Kenya’s financial sector has once again found itself under siege from cybercriminals. According to a Business Daily report (September 10, 2025), hackers stole a record Sh1.59 billion from banks and digital lenders in 2024, marking a quadruple increase from Sh412 million in 2023. The Central Bank of Kenya (CBK) attributed the losses to fraudulent wire transfers, late-night mobile banking scams, SIM swaps, phishing, card fraud, and identity theft.
Mobile banking—long hailed as a global benchmark for financial inclusion—accounted for over half of the losses, with scams targeting young consumers particularly on weekends. Fraud cases doubled to 353 while cybercrime targets nearly tripled to Sh1.96 billion.
The CBK report warns that while Kenya’s rapid digital adoption has fueled innovation, it has also created fertile ground for exploitation. Financial institutions are now forced to spend heavily on cyber insurance, technology, and compliance, even as global insurers retreat due to mounting risks.
Lessons for Africa
Kenya’s experience holds broader lessons for the African continent:
- Digital inclusion must go hand in hand with resilience. Expanding mobile and digital banking is essential for financial growth, but without robust cybersecurity, trust will erode.
- Consumer awareness is critical. Many scams exploit weak passwords, phishing, and late-night vulnerabilities. Banks must invest not just in systems but also in educating customers.
- Shared infrastructure risks demand regional solutions. With SIM swap fraud, cross-border transactions, and cloud-based services, regulators across Africa must collaborate on harmonized cybersecurity frameworks.
- Sustainability of digital finance depends on trust. As Business Daily notes, the key question is whether banks can sustain digital trust while keeping costs low. African lenders must recognize that cyber resilience is no longer optional—it is core to financial stability.
Kenya’s story is both a warning and a guide: digital finance is Africa’s future, but without strong cybersecurity, it risks becoming its Achilles’ heel.