Is this company legit? How to check it in Kenya

What "legit" can and cannot mean

"Is this company legit?" is really three separate questions, and they have different answers. Does the business exist on paper? Is it licensed to do the specific thing it is asking you to pay for? And is the person messaging you actually that business? A company can pass the first question and fail the other two.

That matters because most losses reported to ScamBusterKE do not involve an obviously fake name. They involve a familiar-sounding company, a real-looking website, and a payment instruction that arrives by WhatsApp. Work through the questions in order rather than treating one reassuring answer as the whole check.

Start with the regulator that matches what is being sold

Registering a company in Kenya does not license it to take your money for investments, loans, deposits, or trading. Different regulators publish their own lists, and the useful check is the one that matches the offer in front of you.

If you are being offered trading, forex, shares, funds, or any scheme that promises returns, the Capital Markets Authority publishes a searchable register of licensees and market players at licensees.cma.or.ke. Its categories include dealing and non-dealing online foreign exchange brokers, online foreign exchange money managers, stockbrokers, investment banks, fund managers, investment advisers, and approved collective investment schemes. If a firm selling you a returns product is not in the category that fits what it is selling, that gap is the finding.

For loans, deposits, or anything bank-like, the Central Bank of Kenya's Bank Supervision pages carry the lists of licensed institutions. CBK states that the Central Bank of Kenya (Amendment) Act, 2021, effective 23 December 2021, empowered it to license, regulate and supervise digital credit providers, and that the Digital Credit Providers Regulations, 2022 were operationalised on 18 March 2022; the same page links its directory of licensed digital credit providers. For a SACCO, SASRA publishes the list of licensed deposit-taking SACCOs.

Also read the regulator's own warnings, not just its list. The CMA maintains a public notices page where it publishes cautions and announcements. A name appearing there is worth far more than a testimonial screenshot.

Confirm the company exists — and that the name matches

The Business Registration Service is the official companies registry in Kenya, and its official search runs through eCitizen. Use it to confirm that the exact registered name, and not a similar one, exists. Pay attention to small differences: an extra word, a swapped "Ltd", a plural, or a different spelling can separate a real company from one trading on its reputation.

Treat registration as a baseline fact, not a safety rating. A certificate of incorporation shows a company was registered; it says nothing about whether the business is solvent, licensed for a regulated activity, or being run by the person contacting you. Scam schemes have used genuinely registered entities before.

Check the payment details separately from the company

Even when the company checks out, the payment route may not belong to it. Before you send money, read the recipient or business name M-PESA shows you and compare it with the registered name you just verified. A payment to a personal number, or to a Till whose displayed name has nothing to do with the business, deserves an answer before you enter your PIN.

Verify through a contact you found yourself — the number on the regulator's register, the official website you typed in, or a physical office — rather than the number in the advert. Our Paybill verification guide walks through that comparison in detail if the payment is going to a Paybill or Till.

Warning signs that survive a clean register check

Be careful when returns are guaranteed, quoted as a fixed percentage per day or week, or paid for recruiting other people. Be careful when you can deposit easily but withdrawals need a new fee, a tax, an upgrade, or a minimum balance that keeps rising. Be careful when a demonstration account wins far more often than it loses.

Pressure is itself a signal. A closing slot, a countdown, a price that expires tonight, or a request to move the conversation to a private chat all exist to stop you doing exactly the checks on this page. Anything genuine will survive a day's delay.

Watch the channel too. An account that only shows profits, a website registered weeks ago, a company name that appears nowhere outside its own promotional material, or payment instructions that change between messages are all reasons to keep verifying rather than to pay.

Where ScamBusterKE fits into the check

Search every identifier attached to the offer on ScamBusterKE: the company name, website, Paybill or Till number, phone numbers, email address, and app name. Our check pages show what the community has publicly reported about that identifier, including how many reports exist and what verification signals they carry.

ScamBusterKE does not declare any company legitimate or fraudulent. Reports are submitted by users and describe individual experiences. Read them as one warning layer alongside the official registers above.

Just as importantly, no report does not prove a company is safe. A scheme that launched last month has had no time to accumulate reports, and being first to lose money is exactly how an identifier ends up on this site. If something went wrong for you, add a report with the identifier and what was requested, keeping private documents, ID numbers, and unrelated chats out of it.