Is selling gift cards legal in Kenya? A 2026 regulatory guide

You have a gift card you want to sell. Someone offered you a rate over WhatsApp. Someone else linked you a website you've never heard of. And somewhere in the back of your head a question is forming: am I even allowed to do this in Kenya?

The short answer is yes. The longer answer is the one that keeps you out of trouble — and that's what this guide is for.

We are going to walk through exactly which Kenyan laws apply to selling a gift card in 2026, which regulators you should and should not be worrying about, what makes a sale "legal but risky" versus actually illegal, and the specific habits that keep an honest seller on the right side of every Kenyan statute that touches this activity. By the end you should be able to look at any platform, any WhatsApp offer, and any payout method and know whether selling through it puts you at risk.

This article is general informational content based on publicly available Kenyan law as of May 2026. It is not legal or tax advice — for specific situations consult a licensed Kenyan advocate or tax professional. The full disclaimer is at the bottom.

1. The bottom line up front

Selling gift cards in Kenya is legal in 2026, with two qualifications you must satisfy:

• The card must be legitimately acquired. It must be yours, gifted to you, or bought with clean money. Selling a card you stole, found, or knowingly received from a fraudster is an offence under the Proceeds of Crime and Anti-Money Laundering Act (POCAMLA).
• Your chosen platform must operate with enough traceability to satisfy AML monitoring. This does not mean every transaction needs a passport upload. It means the platform must be identifiable, must have records that can be produced if asked, and must not advertise "anonymous" or "no-KYC" trading as a feature.

Gift card resale is not a separately licensed activity in Kenya. No regulator currently issues a "gift card seller licence." The activity is governed by the general framework of Kenyan commercial law, the AML regime (POCAMLA + LN 153/2023), and the Kenya Revenue Authority's income tax rules. That is the regulatory picture in one paragraph.

If that is all you needed, you can stop reading here. The sections below explain why each of those statements is true, and what the practical implications are for you as a seller in Kakamega, Nairobi, Mombasa, Kisumu, or anywhere else in the country.

2. The Kenyan regulatory landscape — who actually has jurisdiction here

Four Kenyan bodies touch financial activity in a way that could conceivably matter to a gift card seller. Knowing what each one does (and what it does not do) is half the battle.

Central Bank of Kenya (CBK)

The CBK is the country's monetary authority. It supervises commercial banks, licenses payment service providers (the institutions behind M-Pesa, Airtel Money, and similar rails), sets monetary policy, and — under the Virtual Asset Service Providers Act 2025 and its draft 2026 implementing regulations — is set to take joint authority over crypto-related payment activity such as stablecoin dealing.

Does the CBK regulate gift card resale?No. Gift cards are not money in the regulatory sense; they are not e-money; they are not a virtual asset under the VASP framework. A gift card is a prepaid commercial instrument issued by a retailer (Amazon, Apple, Steam, etc.) for goods or services on that retailer's platform. The CBK has no licensing regime for buying or reselling those instruments.

Capital Markets Authority (CMA)

The CMA regulates securities, exchanges, brokers, and — under the dual-regulator model set out in the Virtual Asset Service Providers Act 2025 — is the designated supervisor for tokenization platforms and crypto exchanges once that framework's implementing regulations are finalized. Its remit is investment products and the market infrastructure around them.

Does the CMA regulate gift card resale?No. Gift cards are not securities, investment products, or tokenized assets. A retail gift card is a consumer commercial instrument and falls entirely outside the CMA's authority.

Financial Reporting Centre (FRC)

The FRC is Kenya's financial intelligence unit. It enforces POCAMLA, receives Suspicious Transaction Reports (STRs) from regulated entities, and coordinates with international bodies on cross-border money laundering investigations. This is the regulator whose name you actually want to remember.

Does the FRC regulate you as an individual gift card seller? Not directly. Individual sellers are not "reporting entities" under POCAMLA. But the platform through which you sell may be — and a platform that detects suspicious patterns in your trades is required to report them. From your perspective, this means: nothing changes about how you trade honestly, but everything changes about how a fraudulent trade would surface.

Kenya Revenue Authority (KRA)

The KRA collects income tax, VAT, withholding tax, and other duties. Any income you earn from gift card resale — whether it is a one-off sale or a recurring trading activity — is taxable income in Kenya.

Does the KRA regulate gift card resale? Not as an activity — it does not issue a licence or permit. But it absolutely taxes the income, and the rules differ depending on whether you are an occasional seller or a habitual trader. We dedicate Section 4 entirely to this question.

The negative space — who does not regulate this

Notice what is missing from this list: there is no Kenyan equivalent of the U.S. Money Services Business (MSB) regime that would explicitly cover gift card resellers. There is no dedicated "gift card act." There is no Kenyan parallel to the Nigerian Central Bank's de-facto restrictions on crypto-and-card off-ramping. Kenya's regulatory posture toward gift card resale is to leave it inside the general framework of commercial law and let the AML and tax regimes handle the edge cases.

This is genuinely different from some neighbouring jurisdictions, and it is one of the reasons Kenya has emerged as one of the more straightforward markets in which to run gift card trades.

3. POCAMLA — the one statute every Kenyan seller should understand

The Proceeds of Crime and Anti-Money Laundering Act of 2009 (revised 2022) is the single piece of Kenyan legislation that most directly governs what a gift card seller can and cannot do. Its operational details were updated by Legal Notice 153 of 2023 (the POCAML Regulations 2023). Together, these are the AML rulebook in Kenya.

What POCAMLA actually criminalizes

POCAMLA makes it an offence to transact, acquire, possess, conceal, disguise, transfer, or move any property, asset, or monetary instrument that the person knows or ought reasonably to know is the proceeds of crime.

The phrase "ought reasonably to know" is the part that matters. It means you cannot escape liability by deliberately not asking questions when the circumstances clearly suggest the card was obtained through fraud, theft, or another crime.

The Act defines "monetary instruments" specifically to include coins, paper currency, travellers' cheques, personal cheques, bank cheques, money orders, securities, and "any other negotiable instrument in bearer form or transferable by delivery." A gift card is not separately listed — but a gift card is an asset, and the Act applies to "property and assets" generally. The plain reading is: a gift card that represents proceeds of crime triggers the same liability as cash that represents proceeds of crime.

What this means for an honest seller

You are not the person POCAMLA is built to catch.

If you bought an Amazon gift card with your own M-Pesa balance, received a Steam card as a birthday gift from a relative abroad, or got an iTunes voucher as part of a freelance payment from a client you actually know, you are nowhere near the boundary of POCAMLA. The Act targets people who knowingly move dirty assets. Selling your own legitimately acquired card to a licensed platform is a normal commercial transaction.

What POCAMLA does require of you, in practice:

• Be able to explain where the card came from. Not in court, not formally — just to yourself. If you can articulate "I bought this on 14 April for KSh 3,400 from the M-Pesa till of the corner agent," you have already done what 99% of honest sellers will ever need to do.
• Avoid platforms that explicitly position themselves as "anonymous" or "no-questions-asked." Such platforms are the ones that attract POCAMLA-relevant attention, and you do not want your transaction sitting next to those transactions when the FRC reads the platform's filings.
• Stay below cash-economy thresholds for sales. The minute a transaction is rerouted entirely through cash, the AML system loses its visibility into it, and the law treats that loss of visibility as suspicious in itself.

The reporting threshold

Under LN 153/2023, regulated reporting entities must file Cash Transaction Reports (CTRs) for transactions above a defined threshold (currently set at the equivalent of USD 15,000 for single cash transactions, with aggregation rules for structured transactions). They must also file Suspicious Transaction Reports (STRs) for any transaction — at any value — that triggers their internal AML rules.

What this means for sellers: if you are a normal retail seller trading gift cards in the hundreds or low thousands of US-dollar-equivalent, you are well below the CTR threshold and the system runs in the background without you ever knowing it is there. If you are doing very large transactions you should be using a platform that handles the CTR/STR filings as part of its service — not avoiding the threshold by splitting trades into smaller pieces, which is itself an offence ("structuring").

What honest sellers actually need to do under POCAMLA

Almost nothing different from what they would already do:

• Sell only cards you legitimately acquired.
• Use a platform that does not market anonymity.
• Keep informal records of where the card came from for the largest trades.
• Use traceable payout rails (bank transfer, M-Pesa) rather than cash drops.

That is the entirety of POCAMLA compliance for a retail seller.

4. The KRA tax angle — what you owe Nairobi when you sell

Tax is the part most sellers overlook, and it is also the part the KRA cares most about. Income from gift card resale is taxable in Kenya. There is no "informal economy exemption" that wishes the obligation away.

How the income is classified

The KRA looks at the pattern of the activity rather than the activity itself.

• Occasional sellers — one or two cards a year, perhaps gifts you received and converted to cash — fall under general personal income. The amounts in question are typically small, you declare them on your annual return (or, in practice, they often go undeclared at the low end and are not pursued by the KRA in audits of individuals).
• Habitual sellers — anyone trading regularly enough that the activity has a recognizable cadence — are conducting a business. That triggers business income classification, which carries the obligation to register for a KRA PIN-based business profile, keep books, and file annual returns appropriate to the income earned.
• Cross-border edge cases — sellers receiving payment from offshore parties in foreign currency, or routing through cryptocurrency, can find themselves with additional reporting obligations and FX gain/loss calculations. This is the territory in which professional tax advice is genuinely worth its fee.

VAT considerations

Most retail gift card resale activity in Kenya does not attract VAT. The reasons are technical (gift cards in the secondary market generally do not constitute a taxable supply of goods or services in the VAT sense, and most retail sellers will not breach the VAT registration threshold). For larger commercial operations the analysis becomes substantially more complex and we are not the right authority to walk you through it — talk to a tax advisor.

Why a compliant platform is your friend on the tax question

This is the underrated point. When you sell through a platform that issues receipts, records each trade against a verifiable seller profile, and pays out through traceable rails, the KRA-side work is straightforward: your bank or M-Pesa statement shows the deposit, the platform receipt shows the source, and your records assemble themselves.

When you sell through a Telegram contact for cash, none of that exists. From the KRA's perspective the income still existed, but you now have no way to evidence what fraction of your bank balance came from legitimate gift card resale versus anything else — and that asymmetry tends to play badly in any tax review.

A platform that creates audit trails is not adding paperwork to your life. It is taking the paperwork off your hands. Use that.

5. Legal vs questionable — a side-by-side framework

The line between a legal gift card sale and a questionable one is not as fine as it sometimes seems. The factors are concrete, and they cluster together — a sale that is questionable on one axis is usually questionable on three or four.

Use this table whenever you are about to commit to a trade.

A sale that is on the left of every row is unambiguously legal. A sale that is on the right of two or more rows is one where you should be asking why.

The middle column does not exist. If you find yourself reaching for it — "well, this contact is on Telegram but they paid me last time" — that is exactly the cognitive move that POCAMLA's "ought reasonably to know" language is written to capture. The pattern is the warning, and the absence of a problem so far is not evidence that the next trade will be safe.

6. Red flags — when selling crosses into actually illegal territory

There are specific patterns that move a seller from "legal but informal" into territory that exposes them to actual POCAMLA liability. They are listed below not because we expect any honest reader to fall into them but because the threshold is sometimes crossed by accident.

• Selling cards you didn't legitimately acquire. A card you found, were given by someone whose source you don't know and can't ask about, or that was sent to you as part of "load this for me and I'll split the profit" is a card you should not be reselling. The fact pattern is exactly the one POCAMLA's "ought reasonably to know" language targets.
• Acting as an intermediary for someone you suspect is laundering. If someone offers you a cut to sell their cards through your account, what is being offered is the use of your identity as a layering tool. This is a textbook smurfing pattern, and the legal exposure on your end is real even if you never asked what was actually going on.
• Structuring transactions to stay under reporting thresholds. Splitting one USD 20,000 trade into eight USD 2,500 trades is, by itself, an offence in Kenya — it is the act of structuring (deliberately keeping individual transactions below CTR thresholds to avoid detection). The KRA and FRC look specifically for this pattern.
• Using platforms that explicitly market "anonymous" or "no-KYC" trading. The platforms that advertise these features attract POCAMLA-relevant attention by design. Your transactions sit in the same dataset as the ones the FRC will eventually pull. Even if your individual trade was clean, the platform-level scrutiny can pull your activity into a wider investigation.
• Cash payouts above modest amounts. Once you cross out of M-Pesa and bank rails into cash, the AML system has lost sight of the transaction. That loss of sight is itself a red flag, and is one of the easiest signals to spot in a later forensic review.

The honest seller's protection here is simple: stay on the left of the table in Section 5, and you will not encounter any of these patterns by accident.

7. The cryptocurrency comparison — why gift cards are different

It is worth a brief note on what gift cards are not, regulatorily speaking, because confusion between gift card resale and cryptocurrency trading is the source of a lot of unnecessary worry among Kenyan sellers.

Kenya enacted the Virtual Asset Service Providers Act in late 2025, and the National Treasury published its draft 2026 implementing regulations earlier this year. Together they establish a substantial new licensing regime for crypto-related activity: exchanges, custodians, stablecoin dealers, and tokenization platforms will need to register, hold capital, and operate under FRC reporting obligations. The public consultation on the draft 2026 regulations closed on 10 April 2026; the framework is now in finalization, with the first wave of VASP registrations expected once Cabinet adopts the final text.

Gift cards are not within that perimeter.A retail gift card is a prepaid commercial instrument denominated in fiat (USD, EUR, GBP, KES depending on the issuer), redeemable for goods or services on a specific retailer's platform. It is not a virtual asset in the VASP sense; it is not a tokenized financial instrument; it is not a stablecoin. The 2026 VASP framework explicitly applies to "virtual assets" with the meaning given in the FATF definitions, which centers on cryptographically-secured digital representations of value that can be traded or transferred for payment or investment purposes. A Steam card does not qualify.

This is genuinely important and worth internalizing: as of mid-2026, gift card resale in Kenya is materially less regulated than cryptocurrency trading. If you are a crypto trader who has been navigating the VASP rules, you can set most of that work aside when you turn to gift card resale — the obligations are smaller, the licensing perimeter is smaller, and the framework is general commercial law plus POCAMLA plus KRA. That is it.

8. How to keep yourself protected — practical checklist

If you internalize one section of this article it should be this one. Eight habits, each small, that taken together cover essentially all of the legal exposure a Kenyan gift card seller could realistically incur in 2026.

1. Use a platform with verifiable identity

Look up the operating company. A real platform will have a registration number you can verify in a public registry — Kenyan, Hong Kong, UK, Singapore, Estonian, whichever jurisdiction the entity is incorporated in. SellCardNow is operated by KolaCash Limited, Hong Kong CR# 78258768, and you can verify that record in the Hong Kong Companies Registry yourself. Any platform that cannot give you an equivalent answer is a platform you should not be trusting with the proceeds of your card.

2. Keep informal proof-of-purchase for higher-value cards

For any card with a face value above about USD 50 — Amazon $100, Apple $100, Steam $100, and so on — try to retain something that shows where the card came from. A screenshot of the email it arrived in, a receipt from the store, a chat with the friend who sent it as a gift. This is what protects you if you are ever asked. For lower-value cards it is genuinely not necessary.

3. Use bank and M-Pesa rails, never cash

The single highest-leverage rule in this entire article. Every payout you accept should land in your bank account or a licensed mobile money wallet under your name. Cash payouts have no audit trail, and the absence of an audit trail is itself the AML red flag. Free cash sounds like a feature; in the regulatory environment of 2026 Kenya, it is a liability.

4. Decline trades from anonymous contacts, even at a premium

The single most reliable warning sign of a problematic counterparty is anonymity combined with above-market pricing. A WhatsApp number that came from nowhere offering you 10% over market for an Amazon card is not an opportunity; it is a recruiter for the layering side of someone else's fraud. The price premium exists precisely because the activity is risky. Do not take that risk for them.

5. Keep records for the KRA

Even informally. A spreadsheet with date, card type, face value, payout amount, and platform receipt URL is enough for the entire year for most retail sellers. If you are ever asked, you can answer; if you are never asked, you have lost nothing for keeping it.

6. Know the platform's KYC policy before you commit large amounts

A platform should be willing to tell you, before you sell a large card, what its identity verification process looks like. The right answer is "we ask for verifiable identity above [some threshold] because of POCAMLA reporting obligations." The wrong answer is "we don't ask for anything ever," because that means the platform has no defensible AML posture and any pressure from the FRC will land on the platform's user records — which include yours.

7. Use a single, named operating channel

Do not let trades drift off-platform — onto WhatsApp side chats, offline meetings, or third-party intermediaries. The whole point of a platform is that the platform owns the record of the trade. The moment the trade leaves the platform's surface, the protection leaves with it.

8. Treat suspicious-good as a warning, not an opportunity

If a quote is materially better than every other quote you've seen for the same card on the same day, and you cannot articulate why, treat the gap as a fee being charged to you in risk. Sometimes the gap is real (one platform has a buyer who specifically wants that card type, today, in volume — and you happen to catch the moment). But the more often someone offers you an inexplicable premium, the higher the probability that they need you more than you need them, and that need is almost always tied to something you do not want to be part of.

SCN's own safety posture (for the record)

Without disclosing operational specifics, here is what SellCardNow's posture looks like, against the checklist above:

• Verifiable operator. KolaCash Limited, HK CR# 78258768. Public domain, public address, support email and WhatsApp under our own name.
• Progressive KYC. Light-touch for small trades; full verification for larger amounts, with the threshold disclosed during the trade itself, not surprise-applied at payout.
• M-Pesa and bank-only payouts. No cash drops, no off-platform settlement, no crypto-only routing.
• Real-time price snapshot for each trade. The rate you saw at the moment of confirmation is captured against the trade record. If a dispute arises, both parties can reference the same audit trail.
• Public, ongoing community. WhatsApp groups, a monthly bonus paid every month without interruption since August 2025, and a public seller community that has been visible throughout the platform's operation.

That is the framework we operate under. You should hold any platform you trade through to the same standard.

9. Conclusion — selling gift cards is legal in Kenya, and the rules are simpler than you think

Selling gift cards is legal in Kenya in 2026. Doing it safely requires the same hygiene as any other small commercial activity: legitimate source, traceable platform, honest tax reporting, and a healthy refusal to be flattered by an offer that is too good to make sense.

The regulators that matter are the FRC (under POCAMLA) for AML and the KRA for tax. The regulators that do not matter for this activity are the CBK and the CMA — those bodies oversee adjacent activities (payments, securities, crypto under the 2025 VASP Act) but do not license or supervise gift card resale itself. Kenya's regulatory posture toward this activity is to let general commercial law, the AML regime, and the income-tax framework do the work, and not to create a separate gift-card-specific licensing layer.

If you want to go deeper:

• See our Kenya seller hub for the M-Pesa-focused walkthrough of how a Kenyan gift card trade actually settles.
• Read our seven scam signals guide for the specific red flags to watch for in any single trade.
• Read our rates explainer to understand why platforms quote different numbers for the same card — and how to make sure the platform you choose is competing on rate rather than competing on anonymity.

If you have specific questions, you can reach our support team on WhatsApp (linked from the Kenya hub) or by email. We are not in a position to give you legal or tax advice — for that you want a licensed Kenyan advocate or a registered tax practitioner — but for general questions about how the rules apply to your situation, we are happy to point you to the relevant sources.

Disclaimer

This article is general informational content based on publicly available Kenyan law as of May 2026. It is not legal or tax advice. Specific situations — large recurring trade volumes, complex cross-border transactions, business income classification questions, or any matter involving anti-money-laundering compliance — should be referred to a licensed Kenyan advocate or registered tax practitioner. The authors and SellCardNow / KolaCash Limited expressly disclaim any liability arising from reliance on this article in lieu of professional advice. Where law changes — and the VASP framework in particular continues to evolve through 2026 — this article will be updated; the "last reviewed" date at the top is the authoritative reference for the version you are reading.