Six suspects arrested in Mombasa in multi-million cybercrime bust

The app enabled fraudsters to impersonate customer service agents, convincing victims to divulge sensitive information.
Six individuals suspected of engaging in cybercrime have been arrested in Nyali, Mombasa County, during a security operation.
They are believed to be behind a string of high-level fraud cases involving spoofing techniques used to trick victims and electronically siphon off millions of shillings.
More To Read
- Kenya records surge in cybercrime with 82 per cent targeted, gaming sector most hit - report
- Two suspected SIM swap fraudsters detained after stealing Sh589,800 from victim
- Google's AI-powered efforts block 5.1 billion malicious ads amid rising threats
- DCI nabs IT expert in Sh49 million Jambo Pay portal hack
- Cyber threats surge as Kenya records 840 million attacks between October and December 2024
- Kenya's young women lured into crypto scams through fake investment opportunities - report
Spoofing refers to a type of cybercriminal activity where someone or something forges the sender's information and pretends to be a legitimate source, business, colleague, or other trusted contact to gain access to personal information, acquire money, spread malware, or steal data.
The suspects identified as Fortune Muthina Kinyanzui alias Albanas Kyalo, Ruel Kipkoech Yator alias Papa Ruel, Laban Kipkirui Koech, Weldon Kipyegon Rono, Towet Kipkorir Alphonce, and Kelvin Kipyegon Koech were apprehended during a raid led by detectives from the operations directorate.
Authorities say the group was involved in a string of financial scams using caller ID spoofing technology. The technique allows perpetrators to manipulate outgoing phone numbers, making them appear as though calls originate from legitimate institutions such as banks or telecom companies.
According to police, Muthina, believed to be the ringleader, had access to a highly sought-after spoofing application, which he allegedly leased to other fraudsters, including individuals linked to the notorious 'Mulot Swapper' racket at a premium cost.
The app enabled fraudsters to impersonate customer service agents, convincing victims to divulge sensitive information.
“The victims were often coerced into panic, believing they were at risk of losing funds or accounts. Once the scammers had access, they transferred large sums of money electronically,” an officer involved in the investigation said.
The illegal software, reportedly priced at over Sh500,000, came with a configuration service and IP address setup to enable seamless remote operations.
The suspects were arrested at a short-term rental apartment, APA Apartments, on 1st Avenue in Nyali, which investigators say had been converted into a training and operations hub.
Recovered from the scene were 19 mobile phones, numerous SIM cards from multiple service providers, SIM holders, and a notebook believed to contain potential victims’ details.
The suspects were arraigned at the Kahawa Law Courts on June 3, 2025, where investigators sought custodial orders to finalise the probe.
The court scheduled a mention for June 6, 2025 and directed that the suspects remain in custody at the Capitol Hill Police Station.
Members of the public who believe they may have been defrauded are urged to contact the Directorate of Criminal Investigations (DCI) or report to the respective police stations handling cybercrime cases.
Top Stories Today