A Milimani court has allowed police to detain two men for five days as investigations continue into an alleged SIM-swap fraud in which a victim reportedly lost Sh7.5 million from a Sacco account.
The suspects, Cyrus Mochache Bosire and Ronald Langat,were arrested on October 2, 2026, in the Utawala area and taken to Gigiri Police Station, according to documents filed in court.
Chief Magistrate Gethi Kibiru allowed the application by the Directorate of Criminal Investigations (DCI), which argued that there were sufficient grounds to keep the suspects in custody while investigators complete their inquiries.
Police had initially sought a 15-day custodial order at Gigiri Police Station.
According to the application, the suspects are being investigated for a range of offences, including stealing, forgery, personation, computer fraud, fraudulent use of electronic data, acquisition and use of proceeds of crime, and unlawful disclosure and unauthorised access to personal data.
The investigation centres on an alleged syndicate involved in the fraudulent swapping of Safaricom SIM cards belonging to Kenyan and foreign nationals.
Police told the court that after taking control of victims’ mobile numbers, the suspects allegedly gained access to mobile money and bank accounts linked to the numbers.
One of the cases under investigation involves a number registered to Dorice Achieng Omolo,who, according to the police application, travelled to London on September 10, 2026. Investigators allege that her SIM card was swapped on the same day.
The application states that the suspects subsequently gained unauthorised access to her UN DT Sacco account and allegedly withdrew Sh7,505,705.
Police further allege that an unauthorised Sh10 million loan was obtained from the Sacco, with the funds subsequently transferred through several M-Pesa wallets and bank accounts.
Investigators say they have traced some of the money to accounts allegedly linked to the suspects.
The DCI also alleges that the syndicate may have targeted vulnerable account holders, including deceased persons whose mobile money and bank accounts were believed to contain substantial sums.
Investigators are also pursuing possible links to individuals working at Jomo Kenyatta International Airport,who are suspected of providing personal information about travellers to members of the alleged syndicate.
The police application says one of the suspects is believed to be the registered owner of a Mazda CX-5, registration KDR 293F which was allegedly captured on CCTV at Two Rivers Mall around the time Omolo’s SIM card was swapped.
Investigators want to obtain records from the National Transport and Safety Authority to verify the vehicle’s ownership.
Police further told the court that mobile phones recovered from the suspects contained messages relating to withdrawals from Omolo’s UN DT Sacco account.
The devices are yet to be examined by the DCI’s cybercrime forensic unit.
Investigators also recovered 13 Kenyan identity cards and five airline tickets, which they intend to submit for verification to establish their legitimate owners and determine whether any of the documents are connected to the alleged fraud.
The DCI said it is also awaiting forensic examination of CCTV footage from Two Rivers Mall.
Other outstanding investigations include recording statements from more than 15 victims and witnesses, analysing electronic evidence and financial records, tracing alleged proceeds of crime and identifying other people suspected to be involved in the scheme.
Police argued that releasing the suspects could allow them to interfere with witnesses, communicate with accomplices, conceal or tamper with evidence, or otherwise frustrate the investigation.
They also said some suspected accomplices remain at large and that the suspects had indicated they could assist investigators in locating them.
The DCI described the investigation as complex and involving multiple complainants, financial institutions, telecommunications providers and electronic records.
