Over the last few years, a new type of app has crept into the Kenyan trading space. It does not call itself a broker. It calls itself a “super app”, “hub”, or “one stop platform”.
The promise sounds attractive. One login that pulls everything together. You get trading signals, market news, charts, social copy trading, maybe even access to several brokers from one screen. Instead of juggling MT4, Telegram channels, WhatsApp groups and random websites, you just use this one sleek app.
The marketing usually leans hard on convenience, efficiency, and “community”. Screenshots of profitable trades, notifications with very precise entries and exits, leaderboards of “top traders” you can copy, and a friendly looking interface wrapped around it all.
To a busy Kenyan trader who does not want to spend hours comparing brokers or figuring out the CMA regulations, this can feel like an appealing shortcut. Why dig through the slow regulatory stuff when an app is handing you ready-made trades and “trusted partner brokers” on a silver plate? That thinking is exactly what these platforms exploit.
The Reality: An Unregulated Funnel Wearing A Friendly-Looking Skin
For many of these apps, the core business is not technology, research or risk management. Their real role is to act as a funnel between Kenyan users and offshore brokers that sit completely outside CMA’s reach. The app itself often does not hold your money. It does not maintain a segregated client account in Kenya. Instead, it collects your details, pushes you to open an account with a foreign broker, and nudges you to deposit into that broker using cards, mobile money or cryptocurrency.
From your point of view, it feels like you are dealing with the app. The logo you trust is on the screen, the signals come from there, the support chats are inside the app, and sometimes they even show an in-app “wallet”. But when you read the fine print, you find that the legal contract is actually with a broker in Vanuatu, Seychelles, Mauritius or some other offshore location with lax trader protection rules. And the “wallet” is just a mirror of that account, not a real account with a Kenyan licensed entity.
If the broker behaves badly, CMA has no direct power over them, since they are hiding outside the Kenyan jurisdiction. They are also not based in any of the other strict jurisdiction, such as one of the EU countries, where the Kenyan CMA could inform a local financial authority that could actually take action.
And because the app itself is often not licensed by CMA in any category, the regulator does not have a formal handle on the app either.
Kenyan regulators have recently started to clamp down on this gray area of middlemen. The serious and reputable ones can now fulfill certain requirements and become CMA regulated, and traders are urged to stay away from the rest.
Regulatory Shift: CMA Introduced the Intermediary Service Platform Provider License in 2025
CMA has now formally recognized that “middleman” platforms are not harmless toys. The Capital Markets (Licensing Requirements) (General) Regulations 2025 introduced a new license category called “Intermediary Service Platform Provider”. In plain language, this covers digital applications that aggregate, market or distribute capital markets products and services. That definition squarely hits the kind of apps that sit between Kenyan investors and multiple service providers.
The licensee list on https://licensees.cma.or.ke/ now has a dedicated category called “Intermediary Service Platform Provider”. CMA has already approved names we recognize well, such as Safaricom Plc and Airtel Money Kenya Limited, to operate as Intermediary Service Platform Providers. The regulator has also licensed fintechs like Jipay Payment Solutions and Sycamore Capital (Cashlet App) in this same category, after they passed through CMA’s regulatory sandbox. News reports explain that the aim is to give investors safe, regulated digital channels.
The truth is now simple. If an app positions itself between you and capital markets products, and it is not licensed by CMA as an Intermediary Service Platform Provider (or under another relevant category), it is operating outside the law, and you should avoid it. If the people behind the app are willing to break Kenyan law by forgoing CMA licensing, what makes you think they will respect any of the other Kenyan trader protection rules?
Understanding the CMA Intermediary Service Platform Provider (ISPP) License and Regulation
The “Intermediary Service Platform Provider (ISPP)” is a new regulatory category introduced by the 2025 Capital Markets (Licensing Requirements) (General) Regulations. The category is aimed at regulating digital platforms that aggregate, market, or distribute capital-markets products online.
The regulations define an Intermediary Service Platform Provider (ISPP) as a person or entity that operates an electronic application or platform facilitating the issuance, marketing, or distribution of capital markets products and services. Importantly, the platform itself acts as a distribution or access layer between traders/investors and brokers or other market participants.
The new licence category was introduced to address the rise of fintech-driven digital investment distribution targeting traders and investors in Kenya. Many digital investment apps partners with brokers, fund managers and similar, creating a regulatory gaps around accountability and investor protection.
Before the introduction of the ISPP license, the CMA and other parts of the Kenyan legal system was struggling to untangle situations where the broker was CMA-licensed by the app was not. By introducing the ISPP license category, the CMA has clarified the situation, and traders and investors in Kenya can now be instructed to only use ISPP:s that are both CMA-licensed and connects to a CMA-licensed broker. The ISPP license has brought Intermediary Service Platform Providers under CMA supervision, establishing a safer environment for Kenyan traders and investors. The respective liabilities of the ISPP and the broker have been clarified, which in turn enhances trader/investor protection.
By introducing an ISPP license rather than try to ban ISPP:s, the CMA has shown their willingness to encourage innovation in fintech distribution models in Kenya as long as trader and investor rights are respected and enforced. The ISPP:s now sit within the broader ecosystem of CMA-regulated intermediaries, alongside entities such as stockbrokers, broker-dealers, investment banks, fund managers, investment advisers and custodians.
ISPP Requirements
To receive and maintain an ISPP license, the entity must fulfill many different requirements, in accordance with CMA regulations. When it comes to corporate and governance, the application must include proof of incorporation, organizational structure disclosure, and the full list of fit-and-proper directors and management – just to mention a few of the stipulations. The corporation must have adequate capital and human resources, and the necessary operational infrastructure. Quality technical solutions and cybersecurity are very important, and must pass the CMA demands. When it comes to risk and compliance, there are of course conditions in place regarding the AML/CFT compliance framework, fraud detection protocols, risk management, and data protection policy. Audit trail and record-keeping must be carried out in accordance with CMA rules, an approved business continuity and disaster recovery plan must exist, and the entity must have and adhere to appropriate complaint-handling procedures.
In essence, CMA-licensed ISPP:s are required to meet a lot of the same conditions as the more traditional financial intermediaries.
When an ISPP holds a CMA license, it is permitted to carry out activities such as providing digital interfaces for traders and investors in Kenya, enable account opening, distribute investment products from licensed institutions, provide portfolio dashboards and market information, and facilitate transactions routed to licensed intermediaries.
The ISPP-license is not a license to act as a broker-dealer or market maker, hold client assets, or manage investments. All those things require separate licenses.
How Common ISPP Scams Works: Anatomy Of A Funnel
The Signal Hook
For many Kenyan traders, the main lure that pulls them into these apps are trading signals. The entry point is often a social media ad, a Telegram post, or a friend’s referral link promising “high accuracy signals”, “AI powered entries”, or “VIP signal setups”. Once you install the app, you are asked to register with your name, email, phone number and sometimes your ID right away. Very quickly, the app starts pushing trade ideas in the form of trading signals. Buy here, sell there, with green and red arrows, confidence percentages and profit screenshots. At this stage, it looks like a pure signals app. You still feel in control. Then comes the next step.
The Broker Blindspot
To actually act on the signals at the “full potential”, the app usually tells you to connect a recommended broker account. You might see a message such as “For best execution and auto-copy, open an account with our trusted partner broker.” You are presented with a broker name you might never have heard about, and certainly never researched. The app explains that connecting through them unlocks better spreads, automated copying or special bonuses. The link they give you does not go to the broker’s main website; it goes to a special affiliate or “IB” link.
In many cases, the broker they send you to sits in a foreign jurisdiction, and the broker has no incentive to obey Kenyan laws. It is not on the CMA list of licensed brokers, which you can check yourself at https://licensees.cma.or.ke/.
You did not wake up that morning planning to open an account with a Vanuatu or Seychelles firm. The app led you there, step by step, while your guard was down because you were focused on entries and exits and cool trading opportunities.
The Hidden Margin: Where The App Really Makes Money
These platforms rarely say “we make it more expensive for you to trade and earn a commission on the difference”. That would be bad marketing. Instead, they talk about “free signals”, “no subscription required”, or tiny monthly fees that do not match the cost of running the app.
The real income usually comes from one or two places:
- First, spread markups. The partner broker can discretely widen the spread or adjust trading conditions on accounts that come through a specific funnel. The extra cost baked into every trade then gets shared between the broker and the app owners. You do not see an explicit fee, but your trades are burdened with this extra friction.
- Second, kickbacks on deposits and volume. For every dollar you deposit and every lot you trade, the broker pays the app’s owners an introducing broker (IB) or affiliate commission. That money flows whether you win or lose, and it flows more if you overtrade or churn your account.
There are also brokers who pay commissions on the money you lose, because the money you lose go into their pocket, since they are market makers who take the opposing side of each trade. Market making is not necessarily a bad thing in itself, but when it is done by poorly regulated brokers, it is more likely to derail into situations that are negative for the trader. (Serious and properly regulated market maker brokers typically hedge their exposure to reduce the conflict-of-interest.)
No One Takes Responsibility
Since the app is your contact point, you naturally ask their customer support when something goes wrong, e.g. when you experience slippage, withdrawal delays, or outright refusal by the broker to process your request. The app support team now wash their hands and say “we are just a technology provider, please talk to the broker”. The broker, on the other hand, may say “your account is managed through our partner platform, please resolve this with them” or simply ignore you. You are bounced back and forth, with each side claiming the issue is not on their end.
Legally, your contract is usually with the offshore broker, under their law. The app sits in a gray zone, trying to claim it is just a tool. Meanwhile, the Kenyan CMA cannot easily help you, because the broker is outside their jurisdiction. In many cases, the app is also owned by a company outside Kenya, and this is not by accident.
Red Flags Of An Intermediary Scam
The Fake “CMA Approved” Badge
One of the laziest tricks is abuse of logos. Some apps add the CMA logo, or write “CMA-compliant technology” or “we work under CMA oversight”, even though they are nowhere on the official licensee list. In press statements and social posts, CMA has warned the public about unlicensed intermediaries using the CMA name without authorization.
Any scammer worth their salt can lie convincingly, so you need to do your own due diligence and check directly with the CMA. Fortunately, this is not very difficult, since the CMA list of licensed intermediaries is publicly available at https://licensees.cma.or.ke/.
If an app claims to be licensed as an Intermediary Service Platform Provider but does not appear under that category on the CMA list, that claim is false. Do not listen to whatever bullpoop reason they give you about why their name is not on the list. If there is actually a legitimate reason as to why they are not on the CMA list even though they are CMA licensed, they need to get on that right away and sort it out with the CMA. Until they have resolved that issue and got their name on the public list, you will not be doing any business with them. The same is true for entities that try to hijack one of the legitimate company names from the CMA list and claim they are operating the app in some type of partnership with them, even though that name does not show up in your client contract. Just say no.
The test is simple. Logos and verbose explanations mean nothing. The appearance of the firm’s name on the CMA portal is what matters.
No Direct Wallet With A Named Entity
A second warning sign is how the app asks you to move money. If the app never lets you deposit directly into an account clearly labeled with the name of a CMA licensed broker, but instead sends you to a random crypto address, a generic payment gateway, or an account name that does not match any licensed entity, you should take a step back and evaluate the situation before you proceed. Do not let them stress you with time-limited offers. The more they pressure you to deposit RIGHT NOW BEFORE IT IS TOO LATE, the more certain you can be that there is something fishy about the operation. Clearly, they do not want you to step back and start looking at the details. They want you to act quickly, before thing starts coming apart at the seams.
Proper CMA licensed online forex brokers are required to keep client funds in segregated bank accounts with banks licensed under the Banking Act. That means you should see the broker’s actual company name somewhere in the funding process, not just a vague “payments partner” or a string of letters on a crypto network.
“Managed Accounts” And AI Hype Without Licenses
Many intermediary apps now mix in “managed account” features. They say you can switch on AI-driven portfolio management, auto-compound profits, or follow a “pro manager” who handles the trading for you. In Kenya, anyone managing online forex portfolios for others for a fee needs to be licensed as an Online Foreign Exchange Money Manager, and anyone giving investment advice needs to be licensed as an Investment Adviser. If the app is not on the CMA list under either of those categories, yet it is effectively deciding your trades or reallocating your capital based on algorithms, that is another major red flag. Calling it “AI” does not sidestep the requirement.
Aggressive KYC And Data Harvesting
Finally, pay attention to how hard the app pushes for your documents. We are used to providing documentation to brokers to verify our identity and pass the KYC check. But handing all this documentation over to a poorly regulated app is not without risk. Think twice before you decide to send a middleman a copy of your ID or passport, selfies, utility bills and bank statements. Foreign apps are not bound by Kenyan rules on client data, anti-money laundering or complaint handling.
Anything you use to verify your identity is something a fraudster can use to pretend to be you. Sometimes, you wont even be aware that it is happening, if they are not actively targeting you (e.g. taking out loans in your name). Instead of going for you directly, fraudsters can use your documentation to perpetuate new frauds against other individuals and organizations, and several years down the line you might be contacted by law enforcement because “you” have showed up in a criminal investigation where “you” have defrauded people. Even though you are innocent, resolving the situation can require a lot of time and patience, and be very stressful.
A less serious, but also highly undesirable outcome, is when your documentation is sold or shared to a cluster of offshore bucket shops, who start cold calling or messaging you with “VIP investment opportunities”. You were trusting enough to sing-up and share you personal information with this foreign and poorly regulated app, so they hope you will be an easy mark for a plethora of scams.
A basic rule helps here: if an entity is not licensed in Kenya, think very carefully before handing it the same level of personal data you would give your bank or CMA licensed broker.
How To Verify An Intermediary In 60 Seconds
Step One: Check The License List
Go to https://licensees.cma.or.ke/ in your browser. That is CMA’s official list of licensed institutions and market players. Do not follow any link provided by the app or someone marketing the app. Open a clean browser window and enter the address yourself.
Use the search function at the top and type the name of the company behind the app. If nothing appears, the app is not licensed by CMA in any category. At that point you already know you are dealing with an unregulated middleman as far as Kenya is concerned.
Step Two: Look At The Category
If a name does appear, check which category it sits under. For this topic, the key ones are:
- “Dealing Online Foreign Exchange Broker” – this entity acts as principal and market maker, opens client accounts, runs the trading platform and issues statements.
- “Non-Dealing Online Foreign Exchange Broker” – this entity connects you to the market but does not trade from its own book.
- “Online Foreign Exchange Money Manager” – this entity manages forex trading on your behalf.
- “Intermediary Service Platform Provider” – this is the newer category introduced in the 2025 licensing regulations, covering digital applications that aggregate, market and distribute capital markets products.
If the app tells you “we are CMA approved as an intermediary service platform provider”, but on the portal it only appears, say, as a fund manager or does not appear at all, the story they are telling you is not accurate.
Step Three: Verify The “Partner Broker” From The Other Side
If the app says “we work with X Broker” or “we are an official partner of Y Markets”, do not take as gospel. They might just put the name of a CMA licensed broker or internationally famous broker there to seem more legit, when the plan is to funnel you to an entirely different, offshore broker.
- Check that the named broker appears on CMA’s list under dealing or non-dealing online forex brokers if they claim to operate under a CMA license. If the broker does not appear there, you are being funneled offshore, no matter what the app implies.
- If you find the broker in the CMA list, you will also find its official web site. Go to the official web site and look for information about the app. Many serious brokers have a “Partners”, “Affiliates” or “Third Party Platforms” page where they list approved integrations. If the app is not mentioned anywhere, that is a warning signal. You can either step away now, or investigate further, e.g. by contacting the broker directly through the official contact channel and ask if they formally collaborate with the app. Do not use any contact information provided by the app or someone marketing the app.
This multi-step check takes a bit of time and affort, but it can save you months of headache.
Why The Middleman Is Not Your Friend
The Legal Gap
When you trade directly with a CMA licensed broker, you sit inside a clear legal framework. Your rights and the broker’s obligations are rooted in the Capital Markets Act and in sector regulations like the Capital Markets (Online Foreign Exchange Trading) Regulations 2017. If a licensed broker fails to meet its obligations, there is a path for complaints through the firm itself and then through CMA. In extreme cases of failure, the Investor Compensation Fund (ICF) can pay limited compensation to investors of licensed intermediaries, up to a cap (currently KSh 200,000 per investor, based on recent regulatory and press updates).
If your contract is with an foreign entity with no CMA license, your protection is weak. The app can vanish from app stores overnight. Its website can go offline. The customer service can ignore your calls without risk. The app and the broker you were funneled to will blame each other, forever, and you have no practical recourse. Owners and directors can hide on the other side of the planet, far away from Kenya´s jurisdiction. When the broker is not CMA-licensed, you are not even covered by the ICF.
Getting your money back will most likely prove impossible. The money has already been pushed to some offshore broker account in a jurisdiction with strong banking privacy laws. Or been converted to cryptocurrency. The app owners can shrug and say “we never held client funds”, while the offshore broker points to its obscure terms and conditions and the foreign court named there.
You are left outside the ICF, outside CMA’s core supervision, and outside Kenyan courts’ easy reach.
Performance Distortion And Demo Theatre
There is another problem, one we tend to talk less about, and it is known as “performance illusion”. Many intermediary apps show you glossy backtested curves or “live performance” of their signals and strategies. But these results can be based on demo feeds, cherry-picked trading conditions, or simulated accounts that do not reflect the slippage, spreads and execution issues real clients face. Sometimes, the app routes demo trades through a higher quality liquidity feed than the one the actual partner broker gives to small real-money accounts. The result is that your strategy looks smoother and more profitable in demo mode than what you will actually experience once you deposit and commence real-money trading.
When you realize the lie, there is little you can do about it if the app is based in a lax offshore paradise.
Actionable Advice For Kenyan Traders
Cut Out The Middleman
If you honestly want to trade, you do not need a mystery app in the middle. Go straight to the website of a CMA licensed broker. Use the official list at https://licensees.cma.or.ke/ to find the correct domain, then use the information to do your research.
Once you have decided which broker that suits you best, open and fund your account there, through the official onboarding channel for traders in Kenya.
If you want signals or education, treat that as a separate question from where you trade and hold your money. The more layers you add between you and your funds, the harder it becomes to untangle and fix things when something goes wrong.
No Unknown Wallets
Adopt a simple rule for yourself as a trader. Only deposit money into accounts that clearly belong to a CMA licensed entity. If the payment instruction points you to a personal account, a random fintech name you have never seen on the regulator’s list, a crypto wallet, or something else outside the CMA-list, step back.
Report The Bad Actors
If you come across an app targeting Kenyan users without a CMA-license, you can report it to the CMA. This is especially important if the app claims to be licensed by the CMA or is using the CMA name or logo in some way to appear more legit.
Take a few minutes to report it to CMA through the contacts listed on https://www.cma.or.ke/ or via the eCitizen service portal at https://cma.ecitizen.go.ke/. Your can ddd screenshots, links, and any communication you received.
The CMA is proactive, but it can not have eyes everywhere, and fraudsters are very good at shape-shifting online. Reports from actual traders helps the CMA by pointing out where the problem is. Even when players are hiding abroad, the CMA can issue warnings, put pressure on app stores, contact payment providers, and so on.
Examples of Middlemen Targeting Kenyan Traders
Olymp Trade
For Kenyan users of Olymp Trade, the trades are executed by an affiliated offshore brokerage entity rather than by the Olymp Trade brand itself. The main broker entity associated with the platform is Saledo Global LLC, a company registered in Saint Vincent and the Grenadines, a jurisdiction known for its lax approach to retail trader protection. Neither Olymp Trade or Saledo are CMA-licensed.
Olymp Trade is marketing its services heavily to Kenyan traders, especially through YouTube, Instagram and Telegram. It accepts very small deposits, which makes it appealing to inexperienced traders on a shoestring budget.
When a Kenyan trader opens an account on Olymp Trade, the user agreement is typically with Saledo Global LLC and not with Olymp Trade. Saledo Global acts as the counterparty to the trades, while Olymp Trade provides the interface, charting tools and an order placement system.
Kenya is not the only jurisdiction where Olymp Trade is active, and the UK Financial Market Authority (FCA) has issued an investor warning against OlympTrade a/k/a OlympTrader, and against Saledo Global LLC.
ZuluTrade
ZuleTrade is a social trading and copy trading platform that acts as a middleman between traders and brokers. A user signs up on ZuluTrade, and connects a separate forex broker account. Examples of commonly used brokers are IC Markets, FXTM and Pepperstone. Note that the user is actively connecting broker account here; he or she is not simply funneled and tricked into signing up with an external broker.
ZuluTrade is not CMA-licensed and using this middleman can create legal complexity for Kenyan traders. Who is really responsible if something goes wrong: Zulu or the broker? And have you checked if the broker you connect your Zulu account to holds a CMA license or not?
It should be noted that ZuluTrade does not present itself as a broker. It is clear about being a copy-trading platform where traders subscribe to strategies and trades are executed by third-party brokers.
ZuluTrade Inc. was previously registered with the U.S. Commodity Futures Trading Commission (CFTC) as an Introducing Broker (IB) and was also a member of the National Futures Association (NFA). This registration was necessary because ZuluTrade was acting as an intermediary for clients of U.S. brokers. However, in 2016, ZuluTrade voluntarily withdrew its NFA membership and CFTC introducing broker status. The U.S. market became unprofitable and the compliance burdens increased, prompting the exit. In older reviews online, you might still come across claims that ZuluTrade is authorized by the CFTC and NFA.
This article was last updated on: March 12, 2026