Investment Scams in Kenya: How to Verify a Licence Before You Invest

Why the licence matters

The Capital Markets Authority (CMA) has repeatedly warned that unlicensed entities marketing foreign exchange, cryptocurrency and money-market-style products are operating unlawfully and fraudulently soliciting funds from the public. A public caution dated 11 September 2026 named 15 of them, among them QVSE, CBEX, Just Markets and Global Investment Group. Several promoted crypto, forex mentorship or purported money-market funds.

Under section 23(1) of the Capital Markets Act, a person carrying on business as a stockbroker, dealer, investment bank, fund manager, investment adviser or authorised depository needs a valid CMA licence. Contravening the Act is an offence under section 34. That licence is not a business permit. It is a regulatory authorisation, and it decides whether you get the protections of Kenya’s capital-markets laws. Without it, you are putting money into an unregulated product with zero recourse.

The Central Bank of Kenya (CBK), CMA, SASRA, the Insurance Regulatory Authority (IRA) and the Retirement Benefits Authority (RBA) each keep a separate register for the activity they regulate. That is why the first question is always which regulator should be licensing this firm.

How to verify a CMA licence

Use the CMA’s official register at licensees.cma.or.ke. Do not rely on a screenshot, a link sent by the promoter or a “certificate” on the firm’s own website. Type the address yourself.

1. Get the exact legal name. Ask for the registered company name, not just the brand. A platform called “WealthPro” may be run by a differently named company.
2. Search the CMA register. The register lists authorised securities dealers, fund managers, investment banks, online forex brokers and other licensed market participants.
3. Match the licence category to the activity. A fund-manager licence does not automatically authorise forex brokerage, and an online forex broker licence does not authorise fund management.
4. Check the licence number and status. The register shows the licensee’s name, address, licence number and, where available, website. Confirm they match the firm contacting you.
5. Check the product itself. A licensed firm may still sell products that need separate approval. The CMA also publishes approved unit trusts, sub-funds and alternative investment funds.
6. Contact the CMA if anything is unclear. It directs the public to confirm licensed entities on its website and to report suspicious operators to the Authority or its fraud unit.

Worked example: a forex pitch

The names below are invented for illustration. Suppose a WhatsApp group promotes “NairobiFX Elite”, promising 25% monthly returns from AI forex trading. The admin sends a screenshot of a certificate in the name of “Global Trade Capital Ltd” and says the firm is “CMA approved”.

Here is what a careful investor does, and what they are likely to find.

Absence from the register does not by itself prove criminal intent. It does mean the firm cannot offer the protections of Kenya’s capital-markets framework, and combined with guaranteed returns and crypto payments it is a strong reason not to invest.

Beyond the CMA: CBK and SASRA

Not every financial scam falls under the CMA. The right regulator depends on what the entity claims to be.

CBK checks

If a firm says it is a bank, mortgage-finance company, microfinance bank, forex bureau or money-remittance provider, verify it with the Central Bank of Kenya. Ask for the exact legal name and licence category, check the CBK directory of licensed commercial banks or microfinance banks, and confirm the name, category and contacts match who approached you. Do not rely on a screenshot, an app or a customer-care number the promoter supplies.

SASRA checks

If the scheme calls itself a SACCO, chama with deposits, savings group or cooperative, verify it with the Sacco Societies Regulatory Authority. A SACCO cannot take deposits without a valid SASRA licence.

1. Ask whether it is a Deposit-Taking SACCO or a Non-Withdrawable Deposit-Taking SACCO.
2. Check the matching SASRA list, and confirm it appears on the current list for the relevant financial year.
3. Treat any “SACCO” that offers guaranteed monthly returns, crypto pools or forex trading as high risk if SASRA does not list it.

For a legitimate SACCO shortlist, see our best SACCOs in Kenya guide.

Which regulator should I check?

The psychology scammers use

Scammers do not merely sell a product. They manufacture certainty, using urgency, authority, social proof and the fear of missing out.

• Authority borrowing. Official-looking logos, fake regulatory certificates, celebrity clips, screenshots of media coverage, or claims that a politician or bank backs the scheme.
• Social proof. A crowded Telegram group, daily “withdrawal proofs” and supportive comments suggest everyone else has already profited.
• Urgency. “Only five slots left” or “send before the market opens” is designed to make you skip verification.
• Reciprocity. A small first withdrawal, a free signal or a “bonus” makes you feel you owe the promoter a bigger deposit.
• Commitment escalation. Once you have deposited KES 5,000, the next request is KES 50,000, and each payment makes walking away harder.
• Fear of missing out. Screenshots of “KES 2 million earned this week” make caution feel like self-sabotage.
• Isolation. You are told not to discuss it with family, bankers or regulators because “they will not understand the strategy”.
• Sunk-cost pressure. When withdrawals stall you are told to pay a “tax”, “verification fee” or “unlocking fee” to release profits that never existed.

The red-flag checklist

• Guaranteed high monthly returns. “30% every month with no risk” is a classic warning sign.
• Pressure to act immediately. “Offer closes today” exists to stop you verifying.
• Unlicensed or offshore operator. It is not on the CMA register, or says it is regulated abroad while soliciting Kenyans without local authorisation.
• Crypto-only or untraceable payments. Requests to send money to a personal wallet or an informal channel make recovery very difficult.
• WhatsApp, Telegram or social-media solicitation. Unsolicited investment pitches on messaging apps are a common route for fraud.
• Celebrity videos and borrowed credibility. Fake endorsements, profit screenshots and a “secret trading system” build false trust.
• No clear business model. If it cannot explain returns beyond “trading”, “AI”, “arbitrage” or “crypto mining”, treat it as high risk.
• Refusal to provide documents. A legitimate intermediary can state its licence category, licence number and regulatory status.
• Withdrawal barriers. Delays, new “taxes”, “verification fees” or demands for more deposits before releasing funds.
• Recruitment-based rewards. High commissions for bringing in new investors point to a pyramid-style structure.

Score an offer

Tick every flag that applies to the offer in front of you.

How fake crypto groups operate

Fake crypto groups rarely begin with a direct request for money. They build an illusion of consensus first.

The tell is not that a group discusses crypto. It is that it asks you to send funds to an individual wallet, refuses verification and rewards recruitment more than investment performance.

If you have already paid: report it

1. Stop payments and preserve records. Screenshots, chat logs, payment confirmations, wallet addresses, phone numbers, website links and any receipt or contract.
2. Lodge a complaint through the CMA’s online complaints portal. If you cannot use it, download the CMA complaint form (English or Swahili) and send it in.
3. Report suspected securities fraud to the CMFIU on the numbers below or by email.
4. Send a written complaint if necessary, addressed to the Chief Executive, Capital Markets Authority.
5. Report payment fraud to your bank or mobile-money provider. Ask for a recall or freeze where possible and give the transaction references and recipient details. Speed matters here.
6. Report to the police or DCI where criminal fraud is suspected. The CMFIU is a Kenya Police unit based at the CMA offices, formed in May 2009 in collaboration with the CMA to investigate securities-related fraud.

Contact details change, so confirm them on the CMA website before you call or write, and be wary of anyone who contacts you offering to recover lost money for a fee. That is a common second scam.

The investor’s rule

If you want somewhere legitimate to start, see our reviews of the CIC money market fund and the Sanlam money market fund, and then run them through the same checks.

Frequently asked questions

How we researched this guide

This is an independent, source-based guide. We checked the CMA’s fraud-unit and complaints pages for the contact numbers, email, address and the complaints route, its page on the fraud unit for how it was formed, the Kenya Law text of the Capital Markets Act for the licensing requirement and the offence provision, and press reports for the CMA’s public caution of 11 September 2026. The 15 entities are as reported by the press, because we could not open the notice itself. The version of the Act we could open is the original 1989 text, which lists brokers, dealers and investment advisers; the fuller list of licence classes in this guide (investment banks, fund managers, authorised depositories) follows the research draft and the CMA’s licensing regulations, and we could not read the current consolidated text. The deck’s verification slide shows five steps, and the article adds a sixth, contacting the CMA. We found no single register for crypto platforms and have not verified the current state of Kenya’s virtual-asset rules. The compounding figures are our own arithmetic. Registers and contacts change, so confirm them on each regulator’s site. We have no commercial relationship with the CMA, CBK, SASRA or any firm named. Contact the editor to report an error.

Sources

1. Capital Markets Authority, Complaints (online portal, complaint form, fraud unit numbers and email, address)
2. Capital Markets Authority, Fraud Investigation Unit (CMFIU) (unit of the Kenya Police based at the CMA, general contacts)
3. Capital Markets Authority, CMFIU background (formed May 2009 in collaboration with the Kenya Police)
4. CMA licensee register (the official register to search)
5. Kenya Law, Capital Markets Act (1989 text) (section 23 licensing, section 34 offences)
6. Tech-ish, CMA names 15 investment platforms operating in Kenya without a licence (17 September 2026, report of the CMA notice dated 11 September)
7. WeCompare, best SACCOs in Kenya 2026 (legitimate SACCOs)
8. WeCompare, CIC money market fund review (a regulated fund, for comparison)