Regional security research
Cyber threats in Kenya
Use source-linked research to evaluate mobile-money impersonation, business messages and suspicious domains relevant to your work in Kenya.
Confirm mobile-money claims independently
Check a claimed transaction in the genuine service or official account channel rather than relying on a screenshot or forwarded notification. A screenshot can be incomplete or altered. Do not disclose a PIN or one-time code to a caller who claims to reverse a payment.
Separate local relevance from hosting location
A domain may use infrastructure outside Kenya while targeting Kenyan users; an IP hosted in Kenya does not prove a Kenyan operator. Record the original message, exact indicator and evidence sources. Use Investigation to distinguish observations from assumptions.
Use the correct escalation route
For account or transfer concerns, contact the financial service through its official channel. For national incident guidance, consult the National KE-CIRT/CC at ke-cirt.go.ke. Preserve the evidence requested by the responsible organization without publishing personal financial information.
Check evidence before acting
Check a suspicious link, message or screenshot text with Guardian. Remove private tokens and personal information before submission. A low-risk result is not a guarantee of safety.
Review source-linked threat feeds and investigate the indicator. Region tags describe available evidence or inference; they do not establish victim location, operator identity or complete national coverage.
Further reading
Practical research guides · Africa-tagged phishing observations this week
Nigeria · Kenya · UAE · Saudi Arabia