Kenya Scams: Mobile Money, Online & Investment Fraud Guide
Common scams in Kenya and how to report them to KE-CIRT, the DCI, and your bank or M-Pesa provider.
Emergency number: 999 or 112 (police/emergency) — verify on official sources.
Last reviewed: 1 August 2026
Kenya faces significant fraud linked to mobile money (M-Pesa), phishing targeting bank accounts, investment scams, fake job offers, and social engineering attacks. The National KE-CIRT/CC detects and responds to cyber threats 24/7, and the Directorate of Criminal Investigations (DCI) handles criminal cybercrime cases. Kenya's mobile-money-first economy makes M-Pesa fraud the primary daily threat, and speed is critical in reporting.
The M-Pesa playbook is well established. The 'reverse transaction' trick sends a fake confirmation SMS, then a tearful call claims money was sent to you by mistake and begs for a 'refund' — check your actual balance and statement, never the SMS. Calls from 'Safaricom customer care' pressure victims into reading out PINs or dialling USSD codes that hand over control of the line; some open with a menacing familiarity that Kenyans associate with prison-based calling operations ('Kamiti calling'). SIM-swap fraud intercepts banking codes — sudden loss of signal is an emergency. Agents and small businesses face fake-note deposits and forged till confirmations, and 'fuliza clearing' or loan-limit-boosting offers are simply PIN-harvesting.
Beyond mobile money, pyramid and 'high-return' investment schemes resurface constantly, from quail-farming crazes to crypto doubling platforms — verify anything against the Capital Markets Authority before investing. Job fraud is severe: fake recruitment agencies for Gulf and Western jobs charge 'medical' and 'processing' fees, and 'wash wash' con artists flash fake wealth to recruit victims into money-cleaning and advance-fee schemes. Land fraud — one plot sold to several buyers — makes independent title searches essential. Report M-Pesa fraud to Safaricom immediately, then KE-CIRT and the DCI, and involve your bank the moment any account transfer is involved.
Common scams
- M-Pesa and mobile money fraud — social engineering to authorise transfers
- Phishing targeting Kenyan bank apps and mobile wallets
- Investment and pyramid scheme fraud
- Fake job offers requiring upfront fees
Tourist-specific scams
- Overcharging unofficial taxis and matatus
- Fake tour operators and safari package scams
- Counterfeit goods and street-side commission scams
Online shopping scams
- Phishing and smishing targeting M-Pesa credentials or banking logins
- Online marketplace non-delivery
- Fake online shops and ticket-booking sites
Job scams
- Fake job offers requiring upfront application, medical, or training fees
- Task scams via messaging apps
- Fake Gulf and overseas recruitment agencies charging processing fees
Romance scams
- Dating-app and social media romance with escalating financial requests
- Romance grooming that pivots to crypto or forex 'opportunities'
- Video-call blackmail ('sextortion') via social apps
Investment scams
- Pyramid and multi-level investment schemes
- Fake forex and crypto trading platforms
- 'Wash wash' money-cleaning and advance-fee cons flashing fake wealth
How to report a scam here
- Contact your bank or M-Pesa agent immediately to flag a fraudulent transfer
- Report cybercrime to KE-CIRT at ke-cirt.go.ke or call +254-703-042700
- Report to the DCI via #FichuakwaDCI on 0800 722 203 or at dci.go.ke
- For emergencies, call 999 or 112
Local reporting & protection links
- Cybercrime reporting
- Consumer protection
- Police
- DCI tip line — Call 0800 722 203 (#FichuakwaDCI) to tip the Directorate of Criminal Investigations
Always verify reporting routes and emergency contacts on the official government or agency website for your country.
Bank & payment guidance
Contact your bank or your mobile money provider immediately, because with M-Pesa fraud, reporting quickly gives the best chance of freezing funds before they are withdrawn at an agent. Use a route you find yourself, such as the number on your card, the official app, or Safaricom customer care, rather than any number sent by the person who contacted you — 'customer care' callers who ring you first are the scam. Say you were tricked into authorising the transfer, ask for the receiving number or account to be flagged, and get a reference. Verify any claimed incoming payment in your own M-Pesa statement, not from an SMS, and if your phone suddenly loses signal treat it as a possible SIM swap: call your operator and bank from another phone at once. Never share a PIN or one-time code, change your credentials if you did, and follow up with a DCI or police report for meaningful sums — providers and banks act faster with a case reference attached.
Evidence to preserve
- Screenshot all messages, profiles, websites and payment pages
- Save transaction references, account numbers and crypto wallet addresses
- Keep emails with full headers where possible
- Note dates, times, names and phone numbers used
Frequently asked questions
How do I report M-Pesa fraud in Kenya?
Report M-Pesa fraud immediately to Safaricom's customer care on *234# or 0722 000 100. Also report to KE-CIRT at ke-cirt.go.ke and the DCI on 0800 722 203. Speed is critical — fraudulent transactions may still be reversible if reported quickly.
What is KE-CIRT?
The National KE-CIRT/CC (Computer Incident Response Team / Coordination Centre) is operated by the Communications Authority of Kenya. It provides 24/7 monitoring and response to cyber threats and accepts public incident reports at ke-cirt.go.ke/report-an-incident/.
Are investment pyramid schemes common in Kenya?
Yes. Multi-level and pyramid investment schemes that promise unrealistically high returns are regularly reported in Kenya. These collapse when recruitment slows and early participants lose their money. Verify any investment scheme with the Capital Markets Authority (CMA) before committing funds.
Sources
- National police and cybercrime portals (verify on official sites)
- FTC / Action Fraud / Scamwatch consumer guidance