Why 2025 was a perfect storm for Kenyan cybercrime – And how to stay safe in 2026

Why 2025 was a perfect storm for Kenyan cybercrime – And how to stay safe in 2026

Listen to article

8 min listen
Audio reading is not supported on this browser.
Ready

Thanks for listening. Continue with a related story, or tap the speaker icon on the next page to listen.

Related story

KRA intensifies anti-tax evasion drive, destroys contraband goods worth Sh218 million

Abdirahman Khalif  ·  2 weeks ago
Read next Opens a fresh page.

Kenya saw a sharp rise in digital scams in 2025, from fake job groups to AI voice fraud. Experts explain how these schemes worked and how Kenyans can stay safer in 2026.

Kenya’s digital transformation accelerated sharply in 2025, with more people working online, consuming digital content, and relying on mobile money systems.
Yet alongside this growth came a surge in sophisticated cybercrime, leaving thousands of Kenyans vulnerable. Cybersecurity experts in Nairobi reported that 2025 saw “the highest volume of digital scams targeting ordinary citizens in over a decade.”
From fake WhatsApp job groups to TikTok monetisation fraud, the year revealed a stark truth: as Kenya becomes more digital, fraudsters are evolving just as quickly.
Scams are no longer confined to poorly written emails or suspicious phone calls. They now mimic legitimate companies, exploit economic pressure, and use psychological tactics to manipulate victims.
This special report examines the scams that hit Kenyans hardest in 2025, explains how they worked, and outlines practical steps to stay safe in 2026.
Fake WhatsApp and Telegram job groups
The largest scam of the year in both scale and impact involved fraudulent WhatsApp and Telegram job groups.
These groups targeted young Kenyans desperate for income, particularly after a difficult year marked by high inflation and limited job opportunities.
Scammers created groups with names like “Online Jobs 2025,” “TikTok Promotion Team,” and “Digital Ambassador Work,” adding hundreds of unsuspecting members daily. The groups posted fake testimonials from supposed “workers” who claimed to earn Sh1,500–Sh6,000 a day from simple tasks such as liking videos, answering surveys, or commenting on posts.
There was always a catch: a registration fee. Victims were asked to send between Sh150 and Sh1,000 via M-Pesa to “activate their accounts.” After paying, many were immediately removed or blocked. Others were strung along with additional requests for “task upgrades,” losing more money each time.
A cybersecurity trainer at the Kenya ICT Action Network (KICTANet) explained: “These scammers know the economic pressure Kenyans are experiencing. They use urgency, fake success stories, and large group numbers to make the opportunity look real. The emotional manipulation is deliberate.”
The rise of fake TikTok monetisation agents
With TikTok becoming one of the most profitable platforms for creators, scammers developed a new niche: impersonating TikTok staff.
They messaged users—especially those with over 1,000 followers—posing as “TikTok monetisation support officers,” promising to activate earnings instantly for a small fee. Some even used AI-generated profile pictures and fake verification badges to appear credible.
A 21-year-old creator from Eastlands, who asked to remain anonymous, recounted her experience: “I really wanted to start earning. The person sounded official and even showed me ‘screenshots’ of others they had helped. I sent Sh500. They blocked me immediately.”
Others were tricked into providing TikTok login codes, which scammers used to hijack accounts and lock out the owners. TikTok later issued warnings, clarifying that it has no agents or fees for monetisation.
Evolved M-Pesa reversal fraud
The classic mobile money “wrong transaction” scam also reappeared, but with greater sophistication.
Previously, scammers relied on text messages claiming to have sent money by mistake. In 2025, they improved the trick using spoofed SMS systems that perfectly mimicked real M-Pesa messages. Some even called victims pretending to be Safaricom support staff, urging them to “approve the reversal.”
Victims who refunded the money ended up losing their own funds because the original message was fake.
Safaricom issued multiple safety alerts throughout the year, advising customers to:
• Check balances only through the M-Pesa app or Hakikisha
• Ignore suspicious SMS messages
• Never reverse money before verifying the actual transaction
Despite these warnings, the scam persisted, particularly during peak seasons such as back-to-school, Easter, and the pre-Christmas period.
Telegram crypto and forex doubling schemes
Telegram became the epicentre of crypto-related fraud in 2025, fuelled by rising interest in digital currencies among Kenyan youth.
Groups advertised “guaranteed profits,” with admins showing fabricated screenshots of daily earnings. New members were persuaded to deposit amounts ranging from Sh3,000 to Sh20,000, with the promise of doubling their money in a single day. The groups often vanished overnight.
A fintech analyst based in Westlands said, “Many Kenyans still do not understand how crypto or forex works. Scammers use complicated jargon to confuse people and create a false sense of credibility.”
AI-powered impersonation scams
The most concerning trend involved AI-generated voices and profiles. Scammers used simple AI tools to clone the voices of bank staff, customer care agents, or even family members.
Several victims reported receiving calls from individuals who sounded exactly like real bank officers, asking them to “confirm account details due to suspicious activity.” In reality, the callers were fraudsters using AI.
AI was also used to create fake customer care social media accounts, complete with realistic, AI-generated photographs. These accounts responded to service complaints with requests for personal details, including ID numbers and verification codes.
Cybersecurity experts warn that AI-powered scams are only just beginning.
Online marketplace scams
Advertisement
E-commerce also became a soft target, with sellers receiving fake payment messages and buyers falling for scams involving non-existent products. Common tactics included:
• Fake screenshots of payment confirmations
• Stolen photos of items
• Courier scams demanding “delivery deposits”
• Sellers disappearing after receiving money
First-time online shoppers and small businesses using Instagram or Facebook Marketplace were hardest hit.
Why Kenyans fell victim: a perfect storm
Three major factors made 2025 a particularly fertile year for scammers:
Economic pressure – High unemployment and rising costs of living pushed many to seek quick cash, making fake job offers and investment schemes more tempting.
Rapid digital growth – More Kenyans accessed smartphones, online platforms, and mobile money, but digital literacy did not grow at the same pace.
Social media trust culture – People are more likely to trust information shared by peers or mutual groups, a vulnerability scammers exploited heavily.
How Kenyans can protect themselves in 2026
Cyber experts recommend the following practical steps:
1. Always verify mobile money transactions via the M-Pesa app, not SMS
2. Never pay registration fees for online jobs
3. Avoid sharing ID numbers, passwords, or verification codes
4. Be sceptical of offers promising unrealistic returns
5. Confirm official contacts through verified websites
6. Use two-factor authentication on all social media accounts
7. Report suspicious activity immediately
One expert summed it up clearly: “If the deal is too good to be true, it is. If it requires secrecy or urgency, it’s a scam. And if someone asks for money to give you money, run.”
A digital future, but a risky one
Kenya’s shift towards digital systems shows no signs of slowing. More people will work online, shop online, and use mobile money in 2026, meaning scammers will continue to invent new ways to exploit technology.
The best defence remains awareness. As the festive season ends and Kenyans prepare for a new year, cybersecurity specialists urge the public to stay vigilant, think critically, and verify before acting.
The digital world offers opportunity—but also danger—for those unprepared.

Comments

0
Loading comments...

Trending

Latest Stories

Popular Stories This Week