Kenya Cyber Fraud Numbers Spark Safety Talk

Kenya Cyber Fraud Numbers Spark Safety Talk

Cyber fraud is becoming a growing concern in Kenya as new figures reveal the increasing financial losses and rising number of online attacks affecting individuals, businesses and financial institutions. The latest statistics have renewed discussions about digital security and the need for internet users to become more careful when handling money and personal information online.

According to figures published by The Star Kenya on November 9, 2026, Kenya lost approximately Sh1.9 billion to cyber fraud in 2025. This represented an increase from the Sh1.59 billion lost in 2024, showing that financial crime involving digital platforms remains a serious challenge.

The figures were obtained from the Central Bank of Kenya (CBK), which monitors fraud affecting the country's banking sector.

##The increase in financial losses is particularly concerning because more people now depend on mobile banking, internet banking, electronic payments and other digital financial services for their daily activities.

Kenya Records Sh1.9 Billion in Cyber Fraud Losses

The Central Bank of Kenya's figures show that total financial losses from cyber fraud increased by approximately Sh310 million between 2024 and 2025.

Mobile banking fraud remained a major contributor, accounting for Sh634.25 million in losses during 2025. Although this was lower than the Sh810.68 million recorded in 2024, it remained the largest category of financial losses.

Card fraud also became a significant problem. Losses from card-related fraud increased sharply from Sh263.29 million in 2024 to Sh645.19 million in 2025.

Meanwhile, computer fraud accounted for Sh212.45 million in losses, while identity theft resulted in approximately Sh168.17 million.

Online banking fraud also increased, with losses rising from Sh111.83 million to Sh157.47 million.

One of the most noticeable developments was the increase in internet scam losses. They rose from just Sh6.07 million in 2024 to Sh86.52 million in 2025.

These figures suggest that criminals are taking advantage of different digital channels to target individuals and financial institutions.

Online Crime Incidents Reach 12.5 Billion

Financial losses are not the only indication of the growing cybersecurity challenge.

Another report published by The Star Kenya revealed that reported online crime incidents in the country reached approximately 12.5 billion in 2025, compared with 3.6 billion in 2024.

The figures, attributed to data from the Communications Authority of Kenya, highlight the increasing pressure on digital systems.

System attacks accounted for the overwhelming majority of recorded incidents, with approximately 12.1 billion cases. Malware attacks followed with 174.53 million incidents, while brute-force attacks accounted for 116.34 million.

Other recorded threats included distributed denial-of-service attacks, web application attacks and mobile application attacks.

These figures describe different categories of cyber threats and should not be confused with the amount of money stolen from victims.

Common Scams Affecting Internet Users

As digital financial services become more popular, cybercriminals continue to develop different methods of deceiving unsuspecting users.

One common method is phishing. This involves sending fraudulent messages or emails designed to look like genuine communication from banks, financial institutions or trusted organisations.

Victims may receive messages asking them to verify their accounts, update personal information or follow suspicious links. Once they provide their login details, criminals may use the information to access their accounts.

Mobile banking fraud is another major concern. Criminals may impersonate bank officials, mobile network representatives or customer service agents to persuade people to disclose confidential information.

SIM swap fraud is also dangerous. It occurs when criminals fraudulently obtain control of another person's mobile phone number. Since phone numbers are often connected to banking and mobile money accounts, this can expose victims to financial losses.

Other common schemes include fake investment opportunities, fraudulent online shopping platforms, identity theft and messages promising unrealistic financial rewards.

Some scammers also create fake social media accounts pretending to represent genuine businesses or public figures. They use these accounts to convince people to transfer money or share sensitive information.

Why Cybersecurity Awareness Matters

The increasing use of digital technology has made financial transactions faster and more convenient. However, it has also created opportunities for criminals to exploit people who are unfamiliar with online security risks.

Individuals who use mobile banking, online shopping platforms and social media need to understand that not every message, phone call or investment opportunity they encounter online is genuine.

Financial institutions and telecommunications companies also have an important responsibility to strengthen security systems, educate customers and respond quickly to suspicious activities.

Government agencies and cybersecurity authorities must continue monitoring emerging threats and improving public awareness.

Simple Steps to Protect Yourself

Internet users can reduce their exposure to cyber fraud by following basic safety practices.

##First, never disclose your banking PIN, password or one-time password (OTP) to anyone, even when the person claims to represent a financial institution.

Second, avoid clicking suspicious links received through text messages, emails or social media platforms. Always verify information through official channels before taking action.

Third, use strong and different passwords for important accounts. Where available, activate two-factor authentication to provide an additional layer of protection.

People should also be careful when responding to unexpected calls requesting personal or financial information.

##Anyone who notices suspicious transactions or believes an account has been compromised should contact their financial institution or service provider immediately through official channels.

Conclusion

Kenya's latest cyber fraud figures highlight the financial risks accompanying the rapid growth of digital services. With approximately Sh1.9 billion lost to cyber fraud in 2025, the need for stronger cybersecurity awareness has become increasingly important.

Technology offers valuable opportunities for individuals and businesses, but protecting personal information must remain a priority.

A simple rule can help internet users stay safer: never share confidential banking information or trust unexpected financial requests without independently verifying them.