Kenyan authorities have arrested a 26-year-old man accused of masterminding a cyberattack that siphoned nearly $378,000 (KSh 49 million) from local fintech platform JamboPay. The suspect, Joseph Momanyi, was apprehended on April 12 in Kahawa West, Nairobi, following a swift investigation by the Directorate of Criminal Investigations.
Police say Momanyi exploited legitimate customer profiles to access the financial system of Web Tribe Limited, JamboPay’s parent company, between July 19 and 24, 2024. He allegedly disabled phone numbers used for transaction alerts, allowing him to divert funds undetected into various M-Pesa wallets, tills, and bank accounts.
During the arrest, officers recovered a laptop, multiple mobile phones, and several SIM cards registered under different names. Investigators believe Momanyi worked with a network of accomplices, using WhatsApp and fake identities to evade detection. He has reportedly confessed to recruiting others to provide smuggled accounts for the fraudulent transfers.
The breach came to light after Web Tribe flagged suspicious activity. Momanyi has been remanded for seven days as authorities conduct further digital forensic analysis and seek to identify other members of the syndicate.












