Cyber attacks/Star illustrations
Investigations have revealed how a well-coordinated cybercrime syndicate systematically drained millions of shillings from victims' bank accounts, primarily targeting retirees and unsuspecting account holders.

The Directorate of Criminal Investigations (DCI) said one case reported at Nyahururu Police Station on January 17, 2025, a victim lost Sh3.4 million.

Another woman reported a loss of Sh1.8 million on the morning of March 14, while at Nakuru’s Mwariki Police Station, a man reported that he lost Sh1.3 million on April 7 after speaking with a caller who posed as a bank representative.

On the same day, an elderly woman reportedly lost Sh1.2 million in a similar incident.

DCI said the syndicate reportedly targeted pensioners shortly after their retirement benefits were deposited.

A 63-year-old former Ministry of Lands employee lost Sh2.3 million.

Enjoying this article? Subscribe for unlimited access to premium sports coverage.
View Plans

Two other victims, both county government staff in Nakuru, lost Sh1.6 million and Sh1.5 million respectively.

Investigators said the fraud involved phone-based social engineering tactics, where victims were tricked into revealing personal information, allowing the gang to access their bank accounts.

Investigators identified a central figure, allegedly operating using two phone numbers, which have recorded daily transactions of over Sh1 million since April.

His accomplice is reported to have coordinated logistics, supplying airtime worth Sh16,000 daily to spoof caller IDs used in the scams.

DCI said the suspect received a share of between Sh30,000 and Sh120,000 depending on the day’s stolen amount, while other members were paid between 10 percent to 15 percent commissions.

The DCI suspected a fraud ring operated by assigning roles, some impersonating bank staff, others handling cash-outs, while key figures managed the distribution of proceeds.

Investigations continue as authorities seek to uncover the full extent of the operation, identify more victims, and trace the movement and withdrawal of stolen funds.

DCI arrested six cybercrime suspects implicated in a series of serious fraud through spoofing to dupe their targets, whereafter they siphon millions of cash electronically in a security operation conducted in Nyali, Mombasa County.

The operation started on May 31, 2025, following an intelligence tip, after which the officers mounted a sting operation targeting the suspected fraudsters.