Detectives from the Directorate of Criminal Investigations (DCI) have arrested six suspects believed to be part of a sophisticated cybercrime syndicate.
In a statement on Wednesday, June 4, DCI said the arrests were made during an operation in Nyali, Mombasa County, where the suspects had been operating from a rented AirBnB apartment.
The suspects, identified as Fortune Muthina Kinyanzui alias Albanas Kyalo, Ruel Kipkoech Yator alias Papa Ruel, Laban Kipkirui Koech, Weldon Kipyegon Rono, Towet Kipkorir Alphonce, and Kelvin Kipyegon Koech are alleged to have been using spoofing technology to manipulate phone calls and deceive their victims into disclosing personal and financial information.
According to the DCI, the operation was launched on May 31 following an intelligence tip-off.
“The operation that started on May 31 followed an intelligence tip, after which the officers mounted a sting operation targeting the fraudsters who social-engineer their victims by use of a call spoofing application to disguise their identities, through manipulation of phone calls and numbers to make them appear as if they were originating from authentic call centres,” the agency said.
Read More
Investigators believe the mastermind, Muthina, played a critical role in facilitating the fraud by providing access to a sophisticated spoofing application.
“Fortune Muthina (mastermind) is believed to possess the spoofing application which he used to aid the infamous 'Mulot Swapper’ fraudsters at a fee to make calls to victims while masquerading customer care service desk attendants in banks and telecommunication offices,” DCI added.
The suspects would reportedly use the fake identities to trick victims into a state of panic and urgency, coercing them to reveal personal credentials.
"By deception that causes panic and a sense of urgency, the victims are made to reveal personal information that the fraudsters use to transfer huge sums of money to their accounts,” the DCI noted.
The spoofing application, which was central to their operations, is said to have cost the suspects over half a million shillings.
"So demanded was the app that the fraudsters had to part with over Ksh500,000 to acquire, have it configured and be provided with an IP address to facilitate their malicious activities,” the statement continued.
The suspects were arrested at APA Apartments in Nyali, which they had turned into a command and training centre for their fraudulent activities.
Detectives recovered 19 assorted mobile phones, numerous SIM cards and holders from various telecom providers including Safaricom, Airtel, Telkom, and MTN Uganda.
Additionally, a notebook containing records of possible victims was also seized during the raid.
On June 3, 2025, the suspects were arraigned at the Kahawa Law Courts where the DCI sought custodial orders to allow further investigation.
“On 3rd June, 2025, the suspects were arraigned at Kahawa Law Courts through a miscellaneous application seeking custodial orders to enable finalizing of the investigation. The presiding magistrate court No. 2 directed that the matter be mentioned on 6th June, 2025 for ruling. The suspects have been detained at Capitol Hill Police Station,” DCI said.
Authorities have urged anyone who believes they may have fallen victim to the group’s scam to report to the nearest police station or contact the DCI Headquarters for further guidance.
“Those who might have fallen victim to the fraudsters are advised to follow up with the respective stations investigating their cases for further communication with DCI Headquarters on the next cause of action,” the statement concluded.
