Kenya Cybercrime Hotspot: INTERPOL Report Reveals East Africa's Top Threat

Post Views: 6

INTERPOL’s 2026 African Cyberthreat Assessment highlights Kenya as the region’s most vulnerable nation to cybercriminal activity, citing a 327% increase in SIM swap fraud and mobile money attacks.

INTERPOL’s 2026 African Cyberthreat Assessment highlights Kenya as the region’s most vulnerable nation to cybercriminal activity, citing a 327% increase in SIM swap fraud and mobile money attacks.

The findings underscore the nation’s struggle to secure its expanding digital infrastructure amid rapid technological adoption. The report emphasizes that Kenya’s digital economy has grown at a pace that outstrips its capacity to protect critical systems. Key vulnerabilities include attacks on mobile financial services, telecommunications networks, and government digital platforms. These threats are exacerbated by the country’s heavy reliance on mobile-based financial transactions and connectivity, creating opportunities for cybercriminals to exploit gaps in security.

Digital Infrastructure Under Severe Pressure

Kenya’s telecommunications sector has faced a surge in cyberattacks, with over 46,786 Distributed Denial-of-Service (DDoS) incidents recorded in the first half of 2025 alone. These attacks, designed to overwhelm networks and disrupt essential services, reflect the growing sophistication of malicious actors targeting the nation’s digital backbone. Phishing activity also remains a significant concern, with Kenya ranking among the top nations for detected phishing attempts as of September 2025. Government systems have not been spared, as evidenced by hundreds of millions of attempted intrusions against public institutions and IT infrastructure between July and September 2025. Many of these breaches utilized brute-force techniques to gain unauthorized access.

A notable incident occurred in July 2025, when attackers temporarily compromised the Kenyan Presidency’s official website, replacing its homepage with a Bitcoin ransom demand valued at approximately KSh 41 million. This event exemplifies the escalating risks posed by inadequate cybersecurity measures.

Rise in SIM Swap Fraud and Financial Losses

The report reveals a dramatic spike in SIM swap fraud, which increased by 327% in 2025. Over 123,000 fraudulent SIM cards were issued during the year, enabling criminals to seize control of victims’ mobile identities. This allowed unauthorized access to banking and payment accounts, resulting in an estimated $3.8 million siphoned from mobile wallets. The mechanics of SIM swap fraud are particularly damaging in mobile-first economies. Once a fraudulent SIM is activated, attackers gain control of the primary verification channel used by financial institutions, effectively undermining security protocols. This method has proven difficult to counter due to its reliance on compromised mobile networks.

Broader Cybercrime Trends Across Africa

INTERPOL’s assessment notes that artificial intelligence now influences roughly 55% of cybercrime cases across the continent, accelerating attack execution and complicating detection efforts. Other notable incidents include a suspected ransomware attack on Uganda’s national electricity transmission company and rising SIM swap fraud rates in Tanzania and Rwanda. South Africa remains the leading target for ransomware, accounting for 92% of detections, while Nigeria and Cabo Verde continue to anchor West Africa’s business compromise fraud ecosystem.

Legislative Efforts and Ongoing Challenges

Kenya has introduced the Computer Misuse and Cybercrimes Amendment Bill 2024 to address SIM swap fraud and scam calls. However, INTERPOL cautions that legal reforms alone are insufficient to combat a threat landscape defined by cross-border coordination and evolving tactics. The agency advocates for enhanced cybersecurity infrastructure, improved protection of critical systems, and regional collaboration to mitigate risks. Cybersecurity experts stress the need for adaptive frameworks that align with the pace of digital innovation. Real-time intelligence sharing and robust multi-factor authentication across telecommunications, finance, and law enforcement sectors are critical to countering threats like SIM swap fraud and phishing. The parallels between Kenya’s experience and India’s mobile-first digital payments ecosystem highlight the risks of prioritizing convenience over security. Both nations face concentrated vulnerabilities in mobile identity and instant payment systems, underscoring the global nature of this challenge.