Fintech Ad Approval: Platform vs Regulator in Six Markets

Before a fintech ad reaches a screen, two different gatekeepers may have to approve it: the ad platform and the regulator. We built a fintech ad approval map of both across the United States, the United Kingdom, Kenya, Nigeria, South Africa and Ghana, using only primary sources read on September 25, 2026. The two gates rarely sit in the same place.

Kenya first: who checks a fintech ad, and what it must carry

If you market a regulated product in Kenya, start here. Two gates apply, checking different things: the platform checks the product, and the Kenyan regulator checks the firm and, for a few capital-markets products, the ad itself.

What Google and Meta check

Google does not verify Kenyan financial advertisers. Kenya is not among the 42 markets on Google’s financial services verification list, which we read on October 15, 2026. Google’s financial products policy says you “must comply with state and local regulations for any location that your ads target.” The landing page must show the business’s physical address, all associated fees and links proving any claimed accreditation, “clearly and immediately visible without needing to click or hover.”

The product rules do the filtering:

• Personal loans: “Only personal loans that require repayment in full in 61 days or longer are allowed.” The landing page must also show the repayment period range, the maximum APR and a representative example of total cost.
• CFDs and forex: allowed only if the advertiser is “duly licensed by the Capital Markets Authority,” and “Advertisers must also be certified with Google.”
• Crypto exchanges, software wallets and debt services: Kenya is not an approved location, so they cannot be advertised there.

Meta applies one policy worldwide. Ads “must not promote” payday loans, short-term loans repaid “in 90 days or less” or contract for difference trading. Credit, loan and insurance ads “must be targeted to people 18 years or older,” and advertisers “may be required to be licensed in the country they are targeting.” Meta’s special ad category is required for advertisers based in the United States and for ads shown to audiences in the United States, Canada or certain parts of Europe (Meta Business Help Centre, read 31 October 2026), so a Kenya-only campaign does not need it.

What Kenyan regulators check

We found no general pre-clearance of financial ads in Kenya. The exceptions are capital-markets products, all under the Capital Markets Authority (CMA):

• Unit trusts and money market funds: a person “shall not advertise” a collective investment scheme “unless the advertisement has been approved by the trustee in writing and notified to the Authority” (CIS Regulations 2023, reg. 163). An intermediary service platform “shall seek approval from the Authority” for any ad “at least forty-eight hours before” publication (reg. 82).
• Public offers: ads “shall be submitted to the Authority and securities exchange” at least 48 hours before publication (LN 172 of 2023, reg. 28(2)).

Everyone else writes to content rules:

• Forex and CFD brokers “shall not” market without the CMA’s prescribed risk warning, in a font “at least equal to the predominant font size” (Circular No. 03/2023).
• Digital lenders: the CBK (Digital Credit Providers) Regulations 2022 required a lender to disclose in its advertisements “that it is regulated by the Bank” (reg. 25(d)) and to keep “false, misleading or deceptive” claims out of its ads (reg. 28). Those regulations were replaced by the Central Bank of Kenya (Non-Deposit Taking Credit Providers) Regulations, 2026 (Legal Notice 191 of 2026, gazetted 29 September 2026). Under the 2026 Regulations, which we read in the gazetted text on October 27, a lender’s advertisements must be fair, clear and not misleading and must include the annual percentage rate and the components of the total cost of credit (reg. 51). A lender must disclose in its advertisements and promotional material that it is regulated by the Bank (reg. 47(e)), although reg. 82(2) words this as “may”, and the Bank’s logo and identity may not be used in communications to customers (reg. 82(3)). App-based lenders must also let customers opt out of marketing messages. Where a printed advertisement refers to an interest rate, it must state the total cost of credit, say whether the rate is monthly or annual, and say whether it is fixed or variable (reg. 52(3)(a)). The total cost of credit must also be prominent on the lender’s premises, website and other publications (reg. 52(3)(b)). A breach can bring a penalty of up to KES 2,000,000 or three times the gain made or loss avoided, whichever is higher, up to KES 250,000 on a responsible senior officer, and up to KES 10,000 a day while a failure continues (reg. 86(1)). We read these provisions in the gazetted text on October 30, 2026. Check the text of Legal Notice 191 before relying on this; it is a map, not legal advice.
• Insurers and intermediaries “shall promote insurance products and services in a manner that is clear, fair and not misleading,” disclose “benefits, costs and risks,” and, for intermediaries, say how they are paid (Insurance (Market Conduct) Guidelines, 2022).
• Deposit-taking Saccos: savings ads must state minimum balances, the interest rate, fees and early-withdrawal penalties “clearly and conspicuously” (LN 95 of 2010, reg. 26(2)).

The traps

• A licensed lender can still run a disapproved ad. A 30-day loan from a CBK-licensed lender fails Google’s 61-day rule and Meta’s 90-day rule.
• Retargeting is direct marketing. Kenya’s Data Protection (General) Regulations, 2021 count an ad shown to a logged-in user “using their personal data” as direct marketing, and the Data Protection Act 2019, s.37, bars commercial use of personal data without “express consent.”
• Every marketing message needs a free way out. Each one must say how to stop it “without incurring charges” (reg. 15(2)).
• “Regulated by” is not “approved by.” Claiming an “approval, status, affiliation or connection” a lender lacks is itself a misleading ad (Non-Deposit Taking Credit Providers Regulations, 2026, reg. 52(2)(b); the 2022 rules said the same in reg. 28(2)(b)).

How we built the fintech ad approval map

We asked two questions of each market. First, does Google check the advertiser, or the product, before a financial ad can run there? Second, does anyone outside the company, whether a regulator or an authorized firm, have to approve the ad itself before it is published?

Every answer comes from the platform’s own policy page or from the statute, regulation or guideline itself, not from a summary of it. We read all of them on September 25, 2026. Where a regulator’s site was unreachable that day, we say so and cite an archived copy of the regulator’s own file.

What the map leaves out. It covers who must approve an ad, not what the ad has to say. Rate disclosures, representative examples and risk warnings are in our fintech ad compliance checklist, which covers the same six markets. To check an ad’s own words against both, use the fintech ad copy checker. Outside the Kenya section, it leaves out Meta. Meta’s financial services policy says advertisers “may be required to verify their business and/or individual identity and demonstrate they are authorized by the relevant regulatory authorities where this is a requirement.” The policy page does not list the countries, so we could not map Meta market by market from a primary source. The one dated Meta rule, the special ad category for financial products and services, applies to advertisers based in the US or showing ads to US audiences.

Google’s financial services verification: 1 market in 2021, 42 in 2026

Google’s financial services verification is the platform’s check on the advertiser. In each market on its list, an advertiser in scope has to be verified before it can show financial services ads to people there. Google publishes the list as a country table with an “Enforcement starts” date for each market. We counted the rows by hand: there are 42.

Grouping those dates by year shows how recent most of the program is.

Twenty-five of the 42 markets, about 60%, started enforcement in 2026. The most recent change took effect on September 15, 2026, when 13 more European Economic Area markets began enforcing. That completed the 24-market EEA expansion Google announced in June 2026, which it runs through an external partner, G2.

Of the six markets in this map, only the UK is on the list. The United States is absent, and so are Kenya, Nigeria, South Africa and Ghana. No African country appears anywhere in the table. For a US or UK fintech, the EEA additions are the practical risk: a campaign that already targets one of those 24 markets now needs verification there too. Our Google Ads policy news table lists all 42 markets with the regulators Google names for each, and we re-check it monthly.

In the UK, verification is not one route but four: FCA-authorized firms, approved third parties (defined as “advertisers whose ads are approved by an FCA-authorized firm,” including “marketing agencies for lead generation”), exempt non-financial services advertisers, and exempt government entities. On the FCA-authorized route, the business details you submit must exactly match the Financial Services Register. Our guide to Google Ads financial services verification walks through each route.

Google’s product certifications: which markets are open at all

Verification checks who the advertiser is. Separately, Google restricts three product types by location, and each needs its own certification: cryptocurrency exchanges and software wallets, complex speculative financial products (CFDs, rolling spot forex and financial spread betting), and debt services. For each, Google publishes a list of approved locations and the local license it expects. Each page says the same thing about every other market: if your targeted location is not on the list, the product cannot be advertised there.

Three things stand out.

• Nigeria and Ghana are closed to all three. On Google, a campaign targeting either market cannot promote a crypto exchange, a CFD or forex product, or a debt service, whatever licenses the advertiser holds at home.
• Kenya is split. A CMA-licensed advertiser can run CFD and forex ads, but no one can run crypto exchange ads into Kenya on Google.
• South Africa is as open as the US and the UK. Google names a South African regulator for every one of the three products: the FSCA for crypto and CFDs, the National Credit Regulator for debt counseling.

Google crypto ads: open in three of the six markets

Crypto is where the platform gate and the regulator gate overlap most, so it is worth taking on its own. Google’s cryptocurrency policy has three tiers. Initial coin offerings, DeFi trading protocols, crypto loans and similar products are prohibited everywhere. Hardware wallets, exchanges, software wallets and coin trusts are restricted: they need an approved application to advertise and an approved location. Everything else, such as businesses that accept crypto as payment, can run without certification.

Among our six markets, exchanges and software wallets can be advertised only in the US, the UK and South Africa, each with its own licensing test (see the table above). In the UK, a Google certification is only half of it. Since October 8, 2023, the FCA’s financial promotions regime has covered cryptoassets marketed to UK consumers, including by firms based overseas, through four routes: an FCA-authorized communicator, approval by an FCA-authorized firm, a cryptoasset business registered with the FCA under the money laundering regulations, or an exemption.

Ghana shows what enforcement looks like where neither gate is open. On February 20, 2026, the Bank of Ghana and the Securities and Exchange Commission jointly directed all virtual asset service providers “to refrain from mass marketing or public promotional campaigns on virtual assets, unless expressly authorised by the BoG and SEC,” and told those with billboards or other public advertising to take them down within 48 hours.

Kenya was next, and it has arrived. In March 2026 TechCabal reported that draft virtual asset regulations, then open for consultation, would require crypto advertising to meet content standards and give token issuers a “no objection” step before promoting. The final text is now in force. The Virtual Asset Service Providers Regulations, 2026 were gazetted on 22 July 2026 as Legal Notice 134 of 2026, made under the Virtual Asset Service Providers Act (No. 20 of 2025), and Part XIII, regulations 123 to 133, governs advertisements and promotions of virtual assets.

It reaches anyone who advertises or promotes a virtual asset service, including initial coin offerings and non-fungible tokens, and a licensee is liable for anyone acting on its behalf. An advertisement must be fair, clear, complete and not misleading; carry the licensee’s full name, licence number and registered office; give a fair and balanced indication of the risks whenever it references benefits; state the service offered, the deposit and withdrawal terms and timeframes, the fees payable and where the full terms can be read; and advise the consumer to do their own research rather than rely on the advertisement alone. Past performance needs a clear and prominent statement that it is not an indicator of future performance. Regulation 132 prohibits eleven internet advertising practices outright, among them risk warnings placed outside the advertisement border, key information reachable only by significant scrolling, and risk statements shown in a pop-up on a first visit only. Records of each advertisement, including who signed it off and when, are kept for at least seven years.

What did not survive the draft is the interesting part. There is no pre-approval in the gazetted text: the relevant regulatory authority, which under section 5 of the Act is the Capital Markets Authority or the Central Bank of Kenya, does not vet a crypto advertisement before it runs, and the “no objection” step the draft trailed is not in Part XIII. So Nigeria remains the only one of these six markets where a public body pre-clears every advertisement, and Kenya’s crypto regime is a content-and-records regime rather than a gate. Kenya is still not an approved location for Google crypto exchange or wallet ads, so the platform layer above is unchanged.

The regulator gate: who has to approve the ad itself

The second question is whether someone outside the company has to approve an ad before it runs. The answer ranges from “every ad, always” to “no one but you.”

Nigeria is the outlier. Section 54 of the ARCON Act makes it an offense for anyone, “including sponsor or beneficiary of an advertisement,” to place an ad “in any medium directed at or targeting the Nigerian market without the prior approval of Standards Panel.” The Act defines a “foreign advertiser” as a non-Nigerian person or organization that causes or pays for an advertisement. ARCON’s vetting guidelines list “Online and Social Media Platforms” among the media covered, and say an ad “shall not be exposed until a Certificate of Approval” has been received. A US or UK fintech geo-targeting Lagos on social is inside that rule.

No African market has a UK-style approver. In the UK, an authorized firm can approve an unauthorized firm’s promotion and make it lawful to communicate. We found no equivalent route in Kenya, Nigeria, South Africa or Ghana. There, the gate is licensing of the firm itself.

Both gates side by side

Read across the rows and a pattern appears. The heaviest regulator gate, Nigeria’s, sits where Google’s product access is narrowest. The UK is the only market with a heavy gate on both sides. The US has no advertiser verification but the full set of product certifications. South Africa, often grouped with its neighbors, looks more like the US on the platform side and asks for no outside approval at all.

For a fintech planning one campaign across these markets, that means one creative and one approval path will not work everywhere. Work out, market by market, which product you are advertising, whether Google allows it there, and who outside the company has to sign off before it goes live.

FAQ: fintech ad approval

Fintech ad approval: what to do next

Treat fintech ad approval as two separate checks per market: the platform’s and the regulator’s. Start with the product, because it decides whether Google will carry the ad at all. Then check who outside the company has to approve it. For the content rules that apply once both gates are open, use the checklist.

We re-check this map when we run our monthly check of the policy news table, and we date every change. Checked 2 November 2026: every Google row on this page was re-read and none of them changed, including the 42-market verification count and the crypto, CFD and forex and debt-services availability across all six markets. Google added the United Arab Emirates to its crypto and complex speculative product lists from 21 October 2026, which is outside these six markets. Meta’s bans on loans of 90 days or less and on contract for difference trading read the same, and Kenya’s rules are as described in the Kenya section. Checked 1 October 2026: every Google row on this page was re-read and none of them changed, including the 42-market verification count and its growth by year, and the crypto, CFD and forex and debt-services availability across all six markets. Kenya now has crypto advertising rules of its own, described above. Checked 27 October 2026: the Kenya digital-lender rules changed. The 2022 Digital Credit Providers Regulations were replaced by Legal Notice 191 of 2026; see the Kenya section. We read the gazetted text the same day (regs. 47, 51, 52 and 82). Checked 15 October 2026: the Google rows were read again for the new Kenya section, and the 42-market count and Kenya’s rows had not changed. It is free to cite with a link. If you would rather have it applied to your own account, the paid account and compliance risk section of our Acquisition Audit checks your category classification and verification status, and the same ground runs through our fintech PPC work.