Kenyan Banks Lose Sh1.59 Billion to Cybercrime in Major Digital Banking Attack

Close-up view of two people, likely a romantic couple, holding large heart-shaped signs in front of their faces, with one person wearing an orange top and the other wearing a maroon top, depicting the concept of love, relationships, or dating through the symbolic heart icons.

Kenyan bank customers lost Sh1.59 billion to cybercriminals in 2024 through various forms of digital fraud, marking an unprecedented scale of financial losses in the country’s banking sector. The cyber theft campaign employed multiple sophisticated attack vectors, including card fraud, computer fraud, online banking scams, and identity theft. The incident follows a concerning trend of rising SIM swap fraud that has plagued Kenya’s financial sector in recent years.

The coordinated nature of the attacks demonstrates cybercriminals’ systematic exploitation of vulnerabilities across Kenya’s digital banking infrastructure. The range of methods employed suggests the perpetrators possessed advanced capabilities to bypass existing security measures, including those protecting M-Pesa, the country’s dominant mobile money platform that has revolutionized financial inclusion across Africa.

The attack marks a significant escalation in cybercrime affecting Kenya’s financial services sector, occurring as the country implements stronger security protocols. Recent measures include the mandatory registration of mobile device IMEI numbers and enhanced verification requirements for digital transactions, though these efforts have faced both technical and legal challenges.

The revelation of these losses emerges during rapid digitalization of banking services in Kenya, which has led mobile money adoption in Africa. The country’s banking sector has increasingly embraced digital transformation, expanding online and mobile banking services to meet customer demands for convenient financial transactions. The digital expansion has recently grown to include refugee access to mobile financial services, highlighting the broader push for financial inclusion.

Law enforcement authorities have been actively combating digital financial crimes, with recent successes including the arrest of six individuals in Mombasa for caller ID spoofing fraud. However, the sophistication of these latest attacks suggests criminals are developing increasingly advanced methods to target Kenya’s digital financial infrastructure.

Sources: Business Daily Africa, Business Daily Africa