what a legitimate deposit path looks like.

What the licence itself is buying you

A licence is not a rubber stamp. Regulation 5(1)(f) sets minimum paid-up share capital by category: fifty million shillings for a dealing broker, thirty million shillings for a non-dealing broker, and ten million shillings for a money manager. That capital is the buffer between an operational loss and your balance.

The difference between dealing and non-dealing matters more than most people realise. A dealing broker can take the other side of your trade — when you lose, it can be the counterparty that gains. A non-dealing broker routes your order to the market and earns from spread or commission. Neither is dishonest by definition, but they are structurally different businesses, which is exactly why the capital requirement is higher for the one holding market risk. The CMA-licensed broker register shows which category each licensee holds.

Before an account is opened at all, regulation 22 requires the broker to have furnished you with "a separate written risk disclosure statement", received your signed and dated acknowledgement that you received and understood it, and executed a written agreement with you. If you were onboarded in four minutes with no risk statement and no agreement, something was skipped.

Licensees also pay to stay licensed: an application fee of KSh 2,500, and annual fees of KSh 250,000 for a dealing broker or KSh 100,000 for a non-dealing broker or money manager, plus an annual charge set at 3% of gross trading revenue under regulation 25A. Small numbers in themselves, but they mean the regulator has a live, funded relationship with every licensee — and a register that is actually maintained.

One protection is narrower than it sounds. Regulation 17 requires a broker to "determine and obtain adequate professional indemnity insurance for its key personnel". That is cover for the conduct of individuals. It is not an insurance policy over your deposit, and it should not be read as one.

The protection Kenya does not give forex clients

Here is the part that is missing from almost every article on this subject, and it is the most important section on this page.

The Capital Markets Act (Cap 485A) establishes an Investor Compensation Fund at section 18, for "compensation to investors who suffer pecuniary loss resulting from the failure of a licensed stockbroker or dealer to meet his contractual obligations". That is a real safety net — for the people it covers.

The Act defines a stockbroker as a person who carries on the business of buying or selling securities as an agent for investors in return for a commission, and a dealer as a person who carries on the business of buying, selling, dealing, trading, underwriting or retailing of securities. Both definitions turn on securities. An online forex broker deals in currency pairs. And the 2017 online forex regulations — which run to detailed rules on capital, segregation, leverage and disclosure — contain no compensation-fund provision of any kind.

We are not going to tell you that forex clients are covered, and we are not going to tell you they are excluded. What we can tell you is that the coverage is not obvious from the face of the legislation, that no aggregator repeating a confident answer has shown its working, and that this is a question worth putting to the CMA in writing before you fund an account, not after a broker fails. Ask it plainly: if this licensee fails owing me money, can I claim from the Investor Compensation Fund? Keep the reply.

Regulation 14 is what does exist: even after a licence is suspended or revoked, the broker "shall be responsible for clearing all its outstanding obligations up to the date of the revocation or suspension". An obligation to pay is not the same as a fund that pays when the company cannot. That gap is the whole point.

There is a related question worth asking your broker directly. Your money sits in a pooled segregated account at a Kenyan bank, and the Kenya Deposit Insurance Corporation covers KSh 500,000 per depositor per bank if that bank fails. Whether that limit applies once to the pooled account or separately to each underlying client is not something we could establish from a primary source — so ask, rather than assume the generous answer.

Money you can lose that you never deposited

Regulation 19(1) permits leverage "not exceeding four hundred times that of the client's deposit", and regulation 19(2) lets the Authority revise that ceiling by circular "to stabilize volatility in global and local currencies or for investor protection". Four hundred times is an extraordinarily high ceiling by global standards, and it is a ceiling, not a recommendation.

At that gearing, a 0.25% move against you wipes out the deposit backing the position. This is arithmetic, not pessimism, and we work it through properly in leverage and margin explained.

Regulation 16(5)(j) requires brokers to adopt "risk-management procedures to deal with stop losses, no negative accounts, double lock limited risk accounts, margin call and close out procedures". "No negative accounts" is a required procedure the broker must have — read your client agreement to see what it actually promises you, because a required internal procedure and a contractual guarantee that you can never owe the broker money are not the same thing.

Crypto runs on a newer, separate regime

Digital assets are not covered by the forex regulations at all. They fall under the Virtual Asset Service Providers Act, 2025 (Act No. 20 of 2025), which was assented to on 15 October 2025 and commenced on 4 November 2025, with regulations gazetted in 2026 to operationalise licensing.

On client assets, the Act is in one respect stronger than the forex rules. Section 31 requires a licence holder to "maintain, in its custody, a sufficient amount of each type of virtual asset in order to meet the licence holder's obligations to the customer", to "segregate holdings of virtual assets on behalf of their clients from their own holdings or property, and from any other non-client virtual assets", and — the clause that matters most — to "not subject the virtual asset to the claim of creditors of the licence holder".

That last provision is precisely what was absent in the international exchange collapses of recent years, where customer coins were treated as company assets and customers joined the queue of unsecured creditors. Kenya's Act says the opposite on paper.

Two cautions. First, the Act establishes no compensation fund either — the protection is segregation, not insurance. Second, a rule only binds a licensee. The First Schedule splits supervision: virtual asset exchanges, broker services, investment advice, asset management, token offerings and tokenisation sit with the CMA; custodial wallet services, payment processors and stablecoin issuance sit with the CBK. Operating without authorisation is a criminal offence — section 40(3) provides for a fine of up to KSh 10 million or five years' imprisonment for an individual, and up to KSh 25 million for a company. Before you hold a meaningful balance anywhere, check the relevant register. Our guide to where crypto stands legally in Kenya covers the regime, wallet security covers the risks no regulator can remove, and stablecoins explained covers the assets most Kenyans actually hold.

On tax: the treatment of digital-asset gains has changed, and we could not establish the current rate from a KRA primary source. Confirm your position with the KRA directly rather than relying on any figure you read online, including a confident one.

Offshore platforms: what you are agreeing to

Plenty of Kenyans trade with brokers licensed elsewhere, or nowhere. That is a choice, not automatically a mistake — but be clear about what changes.

None of the above applies. No Kenyan segregation rule, no Kenyan capital floor, no Kenyan register to check, and no Kenyan regulator that can compel anything. Your remedy for a dispute is whatever the client agreement says, usually arbitration in a jurisdiction you will never travel to, in a currency and language chosen by the other side. Recovering money from an entity with no Kenyan presence is not a process with a realistic timeline; it is usually not a process at all.

The tell is rarely the platform's polish. It is the payment instruction. Deposits routed to an individual's M-Pesa or personal bank account, "account managers" who trade on your behalf for a share of profits, guaranteed returns, and pressure to top up to "unlock" a withdrawal are the recurring patterns — set out in full in how to spot forex and crypto scams and is forex trading legal in Kenya.

Ten minutes that are worth more than any review

Before you fund anything:

1. Find the entity's legal name — not the brand — in the client agreement or the website footer.
2. Check it on the regulator's own register. CMA for forex brokers, money managers, virtual asset exchanges and crypto brokers; CBK for custodial wallets, payment processors and stablecoin issuance. A licence claimed on a website is not a licence found on a register.
3. Note the licence category. Dealing or non-dealing changes who is on the other side of your trade.
4. Read regulation 23 back to them. Ask which licensed Kenyan bank holds the segregated client account, and confirm deposits go there — never to an individual.
5. Get the risk disclosure statement required by regulation 22, in writing, before signing.
6. Ask the compensation question in writing and keep the answer.
7. Test a withdrawal early. Deposit a small amount, trade nothing, withdraw it. A platform that makes deposits instant and withdrawals difficult has told you what it is.

You can compare licensed options on our forex brokers and crypto exchanges pages — but do the register check yourself regardless of where you found the name.

Frequently asked questions

If my licensed forex broker collapses, do I get my money back? The segregated account is designed so that client funds are identifiable and are not the broker's property, which is a materially better position than being an unsecured creditor. But there is no compensation fund written into the online forex regulations, and the Investor Compensation Fund in the Capital Markets Act is framed around stockbrokers and dealers in securities. Ask the CMA in writing whether a given licensee's clients are covered, before you deposit.

Is my trading balance protected by KDIC? KDIC protects deposits at licensed Kenyan banks up to KSh 500,000 per depositor per bank. Your broker's segregated client account is at such a bank, but whether that limit is applied to the pooled account or to each underlying client is not something we could confirm from a primary source. Put the question to your broker and get the answer in writing.

Can a broker really offer 400 times leverage legally? Yes. Regulation 19(1) sets 400x as the ceiling, and the CMA may revise it by circular. Legal and advisable are different things — at that gearing a fraction of a percent moving against you can end the position.

Are crypto exchanges regulated in Kenya now? The Virtual Asset Service Providers Act, 2025 commenced on 4 November 2025 and created a licensing regime, with regulations gazetted in 2026. Exchanges and broker services are supervised by the CMA; custodial wallets, payment processors and stablecoin issuers by the CBK. Check the relevant register for the specific platform rather than assuming the regime covers it.

Does the VASP Act protect my coins if the exchange fails? Section 31 requires a licensee to segregate client virtual assets from its own and to not subject them to the claims of its creditors — the protection absent in the big international collapses. There is no compensation fund, though, and the protection only binds licensed platforms.

What if I already deposited with an unlicensed offshore platform? Try a full withdrawal now rather than after a further deposit, document every communication, and stop responding to requests for more money to "release" a balance — that pattern is the scam, not the solution. Report the matter to the CMA and to the DCI, and treat any "recovery agent" who contacts you afterwards as a second attempt at the same fraud.

Reviewed 4 September 2026. Figures and provisions are quoted from the Capital Markets (Online Foreign Exchange Trading) Regulations 2017, the Capital Markets Act (Cap 485A) and the Virtual Asset Service Providers Act 2025. Licence registers and regulatory positions change — verify with the CMA, CBK or KRA before acting. This is general information, not financial advice.