Hackers are exploiting young Kenyan bank account holders and colluding with rogue employees to siphon millions, with 2016 data showing global cybercrime costs reached Sh600 trillion, according to a Microsoft analysis.
Incidents like the 2017 Sh150 million theft from a major bank—executed between Saturday 5pm and Sunday noon—highlight vulnerabilities. Industry sources reveal fewer than 10 of Kenya's 47 banks have adequately secured core systems, with some executives lacking technical expertise to address threats.
At a 2017 Central Bank of Kenya (CBK) and Visa cybersecurity workshop, experts noted 70% of flagged accounts belong to individuals aged 20-26 with minimal transaction histories. A University of Nairobi survey found 70% of students would sell bank details for Sh100,000, with some claiming it was 'not madness' to open multiple accounts.
Visa's Bevan Smith warned hackers exploit 'silly mistakes' by customers and employees, while Foregenix CEO Andrew Henwood cited daily losses from security lapses. The CBK mandated annual cybersecurity reports for financial institutions, expanding requirements to include mobile money networks in 2018.
A 2017 Serianu study estimated Kenya loses $210 million annually to bank-related cybercrime, with attacks ranging from insider threats to ransomware. Microsoft's 2016 data showed global cybercrime costs doubled to Sh600 trillion from Sh300 trillion, underscoring escalating risks.
