A Kenyan mobile-money company plans to receive remittances from workers in the United Arab Emirates. This hypothetical composite assumes domestic Kenyan payment or e-money authority and control of the Kenyan wallet ledger. Workers would send money after receiving their wages. The decision is whether the company should obtain UAE authorisation, become a licensed UAE remitter's Kenyan payout partner, or supply technology and distribution. The proposed first release uses a UAE remitter as the sender-facing principal, an authorised Kenyan inbound remittance and foreign-exchange actor, and the company's authorised domestic wallet service.
Executive Summary
- Start with the licensed-remitter partnership. The UAE entity must control customer acceptance, the binding quote, AED collection and the remittance obligation. Keep Kenyan wallet crediting within the company's Central Bank of Kenya (CBK) permission. The foreign-correspondent provisions support this division, but prohibit using a partnership to rent a licence or transfer regulated control. (Exchange Business Regulation, C 7/2025, arts. 15, 24.7–24.11; National Payment System Act, ss. 12–13.)
- Insert a Kenyan bank or money remittance provider authorised for the inbound and FX functions unless the wallet company's own CBK authority covers them. Domestic e-money authority does not establish that additional scope. (Money Remittance Regulations, 2013, regs. 2–4, 22, 32; Central Bank of Kenya Act, ss. 33A–33B.)
- A proprietary digital remittance business has an identifiable UAE route: Exchange Business Category IV. It requires a UAE limited liability company, at least AED 25 million paid-up capital and an initial AED 25 million bank guarantee. It prohibits cash-in and cash-out; FX must accompany digital remittance. The ongoing guarantee can exceed that minimum. (Exchange Business Regulation, arts. 3.5–3.6, 6.2, 8.2, 9.2–9.3.)
- A technology contract does not authorise the supplier to provide the remittance. Outsourcing requires the applicable approval, and the licensed exchange business cannot outsource its permitted core activity. An instant money transfer service provider may also require CBUAE registration despite using a licensed UAE partner. (Exchange Business Regulation, arts. 1.17, 3.14, 15.)
- A worker's independent transfer after wage receipt does not make the remitter a wage-payment processor. Employer-funded wage disbursement is a different activity. Adding payroll processing, a stored AED balance, independent payment initiation or UAE cash collection requires a fresh permission assessment before release. (Exchange Business Regulation, arts. 1.33, 3.2–3.9; Retail Payment Services and Card Schemes Regulation, scope exclusions 4–6.)
- Release only after the actual entities, permission conditions, settlement accounts, data arrangements and failure procedures match the proposed allocation. Sender complaints remain with the UAE remitter; Kenyan wallet complaints remain with the Kenyan provider. Their contracts must coordinate investigation and recovery without removing customer rights. (Exchange Business Regulation, art. 24.11; National Payment System Regulations, 2014, regs. 25–29, 38–41; CBUAE Consumer Protection Standards, standards 8.1.2–8.1.3.)
The licensed-remitter partnership is the first route
The Kenyan company should first supply authorised Kenyan wallet payout to a remitter authorised by the Central Bank of the United Arab Emirates (CBUAE). This recommendation depends on an actual division of functions. The remitter must contract with the sender and undertake delivery of the agreed amount. It must accept the instruction, control the binding FX quote and receive AED through its authorised collection arrangements. The Kenyan company should accept a funded domestic payout instruction within its CBK scope. (Exchange Business Regulation, C 7/2025, arts. 2–3, 15, 24.11; National Payment System Act, ss. 12–13.)
The strongest objection is that an exchange business cannot outsource its licensed remittance activity. That prohibition prevents a nominal principal from giving the Kenyan firm effective control of its UAE business. It does not eliminate the foreign-correspondent settlement contemplated by article 24.11.2. The proposed division therefore preserves the UAE principal's regulated decisions and assigns the overseas institution its own locally authorised function. Any separate outsourced support must satisfy article 15. (Exchange Business Regulation, arts. 15, 24.7–24.11.)
For the first release, the UAE remitter should operate the remittance channel. A Kenyan-owned software component can sit inside that service only under the applicable outsourcing arrangements and the principal's control. App ownership, branding and a statement that another firm is “licensed” cannot cure a conflicting customer contract or money flow. The app must identify the remitter before the worker accepts the quote. (Exchange Business Regulation, arts. 15, 24.7–24.10; CBUAE Consumer Protection Standards, standards 2.1.5.4–2.1.5.6.)
The proposed funding method is an electronic payment from the worker's own bank account. The first release should exclude UAE cash collectors, employer wage files and a reusable AED balance. These are product boundaries chosen to keep the initial service within a defined remittance permission. They do not dispense with customer verification, the remitter's digital-channel permission or approval of a regulated outsourcing arrangement. (Exchange Business Regulation, arts. 3.5–3.8, 15; Cabinet Resolution No. 134 of 2025, arts. 14, 24, 28.)
Kenyan authority must cover the actual inbound function
The National Payment System Act and the National Payment System Regulations, 2014 govern the wallet activity. CBK's authorisation materials distinguish electronic retail transfers, e-money issuers and small e-money issuers. The provider's actual approved services and conditions determine its scope. CBK may exempt a small e-money issuer from the ordinary PSP requirements listed in regulation 46(2). The notification, safeguarding and complaint duties apply subject to any exemption granted. Designation of a payment instrument is a separate question. A directory entry is evidence to match against the permission, rather than permission for every service described as mobile money. (National Payment System Act, ss. 11–13; National Payment System Regulations, 2014, regs. 2, 4–5, 46(2); CBK, Directory of Authorized Payment Service Providers, 10 August 2026, approved-services column.)
A Kenyan wallet receiving the domestic proceeds of an authorised inbound transfer need not become the international remittance principal merely because it credits the recipient. The Money Remittance Regulations expressly contemplate payment to another payment service provider acting for the payee. They also regulate the business of transmitting money internationally and conducting associated FX. The contractual allocation must distinguish those activities from local wallet issuance and redemption. (Money Remittance Regulations, 2013, regs. 2, 22.)
The first structure should therefore use an authorised Kenyan commercial bank or money remittance provider for inbound remittance and any Kenyan FX dealing. A remittance provider must route its foreign-exchange inflows and outflows through commercial banks; net settlement is permitted under the specified conditions. The wallet company may assume that inbound role only if its own permission or separate CBK approval covers it. Regulation 3's exemption for a CBK-approved entity requires that approval; a domestic PSP description does not establish it. (Money Remittance Regulations, regs. 3, 22, 32; Central Bank of Kenya Act, ss. 33A–33B.)
The wallet provider must also address changes to its existing service. Regulation 13 requires notification at least 30 days before a substantial change, including relevant changes to scope, channels or major partners. That notification is not a substitute for authority to perform a new regulated activity. Operational outsourcing has its own 30-day notification requirement and must preserve management responsibility and CBK supervision. Where a substantial change concerns a designated payment system or payment instrument, regulation 54 separately requires the provider to seek CBK approval 30 days before implementation. (National Payment System Regulations, regs. 13, 23, 54.)
CBK and the Treasury published the draft National Payment System Bill, 2026 for consultation. The proposal to replace the existing Act supplies no operating permission. The corridor should be structured under the operative permissions and instruments governing each actor, rather than the proposed Bill. (CBK, Draft National Payment System Policy and National Payment System Bill, 2026, consultation notice, 21 September 2026.)
Own UAE authorisation would change the company's responsibilities
An own-service route requires an appropriately authorised UAE entity. Under the Exchange Business Regulation, Category I covers currency exchange, remittances and the specified Wages Protection System activity. Category II covers currency exchange and remittances. Category III permits currency exchange without remittance. Category IV permits remittances through digital channels acceptable to CBUAE, without physical service outlets. A Category I or II provider adding digital remittance must also satisfy the relevant special-product requirements. (Exchange Business Regulation, arts. 3.2–3.8.)
Category IV fits a proprietary digital-only remittance proposition more closely than a generic “UAE remittance licence” label. It prohibits cash-in and cash-out and permits FX only in connection with digital remittance. The applicant must be a UAE limited liability company. Article 7.3 permits CBUAE to waive the ownership restriction up to 100% foreign ownership for this category; the waiver is discretionary. (Exchange Business Regulation, arts. 3.5–3.6, 6.1–6.2, 7.3.)
The minimum paid-up capital is AED 25 million. The initial bank guarantee is a separate AED 25 million requirement. Once operations begin, article 9.3 requires the greater of the applicable minimum and 5% of average monthly inward and outward remittance value. The six-month calculation is made at 30 June and 31 December each financial year. Article 9.6 provides an equivalent cash-deposit alternative where obtaining a guarantee proves difficult; paid-up capital cannot fund the guarantee or substitute deposit. These are regulatory requirements, not an estimate of this hypothetical company's funding needs or transaction volume. (Exchange Business Regulation, arts. 8.2–8.3, 9.2–9.3, 9.6, 9.10.)
The authorised UAE entity would then own the sender contract, customer acceptance, quote and transfer obligation. It would maintain the required customer-money account and reconciliation, operate sender complaints, perform sanctions screening and discharge UAE AML reporting duties. Its Kenyan affiliate would still need authority for its separate inbound and wallet functions. Incorporating a UAE subsidiary would not extend either entity's existing permission. (Exchange Business Regulation, arts. 2–3, 24.11; Federal Decree-Law No. 10 of 2025, arts. 18–19; National Payment System Act, ss. 12–13.)
Choose this route when the company intends to control the UAE financial service itself and can meet the authorisation requirements. It is not needed solely because the Kenyan company supplies its authorised domestic wallet endpoint. A licence application should precede any launch in which the company becomes the UAE sender's remittance principal. (Exchange Business Regulation, arts. 2.2, 3.13, 4.)
Retail payments and exchange permissions must not be conflated
The Retail Payment Services and Card Schemes Regulation provides a separate Category II permission that includes Cross-border Fund Transfer Services. Its scope excludes remittances and certain technical support services. Its definition of remittance refers to transfers without payment accounts being created for the payer or payee. The later Exchange Business Regulation defines remittances more broadly, with or without a payment account. The presence of an account therefore cannot, by itself, settle which permission covers the service. (Retail Payment Services and Card Schemes Regulation, C 15/2021, scope exclusions 4–6, arts. 1, 3; Exchange Business Regulation, art. 1.31.)
A worker's existing bank account and a recipient's existing Kenyan wallet do not establish that the remitter issues payment accounts. The provider must map the precise service to its licence and conditions. Articles 3.7 and 3.9 of the Exchange Business Regulation create interfaces with retail-payment and stored-value permissions through CBUAE letters of no objection. They do not make the different permissions interchangeable. (Exchange Business Regulation, arts. 3.7, 3.9; Retail Payment Services and Card Schemes Regulation, arts. 1, 3.)
The customer-money rules also differ. For a retail-payment provider, article 14 distinguishes transactions settled within 24 hours from those settled later. For settlement within 24 hours, the prescribed methods are non-commingling with non-user funds, insulation against other creditors' claims, or both. For later settlement, non-bank providers must use the specified escrow arrangement, qualifying insurance or bank-guarantee cover, or a combination of those measures. The insurer or bank providing the cover must be regulated and outside the provider's group. Banks acting as providers instead must establish a separate account in the concerned users' names under article 14(4.3). Those provisions should not be substituted for the exchange business's Remittances Intermediate Account requirement. The provider's actual category controls the account design. (Retail Payment Services and Card Schemes Regulation, art. 14(3)–(4); Exchange Business Regulation, art. 24.11.)
A technology role and an agent role have different limits
A narrower UAE-facing role would supply software to the licensed remitter without independently accepting remittance instructions, holding customer money or making the financial offer. The remitter would own customer terms, KYC decisions, FX execution, safeguarding, reconciliation, sanctions decisions and sender complaints. The supplier could transmit data and provide approved support, but could not promise performance in its own capacity as remitter. (Federal Decree-Law No. 6 of 2025, arts. 61–62; CBUAE, Federal Decree-Law No. 6 of 2025 FAQs, question 6; Exchange Business Regulation, art. 15.)
Distribution needs separate scrutiny. Arranging, promoting and marketing licensed financial activities fall within the UAE statutory perimeter. A referral label does not create a general exemption. The proposed initial distribution model would direct workers to the remitter's own approved channel and leave onboarding and transaction acceptance there. The referral activity and any broader sales mandate must be assessed against the actual activity and permission. The company's continuing Kenyan wallet operation remains regulated even when its UAE-facing contribution is technical. (Federal Decree-Law No. 6 of 2025, arts. 61–62; CBUAE, Federal Decree-Law No. 6 of 2025 FAQs, question 3; National Payment System Act, ss. 11–13.)
The company must also test whether its network is an Instant Money Transfer Service, or IMTS. Article 1.17 addresses a home-country regulated provider with its own software or infrastructure for instant person-to-person transfers through an agent network. If that definition applies, article 3.14 requires CBUAE registration of the IMTS provider and a prior letter of no objection for the UAE remitter's arrangement. An overseas payout contract alone does not decide that classification. (Exchange Business Regulation, arts. 1.17, 3.14.)
No Kenyan wallet agent acquires authority to collect AED in the UAE through its Kenyan appointment. Category IV prohibits cash collection. The proposed service should use no UAE cash agent. Under the distinct retail-payment regime, agents require assessment, disclosure of the principal and regulatory reporting; outsourced services require prior CBUAE approval, while the PSP retains liability. Those provisions do not authorise an exchange business to disregard its own core-outsourcing restriction. (Exchange Business Regulation, arts. 3.6, 15; Retail Payment Services and Card Schemes Regulation, arts. 15–16.)
Kenyan domestic agents can perform their permitted wallet functions under the PSP's responsibility. The NPS rules require advance notification for new agents or cash merchants, with suitability and oversight duties. A money remittance provider's agent instead requires CBK approval under regulation 25. The contract must identify which regulated principal appoints the agent and which service the agent performs. (National Payment System Regulations, regs. 14–20; Money Remittance Regulations, reg. 25.)
The first release should follow a defined money flow
The proposed flow begins after wages have reached the worker. The employer has no role in the remittance instruction. The worker enters the remitter's app, supplies the required identity and beneficiary information, and chooses a Kenyan wallet. Before acceptance, the remitter displays the AED debit, fees, exchange rate, KES payout amount and relevant delivery conditions. An indicative rate must remain distinguishable from the binding quote. (CBUAE Consumer Protection Standards, standards 2.1.5.4–2.1.5.6, 2.3.5.2–2.3.5.3.)
The worker then authorises payment to the UAE remitter. The Kenyan company should neither receive AED into an operating account nor control the remitter's collection account. An exchange business must deposit remittance customer funds in its designated Remittances Intermediate Account with a UAE bank, daily or, at the latest, by the bank's closing time on the next business day. That account is reserved for settlement of customer remittances with foreign correspondents, rather than operating expenditure. (Exchange Business Regulation, art. 24.11.1–24.11.2.)
The remitter sends the transfer instruction and required originator and beneficiary data through the agreed correspondent chain. Its authorised treasury arrangements must honour the customer quote. The Kenyan inbound bank or remittance provider performs its own authorised receipt and any Kenyan FX conversion. Contracts must identify the settlement currency, each FX counterparty, the party bearing rate movements and the point at which the quoted KES obligation becomes fixed. There should be no unexplained assumption that the wallet company deals in foreign currency. (Exchange Business Regulation, arts. 3, 24.11.2; Cabinet Resolution No. 134 of 2025, arts. 28–31; Money Remittance Regulations, regs. 22, 32.)
The Kenyan settlement leg then funds the wallet provider's safeguarded arrangement. The wallet company credits the identified recipient only through its authorised ledger process. Its trust fund must remain sufficient to cover customer liabilities and separate from operating funds. An API instruction or correspondent's promise does not itself create cash backing. Any prefunding structure must identify whose money supplies that backing and preserve the trust balance. (National Payment System Regulations, regs. 25–27.)
The recipient can retain the KES balance, transfer it through permitted wallet services or redeem it through an authorised Kenyan channel. Wallet credit, redemption and agent cash availability are different events. The sender-facing receipt and status messages should identify the actual completion event promised by the remitter. They should not describe a pending instruction as completed wallet payout. (National Payment System Regulations, regs. 14–20, 27–29, 41; CBUAE Consumer Protection Standards, standards 2.1.5.5–2.1.5.6.)
Both regulated principals should reconcile the same transaction identifier across customer funding, the UAE intermediate account, correspondent settlement, Kenyan trust funding and wallet credit. Exception records should distinguish rejected, pending, credited, recalled and refunded transfers. This control design supports the required audit trail and customer-money reconciliation. The exchange business must also obtain the monthly external agreed-upon-procedures review required by article 24.11.3. (Exchange Business Regulation, art. 24.11.3; National Payment System Regulations, regs. 25, 27, 29.)
Wage-payment rules depend on who pays whom
The proposed transaction is a post-wage remittance. Under the Exchange Business Regulation, WPS activity involves processing and disbursing employees' wages on behalf of an employer in the UAE. A worker who has received wages and then independently instructs a transfer is not appointing the remitter to discharge the employer's wage obligation. Salary origin still matters to AML checks and source-of-funds assessment. (Exchange Business Regulation, art. 1.33; Federal Decree-Law No. 10 of 2025, art. 19.)
The position changes if the product receives employer payroll funds, processes wage files or distributes wages for employers. Category I includes the specified WPS activity, and issuing payroll cards requires a separate CBUAE letter of no objection. Category IV digital remittance does not itself include WPS processing. Any payroll version must be treated as a separate release with the applicable employer, payment-system and product permissions. (Exchange Business Regulation, arts. 3.2.3, 3.5–3.6.)
Each regulated actor keeps its AML and data duties
The UAE remitter must identify and verify its customer, assess risk, monitor transactions and obtain the information required for the international transfer. The Kenyan wallet provider must identify its customer and screen its own transactions under the NPS duties and the applicable Proceeds of Crime and Anti-Money Laundering Act regime. The Proceeds of Crime and Anti-Money Laundering Regulations, 2023 form part of that regime. An inbound Kenyan bank or remittance provider has separate obligations for its leg. Sharing an onboarding result does not discharge every institution's duties. (Federal Decree-Law No. 10 of 2025, art. 19; Cabinet Resolution No. 134 of 2025, arts. 14, 28–31; National Payment System Regulations, regs. 12, 31, 60; Money Remittance Regulations, reg. 37; Proceeds of Crime and Anti-Money Laundering Regulations, 2023, reg. 14.)
The parties should distinguish outsourced data collection from legal reliance on another institution's customer due diligence. UAE third-party reliance requires the conditions in article 20, including access to the required information and records; responsibility remains with the relying institution. Each principal must retain authority to refuse a transfer and make its own required suspicious-transaction report. A partner contract cannot make one compliance team's approval binding on all regulated participants. (Cabinet Resolution No. 134 of 2025, art. 20; Federal Decree-Law No. 10 of 2025, arts. 18–19; Money Remittance Regulations, reg. 37.)
The operating agreement should allocate screening of the originator, beneficiary and counterparties, transaction monitoring, escalation and access to evidence. A sanctions match needs a controlled investigation and any legally required freeze. It must not trigger an automatic refund that moves frozen funds. Nor should customer support disclose the making of a suspicious-transaction report. (Cabinet Resolution No. 134 of 2025, art. 28(8); Federal Decree-Law No. 10 of 2025, arts. 18–19, 29.)
The data host must be selected before the service goes live. The Exchange Business Standards require the customer and transaction database to be held and stored in the UAE. A Kenyan software supplier should not assume that its existing cloud region satisfies that requirement. Required transfer data can be shared through the authorised remittance chain, but database storage, remote access and outsourced processing each need a documented legal and contractual basis. (Exchange Business Standards, standard 9.4.1; Exchange Business Regulation, art. 15; Cabinet Resolution No. 134 of 2025, arts. 28–31.)
Kenyan data sent abroad must satisfy the Data Protection Act's cross-border conditions. Section 48 permits transfers on specified grounds, including appropriate safeguards and defined necessity grounds. Section 49 imposes consent and safeguard requirements for processing sensitive personal data outside Kenya. The parties must map the actual fields and recipients; a general app consent cannot be treated as permission for every international data use. Kenyan payment records must also remain available for the seven-year retention period prescribed by regulation 29. (Data Protection Act, 2019, ss. 25, 30, 48–49; National Payment System Regulations, reg. 29.)
Reversals and complaints must follow the transaction state
Before acceptance, an expired quote should require renewed consent. Failed funding should not create a completed transfer. After acceptance but before wallet payout, the remitter should trace the payment and apply the disclosed cancellation and refund terms. Those terms must identify fees, FX treatment and responsibility for intermediary deductions. Contracts should allocate recovery between providers without representing that every pending transfer can be cancelled immediately. (CBUAE Consumer Protection Standards, standards 2.1.5.4–2.1.5.6, 2.3.5.2–2.3.5.3; Exchange Business Standards, standard 4.7.4.)
Kenyan finality limits the next step. Regulation 28(1) prevents a payer from revoking an electronic retail-transfer instruction once the payee's PSP has received it, unless the PSP has sufficient grounds for reversal under its dispute-resolution rules. A mistaken number, completed cash withdrawal or fraud allegation therefore requires the applicable investigation and recovery procedure. A sender's complaint does not by itself authorise the UAE remitter to debit a Kenyan wallet. (National Payment System Regulations, reg. 28(1).)
A Kenyan PSP liable for non-execution or defective execution must restore the debited account without undue delay, including charges. Regulation 28 also provides a defence for proven proper transmission to the payee's PSP and limited contractual exclusions for unauthorised transactions. Those exclusions depend on the prescribed proof concerning customer fault or a legitimate instruction. The provider agreement must preserve these rules without extending a Kenyan defence to the UAE principal's separate obligations. (National Payment System Regulations, reg. 28(3)–(5).)
The UAE remitter should remain the sender's point of complaint, including when a Kenyan partner must supply evidence. The wallet provider should handle the recipient's wallet complaint. One shared case identifier can connect those processes without replacing either firm's responsibilities. The UAE standards require acknowledgment within two complete business days and a final response within 30 complete business days, unless CBUAE prescribes another limit. (CBUAE Consumer Protection Standards, standards 8.1.2.5, 8.1.3.7–8.1.3.8.)
Sanadak's published eligibility process permits escalation after 15 calendar days following the complaint to the financial institution, subject to its other criteria. That escalation gateway should not be confused with the firm's final-response deadline. In Kenya, the NPS Regulations require resolution within 30 days of filing and provide an appeal to CBK. The complaint must be filed within 15 days of the occurrence. The Money Remittance Regulations prescribe a separate 60-day resolution period for a remittance provider, measured from lodging. Complaints under that regime must be lodged within 30 days of the occurrence. The parties should work to an agreed faster operational target without changing those legal routes. (Sanadak, Complaint Eligibility, eligibility questionnaire and rejection criteria; National Payment System Regulations, regs. 39–40; Money Remittance Regulations, reg. 39.)
The launch decision requires provider evidence and release gates
First, fix the legal entities and operating location. Match the UAE principal's legal name to the CBUAE register, licence and conditions. Obtain evidence covering remittance, the digital channel and every required letter of no objection. Identify the emirate and any premises or local approvals. A commercial or financial-free-zone registration must not be treated as a CBUAE permission to provide this mainland remittance service. (Exchange Business Regulation, arts. 2–6, 19; Federal Decree-Law No. 6 of 2025, arts. 2, 61–62.)
Second, obtain the Kenyan wallet company's CBK authority, approved-service scope, relevant change notifications and trust documentation. Identify the inbound bank or remittance provider and its FX authority. Decide whether the proposed network requires IMTS registration, then obtain the remitter's corresponding approval before contracting on that basis. Failure to establish an actor's authority should stop that actor's regulated function. (National Payment System Regulations, regs. 13, 23, 25–26; Money Remittance Regulations, regs. 3–5, 22; Exchange Business Regulation, art. 3.14.)
Third, execute the sender terms and provider contracts against a single money-flow specification. Obtain account-holder confirmations and permitted-use terms from the UAE collection bank, settlement banks and Kenyan trustee or trust bank. Allocate FX exposure, prefunding, failed payouts, refunds, recovery costs, audit access and termination assistance. Procurement teams can use Licentium's payment-provider selection guide to organise the provider evidence and transaction questions. (Exchange Business Regulation, arts. 15, 24.11; National Payment System Regulations, regs. 25–29, 41.)
Fourth, complete the approval and notification steps before activating the relevant functions. Those steps include applicable UAE outsourcing approvals, IMTS approvals and Kenyan substantial-change, outsourcing or agent requirements. Confirm the data-hosting and cross-border arrangements. A signed software agreement must not be treated as authorisation to begin live regulated activity on the assumption that approval will follow. (Exchange Business Regulation, arts. 3.14, 15; National Payment System Regulations, regs. 13, 16, 23, 54; Data Protection Act, ss. 48–49.)
Fifth, test accepted funding without payout, duplicate messages, insufficient prefunding, wallet rejection, incorrect recipient details and sanctions holds. Test a completed credit followed by a recall request, and a complaint spanning both jurisdictions. Reconcile every test across the intermediate account, Kenyan backing funds and customer ledgers. Approve public price and completion claims only after those controls produce the promised result. (Exchange Business Regulation, art. 24.11; National Payment System Regulations, regs. 25–29, 38–41; CBUAE Consumer Protection Standards, standards 2.1.5, 8.1.3.)
Finally, permit live transfers only after the responsible officers approve the documented structure and evidence. The initial release should stay inside its defined channel, funding method and payout service. Any failure of authority, required approval, safeguarding or reconciliation should block the affected transfer path rather than route customer money through a convenient substitute. (Exchange Business Regulation, arts. 3.13, 24.11; National Payment System Act, ss. 12–13; National Payment System Regulations, regs. 25–29.)
Product changes that reopen the permission decision
The company should seek its own UAE permission before independently contracting as remitter, accepting AED, controlling execution or taking the binding FX position for the sender. A broader role cannot be implemented through licence rental or a management arrangement that defeats the UAE principal's control. A new app brand alone is less decisive than the powers assigned in contracts, systems and bank mandates. (Exchange Business Regulation, arts. 2–3, 15, 24.7–24.8.)
Adding UAE cash collection is incompatible with Category IV. Adding a persistent AED balance requires assessment under the stored-value and account-service rules. Independent access to or initiation from customers' payment accounts requires assessment under the applicable retail-payment and Open Finance permissions. The technical-support exclusion does not protect a separately regulated payment-initiation service. These features should remain disabled until the relevant permission or product approval is in place. (Exchange Business Regulation, arts. 3.6–3.9; Retail Payment Services and Card Schemes Regulation, scope exclusion 6, arts. 1, 3; Open Finance Regulation, C 03/2025.)
Employer payroll processing, a new IMTS network, outsourced core operations or a change in the Kenyan inbound FX role also requires reconsideration before launch. Some changes require a new licence; others require a variation, registration, letter of no objection or notification. The first partnership remains supportable only while the actual service stays within each principal's authority and preserves the customer-money controls assigned to it. (Exchange Business Regulation, arts. 3.2–3.14, 15; Money Remittance Regulations, regs. 3, 22, 25; National Payment System Regulations, regs. 13, 23, 25.)