Kenya has experienced a significant rise in cyberattacks targeting its telecommunications, government, and mobile money systems, according to INTERPOL's African Cyberthreat Assessment Report 2026.

The report reveals that in the first half of 2025, Kenya was hit by more than 46,786 distributed denial-of-service (DDoS) attacks, with telecom operators being primary targets. Additionally, between July and September 2025, government and ICT infrastructures faced hundreds of millions of intrusion attempts, mainly through brute-force and system exploitation techniques.

Mobile Money Fraud and SIM-Swap Attacks

One of the most concerning trends identified is the sharp increase in SIM-swap and mobile wallet fraud. Investigations into SIM-swap fraud in Kenya surged by 327% in 2025, with over 123,000 fraudulent SIM cards detected. Criminals used these compromised SIMs to hijack mobile money accounts, resulting in an estimated loss of USD 3.8 million.

INTERPOL attributes the rise in such fraud to gaps in real-time identity verification and inconsistent Know Your Customer (KYC) enforcement across mobile and financial platforms.

Evolution of Cybercrime in Kenya

Cybercrime in Kenya has transitioned from isolated incidents to a sophisticated, cross-border ecosystem. Neal Jetton, INTERPOL's Director of Cybercrime, highlights the growing threat to economic security, public trust, and institutional resilience in African nations.

Kenya is among the few African countries mandating the reporting of certain cyber incidents within 72 hours. However, underreporting remains a challenge due to fears of reputational harm and limited forensic capabilities.

Emerging Threats and Challenges

  • Cybercriminals increasingly employ artificial intelligence to automate phishing, create deepfakes, and develop synthetic identities for fraud.
  • These AI-powered tactics also help evade traditional security systems, complicating detection efforts.
  • The rapid growth of Kenya’s digital economy has outpaced cybersecurity investments, exposing the country to advanced, transnational cybercriminal networks.