Loan Apps in Kenya That Were Banned or Delisted by CBK — And Why

In March 2022, the Central Bank of Kenya opened its Digital Credit Provider (DCP) licensing process — and the Kenyan mobile lending market underwent one of the most significant regulatory shake-ups in its history. Lenders that had operated for years without meaningful oversight were required, for the first time, to meet real standards: capital requirements, conduct rules, data protection compliance, and fit-and-proper criteria for their directors.

Many did not apply. Others applied and were denied or failed to complete the process. The result was that a substantial portion of the apps that had been available to Kenyan borrowers disappeared from the regulated market. Understanding what happened — and what violations caused some lenders to exit — is one of the clearest windows into what bad digital lending looks like in practice.

How the CBK Licensing Process Changed the Market

Before the CBK's licensing regime took effect, any company could launch a digital loan app in Kenya without regulatory approval. The only meaningful gate was the Play Store's review process, which was not designed to evaluate financial compliance. This created a market with enormous variation in quality — from well-run fintech companies to outright fraudulent operations.

The CBK's DCP framework, enabled by the Central Bank of Kenya (Amendment) Act 2021, changed this fundamentally. Applications were reviewed against specific criteria, and lenders who did not meet those criteria were not licensed. The CBK published a list of approved DCPs, making the gap between licensed and unlicensed lenders visible for the first time.

Lenders exited the regulated market for several distinct reasons:

• They did not apply for a licence at all
• They applied but failed to meet the capital or governance requirements
• They applied but could not demonstrate compliance with data protection standards
• They withdrew applications when it became clear the scrutiny was real
• Their licences were revoked or suspended after conduct violations were identified

The Specific Practices That Led to Regulatory Action

The CBK's review process and enforcement actions have highlighted specific practices that disqualified lenders from continued operation. These are documented in CBK communications, DCI reports, and Parliamentary hearings on predatory digital lending:

Contact List Shaming

Perhaps the most widely condemned practice was the use of borrowers' contact lists to shame defaulters. Several prominent apps systematically sent messages to borrowers' family members, employers, and friends — messages that identified the borrower as a defaulter and pressured the recipient to help recover the debt.

This practice was identified as a core reason for regulatory concern. It constituted a violation of data protection principles (using contact data for a purpose beyond what borrowers consented to) and caused significant documented harm to borrowers, including job losses and family breakdowns.

Failure to Disclose True Cost of Credit

Some lenders charged what appeared to be low interest rates while hiding the true cost of credit through multiple layered fees. A "2% monthly interest" loan might carry a processing fee, a maintenance fee, a transaction fee, and a penalty fee that combined to make the effective annual cost several hundred percent.

The CBK's pricing disclosure requirements were specifically designed to address this. Lenders who built their business model around concealed fees faced a structural problem when required to publish full costs upfront — transparent pricing would destroy their competitive positioning.

Data Harvesting Beyond Stated Purposes

Multiple loan apps were found to collect far more personal data than necessary for credit assessment. This included reading SMS messages, tracking device location continuously, and accessing contacts and call logs without legitimate lending-related purposes. Under the Data Protection Act 2019, this constituted unlawful data processing.

The Office of the Data Protection Commissioner (ODPC) investigated several loan apps for these violations. Some apps operating in Kenya were found to be transmitting borrower data to servers outside Kenya without adequate data protection agreements — a direct violation of Kenyan data sovereignty provisions.

Predatory CRB Reporting

Some lenders reported borrowers to CRBs for very small defaults — sometimes KES 100 or less — or listed borrowers who had not actually defaulted. Others reported defaults without the legally required notification to the borrower. These practices resulted in thousands of Kenyans being blacklisted on CRBs for trivial or non-existent debts.

A Parliamentary report on predatory digital lending highlighted cases where borrowers discovered they were CRB-listed by multiple lenders for amounts they did not recognise, preventing them from accessing any formal financial services.

The Role of Google and the Play Store

Alongside CBK action, Google independently updated its Play Store policies to address predatory lending. In 2019 and again in 2022, Google updated its Personal Loans policy to prohibit loan apps that:

• Required access to contacts or photos as a condition of borrowing
• Charged annual percentage rates above 36% in specified markets
• Used deceptive practices including misleading fee disclosure

Several Kenyan loan apps were removed from the Play Store under these updated policies — some before the CBK's licensing regime took effect, others as a result of user reports that triggered Google's review process. The Play Store removals did not prevent apps from operating through APK downloads outside the Play Store, but they significantly reduced visibility and user base.

How to Check Whether a Lender Is Currently Licensed

The CBK maintains a current list of licensed Digital Credit Providers on its website. This is the definitive check:

1. Go to www.centralbank.go.ke
2. Navigate to "Financial Sector Regulation" then "Digital Credit Providers"
3. The published list shows all currently licensed DCPs

Licences can be revoked or suspended after the initial grant, so check the current list rather than relying on historical information. A lender that was licensed in 2022 may not be licensed in 2025 if they subsequently violated conduct requirements.

What Happened to Borrowers When Their Lender Was Removed?

For borrowers with outstanding loans from lenders who exited the regulated market, the situation varied. In most cases, borrowers remained legally obligated to repay outstanding loan balances — the removal of a lender's licence does not extinguish a valid debt. However:

• Lenders who ceased operations could not legally continue to charge fees on outstanding balances in some circumstances
• CRB listings made by delisted lenders could potentially be challenged as having been made by an unlicensed entity
• Borrowers who were harmed by specific prohibited practices (contact shaming, data misuse) had grounds for complaint with the ODPC and CBK regardless of whether the lender remained licensed

The Lesson for Borrowers Today

The story of how apps were removed from Kenya's regulated lending market is a case study in what happens when lending operates without oversight. The specific harms — contact shaming, hidden fees, aggressive CRB reporting, data harvesting — are not theoretical risks. They were documented, widespread practices that affected hundreds of thousands of Kenyan borrowers.

Choosing a licensed lender today is not just a regulatory technicality. It is the practical difference between borrowing from an entity that is held accountable for its conduct and borrowing from one that is not. Platforms like SwiftCash operate within the CBK framework precisely because that framework protects both borrowers and responsible lenders from the race-to-the-bottom that characterised Kenya's pre-2022 digital lending market.

The CBK's list is short and public. Checking it before you borrow takes under two minutes — and the history of what happened to Kenyan borrowers who did not check is reason enough to make it a non-negotiable habit.