.png?key=small-avif)
Kenya’s May 2025 banking sector stress test highlights a fragile balance between improved resilience and persistent risks.
- •The Central Bank of Kenya (CBK) assessed banks under shocks from rising non-performing loans (NPLs), cyber-attacks, and the new KSh 3 billion minimum core capital requirement due in December 2025.
- •The sector’s NPL ratio climbed from 15.6% in December 2023 to 17.1% in December 2024, reaching 17.6% by April 2025.
- •Bank of Africa and Sidian Bank remain under-capitalized, having failed the test consistently since 2022.
Projections place the sector’s NPLs at 16.3% under a baseline scenario by December 2025, but in a severe case the ratio could hit 21.2%. A 27.4% surge in NPLs would push six banks below the regulatory 10.5% Core Capital Adequacy Ratio (CAR), requiring KSh 5.1 billion in fresh capital.
For real time market updates and analysis, join our WhatsApp Channel.| Scenario (Dec 2025) | Projected NPL Ratio (%) | Banks Below CAR Minimum | Capital Needed (KSh Bn) |
|---|---|---|---|
| Baseline | 16.3 | 0 | 0 |
| Moderate | 18.5 | 6 | ~3.9 |
| Severe | 21.2 | 6 | 5.1 |
Sectoral pressures are concentrated in Real Estate, Trade, Transport & Communications, and Personal & Household loans. Concentration risk is also significant.
Defaults by the top three borrowers in each bank would trigger a capital shortfall of KSh 220.7 billion, with Tier I banks accounting for 86% of the exposure.
Capital Adequacy at Risk
Meeting the new KSh 3 billion core capital requirement is a major challenge for some banks. By June 2025, 11 banks were below the threshold, needing KSh 14.7 billion to catch up. Under severe stress, 12 banks may fail, requiring KSh 19.8 billion.
Adjustments for full provisioning show four banks dropping below the CAR minimum, with KSh 2.3 billion needed to close the gap.
| Requirement (Dec 2025) | Banks Below Threshold | Capital Gap (KSh Bn) |
| KSh 3B Core Capital | 11 (as of June 2025) | 14.7 |
| Severe Scenario Impact | 12 | 19.8 |
Escalating Cyber Threats
Operational risks are growing. Stress tests assumed a 5% chance of successful cyber-attacks. Losses are estimated at KSh 32.8 million under the baseline, KSh 2.1 billion under a moderate scenario, and KSh 2.9 billion in a severe case.
Five banks would fall below the CAR minimum in the worst case, requiring KSh 2.4 billion. These banks overlap with those already at risk from credit shocks.
Policy and Supervisory Response
The CBK notes the sector is more resilient than in 2024. Fewer banks would fail stress scenarios and the capital needed to plug gaps has fallen. Still, Tier II and III banks remain vulnerable. The CBK recommends:
- •Strict implementation of Internal Capital Adequacy Assessment Process (ICAAP) plans.
- •Closer monitoring of top borrower exposures and sectoral risks.
- •Strengthened provisioning aligned with actual risk profiles.
- •Greater investment in cyber defenses to contain operational risks.
The combination of elevated NPLs, weak lending growth, and new capital thresholds will continue to test Kenya’s banks through 2025. The pressure is most acute for smaller lenders, where capital shortfalls and rising operational vulnerabilities could threaten stability.