Your Phone Just Went Silent. Minutes Later, Your M-Pesa Is Empty.

It starts with silence. One moment your phone has full bars; the next, “No Service.” You assume it’s a network glitch and carry on with your day. But somewhere across town, a stranger is now holding your phone number — and with it, the keys to your M-Pesa, your bank app, and every account that texts you a verification code.

By the time you get your line back, the money is gone.

This isn’t a rare horror story. According to a new Interpol report released this month, Kenyans lost KSh 491.6 million to SIM-swap fraud in 2025 alone — and the problem is exploding.

The numbers are staggering

Interpol’s African Cyberthreat Assessment Report 2026 lays it out in black and white:

• KSh 491.6 million (about $3.8 million) drained from mobile wallets and bank accounts through SIM-swap fraud in a single year.
• A 327% surge in SIM-swap attacks compared to the year before.
• More than 123,000 fraudulent SIM cards issued — often, investigators say, because of weak “know your customer” checks at the point of registration.

And SIM-swap is only one slice of a much bigger problem. The same report notes that East Africa has become a hub for mobile-money fraud, with organised, cross-border syndicates also targeting Tanzania, Uganda and Rwanda.

How the scam actually works

You don’t have to be careless to become a victim. Here’s the anatomy of the fraud, so you know what you’re up against:

First, a fraudster gathers your personal details — your name, ID number, phone number — often bought cheaply from a data leak or phished from you directly. Then they approach a mobile operator (sometimes with an insider’s help) and request a replacement SIM for “your” line, claiming the original was lost.

Once that swap goes through, your handset drops off the network and their SIM becomes your number. Every one-time password (OTP), every M-Pesa prompt, every bank confirmation code now lands on their phone. Within minutes they can drain your wallet, take out a Fuliza overdraft in your name, and clean out any account linked to your line.

The silence on your phone is the only warning you get — and most people miss it.

Six ways to lock the scammers out

The good news: a few simple habits make you a far harder target. Do these today.

1. Treat a sudden loss of signal as an emergency. If your line goes dead for no reason — especially if others nearby have service — call Safaricom (100) or Airtel (100) from another phone immediately and ask if a SIM swap was requested on your number.

2. Set a SIM PIN. Your physical SIM can be locked with its own PIN, separate from your phone’s passcode. Dial into your phone’s security settings and switch it on so a stolen or cloned SIM is useless without the code.

3. Never share OTPs — with anyone. No genuine Safaricom, bank or M-Pesa agent will ever call and ask you to read out a verification code. If someone does, hang up. That call is the scam.

4. Guard your ID and personal data. Don’t post your ID number, don’t hand copies to strangers, and be wary of “win a prize / confirm your details” links. The less of your data floating around, the harder you are to impersonate.

5. Use app-based or biometric logins where you can. Where your bank offers fingerprint, face, or in-app approval instead of SMS codes, use it. It cuts the fraudster’s OTP interception off at the knees.

6. Report fast. Kenya now has a 72-hour cybercrime reporting window, but speed is everything — the sooner you flag a fraudulent swap, the better your chance of freezing transactions and recovering funds.

The bigger picture

Operators are fighting back. Safaricom says its “Single View” SIM-swap platform, which runs automated identity and risk checks before approving a replacement, has already cut fraudulent swaps by 65%. Regulators are pushing biometric verification and real-time fraud alerts across the industry.

But technology alone won’t save you. In a country where your phone number is your bank, your wallet and your ID rolled into one, the strongest firewall is an alert user who knows the warning signs.

So share this with the people you love — your parents, your side-hustle group, that one uncle who forwards everything. The next dead signal they ignore could cost them everything in their wallet.

---

Have you or someone you know been hit by a SIM-swap? Tell us in the comments — your story could save someone else.

Sources: Interpol African Cyberthreat Assessment Report 2026, via Business Daily, The Star, Money254 and Tuko.