The D-SIB Paradox: Why CBK Regulates Tier-1 Banks Like Financial Fortresses, But Lets M-Pesa Run the National Economy Unchecked
By Sultan Mwangi | Boardlot Africa | September 2026
Executive Summary
The Regulatory Paradox: The Central Bank of Kenya (CBK) imposes stringent capital buffers, quarterly stress tests, and "living wills" on Domestic Systemically Important Banks (D-SIBs). Yet, M-Pesa—which clears the vast majority of Kenya’s daily transactions—operates under standard commercial Payment Service Provider (PSP) rules.
The Substitutability Trap: M-Pesa commands 90%+ market share with zero real-time alternative capacity. If a Tier-1 bank stumbles, commerce re-routes; if M-Pesa crashes, national retail commerce freezes.
Unchecked Gatekeeping: M-Pesa's control over API rails, USSD codes, and paybill numbers allows it to unilaterally choose winners and losers in Kenya's startup ecosystem—a vulnerability highlighted by the SportPesa paybill control battles. The Policy Imperative: CBK must unbundle M-Pesa from Safaricom, designate it as a Systemically Important Payment System (SIPS), enforce 99.99% uptime SLAs, and establish paybill portability as a public utility right.
The Central Bank of Kenya (CBK) maintains a comprehensive framework for identifying, regulating, and supervising Domestic Systemically Important Banks (D-SIBs). Under this regime, commercial banking institutions deemed "too big to fail" face intense supervisory scrutiny: mandatory Common Equity Tier 1 (CET1) capital surcharges ranging from 0.5% to 2.5%, quarterly stress tests, limits on risky product expansion, and strict annual Recovery and Resolution Plans ("living wills") designed to prevent an institutional collapse from destabilizing the macroeconomy.
Yet, Kenya’s financial architecture harbors a glaring, dangerous paradox.
While Tier-1 commercial banks face rigorous capital buffers and utility-grade oversight, M-Pesa—the single operational rail clearing the vast majority of Kenya’s daily transactions—continues to be regulated primarily as a commercial Payment Service Provider (PSP) under the National Payment System (NPS) framework.
If a Tier-1 bank stumbles, commerce re-routes through another institution via RTGS/KEPSS. If M-Pesa stumbles, Kenya stops.
I. Ground Reality: Operational Fragility, Wealth Extraction, and Everyday Paralysis
Public sentiment across social channels underscores that M-Pesa is no longer merely a convenience feature—it is Kenya's de facto informal clearinghouse. However, its operating model imposes severe friction on daily economic resilience:
* Full-Scale Economic Paralysis During Outages: Unlike commercial bank downtimes—which primarily affect corporate transfers or specific ATM networks—an M-Pesa maintenance window or unannounced server outage halts matatu fares, petrol station settlements, hospital emergency admissions, and corner-kiosk purchases simultaneously.
* The "Poor Man’s Tax": M-Pesa’s fee structure operates as a regressive tariff on low-income earners. A user withdrawing KSh 200 pays up to KSh 29 in fees—a 14.5% instant deduction on micro-liquidity. Compounded across monthly sending, paybill, and withdrawal fees, the system extracts significant transactional friction from the bottom of the pyramid.
* Delayed SMS Receipts & Merchant Disputes: Handset or network delivery delays frequently leave funds debited from consumers without immediate confirmation reaching the merchant. This creates asymmetrical risk where small business owners hold buyers hostage at point-of-sale terminals.
* Fraudulent Reversals & Small Business Exposure: Fraudsters routinely exploit Safaricom’s rapid reversal mechanisms post-sale, leaving Uber/Bolt drivers, retail vendors, and informal traders to absorb the losses of delayed dispute resolutions.
II. The Regulatory Benchmark Test: Scoring M-Pesa Against CBK’s Official D-SIB Criteria
The CBK evaluates systemically important institutions using five weighted metrics: Size (40%), Interconnectedness (30%), Substitutability (15%), Importance to the Domestic Economy (10%), and Complexity (5%). When benchmarked against these exact metrics, M-Pesa hits every single threshold of a systemic entity:
Despite satisfying all five criteria, M-Pesa is not supervised under prudential banking guidelines.
III. The Substitutability Illusion: If M-Pesa Fails, Who Replaces It?
The core pillar of the CBK’s D-SIB evaluation framework is Substitutability—the ability of rival institutions to absorb a failing entity's traffic without causing wider economic dislocation.
1. Market Share Asymmetry and Capacity Bottlenecks
M-Pesa commands roughly 90%+ market share in mobile money processing in Kenya. Competitors like Airtel Money and T-Kash exist, but they lack the agent liquidity, merchant till density (Lipan M-Pesa), or enterprise paybill integrations required to take over national transaction flows. If M-Pesa suffers a multi-day infrastructure collapse, there is no secondary mobile network capable of handling 30 million active users overnight.
2. The Fallacy of Interoperability
While the CBK mandated merchant and agent till interoperability, connecting software pipes does not create server or liquidity capacity. Rival mobile networks operate on much smaller infrastructure footprints. Forcing national retail commerce onto alternative mobile wallets during an M-Pesa blackout would immediately trigger cascading technical failures across the broader telecommunications sector.
------------------------------------------------------------------------
IV. Gatekeeper of the Startup Ecosystem: Choosing Winners, Losers, and Corporate Survival
Beyond daily retail transactions, M-Pesa exercises absolute structural control over Kenya’s innovation ecosystem. For virtually any consumer tech, fintech, e-commerce, or digital service startup operating in Kenya, integration with M-Pesa is an existential prerequisite.
A startup's ability to raise capital, scale user acquisition, or achieve commercial viability depends almost entirely on whether Safaricom grants, maintains, or revokes its access to M-Pesa API rails, paybill numbers, and USSD shortcodes. In this setup, M-Pesa does not merely facilitate commerce; it functions as an unregulated private gatekeeper with the sovereign power to choose economic winners and losers.
The SportPesa Case Study: Corporate Control via Paybill Manipulation
Nowhere was this vulnerability clearer than in the high-profile legal and corporate battle surrounding the SportPesa brand. While the dispute was publicly framed as a battle over regulatory compliance, taxation, and trademark assignment, the operational heart of the conflict centered on who controlled the M-Pesa paybill numbers (955100 and 955700) and shortcodes.
* The Infrastructure as the Business: Over years of operation, SportPesa’s original operating company (Pevans East Africa) embedded its M-Pesa paybills into the daily habits of millions of users. The paybill number was the business. When regulatory interventions and tax disputes hit Pevans, state agencies targeted their M-Pesa paybills to freeze cash flow instantly—demonstrating that cutting off a firm's paybill is equivalent to issuing a corporate death sentence.
* The Battle for Re-allocation: As internal director wrangles escalated between founding shareholders and executive leadership over trademark ownership, the decisive battleground was the attempt to migrate these established M-Pesa paybill numbers and shortcodes from Pevans East Africa to a new operating entity, Milestone Games Limited.
* The Weaponization Risk: The fallout exposed a dangerous legal gray area. Because paybill numbers are treated as private commercial contracts between Safaricom and an enterprise—rather than public, neutral infrastructure—the entity that controls the paybill effectively controls the company's entire enterprise value. Whichever faction secured Safaricom's active routing of the paybill won operational control, leaving minority shareholders and legacy corporate structures powerless despite ongoing court cases.
V. What Are the Current Guardrails? (And Why They Are Flawed)
The CBK enforces financial and supervisory guardrails under the National Payment System framework, but these guardrails protect against insolvency, not operational outage:
The Protection Gap: Liquidity vs. Continuity
* Financial Ring-Fencing Does Not Stop Downtime: Under CBK rules, user funds are held safely inside an independent trust (M-Pesa Holding Co. Ltd.) and deposited across Tier-1 commercial banks. If Safaricom suffers corporate insolvency, user money is legally protected. However, financial protection does not deliver operational continuity. Having funds safely backed in a commercial bank trust account provides zero utility to a commuter stranded at a matatu stage when M-Pesa's authentication servers crash.
* Statutory Intervention Cannot Run Proprietary Code: The CBK holds emergency powers to take over assets or appoint statutory managers under the National Payment System rules. While this works for brick-and-mortar commercial banks, CBK cannot simply send a statutory manager to operate a proprietary, closed-loop telecommunications ecosystem, SIM-card authentication grid, and private cloud architecture owned by a publicly traded telecom firm.
VI. Regulatory Double Standard: D-SIBs vs. Payment Service Providers
| Regulatory Metric | CBK Requirement for Tier-1 D-SIBs | Current Reality for M-Pesa (NPS Framework) |
|---|---|---|
| Capital Requirements | Mandatory CET1 Surcharges (0.5%–2.5%) + Countercyclical Buffers. | Standard KSh 250 million minimum capital floor for electronic money issuers. |
| Operational Uptime | Strict quarterly stress testing and annual Recovery Plans ("Living Wills"). | Maintenance outages and network blackouts treated as private corporate maintenance. |
| Product Restrictions | CBK can restrict product expansion if it increases systemic risk. | Rapid rollout of high-cost consumer credit features (Fuliza) embedded directly into payment rails. |
| Absorbing Risk | D-SIBs absorb systemic risks internally using extra equity capital. | Operational friction (reversal scams, delayed SMS, transaction fees) is passed to the public. |
VII. Strategic Recommendations for Kenya’s Financial Architecture
If the Central Bank of Kenya acknowledges that systemic risk threatens macro-stability when concentrated in Tier-1 banks, it can no longer treat mobile payment networks as secondary commercial payment tools.
* Structural Unbundling: Formally separate M-Pesa from Safaricom’s core telecommunications business. Regulate the mobile payment network as an independent, open-access public utility—similar to national clearinghouses (KEPSS).
* Designate "Systemically Important Payment Systems" (SIPS): Extend D-SIB-style operational requirements to dominant payment platforms, including mandatory 99.99% uptime Service Level Agreements (SLAs), quarterly operational stress tests, and capped fee structures on basic micro-transactions.
* Establish Paybill Portability: Treat paybill numbers and USSD shortcodes as neutral, public digital infrastructure governed by statutory property rights—ensuring that corporate disputes or platform discretion cannot instantly destroy a business.
* Build a Public Backstop Rail: Accelerate open-banking standards and fast-payment rails to build a true, low-cost secondary retail clearing network that ensures Kenyan commerce functions even during a major mobile network blackout.
Conclusion
Treating M-Pesa merely as a successful private tech product is an outdated regulatory posture. Systemic risk in Kenya does not live exclusively on commercial bank balance sheets—it lives inside the mobile wallets of 30 million citizens. Until the CBK holds M-Pesa to the same structural, substitutability, and recovery standards as Tier-1 D-SIBs, Kenya's economic backbone remains exposed to a single point of failure.
Join the Discussion on Boardlot Africa
* Share your thoughts: Is it time for the CBK to split M-Pesa from Safaricom, or does commercial efficiency outweigh systemic risk? Leave a comment below or join the subscriber chat.
* Subscribe: If you enjoyed this deep-dive analysis into East African capital markets, financial regulation, and corporate governance, subscribe to receive our weekly research directly in your inbox.
* Connect: Follow us on X (@boardlotsultan) and visit Boardlot.africa for more market breakdowns.