In August 2022, the head of security and investigations at NCBA Bank (the financial backer of the Fuliza loan platform) flagged a severe financial risk.
Data analysts noticed an unprecedented, highly localized spike in outstanding, un-repaid mobile money loans. Over 123,000 brand-new Safaricom SIM cards, all activated at roughly the same time (mostly in January 2022), had simultaneously opted into Fuliza, borrowed out their loan limits, and vanished.
When the bank tried to initiate routine debt collection, they discovered every single line had been permanently turned off or discarded, leaving behind a massive 449 million shillings loss. NCBA formally requested the DCI Banking Fraud Investigation Unit (BFIU) to intervene.
BFIU detectives tracked the digital trail and realized the fraudsters were exploiting a vulnerability at the root level. The mastermind had managed to generate over 19,000 completely falsified National Registration Bureau ID numbers.
Instead of just altering existing names, the cybercriminals manipulated the root database protocols to generate over 123,000 completely falsified, valid-format National ID numbers directly into the system registries. The fraudsters injected completely fictional identities (names, photos, and biometric data templates) directly into the National Registration Bureau (NRB) systems.
Because the manipulation happened at the root database level, the system treated these entries as legitimate and generated official, valid National ID numbers for people who never existed, "ghost Kenyan citizens".
By using compromised root access, the mastermind skipped the mandatory physical vetting steps, local chief verification letters, and fingerprint validation queues.
Because these 123,000+ numbers were successfully injected at the foundation level, they bypassed regular database audits and verification algorithms, appearing to external financial institutions as authentic registrations.
When financial systems or mobile networks pinged the government database to check if an ID was real, the database replied with a "Yes." This allowed the syndicate to bypass strict Know-Your-Customer (KYC) security checks effortlessly.
Armed with thousands of genuine-looking but completely fictional ID profiles, the syndicate opened hundreds of "ghost" bank accounts, registered fraudulent SIM cards, and bypassed automated Know-Your-Customer (e-KYC) parameters. These 123,000+ fake identities were used to register thousands of fraudulent SIM cards (lines) and open bank accounts.
The When the DCI tracked the stolen money, channeled by the syndicate through these "ghost" accounts, the trail led to an ID number and a name belonging to a person who did not exist in the real world, a "ghost", making early investigations incredibly difficult.
Over time, these fake IDs were used to mass-register the 123,000 Safaricom SIM lines.
The syndicate cleverly spent months executing a "borrow-and-repay" loop on each card. By taking small overdrafts and paying them back immediately, they tricked Safaricom’s automated algorithm into aggressively raising each line's limit.
Once the limits peaked, the syndicate maxed out the Fuliza overdrafts in a single, one sweeping, pre-planned window. These sweeping runs simultaneously triggered maximum Fuliza overdraft loans across thousands of lines, instantly generating millions in artificial debt that would never be repaid.
To wash the funds, they routed the millions through a complex web. The instantly borrowed millions were not withdrawn directly from the primary fake accounts. Instead, the cash was rapidly transferred through a secondary layer of thousands of disposable "burner" SIM cards to fragment the transactions and break any direct digital link to the original root-level fake IDs.
@avalioplantas Question... Why do you think they Need those things? Are you basing it on your own natured requirements. Dare I ask, what make your statement different from colonizers arguments on religion?
@mutheks9@ItsMeGitau As someone aware of the workings in those industries, even for local companies working with local labor, there is always a work around from a legal perspective.
@ItsMeGitau Just tying a thread to your earlier statement on need of labour and where exactly that labour is going towards. The skilled labour you are talking about will not be in those industries. Cheap labour comes in to try and balance the scales on productivity and ingenuity.
@ItsMeGitau Thus from a systematic point of view, we want expansion and growth but the enhancements to achieve this especially from a policy and support from government is non existant. <2>
@ItsMeGitau Remember, our major economic activities are agriculture, tourism and transport & distribution. This equate to more than 35 % of our gdp. Majority of the operations in these fields are semi informal. We still have not exploited the opportunities of growth in these sectors.. <1>
Some years back, in Central Kenya, the local farmhands were complaining that the influx of their brothers from western Kenya info dairy farms were diluting the labour wages that they were accustomed to. What did we do then?
@Maybe_Logical1@XivTroy The issue regarding cheap labour is a wholesome challange that affects even us in-country. As XivTroy had pointed out, to curb this, registration facilities within Labour market regulation is the low laying fruit we can access. Blanket declaration only offer short term relief
@XivTroy You mean the pressor after the fact? The ones that still claim the president was taken out of context? First blood was already spilled. What I will agree is the pressors from yesterday should have happened way before. Not only for clarity but to give direction
@Dr_AustinOmondi This is a perfect example of choosing snippets to fit the narrative. They all have basis and merits tied to policy directives and execution.