How to verify a Kenyan flower supplier: what you can actually check, and what proves nothing
This page is not a warning about Kenyan suppliers. Nothing in the evidence behind this site suggests the Kenyan flower sector is unusually dishonest, and a page implying otherwise would be both unfounded and self-serving. It is a practical answer to a fair question any buyer sending money abroad should ask: which claims can I independently check, and which are simply being asserted to me?
Start here, because the framing matters
Most of what a new supplier tells you is unverifiable, and that is normal in international trade rather than sinister. Capacity, reliability, relationships with farms, quality standards — these are commercial claims. You test them with small orders and time.
But three things are independently checkable, cheaply, by you — and in the research behind this site, remarkably few buyers appear to use them. They are worth more than any amount of reassurance.
A fourth category matters just as much: things that look like proof and are not.
1. Does the company legally exist, and who owns it?
This is the strongest, cheapest and most decisive check available, and it takes minutes.
Kenya's Business Registration Service is the official registry of Kenyan companies, accessed through the government's eCitizen portal. An official search — commonly called a CR12 — returns:
- the company's registered name and number
- its date of registration
- its registered office
- its nominal share capital
- its directors and shareholders
The fee is KES 650 — a few US dollars. Records already verified in the system are generated on payment; others can take a few business days.
Source: Business Registration Service fee schedule and official-search guidance, read 25 September 2026.
Consider the asymmetry. A buyer preparing to wire a five-figure sum to a counterparty they have never met can establish, for less than the cost of lunch, whether that company legally exists and who actually owns it. If a supplier is reluctant to give you the registered name and company number needed to run that search, you have learned something useful.
What it does not tell you. Legal existence is not solvency, capability or honesty. A registered company can still fail to deliver. It establishes who you are dealing with — which is the floor, not the ceiling.
2. Is it licensed to export horticultural produce at all?
A company can legally exist and still not be licensed to do this. The two are separate questions, and the second is rarely asked.
Who licenses it. The Agriculture and Food Authority is a state corporation established under the Agriculture and Food Authority Act No. 13 of 2013, regulating the production, processing and marketing of scheduled crops under the First Schedule of the Crops Act No. 16 of 2013. Horticulture sits with its Horticultural Crops Directorate.
What the licence costs, which tells you what kind of thing it is. Under the Crops (Horticultural Crops) Regulations, the export licence fee is KES 10,000 a year and pack house registration is KES 5,000 a year. These are annual standing credentials, not per-consignment paperwork — which is why an exporter either has them or does not, and why "we are applying" is a meaningful answer rather than a delay.
Where they come from. Licences are applied for and renewed through AFA's IMIS portal, which the Authority describes as letting traders importing and exporting crops obtain regulatory documents remotely rather than by attending the agency, and which integrates with the Kentrade trade facilitation platform and the eCitizen payment system.
And here is the limit, which matters more than the rest. We located no public register that lets you verify a named exporter's licence independently. IMIS is a portal for the licence holder, not a lookup for their customers. So an export licence is a document you request and read — it is not a fact you can confirm from outside, and it belongs in the same category as everything in section 5 below: useful, and not proof on its own.
What to ask for, then: the licence number, the licence year and the expiry, and the pack house registration if the flowers are packed by the same company. A current licence names a period. One quoted without one is worth asking about again.
One thing the regulator itself does not currently make checkable. The Horticultural Crops Directorate's own service pages link to its KS 1758 code of practice at a subdomain that does not resolve — no DNS record at all, re-checked on 25 September 2026, while the Authority's main site responds normally. That is not a criticism dressed as a finding; it is the reason this site takes no position on whether KS 1758 is mandatory. The certification position is set out here.
3. Is the phytosanitary certificate genuine?
What every field of the certificate must contain → What an exporter can show you about where a box came from, and what has no public register →
There are two ways to check, and the second is far stronger.
The paper certificate carries security features. Kenya's phytosanitary certificate uses numbering designed to resist alteration, silver holographic foil incorporating the KEPHIS logo, and watermarked KEPHIS logos. A flat PDF scan showing none of these is not proof of forgery — but it is a fair reason to ask questions.
The electronic route is the real answer. Under the IPPC ePhyto Solution, a phytosanitary certificate moves electronically from the exporting country's plant protection organisation to the importing country's, through a central hub. The data is authenticated by the issuing authority, and that authentication carries the legal equivalent of the officer's signature and seal. The IPPC's stated purpose includes preventing the fraudulent certificates that paper allows.
The instruction that follows is simple, and this research did not find it on any competitor page:
Ask whether the consignment will move on ePhyto, and confirm with your own national plant health authority that they have received it.
A certificate you are emailed is a claim. A certificate your own regulator has received through the IPPC hub is a fact.
For what the certificate does and does not attest — and why it cannot be obtained retrospectively — see the phytosanitary page.
4. Are you paying the company you think you are paying?
This is where the largest single losses in international trade occur, and it is not specific to flowers.
Invoice-redirection fraud works by substituting bank details — often mid-transaction, often with a plausible message explaining that the supplier's banking has changed.
Two rules, and they are not negotiable:
- Confirm bank details through a channel you initiated, using contact details you already held — never details supplied in the email carrying the invoice.
- Check the beneficiary name against the legal entity name from the company search in step 1. A mismatch between the trading name and the account holder deserves an explanation before any payment, not after.
Treat any mid-transaction change of banking instructions as a stop condition, however ordinary the explanation sounds. Verify it by voice, on a number you already had.
5. What looks like proof and is not
This category deserves its own heading because these things are routinely offered as proof.
| Offered as evidence | What it actually shows |
|---|---|
| Video call from a packhouse during grading | That product exists. Not who owns or controls the packhouse |
| Photographs of your consignment against a dated reference | That a consignment was packed. Useful for condition claims; not evidence of ownership |
| Photographs of a farm | That a farm exists. A company can film a farm it does not own |
| A certificate as a PDF | That a file exists. See step 2 |
None of these is worthless — consignment photographs against a dated reference are genuinely useful if a condition dispute arises later. They evidence that product exists, not who controls it. Keep the two questions apart.
A sensible order to do this in
- Before you quote-shop: ask for registered name and company number. A supplier who will not give them has answered a different, more useful question.
- Before you commit: run the official search. Read the directors.
- Before you commit, and in the same conversation: ask for the AFA export licence number, its year and its expiry, and the pack house registration if the same company packs. Neither can be verified against a public register, so read the documents and note the dates.
- Before you pay: confirm banking by a channel you initiated, against the registered entity name.
- Before the consignment moves: ask whether it will travel on ePhyto, and tell your own plant health authority to expect it.
- On arrival: photograph against a dated reference if anything is disputed.
What this site does and does not do
Kenya Flower Merchant does not operate a verification service, does not audit other companies, and makes no assessment of any third party's legitimacy anywhere on this site. This page sets out checks you can perform yourself, using public registers and your own national authorities. The same checks apply to every Kenyan supplier a buyer might approach — including the one publishing this page, and you are encouraged to apply them here as you would anywhere else. Who we are, and what we are not, is set out on the About page.
Ready to specify a requirement?
If you can state the product, stem length, head size, quantity, frequency and destination, we can give you a useful answer. If you cannot yet, say so on the form — every technical field has an “I don’t know yet, please advise” option.
Questions buyers ask about verifying a supplier
Is fraud a particular problem with Kenyan flower exporters?
The evidence behind this site does not support that claim, and we are not going to make it. Kenya's flower sector is large, long-established and heavily regulated, and implying otherwise would be both unfounded and self-serving from a Kenyan merchant. What is true is generic to international trade: you are sending money to a counterparty in another jurisdiction, and some claims are checkable while others are not. This page is about telling those apart.
What is a CR12 and what does it cost?
A CR12 is an official company search from Kenya's Business Registration Service, obtained through the government's eCitizen portal. It returns the registered name and number, date of registration, registered office, nominal share capital and — most usefully — the directors and shareholders. The fee is KES 650, a few dollars. Verified records are generated on payment. It is the single most decisive check available to a new buyer and it is remarkably little used.
How do we know a phytosanitary certificate is genuine?
Best route: ask whether the consignment moves on ePhyto, and confirm with your own national plant health authority that they have received it. Under the IPPC ePhyto Solution the certificate travels authority-to-authority through a central hub, and that authentication is the legal equivalent of the officer's signature and seal. The paper certificate also carries security features — alteration-resistant numbering, silver holographic foil with the KEPHIS logo, and watermarked logos. A certificate you are emailed is a claim; one your own regulator has received is a fact.
Where do buyers most often lose money?
Payment redirection, and it is generic to international trade rather than specific to flowers. Bank details are substituted, often mid-transaction with a plausible explanation. Confirm banking through a channel you initiated, against the legal entity name from the company search — never from details in the email carrying the invoice. Treat any mid-transaction change of banking instructions as a stop condition.
A supplier offered a video call from the packhouse. Is that proof?
It is evidence that product exists. It is not evidence of who controls it — a company can film a farm or packhouse it does not own. The same applies to farm photographs. Consignment photographs against a dated reference are genuinely useful for a later condition dispute, which is a different question from ownership. Keep the two apart.
Last verified 25 September 2026
Sources
-
Business Registration Service (Kenya) — companies registry fee schedule and how to apply for an official search (CR12)
What we read
The KES 650 official-search fee, the eCitizen application route, and what a CR12 returns including directors and shareholders. Corroborated against the registry's own application guidance
-
IPPC — ePhyto Solution
What we read
Certificates exchanged authority-to-authority through a central hub, authenticated by the issuing organisation as the legal equivalent of signature and seal, with the stated purpose of preventing fraudulent paper certificates
-
KEPHIS — Phytosanitary Services
What we read
KEPHIS as the issuing authority and its automation of certificate issuance. Certificate security features are recorded from KEPHIS material and have not been inspected on a physical certificate by us
-
Agriculture and Food Authority — Horticultural Crops Directorate service hub and AFA IMIS portal
What we read
The Authority's own description of itself as a state corporation established under the Agriculture and Food Authority Act No. 13 of 2013, regulating scheduled crops under the First Schedule of the Crops Act No. 16 of 2013, with horticulture under the Horticultural Crops Directorate. IMIS is described by the Authority as enabling traders importing and exporting crops to obtain regulatory documents remotely, integrating with the Kentrade trade facilitation platform and the eCitizen payment system. No public register permitting third-party verification of a named exporter's licence was located on either site. The directorate's own KS 1758 link points to ks1758.afa.go.ke, which returned a non-existent-domain error by both browser and DNS lookup on 25 September 2026 while afa.go.ke returned HTTP 200 - the same result recorded on 22 September 2026, now re-confirmed against a rebuilt site