What a CMA caution does and does not say

A CMA caution is a public statement that an entity is not licensed or approved to carry on capital-market activities in Kenya. This page explains how to read one: what it may name, what its date means, and what the absence of a caution authorises. It has no table; the cautions themselves are on the CMA website.

What a caution may name

A caution may name an entity, a website, or a type of activity. It may name a company, a trading name, or a domain. It may describe a scheme, such as an online forex platform, without naming any entity at all.

A reader should not assume that a caution naming a similar name is the same entity. Compare the details: the full legal name, the website address, and the activity described. The CMA's own text is the source.

What a caution states

A caution states that the entity is not licensed or approved by the CMA. It does not state that the entity has committed a crime. It is a regulatory statement, not a court finding.

The Authority may issue a caution for many reasons, including that an entity is soliciting Kenyan investors without a licence. The caution is the regulator's act, not this site's verdict. This site does not call any entity a scam or a fraud.

The date of a caution

The date on a caution is the date the CMA published it. A caution may be older than the platform's present form. An entity may change its name, website, or the products it offers after a caution is published.

A reader should check the current details of the platform against the caution. If the platform has changed its name, the caution may still apply if the activity is the same. Read the full text on the CMA website.

Absence of a caution authorises nothing

If a platform is not in the caution table, that means only that the CMA has not published a caution for that exact name. It does not mean the platform is licensed, safe, or appropriate for any reader.

The absence of a caution is not a licence. A platform may be unlicensed without a caution having been published. A reader should check the licensee list separately, and ask the platform for its legal entity and regulator.

Comparing details

When comparing a platform to a caution, use the exact legal name from the platform's terms and conditions, not the brand in an advert. A caution may name a website, so check the domain as well. The activity described in the caution should match what the platform offers.

A platform may use a name similar to a licensed entity. That is a reason to check carefully. The CMA's list of licensees is the place to see if an entity is licensed, and the caution table is the place to see if it has been warned about.

What to do after reading a caution

If a platform matches a caution, the next step is to read the full notice on the CMA website. The notice may contain details that help you decide. If you have already sent money, report to the relevant body.

The page on where to report explains who receives what in Kenya. No one can promise recovery, but a report helps the authorities see the pattern.

A caution names an entity the CMA has flagged, but not every detail of the case

When the CMA publishes a caution, it names the entity it has concerns about and usually states the activity that drew its attention. The text may mention a website, a social media handle, or a phone number linked to that entity. What it will not do is give a full account of every complaint or the regulator's complete file. The caution is a public notice, not a case file.

A caution may also identify a product, such as a forex offering or a share sale, but it will not lay out the full terms that were offered to investors. The CMA chooses what to include based on what it believes the public needs to know to avoid the entity. Some details are withheld because investigations may be ongoing, and publishing them could interfere with evidence gathering or the rights of individuals involved.

This means a reader should not assume that because a detail is missing from a caution, the CMA did not consider it. The absence of a specific claim, such as a promise of guaranteed returns, does not mean that promise was not made. The caution is a filtered summary, and the public version is often shorter than what the regulator has on record.

The date on a caution tells you when the CMA published it, not when the conduct ended

A caution carries a date, and that date is the day the CMA made the notice public. It is not necessarily the date the CMA first received a complaint, nor the date the entity began or stopped its activities. An entity may have been operating for months before a caution appears, and it may continue to operate after the caution is published if it ignores the regulator.

The date matters because it tells you how fresh the regulator's public warning is. A recent caution suggests the CMA is actively concerned about the entity at this time. An older caution may still be relevant if the entity is still active, but it could also relate to conduct that has since ceased or changed. The date alone does not tell you the current status of the entity.

When you compare a caution's date with the date you are seeing the entity's adverts or messages, you can judge whether the regulator's warning predates or postdates what you are receiving. If an entity is still soliciting funds after a caution was published, that is a strong signal the entity is not complying with the CMA. The date is a timestamp on the regulator's action, not a statement about the entity's entire history.

A caution does not state that every product from the named entity is unlicensed

The CMA may issue a caution about a specific offering, such as an online forex platform or a particular bond sale. That caution does not automatically mean that every service the entity provides is unlicensed. An entity could hold a licence for one activity, such as fund management, while offering another activity, such as forex trading, without approval. The caution targets the unapproved activity.

A reader should not assume that because an entity is named in a caution, it has no licences at all. The CMA's licensee list is the place to check what an entity is actually licensed to do. A caution and a licence can coexist for the same legal name if the entity has stepped outside its permitted scope. The caution is about the specific conduct the CMA has flagged, not a blanket statement about the entity's entire business.

This distinction matters because some platforms may point to a licence for one service as proof they are allowed to offer another. A reader who sees a caution should check the exact activity the CMA mentions and compare it with the activity the platform is offering. The caution is a warning about a particular mismatch, not a declaration that the entity is entirely outside the law.

A caution is not evidence that the named entity has been convicted or found liable

When the CMA issues a caution, it is using its regulatory power to warn the public. It is not a court judgment, and it does not mean the entity has been proven to have broken the law. The CMA may act on suspicions, complaints, or preliminary findings before a full investigation or legal process is complete. A caution is a precautionary measure, not a final verdict.

This means a reader should not treat a caution as proof that the entity is guilty of fraud or any other crime. The caution says the CMA has concerns and advises the public to avoid dealing with the entity. Whether those concerns lead to enforcement action, prosecution, or nothing at all depends on what the CMA finds later. The caution is the start of a public process, not the end of it.

Because a caution is not a conviction, a reader should avoid repeating it as a statement of fact about the entity's wrongdoing. The accurate way to describe it is that the CMA has issued a public caution about the entity's activities. That keeps the distinction between a regulator's warning and a legal finding clear.

The absence of a caution for a name does not mean the CMA has approved that name

A reader may search the CMA's cautions and find nothing for a particular platform. That absence does not mean the platform is licensed or safe. The CMA's cautions are only one part of the regulatory record. An entity could be under investigation but not yet publicly cautioned, or it could be operating in a way that has not yet come to the CMA's attention. The absence of a caution is not a clearance.

The CMA's licensee list is the authoritative record of who is authorised. If a name is not on that list, it is not licensed by the CMA, regardless of whether a caution exists. Many unlicensed entities operate for some time before a caution is published. The absence of a caution simply means the CMA has not yet issued a public warning about that entity, nothing more.

A reader should not use the caution list as a substitute for the licensee list. The check that matters is against the licensee list first, then the cautions for any history of public warnings. An entity missing from both lists is unlicensed, and the absence of a caution does not change that fact.

A caution may describe conduct that is outside the CMA's direct oversight

The CMA's remit covers capital markets, which includes securities, collective investment schemes, and certain derivatives. A caution may flag an entity for offering such products without a licence. But sometimes the conduct described touches other regulators, such as the Central Bank of Kenya for payment services or the Communications Authority for digital platforms. The CMA issues the caution because the product falls within its area, but other bodies may have separate concerns.

A reader should not assume that because the CMA has issued a caution, no other regulator is involved. An entity offering forex trading through M-Pesa may raise questions for the Central Bank about payment systems, for the CMA about the investment product, and for the DCI if fraud is suspected. Each regulator has its own process, and a caution from one does not cover the others.

This means that after reading a CMA caution, a reader may need to check with other regulators if the entity's activities cross into their areas. The caution is a signal to look more broadly, not a complete map of every regulatory concern. The CMA's warning is one piece of a larger picture.

A caution is a snapshot of the CMA's view at a single point in time

The CMA publishes a caution when its own review of a platform or a complaint from the public leads it to conclude that a person or entity is offering capital-market services without the required licence. That conclusion is based on what the Authority knew on the day it issued the caution. The caution does not say that the platform was still operating in the same way the following week, and it does not say that the CMA had looked at the platform again after that date.

A platform can change its trading name, move its website to a new domain, or alter the way it asks for money after a caution is issued. The caution remains a record of what the CMA found at one moment. A reader who discovers the caution months later cannot assume that the details in it are still current. The prudent step is to treat the caution as a starting point for a fresh check, not as a final word on the platform's present status.

This matters because many cautions circulate in WhatsApp groups long after they are first published. A forwarded screenshot of a caution can look like breaking news when it is actually an old notice. The date on the caution tells the reader when the CMA made its assessment. Everything else on the page has to be read in the light of that date. A platform's name may appear in a caution from one year and then appear on the licensee list the next, if it later obtains a licence. The order of those events matters.