KRA’s official X account hacked, public warned against fraudulent posts
In a statement, KRA Corporate said urgent efforts are underway in collaboration with X to retrieve and secure the official account.
The official Kenya Revenue Authority (KRA's) X account has been hacked and its handle changed to “StandsX,” the KRA Corporate team confirmed.
Authorities have warned the public not to engage with the account, share personal information, or send money, as any posts or messages from the compromised account are fraudulent.
More To Read
- High Court rules in favour of KRA in Sh1.1 billion tax dispute, orders fresh tribunal hearing
- Treasury reports Sh16.9 billion in excise duty waivers amid push for local manufacturing
- IMF questions Kenya’s exchange rate policy amid new funding negotiations
- KRA retains fringe benefit tax rate at 8 per cent for October–December 2025
- KPA declares 80 per cent waiver to clear long-stay cargo at Mombasa Port
- KRA announces scheduled eight-hour downtime for customs system
“Members of the public are strongly warned not to engage, share personal information, or send money to any messages or posts from this account, as they are fraudulent,” the statement read.
In a statement, KRA Corporate said urgent efforts are underway in collaboration with X to retrieve and secure the official account.
"Official updates will be shared through verified KRA communication channels. You can still reach us on Facebook: facebook.com/KRACare, or via WhatsApp 0711099999," the Authority stated.
The official @KRACare X (formerly Twitter) account has been hacked and its handle changed to “StandsX”. Members of the public are strongly warned not to engage, share personal information, or send money to any messages or posts from this account, as they are fraudulent. The Kenya… pic.twitter.com/ZmoFsJp3S7
— Kenya Revenue Authority (@KRACorporate) October 31, 2025
Cases of social media account hacks targeting official institutions have been quite recurrent in Kenya, with the Directorate of Criminal Investigations (DCI) among the entities previously affected.
Earlier this year, the DCI regained control of its X and Facebook accounts following a cyber-attack that saw hackers post information related to cryptocurrency and blockchain scams. The DCI team acted swiftly to recover the accounts and issued a statement clarifying that the content did not originate from the agency.
Top Stories Today
