Regulators Strike Back — Kenya and Nigeria Unleash Crackdowns on Rogue Digital Lenders

NAIROBI and LAGOS — Across Africa's largest fintech markets, regulators are finally fighting back against a wave of predatory digital lenders that have long operated with impunity, introducing sweeping new rules that threaten to reshape the continent's lending landscape. In Kenya, the National Treasury has outlined a comprehensive regulatory framework requiring all Non-Deposit Taking Credit Providers (NDTCPs) to be licensed under strict eligibility criteria, governance standards, and consumer protection obligations designed to clean up a sector plagued by exorbitant interest rates, data misuse, and unethical debt collection tactics. As of April 2026, the Central Bank of Kenya (CBK) has licensed 227 Digital Credit Providers (DCPs), up from just 85 before 2025, while hundreds of unlicensed operators have been ordered to shut down.

The new rules have teeth. Under the framework, all licensed NDTCPs must fully comply with the Data Protection Act, obtaining certificates from the data protection authority and developing comprehensive data protection policies. The CBK has also introduced identity verification standards requiring borrowers to submit IDs and selfies, while separate regulations give the CBK unprecedented power to veto directors of lending firms and enforce a Kshs 20 million capital threshold for those seeking licenses. Perhaps most significantly, a landmark 2025 ruling has determined that unlicensed digital lenders cannot use courts to recover loans they had no legal right to issue in the first place, effectively wiping out their primary enforcement mechanism.

In Nigeria, the crackdown has been equally aggressive. The Federal Competition and Consumer Protection Commission (FCCPC) has intensified its enforcement, placing over 100 unregistered loan apps on its radar following the expiration of a key compliance deadline on January 5, 2026. By that date, some 521 digital lenders had been registered under the new Digital, Electronic, Online and Non-Traditional Consumer Lending Regulations, 2025, bringing a measure of order to a space deliberately designed to resist it. 

The Central Bank of Nigeria (CBN) has also upgraded fintech licenses as digital lenders outgrow existing regulations, while fining Moniepoint and Opay N1 billion each for breaches of know-your-customer rules, underlining its tougher stance on compliance.

However, the regulatory push has not been without controversy and setbacks. In a move that has dismayed consumer protection advocates, Nigeria's regulators suspended key provisions of the 2025 Digital Consumer Lending Regulations, a decision analysts warn could undermine the country's ambition to become Africa's leading fintech hub. 

The Africa Digital Economy Observatory (ADEO) stated that the decision "risks delaying the much-needed consumer protections and discouraging responsible capital inflows into Nigeria's fast-growing digital financial sector". Critics argue that pausing the regulations sends the wrong signal to consumers, startups, and investors, conveying that rules are political rather than institutional and that scale beats compliance.

The stakes are enormous. In Kenya, the CBK currently licenses three categories of lending institutions: 38 commercial banks, 14 microfinance banks, and 195 non-deposit-taking credit providers as of December 2025, with digital credit providers accounting for Sh110.5 billion in loans. Cabinet Secretary John Mbadi told Senators that the licensing regime has already played a critical role in weeding out non-compliant operators, ensuring only regulated entities remain in the market. 

Yet for indigenous digital lenders, many argue that regulation is not punishment but protection, establishing licensing clarity, consumer data boundaries, disclosure standards, and fair collection practices that legitimate operators desperately need to distinguish themselves from predatory actors.

As both nations push forward, fundamental challenges remain. In Kenya, digital lenders have raised concerns about the lack of access to the Global Standing Instruction (GSI) framework, describing it as a systemic risk, particularly as they serve customers at the lower end of the income pyramid who often have a limited understanding of credit obligations. 

While the Central Bank has stated that expansion of the GSI framework to fintech lenders and microfinance institutions is underway with phased completion expected by 2026, the gap between regulatory ambition and practical implementation remains dangerously wide. The coming months will determine whether Africa's great regulatory crackdown will succeed in curbing predatory lending or be undermined by political interference and implementation failures.