Kenya has strengthened its framework for countering terrorism financing. Regulations reported as gazetted on 7 September 2026 raise the consequences of non-compliance. They also tighten how quickly organisations must act when a person or entity lands on a domestic or United Nations sanctions list.
For boards and senior management, the real issue is practical readiness. A policy on paper isn’t enough if your organisation can’t identify a sanctioned customer or beneficial owner, stop the affected activity, freeze the relevant assets and complete the required reporting in the time allowed.
What the New Kenya Sanctions Regulations Change
The 2026 regulations sit within Kenya’s wider legal framework. That includes the Prevention of Terrorism Act 2012, the Proceeds of Crime and Anti-Money Laundering Act 2009 (POCAMLA), regulations made under those laws, and applicable United Nations Security Council sanctions requirements.
On penalties, a legal person may face a fine not exceeding KSh 20 million where the regulations don’t prescribe a specific penalty. A natural person may face imprisonment for up to 10 years or a fine not exceeding KSh 1 million. These are maximum penalties on conviction, not automatic fines for every control weakness.
More importantly, the regulations reportedly tighten what “acting without delay” means. Institutions are expected to freeze relevant assets within a matter of hours and submit the prescribed report within 24 hours. They must also consider indirect ownership and control, related accounts, and attempted transactions after a freeze.
Who Is Affected by Kenya’s Targeted Financial Sanctions Rules?
The requirements reach well beyond banks and insurers. The reported definition of a reporting institution covers:
- Banks, insurers, microfinance institutions, SACCOs, investment firms, payment providers and other financial institutions
- Accountants, audit firms, lawyers, real-estate agents, trust and company service providers, and other designated non-financial businesses and professions (DNFBPs)
- Virtual asset service providers
Other organisations will feel the impact too. Banks, professional advisers, donors and investors are likely to ask for better information on beneficial ownership, sources of funds, connected parties and sanctions exposure before they continue a relationship or transaction.
Key Issue: Targeted Financial Sanctions Aren’t Ordinary Transaction Monitoring
Targeted financial sanctions work differently from routine transaction monitoring. A confirmed sanctions match may require an immediate asset freeze without prior notice. The institution must establish whether the listed person owns or controls assets, directly or indirectly. It must also keep enough information to support its decision and its regulatory report.
That can’t hinge on a monthly screening exercise or on one compliance officer being available. Your organisation needs:
- current sanctions lists
- accurate beneficial ownership records
- authority to restrict activity
- a deputy escalation route
- trained employees who can tell a genuine match from a false positive
5 Actions Organisations Should Take to Strengthen Sanctions Compliance
- Confirm the legal requirements. Obtain the official Gazette instrument and confirm the exact obligations, commencement provisions, reporting recipient and prescribed information.
- Assess current readiness. Review governance, customer information, sanctions list screening, transaction controls, reporting, record retention and false-positive management.
- Update procedures. Create a clear response process that names the alert recipient, reviewer, decision-maker, deputy and reporting officer.
- Rescreen customers and connected parties. Include beneficial owners, directors, signatories, trustees, beneficiaries and anyone else who exercises control.
- Train and test. Provide role-based training and run a simulation to see whether your organisation can identify, freeze, escalate and report a match within hours.
The Question Every Board Should Ask
Can management show, with a time-stamped audit trail, that the organisation would identify a confirmed sanctions match, establish ownership or control, stop the affected activity and complete the required reporting within hours?
If the answer is uncertain, the board should require an immediate sanctions readiness review with named owners and completion dates. Prioritise beneficial ownership data, sanctions-list updates, delegated authority, deputy arrangements, reporting templates and staff competence.
How MGK Can Help with Sanctions Readiness and AML/CFT Compliance
MGK helps boards and management teams assess sanctions readiness, carry out internal audits and AML/CFT audits, train responsible personnel, and test whether procedures work in practice.
Frequently Asked Questions About Kenya’s Targeted Financial Sanctions
What are targeted financial sanctions in Kenya?
Targeted financial sanctions apply when a person or entity is placed on a domestic or United Nations sanctions list. A confirmed match may require an immediate asset freeze without prior notice. This is different from ordinary transaction monitoring.
When were Kenya’s new sanctions regulations gazetted?
The 2026 regulations are reported as gazetted on 7 September 2026. Organisations should obtain the official Gazette instrument and confirm the exact obligations, commencement provisions, reporting recipient and prescribed information.
How quickly must institutions act on a sanctions match?
The regulations reportedly tighten what “acting without delay” means. Institutions are expected to freeze relevant assets within a matter of hours and submit the prescribed report within 24 hours. They must also consider indirect ownership and control, related accounts and attempted transactions after a freeze.
What are the penalties for non-compliance?
A legal person may face a fine not exceeding KSh 20 million where the regulations don’t prescribe a specific penalty. A natural person may face imprisonment for up to 10 years or a fine not exceeding KSh 1 million. These are maximum penalties on conviction, not automatic fines for every control weakness.
Who is classed as a reporting institution under the new rules?
The reported definition covers banks, insurers, microfinance institutions, SACCOs, investment firms, payment providers and other financial institutions. It also covers accountants, audit firms, lawyers, real-estate agents, trust and company service providers and other designated non-financial businesses and professions, as well as virtual asset service providers.
Will organisations outside the reporting institution list be affected?
Yes. Banks, professional advisers, donors and investors are likely to request better information about beneficial ownership, sources of funds, connected parties and sanctions exposure before continuing a relationship or transaction.
What should organisations do to prepare for Kenya’s targeted financial sanctions rules?
Take five actions: confirm the legal requirements, assess current readiness, update procedures, rescreen customers and connected parties (including beneficial owners, directors, signatories, trustees and beneficiaries), and train and test staff with a simulation to see whether a match can be identified, frozen, escalated and reported within hours.
What should a board ask about sanctions readiness?
Boards should ask whether management can show, with a time-stamped audit trail, that the organisation would identify a confirmed sanctions match, establish ownership or control, stop the affected activity and complete the required reporting within hours. If the answer is uncertain, the board should require an immediate readiness review with named owners and completion dates.
How can MGK help with sanctions readiness?
MGK assists boards and management teams in assessing sanctions readiness, internal audit and AML/CFT audits, training responsible personnel, and testing whether procedures work in practice.
[Talk to MGK about a sanctions readiness review → Contact Us
Disclaimer: General information only; this article is not legal advice. Organisations should obtain advice applicable to their circumstances.