Transaction Monitoring in Kenya: CBK Rules 2026

Transaction monitoring in Kenya has moved beyond policy documentation. In 2026, regulators want proof that your system actually works.
 

Under the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA), 2009, and Central Bank of Kenya (CBK) guidelines, financial institutions must demonstrate real operational effectiveness. That means detecting suspicious activity in real time, producing high-quality reports, and scaling across Kenya’s fast-growing fintech and mobile money ecosystem.
 

For Kenyan banks, payment service providers, mobile money operators, and digital lenders, this guide sets out exactly what CBK-compliant transaction monitoring requires in practice.
 

What Is Transaction Monitoring and Why Does It Matter?

Transaction monitoring is the continuous process of reviewing customer transactions to detect suspicious activity linked to fraud, money laundering, or terrorist financing.
 

But here’s the shift: It is no longer just about thresholds but about behaviour, patterns, and context. A strong system should:

- Monitor transactions across all channels

- Detect anomalies in real time

- Adapt to customer risk profiles

- Enable fast reporting to regulators

For a deeper breakdown, read on: How Transaction Monitoring Helps Banks fight Fraud
 

Kenya’s AML/CFT Regulatory Framework

Kenya operates a layered AML/CFT system that financial institutions must align with:
 

- POCAMLA (2009) – Establishes the obligation for reporting institutions to monitor customer transactions, apply customer due diligence, and report suspicious transactions to the Financial Reporting Centre (FRC).
 

READ ALSO: KYC and POCAMLA Compliance in Kenya

- AML Regulations (2013) – Define reporting thresholds, STR filing obligations, record-keeping requirements, and the specific duties of compliance officers.

- CBK Prudential Guidelines – Sector-specific compliance for banks, microfinance institutions, and payment service providers, setting AML programme standards, including transaction monitoring requirements.

- CBK Mobile Money Guidelines – The CBK has published specific AML guidelines for mobile money operators. These establish monitoring requirements calibrated to the high-frequency, low-value nature of mobile money transactions.

- Financial Reporting Centre (FRC) – Receives suspicious transaction reports (STRs) and cash transaction reports (CTRs).
 

Kenya is also part of the global Financial Action Task Force (FATF) framework, meaning its compliance expectations align with international standards.
 

CBK Transaction Monitoring Thresholds

Under POCAMLA and the 2013 Regulations, Kenyan financial institutions apply the following key monitoring thresholds:
 

Key insight: There is no minimum threshold for suspicious transaction reporting. Even small transactions must be flagged if suspicious.

What CBK Expects from Transaction Monitoring Systems in 2026

By 2026, the CBK’s supervisory expectations have moved well beyond basic threshold-based monitoring. During examinations, CBK inspectors assess:
 

1. Risk-Based Monitoring

Close transaction monitoring must adapt to customer risk.

For example:

• A salary earner = low monitoring intensity
• A PEP or cross-border trader = high monitoring intensity

2. Full Channel Coverage

Your system must cover:

• Mobile money (M-Pesa, Airtel Money)
• Cards and ATMs
• Bank transfers
• USSD and mobile apps
• Cross-border payments
• Ignoring any channel creates compliance gaps.

3. Alert Quality Over Volume

CBK prioritizes:

• High-quality alerts
• Actionable insights
• STR conversion rates

Too many false positives signal weak calibration.

4. Mobile Money Monitoring (Critical)

The CBK Mobile Money AML guidelines require monitoring for the following:

• Accounts with daily turnover exceeding KES 100,000
• Rapid multiple cash-outs following a single large receipt
• Unusual peer-to-peer transfer volumes relative to account tier
• Cross-border mobile money flows
• Agent activity inconsistent with geographic location

Mobile money monitoring must be distinct from standard bank account monitoring. The velocity patterns, average transaction sizes, and typologies are fundamentally different.
 

Kenya-Specific Financial Crime Risks

For Kenya banks and fintechs, effective transaction monitoring must be tailored to the country's unique financial crime environment. The CBK and FRC have found the following types of high-risk situations:
 

1. Mobile Money Structuring

Funds are split across multiple accounts and moved rapidly before withdrawal.
 

2. Digital Lending Fraud

Fraudsters use multiple identities to secure loans across platforms.
 

3. Real Estate Laundering

Illicit funds are invested in property with inflated valuations.
 

4. Trade-Based Money Laundering

Fake invoices and manipulated trade flows disguise money movement.
 

5. Cross-Border Flows

Suspicious transfers across East Africa require enhanced scrutiny.
 

How to Build a CBK-Compliant Monitoring Programme

- Step 1: What should your risk assessment cover?

Start with a clear risk assessment. Review your customers, products, transaction channels, and locations.

This helps you decide how strict your monitoring should be. For example, a bank handling international transfers needs different rules than a local digital lender.
 

- Step 2: Define Monitoring Rules by Risk Category

Set rules based on risk. At minimum, include:

• Cash transactions above KES 1,000,000.
• International transfers above USD 15,000.
• Mobile money activity above KES 100,000 per day
• Transactions just below reporting thresholds
• High-risk customers such as PEPs
• Dormant accounts that become active again
• Unusual cross-border payments

- Step 3: What technology should you use?

Manual monitoring will not work at scale. Your system should:

• Monitor transactions in real time
• Connect with M-Pesa, RTGS, and SWIFT
• Generate STR reports in FRC format
• Keep audit logs for CBK reviews
• Allow flexible rule settings

Youverify’s KYT solution is built for this. It uses pre-configured rules aligned with CBK and POCAMLA requirements.
 

- Step 4: Train your compliance team

Train your compliance team regularly. They should understand:

• POCAMLA rules
• How to file reports to the FRC
• What counts as suspicious activity
• When escalation is required
   

- Step 5: Establish FRC Reporting Procedures

Define a clear process.

• Who reviews alerts?
• Who approves escalation?
• Who submits reports?
• Document everything. Test it regularly.

STRs must be filed within 3 working days after identifying suspicious activity. Late reporting is a compliance breach.

The Mobile Money Monitoring Challenge

Kenya processes more mobile money by GDP proportion than almost any country in the world. M-Pesa alone handles tens of millions of transactions daily.
 

This volume creates genuine operational challenges:

• Alert fatigue: Applying standard banking monitoring rules to mobile money generates enormous false positive volumes.
• Low average values: Many transactions are under KES 1,000, individually below any threshold but aggregately significant when structured for money laundering.
• Agent network complexity: Mobile money agents act as cash-in/cash-out points; unusual agent activity requires monitoring at the agent level, not just the customer level.
• SIM proliferation: Kenya’s mobile penetration and the ease of obtaining new SIM cards enables account proliferation as a money laundering technique.
   

AI-powered transaction monitoring is particularly valuable in the Kenyan mobile money context. Unsupervised machine learning models can detect mobile money structuring patterns

Common CBK Compliance Failures

CBK examination reports and FRC enforcement actions identify recurring weaknesses in Kenyan institutions’ monitoring programmes:

• No mobile money monitoring
• Over-reliance on thresholds
• Lack of unified customer view
• Delayed STR filing
• Poor reporting quality

Why Real-Time Transaction Monitoring is Essential

Real-time monitoring is essential because batch processing is no longer effective. By the time alerts are generated, funds may already be withdrawn, accounts closed, and risks escalated. Real-time monitoring solves this by enabling instant detection of suspicious activity, faster response to threats, and stronger overall compliance outcomes.

How Youverify Supports Kenyan Institutions

Youverify provides a unified, AI-powered compliance platform built for the realities of African financial systems. It enables institutions to monitor transactions in real time, maintain a 360° view of customer risk, detect suspicious activity instantly, and automate STR reporting while staying fully aligned with CBK and POCAMLA requirements.
 

From mobile money monitoring to cross-border transaction tracking and audit-ready reporting, Youverify gives compliance teams the tools they need to operate efficiently without gaps. With flexible, ready-to-use scenarios and the ability to create custom rules tailored to your institution, you can detect and respond to risk with precision.
 

Ready to strengthen your transaction monitoring? Speak with our compliance experts today.

About the Author: