Financial Scams in Kenya: How to Spot and Avoid Them

Executive summary

Kenya's financial system has become faster, more digital and easier to access. A consumer can open an account, move money, borrow or invest from a phone in minutes. That convenience has also created new opportunities for fraudsters and unlicensed financial operators to reach potential victims quickly.

The scale of the problem is becoming harder to ignore. In September 2026, the capital-markets regulator issued a public caution against investment scams naming 16 distinct entities or operations that it said were operating unlawfully and fraudulently soliciting funds from the public. The regulator said the entities were subject to active investigations involving law-enforcement agencies.

Financial fraud is also extending well beyond investments. Official banking-sector data show reported fraud cases rising from 173 in 2023 to 353 in 2024. The amount exposed increased from about KSh680.9 million to KSh1.96 billion, while actual losses climbed from approximately KSh412.5 million to KSh1.59 billion. The detailed fraud statistics show particularly large losses through mobile banking, cards and identity theft.

But an important distinction must be made throughout this discussion: a regulatory warning does not automatically mean an entity is a scam. Being unlicensed, having an authorisation revoked, being investigated and being convicted of fraud are legally and factually different situations.

Key Overview

• The latest capital-markets warning names 15 distinct entities or operations that regulators say were unlawfully and fraudulently soliciting investment funds.
• Banking-sector fraud cases increased from 173 in 2023 to 353 in 2024, with actual losses reaching approximately KSh1.59 billion.
• Previous warnings have involved extraordinary-return investment offers, unregulated investment products, unauthorised money-transfer businesses and SACCOs that lost regulatory permission.
• Digital fraud increasingly involves caller-ID spoofing, fake customer-care representatives, SIM swaps, phishing and social engineering.
• Contracts, offices, professional websites and even early successful withdrawals do not by themselves prove that an investment is genuine.
• The strongest defence is to verify the exact company, exact licence and exact investment product before transferring money.

Not every regulatory warning means the same thing

Before looking at specific examples, it is essential to distinguish the language regulators use.

This distinction matters because a financial institution may be licensed for one activity but not another. Likewise, one product offered by a corporate group may be regulated while another is not.

The question for an investor should therefore not simply be, "Is this company registered?"

It should be:

"Is the exact legal entity licensed to offer the exact product it is asking me to buy?"

CMA's 2026 warning puts investment fraud back in focus

The September 2026 warning identified 15 distinct operations, treating Global Investment Group and its abbreviation GIG as one entity.

The regulator said these entities were being actively investigated and cautioned Kenyans against people disguising fraudulent activities as investment opportunities through the September public caution.

It is important not to go further than that notice permits. Unless reliable evidence establishes the precise product, ownership structure or operating method of each entity, those details should not be guessed simply from a business name.

What the warning does establish is something more fundamental: investors should verify regulatory approval before handing over money, regardless of how sophisticated an investment opportunity appears.

The 400% return that should have raised immediate questions

An earlier warning offers a powerful example of how extraordinary investment promises can be used.

In August 2021, the regulator cautioned the public against Fxbitinvest after the operation was reported as claiming that investors could earn a 400% return within six hours. The regulator said it had identified persons associated with the company and M-Pesa paybill numbers being used to solicit the public, and asked affected investors to report their cases. The regulator's market report on the warning provides the details.

The lesson is broader than one platform.

Whenever someone promises an unusually high return in a very short period, the investor should ask:

What underlying economic activity could realistically generate this return?

A legitimate investment manager should be able to explain where returns come from, what risks are being taken and why those returns are economically plausible. When the explanation is effectively "our system simply makes money," the lack of detail is itself a warning sign.

Unregulated does not automatically mean scam

A 2021 warning involving Cytonn illustrates why precision matters.

The regulator stated that Cytonn Investments was not a licensed and approved entity and said its fraud-investigation unit was examining possible criminal violations concerning investors in Cytonn High Yield Solutions. The warning on unregulated investment products also separately noted that Cytonn Asset Managers was licensed to manage several regulated funds and that, at the time of the notice, the regulator had not received complaints relating to those regulated products.

That distinction is crucial.

It would be inaccurate to describe every product associated with the wider corporate group as a scam simply because regulators raised concerns about a particular unregulated investment product.

For consumers, the practical lesson is stronger:

Do not verify only the brand. Verify the product.

A familiar company name is not a substitute for checking the regulatory status of the actual investment into which your money is being placed.

A SACCO name also does not automatically mean regulatory approval

Similar care is necessary with SACCOs.

The SACCO regulator publishes a current list of licensed and authorised SACCO societies and warns members of the public to confirm an institution's status before conducting regulated SACCO business.

In January 2024, Kenya Midland Sacco Society Limited and Jacaranda Sacco Society Limited were listed as having their deposit-taking licences not renewed upon expiry and therefore revoked. The notice warned the public against continuing regulated SACCO business with entities lacking valid authorisation through the official licensing notice.

In 2025, B-SMART Sacco Society Ltd and MULTIPLE Sacco Society Ltd were listed as having their authorisations expired or revoked and were prohibited from conducting further regulated SACCO business. The stated reasons included failure to apply for renewal and inability to meet member and compliance obligations in the 2025 regulatory notice.

These are regulatory actions, not scam findings.

The lesson is that registration as a cooperative society and authorization to conduct regulated financial business are not necessarily the same thing.

Consumers should therefore check the official regulated-SACCO register before treating a SACCO's deposit-taking status as valid.

Unlicensed money transfer creates another type of risk

Not every financial risk involves an investment.

In 2023, the central bank issued a warning on unlicensed money-transfer services, including informal services such as hawala arrangements offered without the required authorisation.

The warning did not state that every informal transfer provider was committing fraud. Instead, it explained that consumers dealing with unauthorised providers do not enjoy the same legal protections and could lose money if a provider defaults.

This distinction matters: unlicensed does not automatically mean fraudulent, but it can mean substantially less protection if something goes wrong.

Ponzi and pyramid schemes: why early payments prove very little

Ponzi and pyramid schemes remain among the most recognisable forms of financial fraud, but they are often misunderstood.

A Ponzi structure generally uses money from newer investors to meet withdrawal or return obligations to earlier investors rather than generating returns from genuine underlying investment activity.

A pyramid scheme depends heavily on continuous recruitment, with participants earning from bringing more people into the structure.

The official consumer fraud warning checklist highlights guaranteed returns, extraordinarily high returns, recruitment incentives, unclear ownership, pressure to invest quickly and extravagant testimonials as major danger signs.

One reason these schemes spread is that some early investors may genuinely receive money.

That payment can be persuasive.

An investor withdraws KSh10,000 in supposed profit and tells five relatives that the investment works. Those relatives tell others. The successful first withdrawal becomes marketing.

But money coming out does not prove genuine profits are being generated.

The correct question is:

Where did the money come from?

Online trading and crypto platforms can look completely genuine

Modern investment fraud no longer needs to look crude.

A platform can have:

• a polished mobile application;
• a sophisticated dashboard;
• live-looking charts;
• account balances;
• customer-care representatives;
• automated emails;
• testimonials;
• referral codes;
• apparent trading history.

None of those features proves that an investment actually exists.

A fraudulent platform can display a fictitious account balance just as easily as a legitimate platform displays a real one.

A common pattern begins with a relatively small deposit. The user's dashboard shows rapid profits. The investor is then encouraged to add more money.

Problems appear only when withdrawal is attempted.

The user may suddenly be told to pay a "tax", "liquidity charge", "verification fee", "AML clearance", "unlocking charge" or an additional deposit before the funds can be released.

At that point, the supposed investment can become an advance-fee cycle: each payment merely creates another reason why a further payment is needed.

For online forex products specifically, consumers can independently search the official register of licensed online brokers rather than trusting a licence certificate displayed by the platform itself.

Some fake investments come with contracts and lawyers

Consumers sometimes assume that fraud always involves anonymous people communicating through Telegram.

That is not always true.

In a 2025 case, investigators described an alleged KSh48.8 million fake investment scheme involving supposed shares in Mara Ndovu Lodge. According to investigators, the complainant agreed to buy 48,800 shares at KSh1,000 each and a formal share-purchase agreement was prepared, but detectives alleged that the shares were never transferred. The investment-case account states that the accused pleaded not guilty, meaning the allegations should not be presented as a conviction.

The case illustrates a critical point.

Paperwork is evidence to examine, not proof of legitimacy.

An investor still needs to verify:

who legally owns the asset, whether the seller has authority to transfer it, whether the shares exist, whether corporate records match the transaction and whether money is being paid into the correct account.

Commodity deals can become elaborate advance-fee traps

High-value commodity transactions are another recurring area of fraud investigation.

In February 2026, three suspects were arraigned in connection with what investigators described as a KSh3.8 million fake mercury deal. Investigators said the complainant paid through cash and M-Pesa for what was represented as mercury, only to later discover that the substance was not mercury. The accused pleaded not guilty to charges including obtaining money by false pretences and conspiracy to defraud. The case details set out the allegations.

Gold transactions have generated even larger cases.

A 2026 investigation involved an alleged $217,900 gold transaction, where investigators said fictitious legal arrangements and corporate structures were used to create an appearance of legitimacy. The accused pleaded not guilty and investigations continued. The reported gold investigation provides the procedural details.

Common warning signs in supposed commodity opportunities include repeated demands for transport charges, assay fees, storage fees, export licences, customs payments, security charges or "release" fees before the transaction can be completed.

The deal may always appear one final payment away from completion.

Banking fraud is growing too

Investment schemes are only one part of Kenya's financial-fraud problem.

Official sector data show that actual banking fraud losses rose almost fourfold between 2023 and 2024.

Mobile-banking fraud accounted for approximately KSh810.7 million of losses in 2024. Card fraud accounted for about KSh263.3 million, while identity theft produced losses of roughly KSh199.1 million, according to the financial-sector fraud data.

This is important because the victim may never have knowingly entered an investment scheme.

Instead, the attack may target an ordinary bank account.

Context is everything. Stay ahead of shifting trends with today's market updates, and uncover emerging opportunities using the Serrari Group Market Index and Marketplace. Then, take control of your own financial future by exploring our Money & Life Reset Transformation Blueprint ™ to build stronger habits, create better systems, and design a path toward lasting wealth.

The "customer-care agent" may be the fraudster

Caller impersonation has become particularly sophisticated.

In 2025, investigators arrested suspects accused of using caller-ID spoofing technology that could make fraudulent calls appear to originate from authentic bank or telecommunications customer-service numbers. The investigation into caller-ID spoofing describes suspects allegedly impersonating legitimate customer-care staff.

Separate investigations described victims losing KSh3.4 million, KSh1.8 million, KSh1.3 million and KSh1.2 million after interacting with people they believed were genuine customer-service representatives. The account of how the victims were targeted also described retirees among those allegedly targeted.

This destroys one common safety assumption:

The number displayed on your phone is not proof of who is calling.

If someone claiming to represent a financial institution asks for a PIN, password, OTP, card security code or other credentials, end the call and contact the institution independently using a verified number.

SIM-swap fraud can turn a phone number into a bank key

SIM-swap fraud is dangerous because mobile numbers are deeply integrated into Kenya's financial system.

In July 2026, investigators reported arrests linked to an alleged SIM-swap operation that resulted in more than KSh1.2 million being taken from an M-Pesa operator after unauthorised access to a bank account. The SIM-swap investigation included a warning not to hand phones, SIM cards or M-Pesa handsets to unfamiliar customers.

A sudden and unexplained loss of network service should therefore not always be dismissed as a telecommunications problem.

It may be worth immediately contacting the mobile provider and checking financial accounts, particularly if password-reset or account alerts appear at the same time.

Even returning a missed call can cost money

Some financial fraud does not require the victim to disclose a bank password.

The communications regulator issued a warning about the Wangiri scam after reports of international numbers making one-ring calls and disconnecting. Victims who returned the call could be routed to premium-rate services designed to keep them connected and drain airtime.

The simplest protection is also the most effective: do not automatically return unfamiliar international missed calls.

The red flags that appear again and again

Across investment warnings, banking fraud and documented criminal investigations, recurring characteristics emerge.

Why intelligent people still lose money

Financial fraud works because it exploits normal human behaviour.

A friend who has already received a payment provides social proof.

A professionally dressed salesperson creates authority.

A respected influencer creates trust.

A countdown timer creates urgency.

An early withdrawal creates confidence.

A referral bonus encourages investors to become marketers.

And once someone has already invested KSh50,000, it can become psychologically easier to add another KSh20,000 than accept that the original amount may be at risk.

This is why telling victims that they were simply "greedy" misunderstands the problem.

Many schemes are specifically designed to make risky decisions feel reasonable.

How to verify an investment before sending money

The safest approach is to treat verification as part of the investment itself.

For capital-market investments, consumers can search the official licence database, which separates firms into categories such as investment banks, stockbrokers, fund managers, advisers, online forex providers, REIT managers and collective investment schemes.

For SACCOs, the current authorisation lists show which institutions are authorised for relevant regulated activities.

Digital lenders can be checked against the current directory of licensed digital credit providers.

Banks can similarly be checked using the official licensed-bank directory.

Insurance customers can check licensed insurers and intermediaries before buying a policy.

Pension investors can use the updated directory of authorised retirement-sector providers covering fund managers, administrators, custodians and trustees.

Which regulator should you check?

Registration is not the same as regulation

This deserves emphasis.

A company may produce a certificate of incorporation.

That proves a legal company was registered.

It does not necessarily prove that the company has permission to:

• take deposits;
• manage investments;
• operate a money market fund;
• offer forex trading;
• run a pension fund;
• provide payment services;
• receive SACCO deposits.

Likewise, a physical office proves only that an office exists.

A professional website proves only that someone built a professional website.

A contract proves only that a contract has been produced.

None should replace regulatory verification.

What to do if you have already sent money

If fraud is suspected, speed matters.

The capital-markets regulator maintains a dedicated fraud-investigation and complaints channel for securities-related matters.

Beware of the second scam: "We can recover your money"

Victims who have already lost money can be particularly vulnerable.

Someone may contact them claiming to be:

a recovery specialist, lawyer, blockchain investigator, regulator representative or hacker capable of retrieving the lost funds.

The supposed recovery then requires an upfront tracing fee, legal charge, tax, wallet activation fee or commission.

This creates a second opportunity to exploit a person who is already desperate to recover losses.

Any recovery provider should therefore be verified with the same scepticism as the original investment.

What legitimate financial products usually have in common

Genuine investments vary enormously, but regulated products typically make it possible to identify the legal provider, regulatory status, product documentation, fees, risks and withdrawal conditions.

Most importantly, legitimate financial professionals discuss what can go wrong.

An investment presentation that talks extensively about profit but says almost nothing about risk is incomplete at best.

Consumers should be particularly careful when the entire sales pitch depends on one sentence:

"You cannot lose."

Real investing rarely works that way.

The most important rule: verify before the money moves

Kenya's financial system has become remarkably accessible. That accessibility has brought millions of people into mobile payments, banking, lending and investing.

But speed creates a new responsibility.

A financial opportunity can now travel from an unknown promoter to thousands of phones in minutes. A fake testimonial can reach an investor before a regulator's warning does. A convincing caller can impersonate a bank without ever entering a bank branch.

That means financial security increasingly depends on a habit that takes place before payment.

Verify the institution.

Verify the licence.

Verify the exact product.

Verify where the money is going.

Understand how the return is generated.

And if someone tells you that you must transfer the money before you have time to do those things, the urgency itself may be the most important information they have given you.

An investment should be verified before the money moves, not after the returns stop.

Sources

Capital Markets Authority — public caution against investment scams

Central Bank of Kenya — Financial Sector Stability Report 2024

Capital Markets Authority — Capital Markets Soundness Report Q3 2021 (Fxbitinvest warning)

Capital Markets Authority — caution on unregulated products offered by unlicensed firms

SACCO Societies Regulatory Authority — licensed and authorised SACCO societies

SACCO Societies Regulatory Authority — regulated-SACCO register

Central Bank of Kenya — caution against unlicensed money or value transfer services

Central Bank of Kenya — consumer fraud warning checklist

Capital Markets Authority — register of licensed online forex brokers

Directorate of Criminal Investigations — KSh48.8m fake investment scheme case

Directorate of Criminal Investigations — KSh3.8m fake mercury fraud case

Directorate of Criminal Investigations — gold transaction investigation

Directorate of Criminal Investigations — caller-ID spoofing investigation

Directorate of Criminal Investigations — SIM-swap investigation

Communications Authority of Kenya — Wangiri scam warning

Capital Markets Authority — licence database

SACCO Societies Regulatory Authority — current authorisation lists

Central Bank of Kenya — directory of licensed digital credit providers (July 2026)

Central Bank of Kenya — directory of licensed commercial banks and mortgage-finance institutions

Insurance Regulatory Authority — licensed insurers and intermediaries 2025

Retirement Benefits Authority — updated directory of licensed service providers (31 August 2026)

Capital Markets Authority — fraud-investigation and complaints channel

Capital Markets Authority / Central Bank of Kenya / Directorate of Criminal Investigations / SACCO Societies Regulatory Authority / Communications Authority of Kenya / Insurance Regulatory Authority / Retirement Benefits Authority

Your financial future isn't something you wait for—it's something you build. The real question is: when do you begin?

Move beyond simply staying informed. Navigate the markets with clarity—track trends through the Serrari Group Market Index, uncover opportunities in the Serrari Marketplace, and build practical knowledge with our Curated Wealth Builder Platform.

Stay connected to what truly matters. Get daily insights on macro trends and financial movements across Kenya, Africa, and global markets—delivered through the Serrari Newsletter.

Growth opens doors. Advance your career through professional programs including ACCA, HESI A2, ATI TEAS 7, HESI EXIT, NCLEX - RN and NCLEX - PN, Financial Literacy!—designed to move you forward with confidence.

See where money is flowing—clearly and in real time. Track Money Market Funds, Treasury Bills, Treasury Bonds, Green Bonds, and Fixed Deposits, alongside global and African indexes, key economic indicators, and the evolving Crypto and stablecoin landscape—all within Serrari's Market Index.