CAK SMS Regulations in Kenya: Stay Compliant in 2026

Who Is the Communications Authority of Kenya?

The Communications Authority of Kenya (CAK) is the regulatory body responsible for overseeing the telecommunications sector in Kenya. Established under the Kenya Information and Communications Act (KICA), the CAK sets and enforces rules that govern how businesses can use SMS for commercial purposes. If you are sending bulk SMS in Kenya — whether for marketing, transactional alerts, or informational messages — you must comply with CAK regulations.

Violations are not taken lightly. The CAK has the power to impose fines, suspend services, and even prosecute offenders. In 2024 and 2025, enforcement actions increased significantly, particularly targeting businesses sending unsolicited promotional SMS during restricted hours.

Quiet Hours: No Promotional SMS 8 PM to 8 AM

Perhaps the most important rule for bulk SMS senders: the CAK prohibits sending promotional or commercial SMS between 8:00 PM and 8:00 AM East Africa Time. This quiet hours regulation protects consumers from being disturbed during evening and early morning hours.

What Counts as Promotional?

• Promotional (restricted) — flash sales, discount offers, new product announcements, event invitations, brand awareness messages
• Transactional (exempt) — OTP codes, payment confirmations, delivery updates, appointment reminders, account alerts
• Service (exempt) — emergency notifications, service disruption alerts, security warnings

The distinction matters. If a customer buys something on your website at 9 PM and needs an order confirmation, you can send that — it is transactional. But you cannot send a "Check out our weekend deals!" message at the same time.

At KenyaSMS, we automatically enforce quiet hours. If you schedule a promotional campaign that overlaps with restricted hours, our system queues the messages and delivers them at 8:00 AM the next morning. No manual scheduling required — the platform protects you automatically.

Sender ID Registration

The CAK requires that all bulk SMS sent for commercial purposes use a registered sender ID. This is the alphanumeric name that appears as the "from" field on the recipient's phone — for example, "KENYASMS" or "SAFARICOM".

Registration Requirements

• Sender IDs must be registered with the mobile network operators through your SMS provider
• The sender ID must be between 3 and 11 characters
• It must not impersonate another brand, government agency, or individual
• Registration typically takes 24-48 hours per network
• Each sender ID is registered per network — you need approval from Safaricom, Airtel, and Telkom separately

KenyaSMS handles the sender ID registration process for you. Submit your sender ID through our dashboard, and we coordinate with all three networks to get it approved.

Content Restrictions

The CAK imposes restrictions on the content of commercial SMS messages:

• No misleading content — messages must not contain false or deceptive claims. "You have won KES 1,000,000!" when no prize exists is a violation.
• No offensive content — obscene, threatening, or discriminatory content is prohibited.
• Clear identification — the sender must be identifiable. Anonymous commercial SMS is not permitted.
• Truthful pricing — if you advertise a price or discount, it must be genuine and available at the stated terms.
• No impersonation — sending SMS that appear to come from a bank, government agency, or other entity when they do not is a criminal offence.

Anti-Spam Provisions

The KICA and associated regulations contain specific anti-spam provisions for electronic messages including SMS:

• Consent required — you must have prior consent before sending commercial SMS (this overlaps with the Data Protection Act requirements).
• Opt-out mechanism — every commercial SMS must include a way for the recipient to opt out of future messages.
• Frequency limits — while no specific number is defined, sending excessive messages to the same recipient can be classified as harassment.
• Suppression lists — you must maintain and respect a list of recipients who have opted out.

Unsolicited Commercial Communications

The CAK defines unsolicited commercial communications as any commercial message sent to a person who has not specifically requested it. The rules state:

1. A person shall not send unsolicited commercial communications without prior consent
2. Commercial communications must be clearly identifiable as such
3. The sender must provide valid contact details for opt-out requests
4. Opt-out requests must be processed within 48 hours

Complaint Procedures

Consumers who receive unsolicited or non-compliant SMS can file complaints with:

• The CAK directly — through their online portal, email, or physical offices in Nairobi
• The mobile network operator — Safaricom (*100#), Airtel (*100#), Telkom (*100#)
• The ODPC — for data protection related complaints

The CAK investigates complaints and can trace the source SMS provider. If your business is found to be the sender, you face regulatory action even if you used a third-party SMS provider.

Your 2026 Compliance Checklist

Print this out and pin it next to your desk:

1. Quiet hours — no promotional SMS between 8 PM and 8 AM EAT
2. Sender ID — registered and approved on all three networks
3. Consent — documented opt-in for every recipient on your list
4. Opt-out — STOP mechanism included in every promotional SMS
5. Suppression list — maintained and checked before every campaign
6. Content review — no misleading claims, proper identification, truthful pricing
7. Frequency — reasonable sending frequency (not more than 2-3 promotional messages per week)
8. Records — keep consent records, campaign logs, and opt-out records for at least 2 years
9. Staff training — ensure your marketing team understands the regulations
10. Provider compliance — verify your SMS provider uses direct routes and complies with CAK regulations

How KenyaSMS Keeps You Compliant

Compliance should not be complicated. KenyaSMS builds regulatory compliance into the platform so you can focus on your campaigns:

• Automatic quiet hours enforcement — promotional campaigns are held until 8 AM if scheduled during restricted hours
• Sender ID management — we handle registration across all three networks
• Built-in opt-out — STOP responses are processed automatically and suppression lists updated in real-time
• Content screening — our system flags potentially non-compliant content before sending
• Campaign audit logs — full records of every message sent, when, and to whom

Start your compliant SMS campaigns today with KenyaSMS. Trusted by over 10,000 Kenyan businesses who value both results and regulatory compliance.