Kenya’s digital transformation continues at pace, with mobile money now a global benchmark and a daily economic staple for citizens.

The same momentum is attracting cybercriminals; the INTERPOL African Cyberthreat Assessment Report 2026 recorded over 46,000 DDoS attacks in Kenya during the first half of 2025, targeting telecom infrastructure.

Kenya also ranked among Africa’s top locations for phishing detections, with hundreds of millions of intrusion attempts aimed at government and ICT systems.

A notable trend is the sharp rise in SIM‑swap fraud, which surged 327% in 2025, resulting in more than 123,000 fraudulent SIMs and estimated losses of US$3.8 million.

These attacks underscore the growing importance of protecting digital identities, as mobile numbers now serve as gateways to banking, e‑commerce and other online services.

Artificial intelligence is amplifying threats, enabling more convincing phishing, deep‑fake scams and automated fraud that are harder for users to detect.

Critical infrastructure is also at risk; a 2025 cyber incident at Uganda’s electricity utility highlighted the potential disruption to essential services across the region.

In response, Kenya has advanced cybercrime legislation aimed at curbing SIM‑swap fraud and scam calls, positioning the country as a regional leader in cyber policy.

Regional partners such as Rwanda, Uganda, Tanzania and Ethiopia are similarly strengthening national cybersecurity strategies, investing in CERT collaboration and digital resilience initiatives.

Officials stress that cybersecurity must be embedded from the outset of any digital transformation project, not treated as an afterthought, to protect customers and sustain innovation.

Stakeholders are urged to view cyber resilience as an investment that safeguards trust, supports growth and ensures the continued benefits of Kenya’s digital economy.