Buried inside the Communications Authority of Kenya's new licensing conditions for cyber cafés is a single clause that has nothing to do with the identity checks and cybercrime concerns driving the headlines. Operators, the notice says, may not resell bulk or high-capacity internet connectivity to third parties without the regulator's explicit approval. On its own, the clause targets a narrow practice: cyber cafés and community payphone operators splitting a single wholesale line across multiple outlets to cut costs. But the same reselling model, run at far greater scale, is what keeps home internet affordable in low-income estates across Nairobi and beyond. Whether the CA's logic in this one clause eventually extends to that larger, informal market is not yet established, and the regulator has made no statement suggesting it will. What is established is that the enforcement machinery to do so already exists, and has been used before.
The cyber café conditions were gazetted on August 7, 2026 (Kenya Gazette Notice Vol. CXXVIII No. 135) and take effect on September 7 after the standard 30-day notice period. Operators must now verify every customer's name and identification number, keep session logs tying each visit to a specific terminal for at least three years, issue receipts, and install filters to block illegal content. The Authority has said browsing history itself will not be retained, a concession made after an earlier December 2024 proposal, which also floated mandatory CCTV, drew public pushback. Non-compliance carries a fine of 0.2 percent of annual turnover, with a floor of KES 500,000, plus possible suspension or closure. The reselling clause sits alongside these requirements, and requires operators to source connectivity only from licensed Application Service Providers and to seek CA approval before redistributing bulk capacity to anyone outside their own premises.
The market this clause could eventually reach
The practice the cyber café rule targets has an informal name in Nairobi: sambaza internet. An operator, often with no telecoms licence at all, buys a single high-capacity connection, typically a 100 Mbps or 1 Gbps line sold at enterprise rates, and redistributes it across an apartment block or several streets using MikroTik routers and outdoor Wi-Fi radios, charging residents KES 1,000 to 2,000 a month. It is not a new phenomenon, and it has already drawn regulatory attention on a separate track. In 2019, Kenya Power gave operators stringing unlicensed cables across its power poles, then mostly satellite television resellers, 14 days to remove them. In February 2025, Nairobi County officials pulled down fibre cables mounted on poles along Argwings Kodhek Road, arguing that internet service providers had ignored wayleave fees and county approval requirements for years. Both actions targeted physical infrastructure rather than licensing status, but both establish that Kenyan authorities are willing and able to act against the informal distribution layer of the internet market when they choose to.
Kenya's fixed broadband sector, according to the CA's third-quarter 2025/26 sector report covering January to March 2026, had Safaricom leading with 35.4 percent market share, followed by Jamii Telecommunications' Faiba brand at 19.5 percent, Wananchi Group's Zuku at 10.4 percent, Poa Internet at 9.7 percent, Ahadi Wireless at 9.2 percent, Vilcom Network at 6.0 percent, and Mawingu Networks at 3.7 percent, with Starlink holding a growing but still small 0.9 percent. Poa Internet and Mawingu, the two operators most often cited as the affordable alternative to Safaricom Home Fibre, are both listed on the CA's own Unified Licensing Framework register as licensed Application Service Providers, current as of May 2026. That matters for how far this argument can be pushed: the licensed budget ISPs are not, on the available evidence, the operators the reselling clause is aimed at. The actual target, if the clause is ever enforced beyond cyber cafés, is the tier below them, informal operators without any ASP or Network Facilities Provider licence, who do not pay the 0.5 percent regulatory turnover levy or maintain customer records, and who can consequently undercut even Poa's rates.
Why the incentive to squeeze that tier exists
A licensed operator selling a single bulk connection to an unlicensed intermediary for redistribution earns far less than it would selling direct residential connections to each household the intermediary serves. Splitting one KES 15,000 wholesale line across twenty households at KES 1,000 each nets the reseller more than it nets the wholesale provider, and none of that value returns to the licensed operator's own retail arm. If compliance costs, whether formal ASP licensing, the turnover levy, or simply the administrative burden of seeking CA approval for redistribution, become prohibitive for informal operators, the households they currently serve would need to migrate to a licensed provider's direct retail plans, typically priced well above the informal rate.
Mobile networks operate on finite radio spectrum per cell tower, which is genuinely scarce. Kenya's international bandwidth capacity, by contrast, expanded to 28,130.3 Gbps by mid-2026, anchored by SEACOM's 10,500 Gbps upgrade, meaning the backbone that fixed ISPs draw on is growing rather than constrained. Any future squeeze on fixed broadband pricing would therefore be a function of licensing compliance costs and market consolidation, not physical network capacity, which is a materially different, and more directly regulatory, mechanism than the one driving mobile bundle cuts.
None of this means the CA intends to extend the cyber café reselling clause to residential estate Wi-Fi. The regulator has not said so, and the September 7 rules as written apply specifically to Public Communications Access Centres. What the clause demonstrates is that the legal tool to formalise Kenya's informal internet distribution economy already exists on the statute book, tested first in the narrowest possible setting.
Comments