SIM-swap fraud in Kenya surged 327% in 2025, with more than 123,000 fraudulent SIM cards used to steal an estimated $3.8 million from mobile money accounts, highlighting a sharp rise in cybercrime across East Africa, according to an INTERPOL report.
The increase reflects a broader regional trend in which criminals are increasingly targeting mobile money platforms and critical infrastructure as rapid digital adoption outpaces investment in cybersecurity, INTERPOL said in its African Cyberthreat Assessment Report 2026.
Kenya also recorded more than 46,786 distributed denial-of-service (DDoS) attacks targeting telecommunications infrastructure in the first half of 2025, while the Communications Authority logged hundreds of millions of attempted cyber intrusions against government and information and communications technology systems between July and September 2025, most involving brute-force attacks and system exploitation.
INTERPOL identified East Africa as one of Africa’s fastest-growing cybercrime hotspots, with mobile money fraud and ransomware attacks emerging as the region’s two dominant threats.
Neighbouring Tanzania and Rwanda reported SIM-swap fraud patterns similar to Kenya’s, suggesting the attacks have spread across the region as telecommunications operators struggle to deploy real-time biometric verification systems quickly enough to stop account takeovers.
Uganda suffered one of East Africa’s most significant cyber incidents in August 2025 when the Uganda Electricity Transmission Company Ltd experienced a suspected ransomware attack that compromised monitoring systems linked to the national power grid. Backup systems prevented electricity outages, but the incident exposed vulnerabilities in critical infrastructure, the report said.
Elsewhere, the Central Bank of Seychelles suffered a customer data breach, while Ethiopia ranked fifth in Africa for internet-connected system vulnerabilities detected by cybersecurity monitoring organisation Shadowserver.
Kenya has responded by launching the “Kaa Chonjo” public awareness campaign, urging users not to share one-time passwords or personal identification numbers, while proposed amendments to the Computer Misuse and Cybercrimes Act would strengthen law enforcement powers to tackle SIM-swap fraud and scam calls.
INTERPOL said East Africa still lacks a coordinated regional cybercrime response mechanism, allowing criminal networks to exploit differences in national jurisdictions by shifting operations across borders. It said stronger cooperation among governments, greater investment in protecting critical infrastructure and wider deployment of real-time biometric verification would be needed to counter increasingly sophisticated cyber threats.
Faustine Ngila is the AI Editor at Impact Newswire, based in Nairobi, Kenya. He is an award-winning journalist specializing in artificial intelligence, blockchain, and emerging technologies.
He previously worked as a global technology reporter at Quartz in New York and Digital Frontier in London, where he covered innovation, startups, and the global digital economy.
With years of experience reporting on cutting-edge technologies, Faustine focuses on AI developments, industry trends, and the impact of technology on society.
Genevieve Nnaji (Nigeria)
Most Famous Movie: Lionheart (2018)
Short Bio: Genevieve Nnaji is a Nigerian actress, producer, and director. She is considered one of the pioneers of the modern Nigerian film industry (Nollywood) and is one of the most recognizable faces in African cinema. Her directorial debut, Lionheart, was the first Nigerian film acquired by Netflix.
What is Fraud? “Fraud” is any activity that relies on deception in order to achieve a gain. Fraud becomes a crime when it is a “knowing misrepresentation of the truth or concealment of a material fact to induce another to act to his or her detriment” (Black’s Law Dictionary). In other words, if you lie in order to deprive a person or organization of their money or property, you’re committing fraud.