A joint international operation has led to the arrest of 24 Kenyans involved in a massive online credit card fraud scheme that targeted Kenyan financial institutions, resulting in a theft of Ksh1.1 billion. The operation, codenamed ‘Serengeti’, was led by Interpol and Afripol, the African Union’s police body. It uncovered that USD 8.6 million was stolen through fraudulent scripts, which altered the security protocols of banking systems.
The stolen funds were quickly funnelled through SWIFT codes to accounts in the UAE, Nigeria, and China, eventually reaching digital asset institutions that offer regulated financial services. The joint effort involved law enforcement agencies from 19 African countries, who arrested 1,006 suspects and dismantled over 134,000 malicious networks and infrastructures.
“More than 35,000 victims were identified during the operation, with cases linked to nearly USD 193 million in financial losses worldwide,” stated Interpol. The operation, which targeted cybercrime activities such as ransomware, business email compromise (BEC), digital extortion, and online scams, identified these as significant threats in the 2024 Africa Cyber Threat Assessment Report.
Private sector partners, including Internet Service Providers (ISPs), played a crucial role by sharing intelligence and providing on-site support, helping to patch vulnerabilities and secure critical infrastructure. “We’ve facilitated key arrests and deepened insights into cybercrime trends. Our focus now includes emerging threats like AI-driven malware and advanced attack techniques,” said Ambassador Jalel Chelba, Afripol’s Executive Director.
Kenya, as part of its efforts to strengthen its cybersecurity infrastructure, has also joined the Council of Europe’s Budapest Convention on Cybercrime. This convention aims to harmonize national laws on cybercrime, improve investigation capabilities, and enhance international cooperation against cybercriminals. Dr. Raymond Omollo, Principal Secretary of Internal Security, emphasized that the convention will provide Kenya with a legal framework for international collaboration on cybercrime and electronic evidence.
As Kenya continues to embrace technology, the increasing sophistication of cyber threats makes it crucial for the country to build robust cybersecurity defences to protect its digital future.
