In February 2021, a Kenyan man, Alex Ngata, noticed his late father’s phone lost network signal. He immediately suspected foul play and went to a Safaricom shop to renew the line. The moment the new SIM card was activated in his phone, a flood of backlogged text messages poured in.
The messages revealed a terrifying reality. Notifications showed continuous, heavy transactions draining his late father's bank accounts. Alerts confirmed that mobile banking apps had just been newly installed and configured on an unknown device.
Right after replacing the SIM card at Safaricom, Alex visited NCBA Bank, Equity Bank, and Co-operative Bank, where he officially confirmed that Sh2.8 million had been siphoned from his late father's bank accounts via mobile banking applications (the NCBA App, Eazzy Banking, and MCo-op Cash).
The banks confirmed that the stolen cash had been transferred directly to a specific mobile number: 0716 546633. Armed with the bank statements, the transaction logs, and the destination phone number, he reported the heist to the DCI.
Once the report was filed, the DCI's Crime Research and Intelligence Bureau (CRIB) alongside the Operations Branch took over the case.
The very first move detectives made was pulling the logs for 0716 546633, the Safaricom line that received the stolen Sh2.8 million. Detectives ran a registration check on the recipient phone number, and discovered a chilling anomaly: the number belonged to a dead person.
Specifically, the line was registered to Rev. Peter Kania, the former Secretary-General of the Presbyterian Church of East Africa (PCEA), who had passed away several months earlier.
To the detectives, this was a bizarre and unprecedented situation. The mechanics of how a deceased father's line could drop signal and how a dead clergyman could actively transact baffled investigators.
CRIB detectives immediately ran a forensic analysis on the SIM card’s historical tower data, tracking where the phone line was physically "pinging" cell towers when it accessed the banking apps. This mapping data proved the SIM card was active long after Rev. Kania had been buried.
To understand how the fraudsters knew the exact account balances of Alex's late father, detectives turned their eyes toward the financial institutions. Cyber-auditors reviewed the digital footprints left behind on the banks' internal servers. Every time an employee views a customer’s private profile, the system logs their unique credentials.
The audit flagged that Equity Bank teller Eutycus Mutembei had zero operational reason to access these specific accounts. His credentials were caught red-handed browsing through the financial portfolios of recently deceased, wealthy individuals.
As the tech teams unraveled the digital trail, a massive "can of worms" was exposed, revealing a highly organized SIM-swap syndicate that operated with chilling precision inside Kenya.
Detectives discovered that the syndicate did not guess targets at random. They systematically monitored newspaper death announcements and obituaries to identify wealthy individuals who had recently passed away, knowing their bank accounts remained liquid while grieving families were preoccupied.
Shockingly, the fraudsters had even attended Alex's father's burial arrangements. Posing as well-wishers and friends, members of the syndicate actively helped the family raise funds and sold portraits of the deceased to mourners. This proximity allowed them to comfortably phish for family dynamics, look at death certificates, and figure out who would be handling the estate.
Once a target was selected, the operation relied on an active, illegal data breach within financial institutions. Armed with account details provided by their insider, Eutycus Mutembei, the syndicate would execute the fraudulent SIM swap to intercept the bank OTP codes and drain the funds.
@everythingfxx These are fake and AI was used. These videos have started popping up with gold around 20k level. Don't fall for these tricks by signal sellers
@fourthestategh U guys are off late farming views, no sense in this post. At least you could have gone ahead to do a background check of their engineers to back your point. Next time consult within your team for their submission before u post any childish view. Ur platform is huge for this.
@_GhChronicles They will definetly get some greedy lazy b*stard to Scam. You dey do money rituals but look at the background settings of you guys 😂. You guys should have let your background settings do the talking.
@SIKAOFFICIAL1 The cartels behind this scheme could be phished out where ever they are in few hours if they report get a good investigator to assist them.
@weloveghana042 In simple terms, this is like sim cards, there are agent sim, esim. You sell the phone u take your sim off. You buy a new phone, u inst your sim card.
@obiMpenaAustine@JDMahama When did the system become fair bro. Make them find some trade and do. You will be suprise to know the certificates and years of training some of us hold in our field but we couldn't serve our country, due to this nepotism. We have survive and doing greater things privately.
@eddie_wrt A thrown way everyone has to manage to rule at most 20 to 30yrs, You only have chop for 89yrs in the family why 😂. He should handed over through power of attorney, longtym to prevent this disgrace. Nana kafra
@osibisa09 U r displaying your naivity in front of camera, thinking u r making sense😂. Ponzi schemes will continue to exist because of dump minded guys like this.
@THESTATENEWSS This is purely scam🤣, the family will become much more poorer, when the formats begins. The man planted it there himself 6 months ago.
If it was real nobody could even video it cox witchcraft are attached, with hairs, combs and finger nails. u have to accept to use the bayie.