Threat intelligence
Know the scam before it reaches you.
Codec8 Watchlist is a weekly digest of fraud patterns hitting Kenyan SMEs — schools, clinics, SACCOs, NGOs, and retailers. Available free to every Codec8 member.
Recent alerts
What Kenyan businesses are seeing right now
Fake uniform supplier paybills surge ahead of term opening
Fraudsters are impersonating uniform and book suppliers, sending new M-Pesa paybill numbers via email and WhatsApp. Schools report losses of KSh 50,000–400,000 before catching the change.
Medical supply “urgent reorder” phishing campaign
Emails claiming to be from regular medical suppliers request payment to a “new account due to audit.” The sender address is spoofed and the paybill is not registered to the supplier.
Member-data breach notifications required within 72 hours
New ODPC guidance clarifies that SACCOs must notify members and the regulator within 72 hours of a personal-data breach. Failure to document the timeline is itself a violation.
Donor due-diligence questionnaires now include cyber questions
Major Kenya-based grant makers are asking grantees to confirm backups, MFA on admin accounts, and a documented data-handling policy before disbursement.
Business WhatsApp accounts taken over to request “urgent” payments
Attackers compromise WhatsApp accounts of business owners or suppliers and ask contacts to send money or buy airtime. The messages come from a known number, so staff assume they are real.
Representative alerts based on common fraud patterns reported by Kenyan SMEs.
Coverage
Built for your sector
Weekly
New scam patterns and regulatory updates
Readable in 90 seconds on any phone
Actionable
One concrete thing to check or tell staff
Start free today
Get the watchlist, plus your Business Trust Score.
Join Kenyan SMEs staying one step ahead of fraud. No credit card required.
Get the Watchlist (Free)Part of every free readiness check