Practical guides
Find the guidance you need
Browse by topic or search for the situation you are facing.
8 guides available
Business email compromise
A scam that uses a real or lookalike email account to redirect payments or change bank details.
Phishing and smishing
Deceptive emails, SMS and messages that trick you into revealing details, paying or installing malware.
Ransomware
Malware that encrypts or locks your systems and data, then demands payment to restore access.
SIM-swap fraud
An attack that moves your mobile number to another SIM to intercept your calls, SMS and one-time codes.
Data breaches
When an organisation loses control of your personal data, and the scams and account risks that follow.
Identity theft
When someone uses your personal details to impersonate you, open accounts or commit fraud in your name.
Information stealers
Malware that quietly harvests passwords, session cookies, mobile-money and card details from your device.
Online child exploitation
How children are targeted online, the warning signs for parents and carers, and how to report and get help.
Know what you are up against
Most harm online comes from a small number of recurring threats. They usually rely on tricking a person or exploiting a weak account or an unpatched device, not on sophisticated hacking. Understanding how each one works makes it far easier to recognise and stop. These guides explain the threats seen most often in Kenya and what to do about them.
The threats to watch
Deceptive messages — phishing and smishing, and business email compromise that redirects payments.
Account and money fraud — SIM-swap attacks and identity theft.
Malware — ransomware that locks systems, and information stealers that harvest passwords.
Data and safety — data breaches that expose your details, and online child exploitation.
Protect yourself and respond
Whatever the threat, the same foundations reduce the risk: protect your main email and money accounts with multi-factor authentication, keep devices updated, pause before acting on unexpected requests, and keep a backup. Build these habits with our personal protection guides and, for organisations, the organisation guidance. If something has already happened, use our reporting guidance to prepare the details.
Useful references
Here to help
Something doesn’t look right?
Prepare an incident report with the details that matter.