Verify customers to the wallet tier
Match the level of verification to the account's limits and risk, and step it up when a customer moves to a higher tier.
Financial services / PSPs
Payment service providers, including e-money issuers, mobile money operators, payment gateways and remittance providers, are authorised and overseen by the CBK under the National Payment System framework. They carry customer, agent and merchant due-diligence obligations.
At a glance
Primary regulator
Central Bank of Kenya (CBK)
Who this covers
E-money issuers, mobile money operators, payment gateways and aggregators, money remittance providers and their agent networks.
Regulations that apply
CBK authorisation and oversight of payment service providers and payment systems.
Requirements for PSPs, e-money issuers and agents, including customer identification, agent due diligence and transaction limits.
Licensing and customer due diligence for remittance providers.
Customer due diligence, sanctions screening, transaction monitoring and suspicious-transaction reporting to the FRC.
Lawful processing of customer, agent and merchant identification data.
What you have to do
Match the level of verification to the account's limits and risk, and step it up when a customer moves to a higher tier.
Verify agents and merchants and the people behind them before they can transact on your rails.
Detect unusual patterns, screen counterparties, and report suspicious activity to the FRC.
Hold the identification record and the review decision for every customer, agent and merchant.
Fraud to watch for
Mule wallets
Wallets registered with borrowed or stolen IDs to move fraud proceeds.
SIM-swap takeovers
Fraudsters re-registering a victim's line to take over their wallet.
Merchant fronting
Legitimate-looking merchants processing payments for undisclosed businesses.
How Sentinel helps
Related reading
Why increased monitoring raises the bar for customer due diligence at banks, SACCOs, PSPs and fintechs, and what a defensible onboarding record looks like.
Read the article 23 October 2026 · 4 min readFace-swap video and replay attacks are now cheap. What institutions should expect from liveness and document checks, and why the record matters as much as the result.
Read the articleGeneral information, not legal advice. Last reviewed October 2026. Requirements change, so confirm the current position with the regulator or your counsel before relying on it.