Check-Off Loans in Kenya: How Payroll-Deduction Lending Works
A practical guide to check-off (payroll-deduction) loans in Kenya — how deductions at source work for private employers and government payrolls via IPPD, the deduction-data process, and the controls a lender needs.
Check-off lending is the backbone of workplace (scheme) banking in Kenya. The repayment mechanism is deceptively simple to describe — an instalment is deducted from the borrower's salary at source and remitted to the lender — but the operational reality behind it spans employer mandates, payroll integrations, government payroll authorities and a set of controls that protect both the lender's book and the borrower's payslip. Get the deduction wrong and the loan is exposed from day one; get it right and a check-off loan is one of the lowest-risk unsecured products a regulated lender can write. This article walks through the check-off mechanism end to end: what a check-off is, how the authorisation mandate is captured, how deduction data flows for government ministries versus private employers, and why the booked deduction must never fall short of the repayment schedule. It sits within our complete guide to workplace banking and goes deep on the one feature that defines the product.
What a check-off actually is
A check-off is a salary deduction at source. Rather than relying on the borrower to transfer an instalment each month, the employer (or the body that administers the payroll) deducts the agreed monthly amount from the employee's pay and remits it to the lender before the net salary reaches the borrower's hands. Because the deduction happens upstream of the borrower's discretionary spending, repayment risk shifts substantially from the individual to the reliability of the payroll itself.
That structural advantage is precisely why workplace banking enforces a minimum take-home rule. Under the platform's affordability check, an applicant must retain a minimum net take-home of KES 50,000 (a bank-configurable policy figure) after the new instalment and all existing deductions are applied. This floor holds even where a loan is being bought off, and any facilities being taken over are included in the affordability computation. The point is that the check-off can only protect the lender if the payslip genuinely has the capacity to carry it — so capacity is verified before the deduction is ever set up.
Check-off lending in Kenya generally falls into two operational tracks that share the same workflow but diverge at the point the deduction is booked:
- Government ministries, where deductions are administered through the Integrated Payroll and Personnel Database (IPPD).
- Private employers, where deductions run on a scheme arrangement between the lender and the employer.
Both tracks depend on a properly executed employee mandate, which is where the authorisation form comes in.
The Check-Off Authorization Form and the employee mandate
The legal foundation of any check-off is the employee's instruction to their employer to deduct and remit. In the platform this is captured through the Check-Off Authorization Form, which is auto-generated by the Document service once the application data is in place. Generating the form from captured data — rather than asking staff to fill a blank template — removes transcription errors in the customer name, employment number, instalment and tenor, all of which have to match what the payroll will eventually act on.
The authorisation form is one item in a wider, checklist-driven documentation matrix that the system enforces, and the matrix differs for customers who are new to the bank versus existing customers. Alongside the check-off mandate, a typical file includes the application form and terms, a copy of the national ID or passport, the latest certified payslip, the KRA PIN, and — for buy-offs — a stamped loan statement from the institution being cleared. After documents are uploaded, the system auto-generates a loan offer for the customer to execute, and an OTP is sent by SMS to the customer with a link to the loan and account-opening terms. Critically, any amendment to customer or loan details after OTP verification triggers a fresh OTP, so the mandate the customer agreed to always corresponds to the figures that will be deducted.
Government ministries: deduction data via IPPD
For government employees, the deduction is not arranged directly with the employing ministry; it is booked through IPPD, the central government payroll system. Once a facility reaches the booking stage, the Scheme Loan Administrator (SLAD) generates a structured deduction-data record for delivery to IPPD. That record carries the fields IPPD needs to identify the payee and set up the deduction:
| Field | Purpose |
|---|---|
| Date | When the deduction instruction is raised |
| Customer name | Identifies the payee on the payroll |
| PF / employment number | The payroll key that ties the deduction to the right employee |
| Account number | Where the deducted instalment is remitted |
| Monthly instalment | The amount to be deducted each pay run |
| Tenor | Number of instalments |
| Total repayment | The full amount to be recovered over the tenor |
| Facility description | Identifies the loan the deduction services |
The deduction data is produced with a defined header and footer and a confirmation sign-off, so it is a controlled, auditable document rather than an informal list. IPPD then confirms payslip capacity — verifying that the employee's pay can actually sustain the instalment — and books the deduction on the government payroll. Once booked, the confirmation is scanned and uploaded back into the file, closing the loop and giving the lender documentary evidence that the deduction is live before funds move. Because the government call-back at the relationship-manager stage already establishes employment, government ministries are exempted from the additional employee verification that private entities undergo at credit.
Private employers: scheme-based check-off
Private-sector check-offs run on a scheme arrangement rather than IPPD. The employer is onboarded as a scheme, and the employer-scheme onboarding process captures the parameters that govern lending against that payroll — interest rate, minimum and maximum loan amount, processing fees, minimum and maximum tenure, and the insurance amount payable, along with the allowance and deduction types that feed the affordability calculation.
Where the government track relies on IPPD to confirm capacity, the private track relies on employee verification with the employer. The platform records employer confirmation through an agreed mode — a recorded telephone line or email — and captures who was contacted, the date, the time and the number used. Unlike government ministries, private entities receive this verification as enhanced due diligence at the credit stage, because there is no central payroll authority independently confirming the deduction. This sits within the broader set of compliance checks the platform runs, and the reviewer works from a split screen showing the application beside all search and verification results.
Why the booked deduction must never fall short
The single most important control in check-off booking is that the deduction set up on the payroll must never be less than the repayment schedule requires. If the payroll deducts a shilling less than the instalment, the loan quietly falls into arrears every month — and because the borrower never sees the shortfall, it can go unnoticed until the book is impaired.
This is where booking discipline meets the mechanics of break-period interest. Loan booking in the core banking system captures the branch, CIF, loan amount, scheme code, employer code, repayment account, currency, repayment type, tenor, interest rate, repayment frequency, value date and annual fees. A one-month moratorium applies, and the first instalment falls due on the 10th of the month after the moratorium expires. Where the first repayment date is more than a month after the booking date, interest for the gap is calculated daily and paid monthly, and the EMI is computed against both the booking date and the first-repayment date so that every instalment is equated. The result is that the check-off booking is engineered to be at least equal to — never less than — the repayment schedule. The full mechanics of how a facility is booked, limit-marked and disbursed are covered in our guide to loan booking and disbursement against the core banking system.
One operational dependency is worth flagging: where an employer code is missing at booking, Credit Admin must liaise with the SLAD or Scheme Relationship Manager to resolve it before disbursement. A facility cannot be safely disbursed until the deduction has a payroll to attach to.
Frequently asked questions
What is the difference between check-off and direct debit repayment?
With a check-off, the instalment is deducted from the borrower's salary at source — by the employer or, for government staff, through IPPD — before the net pay is released, so repayment does not depend on the borrower having funds in an account on the due date. A direct debit, by contrast, pulls the instalment from the borrower's bank account after salary has landed, which exposes the lender to the risk that the account is empty or other debits got there first. For workplace banking, the check-off's deduction-at-source structure is what makes an unsecured personal loan a comparatively low-risk product, provided the affordability floor and booking controls are observed.
How are government-payroll (IPPD) check-offs handled?
For government ministries, the Scheme Loan Administrator generates a structured deduction-data record — date, customer name, PF or employment number, account number, monthly instalment, tenor, total repayment and facility description, with a header, footer and confirmation sign-off — and delivers it to IPPD. IPPD confirms that the employee's payslip has the capacity to sustain the instalment and books the deduction on the government payroll. The confirmation is then scanned and uploaded back into the loan file as evidence that the deduction is live. Because employment is already confirmed via the relationship-manager call-back, government ministries are exempt from the additional employee verification applied to private employers at the credit stage.
What happens to the check-off if a borrower changes employer?
A check-off is tied to a specific payroll: the deduction lives either on a private employer's scheme or on the government payroll via IPPD, keyed to the borrower's employment or PF number. If the borrower moves to a different employer, the deduction at the original payroll no longer recovers the instalment, which is exactly the kind of exposure the platform's controls are designed to surface. That is why employment is verified up front — IPPD confirmation for government staff, recorded employer confirmation for private staff — and why the retirement-age and employment-contract-maturity rules ensure the facility cannot mature beyond the borrower's expected time on the payroll. Resolving a genuine employer change is a servicing matter handled with the scheme administrator.
If your institution is moving check-off lending onto a controlled, auditable platform, the workplace banking product page sets out how the deduction mechanism, scheme parameters and core-banking booking fit together — and you can book a demo to see the IPPD and scheme flows in practice.