Why FATF removal won’t lift Kenya’s AML burden

Kenya FATF grey list status has become one of the most important compliance issues for businesses, financial institutions, investors, and professional advisers. Much of the conversation in Nairobi treats Kenya’s eventual exit from the Financial Action Task Force (FATF) grey list as a finish line. It is closer to a gate. Crossing it relieves a particular kind of external pressure, but the anti-money laundering (AML) compliance framework now embedded in Kenyan law continues to operate. If anything, it runs harder.

There is a quiet assumption circulating among Kenyan businesses, and even among some who should know better: that once the country leaves the FATF grey list, the anti-money laundering burden eases and life returns to how it was before February 2024. It is an understandable hope. It is also wrong, and acting on it is a commercial mistake.

The obligations that have made the last two and a half years uncomfortable, the source-of-funds questions on ordinary transactions, the beneficial ownership disclosures, the slower account openings, the sharper scrutiny of property purchases, did not arrive because of the listing alone. They arrived in Kenyan statute. A delisting does not repeal a statute. Understanding that distinction is the difference between a business that treats compliance as a passing inconvenience and one that builds it into how it operates.

How Kenya ended up under increased monitoring

Kenya was placed on the grey list in February 2024, after FATF found strategic deficiencies in its framework for countering money laundering and terrorism financing. The headline gaps were familiar to anyone who follows financial-crime regulation: weak risk-based supervision of financial institutions and of the so-called designated non-financial businesses and professions, uneven investigation and prosecution of money-laundering offences, thin regulation of non-profit organisations, and incomplete beneficial ownership transparency.

Grey-listing is not a blacklist. It signals that a country has committed to fixing identified weaknesses within agreed timelines while submitting to closer observation. But the practical consequences are real. Banks abroad apply enhanced due diligence to counterparties in listed jurisdictions almost reflexively, correspondent relationships become more cautious, and the cost and friction of cross-border transactions rise. For a country that depends on foreign direct investment and on the confidence of multilateral lenders, the reputational drag is significant.

Where the exit effort stands in Mid-2026

Nearly two and a half years on, the picture is one of progress without conclusion. At its plenary of 17 to 19 June 2026, FATF confirmed that Kenya remains under increased monitoring. The authorities have done substantial work, building supervisory capacity, expanding investigations and prosecutions, and legislating a framework for virtual-asset service providers, but several items on the action plan are still open.

The outstanding work clusters around the same themes that caused the listing: improving risk-based supervision of financial institutions and of non-financial businesses and professions, deepening the practical use of suspicious transaction reporting, and ensuring targeted financial sanctions are implemented without delay. There is also a resourcing problem that has been openly aired in Parliament. The Financial Reporting Centre sought some KES 564 million to execute the exit plan, and a parliamentary committee has backed an additional allocation of roughly KES 388 million, in part because the Centre receives more than 10,000 suspicious transaction and activity reports a year and lacks the capacity to analyse them all.

So the exit timeline is real but conditional. Kenya wants out, has a plan, and faces a working deadline. But the assessment that matters is not whether boxes have been ticked. It is whether the system works in practice. That is a higher bar, and it is the key to everything that follows.

FATF does not delist a country for passing an exam. It delists for demonstrating that the regime functions, and then it keeps watching.

The misconception worth confronting

The error is to read “exit the grey list” as “return to the way things were.” It treats an international monitoring status as if it were the source of the compliance obligations, when in truth the listing was a symptom and the obligations are now the law.

Consider what removal from the list actually does. It lifts the FATF designation of increased monitoring. It eases, gradually rather than overnight, the enhanced scrutiny that foreign institutions apply to Kenyan counterparties. It improves the country’s standing with investors and lenders. These are worthwhile gains, and they justify the exit effort. But notice what removal does not do. It does not amend the Proceeds of Crime and Anti-Money Laundering Act. It does not relieve a bank of its duty to identify beneficial owners. It does not switch off a reporting institution’s obligation to file a suspicious transaction report. None of the domestic machinery is contingent on the listing.

Why the obligations outlast the listing

Kenya enacted significant reforms to combat money laundering and terrorism financing, exemplified by the Anti-Money Laundering and Combating of Terrorism Financing Laws (Amendment) Act, effective September 2023, which revised multiple laws including POCAMLA and the Companies Act. A second amendment Act, signed in June 2025, updated ten additional statutes to enhance oversight across various sectors, including mining and non-profits, while the Virtual Asset Service Providers Act, 2025, regulated cryptocurrency businesses. These legislative changes are permanent and not contingent on FATF timelines.

Beneficial ownership is now permanent law

Perhaps the clearest example is beneficial ownership. Companies and limited liability partnerships are required to maintain and lodge registers of their beneficial owners, and where relevant of nominee directors and nominee partners, with the Registrar, and to keep those records for at least ten years after a person ceases to hold that status. Failure to comply is not a soft breach. It attracts substantial fines and can lead to a company being struck off the register, a power the Registrar began enforcing in earnest in 2025. The obligation exists to make hidden control visible. It will be no less necessary the day after Kenya leaves the grey list than it was the day before.

Enhanced due diligence is not going anywhere

Customer due diligence and enhanced due diligence for higher-risk relationships is woven through the supervisory regimes of the Central Bank, the Capital Markets Authority, and the Insurance Regulatory Authority. The 2023 reforms also widened the net to capture designated non-financial businesses and professions, among them legal practitioners, real estate agents and dealers in precious metals and stones, and brought legal professionals within the suspicious transaction reporting framework. A delisting changes none of this. The advocate conducting source-of-funds checks on a property acquisition, or the bank interrogating the ownership behind a corporate client, is discharging a domestic statutory duty, not performing for an international audience.

Reporting, virtual assets, and a widening perimeter

The reporting architecture has tightened, not loosened. Suspicious transaction reports must be filed promptly once suspicion arises; the definition of economic crimes was expanded to capture the laundering of proceeds of corruption, and the 2025 legislation brought virtual-asset service providers squarely within scope. That last step reflects the reality of a market where a large share of the population transacts by mobile money and where crypto flows are no longer a fringe concern. Each expansion adds obligations. None of them is keyed to the grey list.

What removal changes, and what it does not

It helps to be precise about the two layers that exist in parallel. There is the external layer: FATF’s monitoring status and the European Commission’s listing of Kenya, in June 2025, as a high-risk third country. These are reputational and transactional in effect. They drive how the rest of the world treats Kenyan counterparties, and they are the ones who genuinely ease on exit. Even there, the EU’s delisting does not automatically follow FATF’s. It runs on its own assessment and its own timetable.

Then there is the domestic layer: POCAMLA and its companion statutes, the supervisory powers of the regulators, the beneficial ownership regime, the reporting duties. This layer is permanent, enforceable today, and indifferent to Kenya’s position on any international list. Removal from the grey list adjusts the first layer. It leaves the second entirely intact.

There is a further point that businesses underestimate. FATF removal opens an ongoing follow-up relationship, not a discharge. Countries that exit are expected to sustain and keep improving their regimes, and backsliding is precisely how a jurisdiction earns a return visit. The peers Kenya watches, South Africa and Nigeria among the four African countries removed in October 2025, were placed under a twelve-month post-observation period on exit. They did not dismantle their compliance frameworks. They are expected to keep them running.

The listing was the alarm. The law is the building code. Silencing the alarm does not excuse you from the code.

What this means for businesses and their advisers

If your operating assumption has been “we will relax once Kenya is off the list,” it is worth replacing it with a more durable one. A few practical implications follow.

Treat AML as infrastructure, not a project. The institutions that have fared best are those that built customer due diligence, beneficial ownership mapping and transaction monitoring into ordinary workflow, rather than standing up a temporary response to the listing.

Keep beneficial ownership records clean and current. Given the ten-year retention rule and the strike-off risk, ownership and nominee registers should be maintained as living documents, updated within the statutory notice periods whenever control changes.

Expect source-of-funds scrutiny to remain the norm. On significant transactions, property acquisitions, large transfers, charitable or foundation funding, anticipate documentation requests and build the evidence file early rather than scrambling at completion.

Professionals must own their reporting duties. Advocates, estate agents and dealers in high-value goods are inside the regime. A compliance posture that assumes otherwise is exposed.

Watch effectiveness, not announcements. Because supervision is moving from box-ticking to demonstrated outcomes, regulators will increasingly judge institutions on whether their programmes detect and report in practice, not merely on whether the policies exist on paper.

The honest message to clients is not that compliance is a burden to be endured until delisting. It is that compliance is now part of the cost and discipline of doing serious business in Kenya, and the firms which internalise this earliest will spend the least time and money on it over the long run. The grey list focused everyone’s attention. It would be a strange irony if leaving it caused that attention to lapse at the very moment the standards became permanent.

Need a Second Look at Your AML Posture?

PMA Advocates advises financial institutions, companies, foundations and individuals on POCAMLA compliance, beneficial ownership obligations, and source-of-funds and due-diligence questions on significant transactions. Get in touch for a confidential discussion.

Frequently Asked Questions

Is Kenya still on the FATF grey list in 2026?

Yes. At its plenary of 17 to 19 June 2026, FATF confirmed that Kenya remains under increased monitoring. Kenya was first listed in February 2024 and continues to work through its action plan, with several reforms still outstanding.

What actually changes when Kenya exits the grey list?

Exit removes the international label of increased monitoring and gradually eases the enhanced scrutiny that foreign banks apply to Kenyan counterparties. It does not repeal Kenya’s domestic AML laws. Obligations under POCAMLA, including customer due diligence, beneficial ownership disclosure, suspicious transaction reporting and record-keeping, remain in force regardless of listing status.

Do lawyers and estate agents have AML obligations in Kenya?

Yes. Since the 2023 amendments, designated non-financial businesses and professions, including legal practitioners, real estate agents and dealers in precious metals and stones, carry due diligence and reporting obligations under POCAMLA.

What is the beneficial ownership register requirement?

Companies and limited liability partnerships must maintain and lodge a register of beneficial owners, and of nominee directors or partners where applicable, with the Registrar, and retain those records for at least ten years after a person ceases to be a beneficial owner. Non-compliance attracts fines and can result in a company being struck off.

Is Kenya on the EU high-risk third-country list?

Yes. The European Commission added Kenya to its list of high-risk third countries in June 2025, following the FATF listing. EU-regulated institutions must apply enhanced due diligence to transactions involving Kenyan counterparties, and the EU runs its own delisting assessment on its own timetable.

This article is general information, not legal advice. The FATF and legislative position is stated as at 3 July 2026 and may change. Always seek professional legal advice before making decisions based on your specific circumstances.

Looking for more legal updates? Visit our Legal Insights page for articles on AML compliance, corporate governance, employment law, immigration, dispute resolution, and other developments affecting businesses in Kenya.