
A 26-year-old man, Joseph Momanyi, has been arrested by Kenyan police over a $378,000 (KSh 49 million) cyberattack on JamboPay, a fintech company in the country.
According a local media, the Directorate of Criminal Investigations (DCI) reported:
- Momanyi infiltrated the financial systems of Web Tribe Limited, JamboPay’s parent company, between July 19 and 24, 2024.
- He reportedly exploited legitimate user accounts linked to platforms such as KoraPay and Fincra to manipulate account details.
- Disabled mobile numbers used for one-time transaction alerts.
It was also reported he used WhatsApp calls and fake identities to run an operation that funnelled over $378,000 into M-Pesa wallets and bank accounts without detection.
Through interrogations, he confessed to working with accomplices who provided him with illicit accounts for laundering the stolen funds.
Authorities apprehended him on April 12 in Kahawa West, a suburb of Nairobi.
He appeared in court on April 16 and will be held for seven days as investigations continue.