Interpol attributed Kenya's high exposure to poor cyber hygiene, insufficient cybersecurity investment, and delayed software patching across both public and private institutions. SIM-swap fraud investigations in Kenya rose by 327% in 2025, with authorities detecting more than 123,000 fraudulent SIM cards. Criminals used those compromised cards to drain an estimated KSh 492 million (USD 3.8 million) from mobile wallets across the country. Once a fraudulent SIM was activated, attackers could intercept one-time passwords and transaction verification messages, giving them full access to victims' financial accounts. DDoS Attacks and Infrastructure ThreatsBeyond mobile fraud, Kenya recorded more than 46,786 distributed denial-of-service (DDoS) attacks in the first six months of 2025, with telecommunications operators bearing the heaviest impact.