A Nairobi court has allowed police to detain two men for five days as detectives investigate an alleged SIM-swap syndicate linked to the loss of Sh7.5 million from a Sacco account. The suspects, Cyrus Mochache Bosire and Ronald Langat were arrested on October 2 in Utawala and taken to Gigiri Police Station.
Chief Magistrate Gethi Kibiru granted the Directorate of Criminal Investigations (DCI) permission to detain the suspects, after investigators argued that more time was required to complete their inquiries.
The suspects are being investigated for alleged stealing, forgery, personation, computer fraud, fraudulent use of electronic data, acquisition and use of proceeds of crime, unlawful disclosure of personal data and unauthorised access to personal data. According to the police, investigators are probing an alleged syndicate that fraudulently swaps Safaricom SIM cards belonging to Kenyan and foreign nationals before using the numbers to access mobile money and bank accounts.
One of the cases under investigation involves Dorice Achieng Omolo, who travelled to London on September 10, 2026. Police allege that her SIM card was swapped on the same day. Investigators claim that after taking control of her mobile number, the suspects gained unauthorised access to her UN DT Sacco account and withdrew Sh7,505,705. Police further allege that an additional Sh10 million loan was fraudulently obtained from the Sacco. The money was allegedly moved through several M-Pesa wallets and bank accounts, with investigators saying they have traced part of the funds to accounts linked to the suspects.
The DCI is also investigating whether the alleged syndicate targeted vulnerable account holders, including deceased persons whose mobile money and bank accounts were believed to hold substantial sums.
Detectives are pursuing possible links to individuals working at Jomo Kenyatta International Airport who are suspected of supplying personal information about travellers to members of the alleged syndicate. A Mazda CX-5, is also part of the investigation. Police allege that the vehicle, believed to be registered to one of the suspects, was captured on CCTV at Two Rivers Mall around the time Omolo’s SIM card was swapped. The DCI is also awaiting forensic examination of CCTV footage from Two Rivers Mall.
Investigators have asked to obtain records from the National Transport and Safety Authority to establish the vehicle’s ownership. Police further told the court that mobile phones recovered from the suspects contained messages allegedly relating to withdrawals from Omolo’s Sacco account. The phones are yet to undergo forensic examination by the DCI’s cybercrime forensic unit.
Detectives also recovered 13 Kenyan identity cards and five airline tickets from the suspects. The documents are to be subjected to verification to establish their legitimate owners and determine whether they have any connection to the alleged fraud.
Investigators said several key aspects of the probe remain outstanding, including recording statements from more than 15 victims and witnesses, analysing electronic and financial records, tracing suspected proceeds of crime and identifying other people allegedly involved in the scheme. Police told the court that releasing the suspects could allow them to interfere with witnesses, communicate with alleged accomplices, conceal or tamper with evidence, or otherwise frustrate the investigation.
The DCI also said some suspected accomplices remain at large and that the two suspects had indicated they could assist investigators in locating them. The police described the case as complex, involving multiple complainants, financial institutions, telecommunications providers and large volumes of electronic and financial records.
