Digital lenders in Kenya have transformed how people access credit, but a new Central Bank of Kenya (CBK) survey has revealed a troubling reality.
These same platforms have become the financial sector’s most vulnerable entry point for criminals and money launderers.
The December 2024 survey reports that digital credit providers struggle with basic compliance measures that traditional banks have mastered.
While commercial banks have built sophisticated automated systems to screen customers against global sanctions lists, digital lenders are operating with alarming gaps in their defenses.
Gaps in Staff Training and Checks
The most concerning finding centers on staff preparedness. Nearly one in four employees at digital credit providers has zero familiarity with Targeted Financial Sanctions regulations.
This is a global framework designed to block terrorists and other dangerous actors from accessing financial systems, and a vulnerability that criminal networks can exploit.
Even among the remaining staff who claim some familiarity with these critical regulations, the survey suggests their knowledge may be superficial.
When institutions don’t properly train their frontline employees to recognize red flags, they essentially roll out the welcome mat for financial criminals.
Digital Lenders Using Old Data and Weak Technology
The survey uncovered another troubling pattern of inconsistent customer screening practices. While most digital lenders do check customers against sanctions lists, less than half bother to keep these lists current.
Some platforms operate with outdated information, creating windows of opportunity for sanctioned individuals to slip through.
To make matters worse, more than half of digital credit providers only screen customers when they feel it’s necessary, rather than as a standard practice. This is a similar situation to how security guards check IDs when someone looks suspicious – by then, it’s often too late.
Enhanced due diligence represents the financial sector’s equivalent of a thorough background check, reserved for higher-risk customers and transactions.
Traditional banks routinely conduct these deeper investigations, but only 35 percent of digital lenders have implemented such measures. This means that when red flags do appear, most digital platforms lack the tools and processes to investigate further.
The technology gap also compounds this problem. Nearly half of digital credit providers couldn’t even recommend basic compliance tools when surveyed.
This suggests they’re operating in a technological vacuum while traditional banks deploy AI and automated monitoring systems.
Traditional Banks Have Set a Higher Bar
CBK’s survey indicates just how far digital lenders lag behind established financial institutions. Commercial banks have developed comprehensive compliance frameworks with automated screening tools that continuously monitor transactions and update sanctions lists in real-time.
Microfinance banks, despite their smaller scale, demonstrated stronger compliance foundations than their digital counterparts.
Money remittance providers and foreign exchange bureaus also showed superior awareness and implementation of anti-money laundering measures, with most maintaining current sanctions lists and conducting regular customer screening.
CBK’s findings point to three critical areas that need immediate attention. First, digital lenders need comprehensive staff training programs that go beyond basic awareness to build real expertise in identifying and handling suspicious activities.
Second, these platforms must invest in automated screening technology rather than relying on manual processes that are prone to human error and inconsistency.
The survey noted that 83 percent of microfinance banks prioritize AI tools as their next upgrade, which is a lesson digital lenders should follow.
Finally, regulatory coordination needs improvement. The current patchwork of compliance approaches across different types of financial institutions creates gaps that criminals can exploit by simply choosing the path of least resistance.
When digital lenders fail to implement proper safeguards, they potentially provide financing channels for terrorism, money laundering, and other serious crimes.
Given the rapid expansion of digital lending in Kenya, these vulnerabilities could scale quickly if they’re left unaddressed.