Kenya Due Diligence, Verification & Fraud-Risk Insights

Kenya's Business Registration Service continues to publish compliance notices for companies that the Registrar has reasonable grounds to believe may not be conducting business or operating. The BRS compliance process expressly points companies to linking the business, filing annual returns and declaring beneficial ownership information.

Why it matters: a certificate of incorporation alone does not answer whether a company is currently compliant, active in practice, up to date with statutory filings or transparently reporting its beneficial owners. For transactions, supplier onboarding and credit decisions, current registry verification should form part of the due-diligence file.

Official source: Business Registration Service compliance notice.

KRA has enhanced the Tax Compliance Certificate process by tying eligibility more closely to eTIMS/TIMS registration, timely returns and payments, outstanding liabilities and VAT compliance where applicable. KRA also announced validation of income and expenses in 2025 income-tax returns against eTIMS/TIMS, withholding-tax data and Customs import records from 1 January 2026.

Why it matters: tax-status checks are becoming more data-driven. A due-diligence review should verify that a TCC is genuine and current, but should not treat the certificate as a substitute for broader financial, operational and statutory-compliance checks.

Official sources: KRA TCC enhancements and KRA income and expense validation notice.

Recent DCI matters have again highlighted disputes involving competing ownership documents and alleged forged land records. In May 2026, the DCI opened an investigation into disputed land ownership in Ruai after both sides presented supporting documents. In a separate February case, investigators alleged forged signatures of registry and legal professionals in an attempted acquisition of Nairobi property.

Why it matters: buyers and lenders should avoid relying on a single title copy or seller-supplied documents. A stronger property check can combine registry searches, ownership history, encumbrance review, identity checks, site verification and reconciliation of inconsistencies before funds are committed.

Official sources: DCI Ruai land investigation and DCI Pangani land-fraud case. Allegations in active matters remain subject to the court process.

In February 2026, the DCI announced arrests and court proceedings arising from an alleged fake-gold transaction in which an American national was reportedly defrauded of USD 217,900. The investigation included allegations involving a purported escrow arrangement and movement of funds through Kenyan business structures.

Why it matters: high-value commodity and cross-border transactions require more than document collection. Counterparty checks may need to verify the legal entity, directors and beneficial owners, physical operations, licences, transaction intermediaries, banking instructions, adverse information and the commercial plausibility of the proposed deal.

Official sources: DCI report of 17 February 2026 and DCI follow-up of 18 February 2026. Charges and allegations are not findings of guilt unless and until determined by a court.

The Kenya National Qualifications Authority is expanding digital qualification records and verification through the National Qualifications Database and related validation systems. The NQD provides functionality for individuals, employers and other users to verify academic or professional certificates and check qualification records.

Why it matters: employers should authenticate material academic and professional credentials rather than relying on photocopies or CV statements. Verification is particularly important for regulated, technical, senior, fiduciary and safety-sensitive roles, and where foreign qualifications need alignment or validation.

Official sources: KNQA National Qualifications Database and KNQA qualification alignment and validation portal.

Kenya's Data Protection Act requires personal data to be processed lawfully, fairly and transparently, for specified purposes, and limited to what is necessary. The General Regulations also regulate indirect collection of personal data and require controllers and processors to establish and document the lawful basis relied on for processing.

Why it matters: pre-employment and background screening should be scoped to the role and purpose. Employers and screening providers should consider notice, lawful basis, proportionality, accuracy, security, retention and the handling of sensitive information before collecting or reporting personal data.

Primary legal sources: Data Protection Act, Cap. 411C and Data Protection (General) Regulations, 2021.