Crypto Scams in Kenya: The Patterns, Real Cases and How to Report

Crypto scams in Kenya follow a handful of patterns, and once you know them they are surprisingly easy to spot. Almost every one ends the same way: you send money or coins to someone you cannot hold to account, or you hand over the key to your wallet. The details change — a new app name, a new Telegram group, a new “AI trading bot” — but the script does not.

The scams hitting Kenyans right now

Here are the patterns we see most often, how each one starts and the moment you should walk away.

CBEX: anatomy of a collapse

CBEX — reported as Crypto Bridge Exchange — is the case most Kenyans know. It presented itself as a crypto trading platform and, according to Techweez, promised returns of up to 100% a month — a number no real market can sustain.

• Mid-April 2025Withdrawals freezeUsers in Nigeria and Kenya report that balances cannot be withdrawn. The platform blames a hack and its Telegram channel goes quiet.
• 17 April 2025Nigerian regulator speaksNigeria's SEC says CBEX was never registered to operate there (as reported by Tech-ish).
• Late April 2025Kenyans declared wantedNigeria's EFCC declares four Kenyan suspects wanted and estimates losses of over 840 million US dollars across Nigeria, Kenya and Egypt.
• 11 September 2026CMA public cautionKenya's CMA names CBEX among 15 entities 'operating unlawfully and fraudulently soliciting funds from the public' and says they are under DCI investigation.

CBEX was never on the CMA’s list of licensees. We could not find a Kenya-specific figure for how many people lost money, and we found no official Kenyan refund process. Searches for “CBEX refund” mostly lead to people offering to “process” refunds for a fee.

Other names in the CMA’s caution

The CMA’s 11 September 2026 caution listed these entities as operating unlawfully: Global Investment Group (GIG), QVSE, Kore Exchange, Abacus Wealth Management, Brown Advisory Group, B Invest, Bitblock Capital Limited, Maliwave Investments, Monetrix Capital Investments, Twenty-four Hours Pro expert Trader, Wealth Sharing Group (Opticoin), CBEX, Just Markets, Ultima Cryptocurrency and Lukman-trust fund. Read the notice itself on cma.or.ke before relying on any secondary list, and check again later — such lists grow.

In July 2026 the CMA also warned about fraudsters impersonating licensed firms, and told investors to verify every licensee on licensees.cma.or.ke. A real company name in a WhatsApp message proves nothing.

Fake P2P payments and M-Pesa reversals

On P2P marketplaces, the platform holds the seller’s coins in escrowP2P escrowThe platform locks the seller's coins while you pay. Coins are released only when the seller confirms your M-Pesa payment arrived. Glossary, which protects buyers well. Sellers are the ones exposed. The two classic tricks are a fake M-Pesa SMS from an ordinary phone number, and a real payment that is later reversed after the coins have been released.

Safaricom lets the sender or recipient request a self-reversal by forwarding the original M-Pesa message to 456 within 24 hours, for Safaricom-to-Safaricom transfers. Fraudsters abuse this by claiming they “sent to the wrong number”. Never release coins until the money sits in your M-Pesa balance, and never refund outside the platform. Our full guide to M-Pesa reversal scams covers every variation.

Pi, airdrops and wallet drainers

Pi Network is hugely popular in Kenya, which makes Pi holders a target. The usual script: a website or Telegram “agent” offers to buy your Pi for M-Pesa, or to help you pass KYC, and asks for your 24-word wallet passphrase. Minutes later the wallet is empty. Our Pi Network guide explains how real Pi transfers work.

The same trick runs on every chain. A fake airdropAirdropFree tokens handed out to promote a project. Many "airdrops" shared on Telegram are scams that ask for your seed phrase. Glossary link asks you to “connect your wallet” and sign a transaction that gives a contract permission to move your tokens — a phishingPhishingFake websites, SMS or WhatsApp messages that copy a real brand to steal your login, OTP or seed phrase. Glossary technique known as a wallet drainer. Telegram tap-to-earn games attract similar fake claim sites; see Telegram tap-to-earn.

Fake support on Telegram and WhatsApp

Post a complaint about a stuck withdrawal on X or Facebook and within minutes someone “from Binance support” or “from the wallet team” messages you. They may share a convincing screen, a case number and a link to a “verification portal”. The aim is to get your seed phrase, your 2FA codes, or a “refundable” fee.

Real support works inside the app or on the company’s official website. If someone contacts you first, it is not support. The same goes for “Safaricom” callers: Safaricom says it only calls customers from 0722 000 000.

Investment clubs, chamas and “account managers”

Chamas are one of Kenya’s great savings traditions, which is exactly why scammers borrow the format. The pitch is a group where everyone contributes and an experienced “trader” or “account manager” grows the pot in crypto or forex. In the worst cases, the platform behind it is a Ponzi scheme; in milder cases, one person simply loses everyone’s money with leverageLeverageBorrowed money that multiplies gains and losses. At 10x leverage a 10% price move against you can wipe out your position. Glossary.

A crypto chama is only as safe as its controls. Before joining, ask: whose name is the exchange account in, who can withdraw, how are decisions recorded and is anyone licensed to manage money for others? If the answers are “the trader’s”, “the trader”, “on WhatsApp” and “no”, that is not an investment — it is a gift. Many of these “trading” pitches are really about forex and binary options, not owning crypto.

Romance and pig-butchering scams

These are slow scams. Someone friendly finds you on Facebook, Instagram, a dating app or even a wrong-number WhatsApp message. Weeks of chatting later, they mention a crypto trading app that has made them rich and offer to guide you. The app shows fast profits on small deposits — you may even withdraw a little — until you deposit a larger amount. Then come “taxes”, “anti-money-laundering fees” and “account upgrades” before you can withdraw. The money never comes back.

The tell is a stranger who steers you to a specific platform you have never heard of. A real friend does not need you to download an app from a link.

How to spot a crypto scam in 60 seconds

Run any offer through this list. One “yes” is enough to stop.

• Does it promise a fixed return — per day, week or month?
• Do you earn more for recruiting friends than for anything else?
• Is the company missing from licensees.cma.or.ke, or does it only name a foreign entity?
• Does anyone ask for your seed phrase, passphrase, PIN or 2FA code?
• Are you told to pay a fee or tax to withdraw your own money?
• Did the contact come to you first, on WhatsApp, Telegram or social media?
• Is there pressure to act now — a bonus that expires tonight, an upgrade closing tomorrow?
• Are you asked to pay a personal M-Pesa number or Till instead of a regulated platform?

What to do in the first hour

Speed matters. Exchanges can sometimes freeze stolen funds that land in a verified account, and Safaricom can act on reversal requests — but only if you report quickly.

1. Stop sending money

   Do not pay any further “fee”, “tax” or “unlock charge”. Leave group chats only after taking screenshots.

2. Secure what is left

   Change exchange and email passwords, reset 2FA, and if your seed phrase was exposed, create a new wallet and move any remaining coins there at once.

3. Collect evidence

   Screenshots of chats, M-Pesa confirmation codes, wallet addresses, transaction IDsTxID (transaction hash)A unique receipt number for a blockchain transfer. Paste it into a block explorer to see whether the transfer arrived. Glossary, website addresses and the names and numbers used.

4. Report to the platform

   Open a ticket or appealAppeal (dispute)Asking the P2P platform's support team to step in when a trade goes wrong. They review chat, receipts and M-Pesa messages. Glossary inside the exchange app with the TXID and the receiving address. Ask them to flag or freeze it.

5. Report to the authorities

   File a report at the nearest police station or DCI office and get an OB number. Exchanges and banks usually need it before they share data.

Where to report crypto fraud in Kenya

Report even if the amount is small. Investigators connect cases across many victims, and the CMA’s public cautions rely on reports from people like you.

Staying safe as you start

You do not need to avoid crypto to avoid scams. Buy through regulated exchanges or escrowed P2P in your own name, keep long-term savings in a wallet only you control, and treat every unexpected message as hostile until proven otherwise. Our guides to buying Bitcoin safely and crypto regulation in Kenya are good next reads.