Is This Loan App Legit? How to Verify a Digital Lender in Kenya

There are now over 49 licensed digital credit providers in Kenya — but before the Central Bank of Kenya began enforcing its licensing regime in 2022, hundreds of unregulated apps were operating freely. Many are still active. Some were never legitimate in the first place. Others started as real businesses but have since been delisted or had their licences revoked.

For a borrower with an urgent need, the pressure to act quickly makes it tempting to skip verification. That is exactly what fraudulent operators count on. This guide gives you a clear, practical process to verify any digital lender in Kenya before you hand over your personal data or accept a loan.

Step 1: Check the CBK List of Licensed Digital Credit Providers

The single most important check you can do is confirm whether the lender holds a current licence from the Central Bank of Kenya (CBK). Under the Central Bank of Kenya (Amendment) Act 2021, all digital credit providers must be licensed by the CBK. This requirement became enforceable in September 2022.

To verify a lender's CBK licence:

1. Go to www.centralbank.go.ke
2. Navigate to "Bank Supervision" then "Digital Credit Providers"
3. Look for the lender by name in the published list of licensed DCPs

If the lender does not appear on this list, they are operating outside the law. That does not automatically make them a scam — some new entrants are in the application process — but it does mean you have no regulatory protection if something goes wrong.

Step 2: Search the Google Play Store or Apple App Store Carefully

Many scam loan apps mimic the names and logos of legitimate lenders. When searching for a loan app on the Play Store, look closely at:

• Developer name: Does it match the company name the lender claims? Search the developer name separately to see all their apps
• Download count: Established legitimate apps typically have hundreds of thousands of downloads. Be cautious with very new apps showing suspiciously high ratings but few reviews
• Review content: Read the 1-star and 2-star reviews carefully — these are harder to fake and often describe real problems
• App permissions: Before installing, check what permissions the app requests. An app that wants access to your contacts, SMS, gallery, and microphone before you have even signed up is a major red flag

The Communications Authority of Kenya has previously directed the removal of several predatory loan apps from app stores. If an app you are considering was recently added after being unavailable for a period, investigate why.

Step 3: Verify the Website and Company Registration

A real digital lender in Kenya will have:

• A functional website with a physical address and registered company details
• A company registration number that you can verify with the Business Registration Service (BRS) at www.businessregistration.go.ke
• Clear contact information including a customer service phone number and email address
• Publicly visible terms and conditions, privacy policy, and fee schedule

Scam operations often have websites that look professional but contain copied content, stock photos, and no verifiable company registration details. A quick search of the company name alongside terms like "Kenya scam" or "CBK licence" will often surface community warnings if the lender has a bad history.

Step 4: Test Their Transparency Before You Apply

Before submitting any personal information, contact the lender's customer service and ask these specific questions:

• What is your CBK Digital Credit Provider licence number?
• What are the exact fees and interest rates on a loan of [specific amount]?
• Is there any fee I need to pay before my loan is disbursed?
• How is my personal data stored and shared?

A legitimate lender will answer these questions directly and without hesitation. A scam operation will become evasive, change the subject, or pressure you to just "apply and see." If the customer service number does not work, that alone should end your consideration of that lender.

Step 5: Understand What Legitimate KYC Looks Like

All licensed digital lenders in Kenya are required to perform Know Your Customer (KYC) verification. This typically involves:

• Your national ID number or passport number
• Your phone number (linked to M-Pesa)
• Possibly your KRA PIN for larger loan amounts
• Access to your M-Pesa statement via an API or manual upload for credit assessment

What legitimate KYC does not involve is any payment. If the verification process includes a fee of any kind, you are dealing with a scam. Real lenders also do not need your M-Pesa PIN, your mobile banking password, or your CRB login credentials.

Step 6: Check CRB Status and Understand How Lenders Use It

Licensed digital lenders in Kenya are required to report borrower behaviour to Credit Reference Bureaus (CRBs). In Kenya, the main CRBs are Metropol, TransUnion, and Creditinfo. This means:

• Defaulting on a loan from a licensed lender can affect your credit score
• You can check your own CRB report to see which lenders have accessed your credit file
• If an unlicensed lender claims to report to CRBs, verify this claim — many do not have CRB data-sharing agreements

You are entitled to one free CRB report per year from each bureau. Visit www.metropol.co.ke, www.transunionkenya.com, or www.creditinfo.co.ke to access yours.

Known Warning Signs at a Glance

Red Flag	What It Suggests
Upfront fee required before disbursement	Almost certainly a scam
Not on CBK's licensed DCP list	Unregulated — no consumer protection
No working customer service number	High risk — cannot be contacted if problems arise
WhatsApp-only operation	Not a legitimate licensed lender
Requests your M-Pesa PIN	Fraudulent — no lender needs your PIN
No published terms and conditions	Cannot verify what you are agreeing to
Interest rates not disclosed upfront	Likely to include hidden charges

The Verification Checklist

Before borrowing from any digital lender in Kenya, run through this quick checklist:

1. Lender appears on the CBK list of licensed Digital Credit Providers
2. App is available on Google Play Store or Apple App Store with consistent developer name
3. Company is registered with the Business Registration Service of Kenya
4. Terms, fees, and interest rates are published and visible before application
5. Customer service responds to queries and provides a CBK licence number
6. No upfront fee is required at any stage
7. App permissions are reasonable and explained

Lenders like SwiftCash meet all these criteria — transparent fees, direct M-Pesa disbursement, no pre-payment requirements, and a clear loan structure from KES 1,000 to KES 40,000. That is the baseline standard any legitimate Kenyan digital lender should meet.

Taking five minutes to verify a lender before you apply is one of the most valuable things you can do to protect yourself in Kenya's mobile lending market. The list of licensed DCPs exists precisely to make this easy — use it every time.