The legal framework
The directorate of criminal investigations operates a cybercrime unit, and the communications authority runs a national computer incident response team. For mobile money, the operator's reversal procedure is the decisive tool: it must be triggered immediately, and it only works while the funds remain unwithdrawn.
Reporting in Kenya runs through the police cybercrime unit and the national computer incident response team, but for the dominant fraud type — mobile money — the operator is the only channel that matters in the first minutes. A reversal is possible while the funds are still in the recipient's wallet; after a cash-out at an agent they are gone. Keep the transaction code, because nothing can be traced without it.
Key points
| Fastest lever | Blocking or freezing at the bank or wallet provider, within the hour |
|---|---|
| Criminal reporting | National cybercrime or commercial crime unit |
| Recovery window | Minutes to hours; almost nothing afterwards |
| Card payments | Chargeback where the scheme allows it, with a strict deadline |
| Cryptocurrency | Effectively unrecoverable |
| Evidence | Transaction references and message screenshots are decisive |
| Sextortion | Never pay; report and preserve the evidence |
In practice
- Call the bank or wallet provider before doing anything else — that call, not the police report, is what can stop the money.
- Report anyway even where recovery is impossible: the same accounts and numbers recur across victims.
- Export the conversation before blocking the profile, which usually disappears within hours.
- Never pay a blackmailer: a first payment identifies you as someone who pays.
Cost and coverage
Reporting channels are free.
Where to go
- Police cybercrime unit
- Mobile money operator reversal procedure, within minutes
- National computer incident response team
- Your bank's fraud line
Worth knowing
Recovery is a race against a withdrawal, not against an investigation. Every minute spent deciding whether it was really a scam is a minute the money is still movable.
Frequently asked questions
Can an M-Pesa transfer be reversed?
Only before the recipient cashes out. Report immediately through the operator's fraud channel with the transaction code; the funds can be held and reversed if they are still in the wallet. This is a matter of minutes, not hours, and a police report will not speed it up.
How do romance scams usually work?
A months-long build-up of affection, always with a reason not to meet or to video-call, followed by a first emergency — a medical bill, a customs charge, a blocked transfer — and then an escalating series of them. The newer variant adds an investment platform that shows a rising balance you can never withdraw. The tell is not the story; it is that money must always move away from you, and quickly.
Official sources and links
- DCI cybercrime unit — 0800 722 203 — toll-free, anonymous line of the Directorate of Criminal Investigations for scams, online fraud and SIM swaps
- National KE-CIRT/CC — report an incident — national computer incident response team; incidents@ke-cirt.go.ke, +254 703 042 700
- Your mobile money provider's fraud line — the fastest lever: call before the funds are withdrawn
- eConsumer.gov — international channel for scams committed from abroad
- eCitizen — official government services portal