By Kerissa Varma
NAIROBI, Kenya, July 28 – Africa’s digital economy is accelerating at remarkable pace, drawing millions of first-time users
into mobile money, e-commerce, digital lending and AI-enabled public services. But its
continued success will depend on whether people believe the digital systems they use are safe,
accountable and worthy of their personal data, money and participation.
Fraud, identity theft and cybercrime are actively shaping how Kenyans choose to engage with
digital services, and they are fast becoming the single most important factor in whether an
organisation earns a customer or loses one. Trust is no longer a soft reputational asset – it is
the critical infrastructure of the digital economy, and the factor that will determine whether
Kenya’s digital momentum translates into lasting, inclusive growth.
TransUnion’s H1 2026 Digital Fraud Trends in Africa report found that security of personal data
has overtaken product quality as the leading factor African consumers weigh when deciding
whom to transact with online. In Kenya, 91 percent of consumers rank confidence that their data
will not be compromised as their top consideration, well above the global average of 67 percent.
And as the PwC 2025 East Africa Digital Trust Insights report finds, this is reshaping behaviour
in ways that carry direct consequences for companies.
Fraud has become a barrier to growth, not just a security cost
Trust is hard-won but very easily eroded, and consumers are quick to act on their concerns.
Eighty percent of Kenyan consumers say they will not return to a platform where fraud has
occurred, and 67 percent say they have already switched to a different website because of
security concerns, far above the 50 percent global benchmark.
Exposure to fraud attempts is widespread – the Global Anti-Scam Alliance’s 2025 State of
Scams in Africa study found that 83 percent of surveyed adults in Kenya experienced at least
one scam in the preceding year, while more than 70 percent of consumers in Kenya reported
being targeted by fraud in a single three-month period, against a global average of 43 percent.
And a third of those who lost money were caught through third-party seller scams on otherwise
legitimate e-commerce platforms, with fraud increasingly migrating into trusted environments
rather than obviously suspicious ones – a shift that makes verification and transparency more
important than ever.
Identity is now the front line
What unites these patterns is identity. Fraudsters are moving away from crude, easily detected
attacks towards the exploitation of genuine credentials and established trust. Microsoft’s 2025
Digital Defense Report confirms that attackers are increasingly bypassing firewalls to log in
rather than break in. Deepfake incidents in Africa surged sevenfold from Q2 to Q4 of 2024, as
AI tools made it easier to create fake identities and manipulate biometric data.
AI is intensifying this risk by making fraud cheaper, faster and easier to personalise. The Digital
Defense Report noted a 195 percent increase in AI-generated identity documents used to
defeat verification checks, with AI-driven phishing now roughly three times more effective than
traditional campaigns. Attackers are also increasingly harnessing AI to craft phishing messages
tailored to local languages and cultural contexts and to impersonate trusted individuals.
Data theft was the goal in nearly 80 percent of the cyber incidents Microsoft investigated on the
continent, driven overwhelmingly by financial motives – INTERPOL’s 2025 Africa Cyberthreat
Assessment identified online scams, business email compromise and digital sextortion as the
continent’s most reported cyberthreats, with cyber-related offences now accounting for more
than 30% of all reported crime in West and East Africa. Tellingly, 90 percent of African countries
reported needing significant improvement in their law enforcement or prosecution capacity – a
capability gap that fraudsters are actively exploiting.
Kenya is proving that scale and safety can coexist
Despite the statistics, Kenya is demonstrating it can grow digital participation without a
proportional rise in fraud. The rate of suspected digital fraud in Kenya dropped from 9.3 percent
to 5.0 percent – falling below the global average. Consumer vigilance and improved controls are
working in tandem. African consumers are ahead of many global peers in adopting secure
verification, with fingerprint biometrics now the preferred method, reaching 63 percent in Kenya
against a global average of 53 percent.
This appetite for mobile-first, layered security is a strategic asset that forward-looking
organisations can build on. Kenya now has an opportunity to set global standards rather than
simply catching up, proving that inclusive digital growth and hard-edged security are not
competing priorities but the same objective.
The leadership imperative
The lesson for Kenyan business and government leaders is that trust can no longer be
delegated to the security team as a technical afterthought. It is a boardroom-led growth
imperative that requires organisations to design friction-right customer journeys, communicate
openly when incidents occur, and extend protection across the entire customer lifecycle rather
than concentrating it at onboarding.
This will require investment in adaptive, real-time fraud detection, continued adoption of strong
digital identity verification and phishing-resistant authentication, and deeper collaboration and
intelligence-sharing across sectors and borders.
In Kenya’s digital economy, trust is the infrastructure on which everything else is built. The
businesses and governments that understand this first will not only reduce fraud; they will earn
the loyalty of digitally engaged Africans who have made it clear that if these objectives are not
met, they will take their trust, and their transactions, elsewhere.
The writer is the Microsoft Chief Security Advisor for Africa.
