Tech-Savvy Criminals Exposed in Nairobi’s Largest Bank Hacking Operation
Detectives in Nairobi have successfully unraveled a sophisticated cybercrime syndicate involving six hackers who stole more than Ksh.3.2 million from victims’ bank accounts. The suspects, operating in different parts of the city, were apprehended and arraigned in court on separate dates.
A Well-Coordinated Hacking Operation
According to the Directorate of Criminal Investigations (DCI), the suspects used fraudulent mobile money transactions and unauthorized access to siphon funds from two bank accounts belonging to a victim.
Three suspects—Peter Kariuki Mathii, Isaack Mugo Kanini, and David Nganga Macharia—were arraigned at the Makadara Law Courts on April 28. The other three—Fredrick Maina Wairimu, Peter Wandera Ouma, and Hanington Kui Walubengo—faced charges at the same court on May 5.
How the Fraud Began
The scheme was initiated with a well-executed distraction. The victim, a motorist caught in traffic along Race Course Road, had his mobile phone stolen during a staged minor road incident. Armed with the victim’s phone, the fraudsters accessed his bank accounts and executed unauthorized transfers via M-Pesa.
Detailed Breakdown of the Fraud
From the victim’s first bank account, the hackers illicitly transferred Ksh.1,892,625. The funds were divided among multiple recipients:
- Ksh.689,500 went to accounts linked to Fredrick Maina Wairimu.
- Ksh.299,500 was transferred to Brian Machani.
- Ksh.499,500 went to Brian Obaye Kiveu.
- Ksh.404,125 was laundered back through the victim’s mobile number via encrypted M-Pesa accounts.
The second account was drained of Ksh.1,311,615, with the money distributed as follows:
- Ksh.299,500 to Bonface Kirim Baimana.
- Ksh.299,500 to John Erick Musyoki Kyengo.
- Ksh.211,000 to Jambo Pay Trust.
- Ksh.501,615 across seven Safaricom mobile lines.
How Detectives Cracked the Case
Investigators traced the fraud to Wairimu, who admitted to being paid Ksh.1,000 per account to register fraudulent Safaricom-linked bank accounts at Ouma’s request. This lead helped detectives apprehend Ouma, who implicated Walubengo as a key player in the operation.
Further leads led to Mathii and Kanini, found in a Toyota Voxy in Ruiru. A search of the vehicle uncovered:
- Assorted Safaricom SIM cards.
- A SIM card registration device.
- Counterfeit currency resembling U.S. dollars.
- Multiple ATM cards.
The breakthrough came with the arrest of the alleged ringleader, David Macharia. Wanted since 2019 for hacking offenses, Macharia was captured in a navy-blue Subaru in Zimmerman. At his residence, investigators recovered incriminating items, including:
- Dozens of SIM cards and national ID cards.
- Multiple mobile phones and laptops.
- ATM cards and other banking documents.
Court Proceedings and Next Steps
The suspects were arraigned on separate dates, with detectives granted extended detention periods to complete investigations. Authorities have vowed to dismantle the entire network, emphasizing the importance of cybersecurity in combating electronic fraud.
