IMF Tells Kenya to Add Travel Rule Identity Duties for Crypto Transfers

The International Monetary Fund has recommended that Kenya require crypto providers to collect, verify and transmit sender and recipient identity details for regulated transfers, according to the fund's Nov. 6 technical assistance report. The proposal would graft a Travel Rule-style compliance duty onto a statutory framework that took effect only days earlier, on Nov. 4, 2025.

The report identified a specific gap: Kenya's international information-sharing requirements for crypto transfers do not currently compel providers to pass counterparty data across borders. The IMF recommended closing that gap either through virtual asset service provider regulations or another suitable legal instrument, leaving the drafting choice to Kenyan authorities.

What data would providers have to handle?

Under the recommendation, providers would collect and verify a defined dataset for each regulated transfer:

• Names of sender and recipient
• Account details
• Physical addresses
• Identification numbers
• Wallet data

Providers would then transmit that information securely to the counterparty institution. In standard Travel Rule practice, virtual-asset firms and financial institutions gather and retain specified details about both parties to a transfer and send those details alongside it. The Kenya recommendation aligns with that model, applying it to regulated transfers under the country's new framework.

Who enforces it, and under what law?

Kenya's Virtual Asset Service Providers Act, 2025, entered into force on Nov. 4, 2025 — two days before the IMF report was issued. The statute splits supervision between two regulators: the Central Bank of Kenya oversees one set of sectors, while the Capital Markets Authority oversees the remainder.

That division matters for compliance planning. A provider's obligated counterparty, reporting format and supervisory contact will depend on which regulator holds its file. Firms operating across both remittance-style payments and capital-markets activity should expect dual touchpoints rather than a single interface.

The IMF's recommendation is not itself binding law. It carries weight as technical assistance from the fund, and Kenya requested the review as part of a broader push for stronger virtual-asset oversight. Implementation requires Kenyan action — likely a regulation or directive under the 2025 act — before any data duty becomes enforceable.

What does this change for practitioners?

For virtual asset service providers already licensed or applying under the new Kenyan regime, the practical question is operational readiness. Travel Rule compliance is not a disclosure exercise; it demands identity verification at origination, secure data transmission to counterparties, and record retention systems capable of handling names, addresses, identification numbers and wallet identifiers on every regulated transfer. Providers that built onboarding flows without counterparty-data exchange will face retrofit costs, and exchanges serving Kenyan users from offshore jurisdictions will need to confirm whether their local partners can receive and send the required fields.

The recommendation also signals direction for the region. Kenya is among the larger payments corridors in East Africa, and sender-recipient data requirements on cross-border crypto transfers would give Kenyan regulators the informational basis to monitor outflows that currently move outside conventional reporting channels.

The next observable milestone is legislative: watch for a draft VASP regulation or a directive from the Central Bank of Kenya or the Capital Markets Authority translating the IMF's recommendation into an enforceable rule, a step that would define the exact transfer thresholds and timelines providers must meet.