Safaricom Completes M-Pesa Fintech 2.0 Upgrade, Ends Scheduled Downtime
Technology

Safaricom Completes M-Pesa Fintech 2.0 Upgrade, Ends Scheduled Downtime

Safaricom has completed a landmark technological overhaul of M-Pesa, migrating Africa’s most widely used mobile money platform to a new Fintech 2.0 architecture built on microservices and cloud infrastructure. The milestone was confirmed by Chief Executive Officer Peter Ndegwa in June 2026.

From Monolithic to Microservices

For years, M-Pesa operated on a monolithic technology stack inherited from its 2007 launch, requiring regular scheduled maintenance windows that temporarily took the service offline. The migration to a microservices-based cloud architecture resolves this structural weakness, effectively eliminating the need for scheduled downtime.

Processing Power Built for a Growing Digital Economy

M-Pesa can now handle 6,000 transactions per second, up from a previous ceiling of 4,500, and the system can scale dynamically to 12,000 transactions per second during peak demand.

Ziidi Trader Signals Appetite for Mobile Investment Products

Safaricom disclosed encouraging early traction for Ziidi Trader, its mobile investment product that allows everyday Kenyans to access government securities and money market instruments directly through M-Pesa. As of June 15, 2026, the platform had recorded 688,000 opt-ins and 103,000 active traders.

Read More
Kenya Mobile Money Hits 53.4 Million as Agent Network Surges
Technology

Kenya Mobile Money Hits 53.4 Million as Agent Network Surges

Kenya’s mobile money sector added approximately two million new accounts in a single quarter, pushing total subscriptions to 53.4 million by March 2026, according to the Communications Authority of Kenya’s Q3 2025-2026 sector statistics report. The 3.9 percent quarterly growth further entrenches Kenya’s standing as the world’s most advanced mobile money market.

Safaricom’s Enduring Grip on the Market

Safaricom retained its commanding 89 percent share of all mobile money subscriptions in the quarter, a position built on the foundations of M-Pesa — the service it launched in 2007 that effectively created the global mobile money category. M-Pesa’s dominance is the product of deep ecosystem integration encompassing savings and credit products, insurance, merchant payments, government disbursement channels, and international remittance corridors.

The Agent Surge: 101,000 New Agents in One Quarter

The number of registered mobile money agents grew from 501,399 in December 2025 to 602,470 in March 2026 — an addition of more than 101,000 agents in just three months, representing approximately a 20 percent expansion in a single quarter. Mobile money agents are the physical infrastructure through which digital finance reaches every corner of Kenya’s 47 counties.

A Global Template With Local Challenges

Despite its global leadership position, Kenya’s mobile money market carries unresolved tensions. Transaction fees remain a persistent source of friction among consumer advocates. Cybersecurity risks are also growing in proportion to the platform’s scale and centrality.

Read More
Kenya Holds 6th ISMS Conference Amid Growing Deepfake and Cyber Threats
Technology

Kenya Holds 6th ISMS Conference Amid Growing Deepfake and Cyber Threats

Kenya’s cybersecurity community converged on Nairobi from June 29 to July 3, 2026 for the country’s 6th annual Information Security Management Systems Conference, co-hosted by the Kenya Bureau of Standards and the National Computer and Cybercrimes Coordination Committee.

AI-Generated Deepfakes: A Threat to Public Trust

The conference’s most urgent warnings centred on the growing sophistication and accessibility of AI-generated deepfakes. Increasingly user-friendly AI generation tools have lowered the barrier to producing convincing synthetic media to the point where individual bad actors with modest technical skills can create damaging content at scale.

Evolving Cybercrime

Kenyan businesses, financial institutions and public sector bodies continue to face escalating threats from ransomware, sophisticated phishing campaigns, identity theft operations and supply chain attacks — many now assisted by AI tools that dramatically reduce the technical expertise required to execute complex attacks.

A New National Cybersecurity Agency Takes Shape

The ISMS Conference took place in the immediate aftermath of Parliament’s June 22, 2026 approval of the National Cybersecurity Agency. KEBS and NC4 used the conference platform to begin aligning public and private sector stakeholders with the new agency’s mandate and operational frameworks.

Read More
Fuzu Raises $3.86M Series A as Jobtech Alliance Backs Kenya Tech Startups
Technology

Fuzu Raises $3.86M Series A as Jobtech Alliance Backs Kenya Tech Startups

Two Kenyan technology companies secured fresh investment from the Jobtech Alliance on July 6, 2026. Fuzu raised US$3.86 million in a Series A funding round. Kyosk received an investment with the specific amount undisclosed.

Fuzu Closes $3.86 Million Series A

Fuzu, co-founded in 2015 by Finnish entrepreneurs Jussi Hinkkanen, Matti Nummelin and Antti Lehtonen, operates from offices in both Nairobi and Helsinki. The fresh capital will accelerate the development of Fuzu Atlas, the company’s flagship platform designed to manage AI data operations and quality-assurance teams on behalf of clients in mature technology markets.

Kyosk Receives Backing

Kyosk, a B2B digital commerce platform founded in 2019 by Tom Wainwright, Daniel Yu and Simon Schaefer, operates a digital procurement and commerce system for informal retail outlets. The company currently serves more than 200,000 informal retailers across Kenya, Nigeria, Uganda and Tanzania, enabling kiosk owners to order stock digitally, access working capital financing and manage inventory more efficiently.

The Jobtech Alliance

The Jobtech Alliance is a global collaborative initiative that channels investment and technical support to technology platforms creating quality employment in emerging markets. Its engagement with both Fuzu and Kyosk reflects recognition that workforce and commerce technology platforms can generate sustainable livelihoods for large numbers of people.

Read More
Kenya's AI Bill 2026 Advances in Senate with New AI Commissioner Office
Technology

Kenya’s AI Bill 2026 Advances in Senate with New AI Commissioner Office

Kenya is moving closer to becoming one of the first African nations to establish a comprehensive legal framework for artificial intelligence, as the Artificial Intelligence Bill 2026 continued advancing through the Senate in early July 2026. Introduced by Nominated Senator Karen Nyamu as Senate Bill No. 4 of 2026, the legislation proposes sweeping changes to how AI systems are developed, deployed and overseen across the Kenyan economy.

A Risk-Based Framework Modelled on the EU AI Act

The bill adopts a tiered, risk-based approach to AI governance, drawing heavily from the European Union’s AI Act. AI systems would be classified into four categories: unacceptable risk, high risk, limited risk and minimal risk, with regulatory stringency increasing in proportion to potential for harm. Systems categorised as posing unacceptable risk would be prohibited outright.

High-Risk Categories

The bill identifies several sectors where AI applications would attract heightened regulatory scrutiny: healthcare, education, agriculture, finance, security and employment — precisely the domains where AI adoption in Kenya is accelerating most rapidly.

The Office of the Artificial Intelligence Commissioner

The bill’s most consequential institutional innovation is the proposed creation of an independent Office of the Artificial Intelligence Commissioner, empowered to inspect AI systems, access training data, investigate complaints, and issue enforcement notices where violations are found.

Read More
Kenya's Ed-Tech Boom: 3 Million Students Access Digital Learning Platforms in 2026
Technology

Kenya’s Ed-Tech Boom: 3 Million Students Access Digital Learning Platforms in 2026

Three million Kenyan students are now actively using digital learning platforms aligned to the Competency-Based Curriculum, the Ministry of Education confirmed in its mid-year sector report released last week, marking what education officials are calling a structural shift in how teaching and learning occurs across the country’s 33,000 primary and secondary schools.

The figure — up from approximately 800,000 in 2023 — reflects a confluence of falling data costs, expanded school connectivity under the government’s Last Mile Connectivity Programme, device availability through both government procurement and the private market, and an explosion in CBC-specific digital content produced by Kenyan ed-tech companies responding to the curriculum transition that began in 2017.

The Platforms Driving Adoption

Several domestic platforms have emerged as market leaders. Zeraki Learning, founded in Nairobi in 2019, now serves over 800,000 students across 4,200 schools with a platform that provides CBC-aligned lesson content, automated teacher performance analytics, and parent progress reports delivered via SMS and WhatsApp. The company raised USD 5 million in Series A funding in early 2026 and is already expanding into Uganda and Tanzania, following the East African Community’s decision in 2025 to recognise the Kenyan CBC framework as a regional curriculum model.

Longhorn Publishers’ digital arm, which has digitised its entire CBC textbook catalogue, reports 650,000 active student licences — driven partly by a government bulk procurement arrangement under which the Ministry of Education purchased digital access for students in 1,200 underserved schools at a negotiated Ksh 400 per student per year. Eneza Education’s mobile-first platform, which delivers curriculum content via basic phone SMS alongside a smartphone app, continues to serve rural learners in areas where smartphones and data remain unaffordable, with 420,000 registered users in counties including Turkana, Wajir, and Tana River.

The platforms are generating data that was previously unavailable to Kenya’s education system. Teachers using Zeraki can see, at lesson level, which learning outcomes their students are struggling with. The Ministry’s education analytics team, for the first time, has granular near-real-time data on learning outcomes by school, sub-county, and county — not just end-of-year examination results that historically arrived too late to inform teaching interventions.

Infrastructure: The Remaining Gap

Cabinet Secretary for Education Julius Ogamba acknowledged at the report launch that digital adoption remains highly uneven. In Nairobi, Kiambu, and Mombasa, some schools report near-universal student device access, with teachers routinely integrating platforms into daily lesson delivery. In contrast, schools in Marsabit, Isiolo, and much of North Eastern remain largely offline, limited by electricity reliability, connectivity costs, and the absence of affordable devices.

“We have three million students benefiting, and we have celebrating to do,” Ogamba said. “We also have 15 million students who are not yet benefiting, and we have urgent work to do.” The government’s digital devices procurement programme — which targeted delivery of 800,000 student tablets by mid-2026 — has delivered approximately 520,000 to date, with procurement disputes accounting for the shortfall.

Teacher Training as the Critical Variable

Education researchers are consistent in identifying teacher readiness as the binding constraint on ed-tech impact. A Kenya Institute of Curriculum Development study published in March 2026 found that student outcomes on digital platforms improved by 34 per cent when teachers received structured professional development on platform integration, versus platforms provided to students without corresponding teacher training.

The Kenya National Union of Teachers has called for paid professional development time built into the school timetable specifically for digital skills — a request the Ministry has partially accommodated through a new Friday afternoon slot at schools piloting the digital integration programme. As the CBC itself continues to mature through successive grade cohorts, the ed-tech ecosystem is maturing alongside it: a convergence that, if properly resourced and managed, could position Kenya’s students for the digital economy their government has promised them.

Read More
Smart Irrigation Technology Saves Kenyan Flower Farms 40% Water Usage
Technology

Smart Irrigation Technology Saves Kenyan Flower Farms 40% Water Usage

Kenyan flower farms clustered around Lake Naivasha, the country’s horticultural heartland, have achieved an average 40 per cent reduction in irrigation water consumption following the adoption of sensor-based smart irrigation systems, according to data published this month by the Kenya Flower Council. The savings, measured across 34 large-scale farms covering approximately 6,200 hectares during the 2025/26 growing season, represent one of the most significant efficiency improvements in the sector since the introduction of hydroponic cultivation in the 1990s.

Kenya is the world’s third-largest cut flower exporter, with annual export revenues of approximately Ksh 145 billion. The industry employs over 150,000 people directly and supports an estimated 500,000 livelihoods. The vast majority of production is concentrated around Lake Naivasha in Nakuru County, where the lake itself supplies irrigation water and the high-altitude climate produces the long-stemmed roses that European and Asian markets prize.

What Smart Irrigation Involves

Traditional irrigation scheduling on Kenyan flower farms relied on agronomist judgement, fixed timer systems, and broad evapotranspiration estimates. The smart systems adopted by the farms in the study replace this approach with a network of soil moisture sensors placed at multiple depths in each greenhouse bed, microclimate weather stations measuring temperature, humidity, and solar radiation, and a centralised control platform that integrates all inputs to calculate precise irrigation scheduling in intervals as short as 15 minutes.

Several farms have extended the system with machine-learning layers that account for flower variety, growth stage, and historical water-use data to generate predictive irrigation schedules that anticipate plant demand rather than reacting to moisture deficits after they occur. Sian Farms, one of the largest operations in the Naivasha basin, reports that its AI-integrated system has reduced irrigation events by 60 per cent while maintaining or improving stem quality scores — a finding that has attracted attention from agronomists who long assumed that more frequent watering improved flower grade.

“We were irrigating partly out of habit and partly out of caution,” said Sian Farms Head of Agronomy Patrick Mwangi. “The sensor data showed us that we were watering soil that was already at optimal moisture. The system tells us when the plant actually needs water, not when the clock tells us to give it.”

The Lake Naivasha Dimension

The environmental stakes around water use in the Naivasha basin are significant and well-documented. Lake Naivasha’s water level has fluctuated dramatically over the past three decades, with intensive extraction for floriculture identified by WWF and the Lake Naivasha Riparian Association as a major contributing factor alongside climate variability. The lake supports a Ramsar-listed wetland ecosystem, wildlife populations including hippos and over 400 bird species, and the livelihoods of fishing communities dependent on healthy water levels.

The National Environment Management Authority has progressively tightened water abstraction permits for Naivasha basin farms since 2020, and the Water Resources Authority imposed a 15 per cent mandatory reduction in licensed abstraction volumes in 2024 as part of Kenya’s El Nino adaptation response. For farms facing declining permit volumes, smart irrigation is not purely a cost-saving measure — it is the mechanism through which they can maintain production without breaching regulatory limits.

“The farms that cannot get their water efficiency up will face permit curtailment. That is the regulatory reality,” said Water Resources Authority CEO Mwenda Njoka. “What is encouraging is that the majority are moving proactively rather than waiting for enforcement.”

Cost and Access

A full smart irrigation installation for a medium-scale greenhouse block of five hectares costs approximately Ksh 2.8 million, with a payback period estimated at 2.5 to 3.5 years based on reduced water pump energy costs and lower water permit fees. The Kenya Flower Council has negotiated a preferential financing facility with Equity Bank allowing member farms to access the capital at 10.5 per cent over five years.

The technology’s adoption is not uniform. Small-scale growers producing for the local market typically cannot access the capital or technical support required for full smart systems, though lower-cost soil moisture sensor kits retailing at around Ksh 45,000 per greenhouse unit are increasingly available through agricultural input distributors in Naivasha town. The Kenya Agricultural and Livestock Research Organisation is running demonstration plots at its Naivasha station to extend practical knowledge of the technology to small growers who have not had access to commercial agronomic support — ensuring that the efficiency gains of Kenya’s floriculture sector do not accrue only to those who can already afford the best technology.

Read More
KRA Deploys AI to Detect Tax Evasion, Recovers Ksh 4 Billion in Hidden Revenues
Technology

KRA Deploys AI to Detect Tax Evasion, Recovers Ksh 4 Billion in Hidden Revenues

The Kenya Revenue Authority has recovered Ksh 4 billion in previously undisclosed tax liabilities through an artificial intelligence-driven compliance engine deployed at scale in the financial year ending June 2026, Commissioner-General Humphrey Wattanga announced at the authority’s performance review briefing in Nairobi this week. The figure, which KRA describes as a direct attribution to the AI system rather than general enforcement activity, represents a significant early return on a Ksh 780 million investment in the technology made under the 2024 Medium-Term Revenue Strategy.

The AI system, developed in partnership with a consortium of local and international technology firms under a competitive tender, operates across five analysis modules: VAT gap detection, income underreporting in the SME sector, digital economy revenue tracking, real estate income reconciliation, and customs valuation fraud identification. Each module trains on a combination of KRA’s own historical declaration data, third-party financial flows, and cross-agency data sharing with institutions including the Land Registry, the Central Bank’s Financial Intelligence Unit, and the Insurance Regulatory Authority.

How the System Finds Hidden Money

The VAT module has proven the most immediately productive. By comparing declared turnover against M-Pesa Lipa Na M-Pesa transaction flows — accessible under a data-sharing agreement with Safaricom signed in 2024 — the system identifies businesses whose declared VAT-able revenues are statistically inconsistent with their actual customer transaction volumes. Wattanga said the module had generated 4,200 audit flags in its first operational year, of which 1,840 were escalated to compliance officers and 620 resulted in assessed additional liabilities.

“A trader who declares Ksh 800,000 in monthly turnover but processes Ksh 3.2 million through their till M-Pesa is flagged automatically. The compliance officer receives a pre-populated audit file with three years of transaction history,” said Wattanga. “The human’s job is no longer to find the discrepancy. It is to assess it and pursue it.”

The digital economy module targets a category of taxpayer that KRA acknowledges it has historically struggled to capture: freelancers, content creators, and micro-entrepreneurs earning through international platforms including Fiverr, Upwork, YouTube, and various e-commerce aggregators. By monitoring foreign exchange inflows through the CBK’s reporting system and cross-matching them against income tax returns, the system identified approximately 28,000 individuals receiving regular foreign currency income but filing minimal or no income tax returns.

Real Estate and the Wealthy

The real estate reconciliation module has attracted the most political attention. By cross-referencing Land Registry transfer data against market valuations and mortgage drawdowns visible through banking system data, the AI flags transactions where declared sale prices are implausibly low relative to known market rates — a well-documented form of both tax evasion and illicit wealth transfer in Kenya’s property market.

KRA declined to name individuals identified through the real estate module, citing ongoing legal proceedings, but Wattanga confirmed that 14 high-value assessments totalling Ksh 1.1 billion had been raised against property transactions in Nairobi, Mombasa, and Naivasha, with collections of Ksh 340 million already secured and the remainder under dispute or enforcement.

The tool carries clear political symbolism in the context of Kenya’s IMF programme. Treasury Cabinet Secretary John Mbadi has repeatedly faced criticism from Gen Z-aligned civil society groups who argue that austerity measures disproportionately burden ordinary Kenyans while wealthy elites evade liability. A KRA AI system that visibly pursues elite tax evasion rather than squeezing PAYE workers offers the government a politically useful counter-narrative heading into 2027.

Expansion Plans

KRA intends to extend the AI system’s scope in the 2026/27 financial year to include withholding tax compliance in the professional services sector and excise duty monitoring for alcohol and tobacco manufacturers. The authority’s medium-term target, embedded in the National Tax Policy approved in 2025, is to raise the country’s tax-to-GDP ratio from its current 14.7 per cent to 18 per cent by 2030. The AI compliance programme is projected to contribute an incremental Ksh 25 billion annually by the time all modules reach full maturity — a target that independent economists describe as ambitious but not implausible given the evidence of the first year’s results.

Read More
Nairobi Ranked Africa's Top City for Tech Ecosystem Strength in 2026 Report
Technology

Nairobi Ranked Africa’s Top City for Tech Ecosystem Strength in 2026 Report

Nairobi has been ranked the strongest technology ecosystem on the African continent for the second consecutive year, according to the 2026 Africa Tech Ecosystem Index published this month by the Amsterdam-based research consultancy Startup Genome in partnership with the African Union’s Innovation and Technology Division. The Kenyan capital outscored Cairo, Lagos, Cape Town, and Kigali across a composite index measuring venture capital deployment, startup density, talent pipeline depth, regulatory environment quality, and digital infrastructure.

The ranking places Nairobi in the global top 40 technology ecosystems for the first time, sitting between Stockholm and Bangalore on the overall global index — a leap of seven positions from its 2025 ranking that has generated significant attention from international investors and technology multinationals considering African expansion.

The Numbers Behind the Ranking

The index draws on data from the 12 months to March 2026. During that period, Nairobi-based startups raised a combined USD 1.2 billion in disclosed venture capital — a 34 per cent increase on the prior year and a record for any African city outside South Africa. Fintech continues to dominate, accounting for 44 per cent of total investment, but the index notes a diversification trend, with health technology, agritech, and climate-focused startups collectively attracting USD 380 million.

Startup density — measured as registered technology companies per 100,000 working-age residents — stands at 47 for Nairobi, compared with 38 for Lagos and 31 for Cairo. The report attributes this partly to Kenya’s accessible company registration process, which since 2022 can be completed online via the eCitizen portal in under 48 hours, and partly to the presence of major technology multinationals that create both talent and spin-off entrepreneurship.

Google’s Africa headquarters and Microsoft’s Africa Development Centre, both in Nairobi, are identified in the report as anchor institutions that train talent and generate a culture of technical ambition. Amazon Web Services’ 2025 launch of a Nairobi cloud region — one of only three on the continent — has significantly reduced infrastructure costs for Kenyan startups, eliminating the need to route workloads through European data centres at considerable latency and cost penalty.

Safaricom’s Ecosystem Role

The report devotes a full chapter to Safaricom’s outsized influence on the Nairobi ecosystem, noting that M-Pesa’s 35 million active Kenyan users provide a distribution channel for fintech products that is unmatched anywhere else on the continent. The telco’s Spark Accelerator programme graduated 22 startups in its 2025 cohort, three of which have since raised Series A rounds. Safaricom’s ongoing 5G rollout — now covering all of Nairobi, Mombasa, Kisumu, and major highway corridors — is identified as a key infrastructure enabler for the next generation of connectivity-dependent products.

“When your customer acquisition cost is near zero because you can distribute through M-Pesa’s agent network, and your cloud bills drop 30 per cent because AWS is now local, the unit economics of a Nairobi startup look very different from even two years ago,” said Mbugua Ngugi, partner at early-stage fund Catalyst Fund.

Challenges the Report Does Not Ignore

The index is notably frank about persistent weaknesses. Kenya’s foreign exchange environment remains a constraint: startups raising in USD and spending in shillings face volatility risk that several founders interviewed for the report described as a material operational burden. The Central Bank’s 2025 foreign exchange management reforms have helped at the margin but not resolved the underlying issue.

Talent retention also appears as a structural challenge. Kenya produces approximately 12,000 computer science and IT graduates annually — the largest pipeline in East Africa — but emigration rates among trained software engineers remain high. The United States, United Kingdom, Canada, and increasingly Gulf states are actively recruiting Kenyan tech talent with compensation packages that local firms struggle to match.

Deputy President Kithure Kindiki, speaking at Nairobi Innovation Week in May, acknowledged the ranking while cautioning against complacency. “First place is not a destination. Kigali is investing at extraordinary speed. We must continue to improve the regulatory environment, cut the cost of capital, and ensure our young people have reasons to build here rather than elsewhere.” For the Ruto administration, the ranking is politically welcome: the Silicon Savannah narrative is central to the government’s economic transformation story, and a measurable global benchmark provides a rare piece of unambiguously good news in a period dominated by fiscal austerity.

Read More
Kenya's Cybersecurity Market Grows to Ksh 18 Billion as Attacks on Banks Rise
Technology

Kenya’s Cybersecurity Market Grows to Ksh 18 Billion as Attacks on Banks Rise

Kenya’s cybersecurity industry has expanded to an estimated Ksh 18 billion in annual revenues, according to data published by the Communications Authority of Kenya this month, driven in significant part by a sharp rise in the sophistication and frequency of attacks targeting the country’s banking and financial services sector. The figure represents a 62 per cent increase from Ksh 11.1 billion recorded in 2023, reflecting both genuine threat escalation and the accelerated response by institutions that can no longer treat cyber risk as a secondary operational concern.

The Central Bank of Kenya reported in its 2025 Financial Sector Stability Report that attempted cyberattacks on licensed commercial banks increased by 287 per cent between 2023 and 2025, with confirmed successful breaches resulting in direct losses of Ksh 3.8 billion during that period. The attacks range from SIM-swap fraud exploiting mobile banking credentials to highly sophisticated supply-chain intrusions targeting core banking system vendors.

The Nature of the Threat

Kenya’s cyber threat landscape has evolved considerably from the opportunistic phishing attacks that dominated the early 2020s. The country’s Cybersecurity Directorate under the National Intelligence Service documented 14 incidents in 2025 that bore the hallmarks of organised criminal syndicates operating across borders, with forensic evidence pointing to coordination between actors in Nigeria, Eastern Europe, and — in at least two cases — North Korea-linked groups known to target African financial institutions for hard currency.

The most damaging single incident involved a Tier 2 bank that lost Ksh 890 million over a 72-hour window in October 2025 after attackers gained access through a compromised third-party software update. The bank’s name has not been publicly disclosed, but CBK Governor Kamau Thugge confirmed the incident in parliamentary testimony in February 2026, adding that full recovery had been effected and no depositors ultimately suffered losses — a reassurance that nonetheless highlighted the fragility of existing defences.

Mobile money platforms remain a particular target. The CA’s cyber monitoring unit recorded over 4.2 million attempted fraudulent M-Pesa transactions in the first quarter of 2026 alone, of which Safaricom’s fraud detection systems successfully blocked 99.3 per cent. The 0.7 per cent that were not blocked cost users an estimated Ksh 240 million — significant enough to maintain public anxiety about mobile money security even as the absolute success rate is high.

Regulatory Response

The CBK issued revised Cyber Security Guidance Notes in March 2026, making mandatory what had previously been recommended practice. All licensed banks are now required to maintain a dedicated Chief Information Security Officer at executive committee level, conduct penetration testing at least quarterly rather than annually, maintain cyber incident response plans tested through live simulation exercises, and report any attempted breach within four hours of detection rather than the previous 24-hour window.

“We are not waiting for a systemic event to happen and then respond,” Thugge told the Kenya Bankers Association annual conference. “The regulatory expectation is that every bank in Kenya treats cyber risk with the same seriousness it treats credit risk. That means capital allocation, board oversight, and continuous testing.”

The CA has also launched a national Cyber Threat Intelligence Sharing Platform allowing financial institutions, telcos, and government entities to share anonymised threat data in near real time. Twelve major institutions are currently participating, with the CA reporting that shared intelligence has enabled pre-emptive blocking of at least three major attack campaigns since the platform went live in January 2026.

A Growing Industry

The threat environment has created commercial opportunity. Nairobi has seen a rapid increase in locally founded cybersecurity firms, including Serianu, Weza Tele, and newcomer ArcShield Technologies, founded by ex-Safaricom security engineers. International firms including Palo Alto Networks and Check Point have expanded their Nairobi offices, drawn by both the domestic market and the opportunity to use Kenya as a base for pan-African managed security services.

Kenya’s Ministry of ICT has invested Ksh 1.2 billion in the National KE-CIRT/CC since 2024, tripling its analyst headcount and deploying new threat monitoring infrastructure. The centre’s 2025 annual report noted a tenfold increase in entities actively seeking its assistance compared with 2022 — a sign that awareness, if not yet full preparedness, is improving across the economy. With the 2027 election cycle approaching and digital financial services ever more central to everyday Kenyan life, cybersecurity has become a matter of national infrastructure rather than a niche technical specialism.

Read More