Six suspects have been arrested and arraigned in connection with a cybercrime operation that resulted in the theft of more than Ksh3.2 million from the victim's bank accounts.
In a statement on Wednesday, May 7, the Directorate of Criminal Investigations (DCI) said the scheme began when the victim was approached by two men while stuck in traffic.
Believing he had been involved in a minor road accident, the DCI noted that the victim rolled down his window to speak with them.
However, one of the suspects quickly snatched his mobile phone and fled.
"The incident began when a complainant found himself stuck in traffic along Race Course Road while driving. As he sat in his vehicle, two individuals knocked on either side, leading him to believe he had been involved in a minor accident. When he rolled down his window to assess the situation, one of the strangers snatched his mobile phone and quickly disappeared.
Read More
"Following this theft, detectives from Starehe Sub-County launched investigations and discovered that unauthorised transactions had been swiftly made from the complainant’s bank accounts after the incident," the statement read.
Shortly after the incident, unauthorized transactions were detected from two of the victim’s bank accounts.
According to the DCI, a total of Ksh1,892,625 was stolen from the victim's first bank account and various M-Pesa wallets.
"Among the transactions were Ksh689,500 sent to various accounts linked to the name Fredrick Maina Wairimu, Ksh299,500 transferred to Brian Machani, and Ksh499,500 directed to Brian Obaye Kiveu.
"Additionally, Ksh404,125 found its way to the complainant’s phone and subsequently funnelled into encrypted Safaricom M-Pesa accounts," the statement added.
The second account was also compromised with the victim losing a total of Ksh1,311,615, including Ksh501, 615 transferred to seven Safaricom numbers
"The second bank account also suffered heavily, with Ksh1,311,615 siphoned off. This included Ksh299,500 sent to Bonface Kirim Baimana, another Ksh299,500 to John Erick Musyoki Kyengo, and Ksh211,000 directed to Jambo Pay Trust. Additionally, Ksh501,615 was transferred to seven Safaricom numbers," the statement further read.
DCI detectives launched a forensic investigation that led to the arrest of Fredrick Maina Wairimu who told officers he had been paid to register 11 bank accounts linked to Safaricom SIM cards by Peter Wandera Ouma, who in turn claimed he had been recruited by Hanington Kui Walubengo.
"The three, Fredrick Maina Wairimu, Peter Wandera Ouma and Hanington Kui Walubengo, were arraigned before the Makadara Law Courts on April 28, 2025, where detectives were granted a 21-day custodial order to complete their investigations," the statement read.
Further investigations led detectives to Peter Kariuki Mathii, who was found in Ruiru with another suspect, Isaack Mugo Kanini, inside a Toyota Voxy.
The DCI stated that a search of the vehicle uncovered multiple SIM cards, a SIM card registration kit, ATM cards, and counterfeit U.S. currency.
The arrest of Mathii and Kanini led authorities to the suspected mastermind, David Nganga Macharia, who had been wanted by the DCI since 2019 for hacking bank systems.
Macharia was arrested in Zimmerman with a search of his Subaru car and residence yielded mobile phones, laptops, and numerous SIM and ATM cards.
Detectives also recovered fake currency and multiple national ID cards believed to be used in the fraud.
"The three, Peter Kariuki Mathii, Isaack Mugo Kanini ,and David Nganga Macharia, were arraigned at Makadara Law Courts on May 5, 2025, where the court granted detectives 10 days' custodial orders to complete investigations and apprehend more suspects," the statement concluded.
