Skip to content
Verified 12 September 2026

Is a Crypto App Legit? A Kenya Checklist

By Aisha Hassan · Crypto hub

To tell if a crypto app or offer is legit in Kenya, check three things. One, does it appear on the CMA/CBK register of virtual-asset providers (as VASP registration rolls out)? Two, do real users report cashouts, or are the reviews suspiciously generic? Three, does it ask you to pay a fee to unlock anything? If yes to three, walk away.

What real exchanges do

Real exchanges do KYC, publish clear fee schedules, offer 2FA, and let you withdraw without new fees. They do not DM you a bonus offer, they do not promise returns, and they do not ask you to send M-PESA to a personal number to activate anything.

The three-minute test

Search the app name plus "scam" on Google. Check its Play Store or App Store reviews for real cashout stories. Look for a real company address and registration. If all three come up clean, it is a candidate. If any of them are blank or shady, it is not.

Green flag list

Named team, KYC required, real address, transparent fees, no promise of returns, and no pressure. Absence of any of these is a warning.

Frequently asked

Fastest test?

Search app name plus "scam" plus "Kenya".

Does regulation guarantee legitimacy?

No, but it filters out the worst. Combine regulation with reviews and behaviour.

Should I ever pay to unlock a withdrawal?

Never.

Related

Verified 12 September 2026. Independent guide, paybillke is not affiliated with any exchange. Kenya's VASP Act took effect on 4 November 2025. Under section 47, providers already operating have until 4 November 2026 to comply. As of 25 October 2026 we found no provider licensed under it on a CBK or CMA register. Re-check registration and tax terms each quarter.