The 2026 AML Compliance Guide for Kenyan SACCOs: What SASRA Expects and How to Be Ready

If the SASRA licence renewal feels more demanding in 2026 than it did a few years ago, there is a straightforward reason for it. 

The compliance standard that SASRA Kenya is applying to every deposit-taking SACCO in Kenya has genuinely shifted and institutions whose AML programmes were built for an earlier regulatory environment are feeling that most acutely right now.

The AML Amendment Act 2025 expanded SASRA's supervisory authority directly and the enforcement that followed made clear that this was not a legislative formality. The compliance gaps catching institutions out are not extraordinary failures either. They are the kind that accumulate quietly inside SACCOs in Kenya managing AML obligations manually, without the infrastructure to sustain them continuously across a full calendar year.

What follows is a clear breakdown of what SASRA and the FRC now expect from your AML programme, where most Kenyan SACCOs are currently falling short and what being genuinely examination-ready before September 30 actually requires.
‍

Why 2026 SACCO Compliance in Kenya Looks Different?

The AML Amendment Act 2025 amended the Sacco Societies Act directly, giving SASRA Kenya an explicit legislative mandate over AML supervision that is meaningfully stronger than what existed before it. The September 30, 2025 renewal was the first time Kenyan SACCOs encountered that mandate in its full form and the results were immediate.

Five deposit-taking SACCOs were issued conditionally restricted licences following governance and compliance failures and have spent all of 2026 barred from taking new member deposits. 

With September 30, 2026 approaching, 2026 SACCO compliance in Kenya is being shaped by what that enforcement cycle revealed about the gap between what SASRA Kenya now expects and what most institutions currently have in place.
‍

The SASRA Licence Renewal Kenya Deadline: What September 30 Actually Means

Kenya's deposit-taking SACCOs operate on a licence that expires every December 31. 

Section 25 of the Sacco Societies Act requires renewal applications to reach SASRA 90 days before that expiry, which is what makes September 30 the date every regulated SACCO in Kenya works backwards from.

Getting that submission right means satisfying SASRA's renewal checklist across governance, capital and compliance:

• Fit-and-proper declarations for all board members and senior management
• Proof of minimum core capital of KSh 10 million
• Proof of FRC registration for AML compliance

That last requirement is what makes the SASRA September 30 deadline a compliance conversation and not just an administrative one. Proof of FRC registration tells SASRA your institution has been operating as a reporting institution under POCAMLA with active, ongoing obligations. 

In 2026, the SASRA licence renewal examination goes beyond confirming that registration exists to understanding whether the compliance programme behind it has actually been running and the SASRA renewal requirements are being assessed with that distinction clearly in mind.
‍

SASRA Kenya and the FRC: Understanding the Compliance Relationship

SASRA and the FRC play distinct but interconnected roles in Kenya's AML supervisory framework.

Under Kenya's sector-based supervisory model, SASRA is the designated AML supervisory body for all regulated SACCOs. 

The FRC, operating as Kenya's Financial Intelligence Unit, is where suspicious transaction reports are filed and where AML reporting quality is assessed. 

Registration on the FRC's goAML portal is mandatory for every deposit-taking SACCO under Section 47A(1) of POCAMLA and it is treated as a baseline compliance requirement at renewal, not an administrative formality.

What this means in practice is that AML compliance for SACCOs in Kenya is not a single-regulator obligation. SASRA and the FRC both have oversight over your institution's AML programme and your FRC registration is the thread that connects both relationships at renewal. An institution that treats its FRC obligations as separate from its SASRA standing is managing two compliance relationships as though they are one, and September 30 is typically where that assumption gets tested.

‍

SACCO Regulations Kenya: What POCAMLA Requires From Every DT-SACCO

Every deposit-taking SACCO in Kenya carries a set of active, ongoing AML obligations under POCAMLA that extend well beyond FRC registration and run continuously throughout the year, not just at renewal.

Appointment of a Money Laundering Reporting Officer

Every SACCO must appoint an MLRO at management level. The FRC is explicit that this role cannot be held by the CEO or the Internal Auditor and any change in MLRO must be notified to the FRC within 14 days of the appointment.

Suspicious Transaction Reporting

Under POCAMLA, suspicious transactions must be reported to the FRC within two days of suspicion arising. The AML Amendment Act 2025 made delayed STR filing explicitly non-compliant, not a timing issue. For institutions running manual monitoring processes, consistently meeting that window across a full membership base is where the operational gap tends to show.

Cash Transaction Reporting

Cash transactions at or above USD 15,000 must be filed with the FRC at the end of the week in which they occurred, or immediately where circumstances demand earlier reporting.

Customer Due Diligence and KYC

Static onboarding records do not satisfy POCAMLA compliance Kenya 2026. Risk profiles must be continuously updated as member behaviour changes and KYC records must reflect the current status of your membership, not the status at sign-up.

Beneficial Ownership

Self-declaration of ownership structure is not enough for corporate and Chama members alike. Under Kenya's 2020 Beneficial Ownership Regulations you must independently identify any natural person who owns 10% or more ownership or exercises significant control and document and maintain this as part of your SACCO AML programme Kenya.

Record Retention for Seven Years

KYC files and transaction logs must be kept for at least seven years and be searchable on demand. Records that exist but are not readily producible carry the same risk of noncompliance as records that do not exist.
‍

The SASRA September 30 AML Checklist for Kenyan SACCOs

Across Kenya's regulated cooperative sector, the same compliance gaps tend to surface at renewal year after year. Not because institutions are unaware of their obligations but because maintaining them continuously, across a full membership base, is harder than most compliance calendars are built to accommodate.

The institutions that clear September 30 without complications are not doing more compliance work in August. They are the ones that resolved this gap before the deadline made it urgent.

‍

What Happens When SASRA Licensed SACCOs Fall Short?

For SASRA licensed SACCOs that arrive at renewal without meeting the due regulatory requirements, the consequences are well documented from the 2026 licensing cycle and they are not administrative inconveniences.

Conditionally Restricted Licence 

The institution can be limited to credit-only operations and strictly prohibited from taking new or further member deposits for the entire licensing year. Existing member balances and loans remain intact but no new deposits can be accepted from members or the public.

Enhanced Regulatory Conditions 

SASRA can impose additional compliance requirements on top of existing obligations, placing the institution under closer supervisory scrutiny going into the following year's renewal cycle.

Full Licence Revocation 

Where an institution fails to apply for renewal or cannot meet its obligations, its authorisation is automatically revoked and it is prohibited from conducting any regulated SACCO business with immediate effect.

Public Gazette Notice 

SASRA publishes the full list of restricted and revoked institutions in the Kenya Gazette, making the outcome visible to members, employers and the broader market. For a sector built on member trust, that visibility carries consequences well beyond the regulatory cycle in which it occurs.
‍

From Deadline Compliance to Year-Round Readiness

Kenya's SACCO sector is at an inflection point and the institutions that will navigate it most successfully are the ones that have stopped treating AML compliance as a deadline-driven exercise and started treating it as year-round infrastructure. SASRA Kenya's enforcement posture in 2026 has made the cost of the alternative very clear.

2026 SACCO compliance in Kenya demands a programme that runs continuously, documents everything and holds up under examination, not one that gets assembled in August and presented in September. The obligations under POCAMLA, the FRC's reporting requirements and SASRA's supervisory expectations are not seasonal. They compound over time and the gap between meeting them and appearing to meet them is exactly what renewal examinations are designed to surface.

FlexComply, the award-winning end-to-end AML compliance solution from FlexM, a leading global fintech conglomerate, gives deposit-taking SACCOs in Kenya the compliance infrastructure to close that gap permanently. From FRC goAML compliance and automated STR filing to continuous member risk profiling and a full immutable audit trail, FlexComply keeps your AML programme examination-ready all year round so September 30 is a date you meet, not one you dread.

Get started with FlexComply today!

‍