Kenya Insights

Category: Investigations

  • Inside Bharat Thakrar’s Plot for a Hostile Scangroup Takeover

    Inside Bharat Thakrar’s Plot for a Hostile Scangroup Takeover

    Bharat Thakrar built WPP Scangroup from nothing. In December 1982, working out of modest premises in Nairobi, he launched a small advertising agency called Scanad, funded by determination and a training ground that had taken him through Advertising Associates, where he oversaw the launch of Close-Up toothpaste, Blue Band and Royco Mchuzi Mix. He had no university degree. He had, instead, four decades of stubbornness and an instinct for the business of persuasion that few in sub-Saharan Africa could match.

    What followed was the kind of entrepreneurial arc that Kenyan business mythology is built on. Through a combination of organic growth and shrewd acquisitions, Thakrar turned Scanad into Scangroup, one of the most formidable marketing communications conglomerates in East and Central Africa, offering advertising, media buying, public relations, digital, research and experiential services across the continent. In August 2006, he took the company public on the Nairobi Securities Exchange in an IPO that was six times oversubscribed, a signal, at the time, of extraordinary investor confidence in the man and his machine.

    Then WPP arrived.

    The London-listed advertising giant first took a minority stake in 2006, months after the IPO, before acquiring additional shares in 2013 to claim a controlling interest. The company was rebranded WPP Scangroup in 2015. Thakrar, speaking at the time with the enthusiasm of a man who believed he had secured a permanent partnership, invoked an African proverb: “If you want to go quickly, go alone. If you want to go far, go together.” By 2020, the partnership had propelled revenues to levels Scanad’s founder could never have imagined from those early days. By 2021, Thakrar was gone.

    He is now trying to come back. And the numbers he is carrying into that fight may be the most damning corporate performance indictment ever assembled against a majority shareholder at the Nairobi Securities Exchange.

    “Anywhere else in the world this board would have been kicked out given the cumulative losses over the last five years.” — Bharat Thakrar, May 2026

    The Fall: A Suspension Without a Conviction

    On February 18, 2021, WPP Scangroup’s board issued a terse statement announcing the suspension of both the Chief Executive Officer and the Chief Finance Officer, Satyabrata Das. The grounds cited were “allegations of gross misconduct and possible offences in their capacity as senior executives and employees of the company.” No specifics were given. No charges were named. The statement landed on a market that had not been warned, and shares fell to a record low the same day.

    The allegations, it later emerged, had originated from whistleblower reports submitted by employees and former employees of Scangroup through a “Right to Speak” line, according to WPP. The board appointed Control Risks Group, a British risk consultancy, to conduct a comprehensive investigation. Deloitte and Touche LLP, Scangroup’s external auditor, had reportedly flagged possible alteration of financial books after the publication of the 2020 results was delayed by four months, adding to the public gravity of the situation.

    The investigation ran for months. Then, in September 2021, Scangroup published a statement that amounted to a full corporate exoneration: the probe “did not identify items of material nature that required adjustments to the results of the company or the group for the year ended December 31, 2020 or to the balance sheets at that date.” In plain language, the investigation found nothing actionable. No financial irregularity was confirmed. No books had been cooked. No misconduct of material consequence was proven.

    But by then, Thakrar was already gone. He had resigned on March 23, 2021, months before the clearance, insisting that his resignation was not voluntary but coerced. He would later describe it in court papers as the product of a process that was “clearly pre-determined.” Court documents filed by Thakrar allege that the entire investigation was spearheaded not by the board’s own committee but by Andrea Harris, WPP’s Group Chief Counsel in London, who frequently participated in Scangroup board meetings to brief directors on the probe. At the time of his exit, Thakrar was directed to surrender all items to Ben Kelly, WPP’s head of risk. The handover had the texture of a termination, not a resignation.

    Thakrar has also alleged, in legal filings, that his suspension followed a pattern of discriminatory conduct. His lawyers, in a demand letter that preceded the Nairobi court filing, accused WPP of using “neo-colonialist practices” that were “clearly targeted only at our client who is of Indian extraction.” The letter noted that a British national in a high-ranking Scangroup executive position, who was also allegedly implicated in the same set of charges levelled against Thakrar, was not suspended or investigated. That individual was instead promoted to become CFO of one of WPP’s largest companies. WPP denied the claims, stating that “Bharat resigned from WPP Scangroup in 2021, following allegations of impropriety between 2014 and 2018.”

    Control Risks Group extracted WhatsApp messages from Thakrar’s iCloud via his work laptops. Kenya’s data regulator found the process unlawful.

    The Data War: Secret WhatsApp Messages and a Regulator’s Ruling

    The manner in which the investigation was conducted is itself a matter of legal record and regulatory finding. In October 2024, Kenya’s Office of the Data Protection Commissioner ruled against WPP Scangroup, its parent company WPP Plc, and Control Risks Group, ordering them to pay Thakrar Sh1.95 million in compensation for personal data breaches.

    The Commissioner’s determination, signed by Data Commissioner Immaculate Kassait, found that Control Risks Group had accessed Thakrar’s private WhatsApp messages stored in iCloud through his work laptops, without demonstrating compliance with the principle of data minimisation. The ruling ordered WPP Scangroup to give Thakrar access to his personal data related to his employment, within seven days. CRG argued that WhatsApp messages did not constitute sensitive personal information under the Data Protection Act. The Commissioner rejected that argument.

    Scangroup declared it would appeal the ruling, with then-CEO Patricia Ithau describing the company as disagreeing with the determination. But the regulatory finding stands as an independent judicial acknowledgement that the investigation into Thakrar’s conduct was conducted, at least in part, through unlawful means. It is precisely the kind of finding that gives Thakrar’s allegations of a manufactured ouster their most credible institutional footing.

    The Lawsuit: Sh4.5 Billion, Dismissed on a Technicality

    In March 2024, Thakrar filed suit in the Nairobi commercial court against WPP Plc, WPP Scangroup, and all of the company’s directors, seeking more than half a billion shillings in domestic damages plus losses that UK media reported could reach £24 million, roughly Sh4.3 billion, for reputational injury, emotional and mental damage, and loss of business opportunity. The suit alleged unlawful interference with contractual relations, inducement of breach of contract, conspiracy to injure his status and reputation, and a pattern of defamatory conduct that, he argued, reached as far as Airtel Africa, to whom WPP allegedly gave “further defamatory and false statements.”

    Thakrar further alleged that WPP had “manipulated itself into a position to control the board” by appointing additional directors in violation of Capital Markets Authority guidelines requiring that at least one in three directors be independent. He described his suspension as the result of a “surreptitious investigation using unlawful means” and accused the board of endorsing his suspension without having seen the draft investigation report from Control Risks.

    In May 2025, High Court Judge Josephine Mong’are struck out the case, ruling that it should have been filed before the Employment and Labour Relations Court as an employer-employee dispute, not in the commercial division. Mong’are found that the court had no jurisdiction to determine the matter, which “falls squarely with the Employment and Labour Relations Court as it relates to and arises out of a dispute between an employer and employee.” Thakrar announced he would file an appeal within the statutory fourteen-day period. The underlying claims remain unheard on their merits.

    What the dismissal demonstrated, above all else, is that Thakrar is not done. He filed the appeal. He continued to hold his shares. He watched the numbers worsen. And then, in May 2026, he moved.

    The Empire Thakrar Built: Revenue, Reach and the Golden Years

    To fully understand what is at stake, one must understand what WPP Scangroup was under Thakrar’s leadership and how far it has fallen since his removal. When Scangroup listed on the NSE in 2006, it was a respected but mid-sized agency. The WPP partnership unlocked scale. Revenue grew from Sh829.57 million in 2006 to Sh5.02 billion by 2015, the year of the rebrand. Net profit more than doubled over the same period to Sh478.67 million. Under Thakrar, the company built a multi-agency model that spanned advertising, media, public relations, digital and research across Sub-Saharan Africa’s most commercially significant markets.

    Major blue-chip accounts including KCB Bank, Equity Bank, NCBA, and Airtel Africa were among the relationships that defined Scangroup’s commercial dominance. In 2020, the company completed the sale of its Kantar TNS data and research subsidiary to Bain Capital Group for approximately Sh5 billion after costs and taxes, a transaction that demonstrated the depth and value of what had been assembled under Thakrar’s stewardship. At the point of his forced departure in February 2021, revenues stood at approximately Sh7 billion and the share price at Sh5.94. These numbers matter because they are the baseline against which the post-Thakrar era must be judged.

    The Wreckage: Five Years of Losses and a Collapsed Share Price

    The financial record of WPP Scangroup since Thakrar’s removal is not a story of restructuring or strategic transition. It is a story of consistent, accelerating destruction of shareholder value.

    In 2022, the first full year under post-Thakrar management with Patricia Ithau as CEO, the company reported a loss of Sh145.5 million. Management declared this a turnaround, pointing to some operational improvements. In 2023, the company returned a profit of Sh130 million, largely attributed to forex gains and organic growth from existing clients rather than meaningful revenue expansion. Revenue for that year stood at Sh6.6 billion on a gross basis but gross net revenue, the industry metric that strips out media pass-through costs, was only Sh2.2 billion, indicating a structurally hollowed-out business. No dividend was declared. No dividend has been declared in any of the years since Thakrar’s removal.

    The 2024 results erased whatever comfort the 2023 profit had provided. Net loss widened to Sh506.7 million, a full reversal of the Sh130 million profit. Revenue fell to Sh2.4 billion on a gross basis from Sh3.1 billion. The company attributed part of the loss to a Sh248.7 million foreign exchange hit caused by the strengthening of the Kenyan shilling, which appreciated from Sh160 to the dollar to Sh129. Two “significant creative businesses” were also lost during the year, contributing to the top-line deterioration.

    Then came 2025. Full-year results published in April 2026 confirmed a net loss of Sh713.7 million, a 41 percent deepening from the prior year’s loss. Revenue collapsed to Sh2.04 billion. Cash reserves declined 59.7 percent to Sh864.48 million. The company has shed operations in Nigeria and Tanzania and divested its South African public relations business, a structural retreat from the pan-African footprint that Thakrar spent four decades constructing. The share price, as of May 6, 2026, stood at Sh2.24, a 62 percent decline from the Sh5.94 at which it traded on the day Thakrar was suspended. In aggregate trading terms, the company has incurred losses of approximately Sh3.3 billion between 2021 and 2025.

    Four consecutive profit warnings. No dividends for five years. Revenues less than one-third of what they were at Thakrar’s departure. A share price at less than half its 2021 value. These are the numbers that Thakrar has placed, in a formal requisition letter dated May 8, 2026, before the board that WPP put in place and continues to back.

    Revenue has fallen from Sh7 billion when Thakrar was removed to Sh2 billion today. No dividend has been paid in five years. Cash reserves have collapsed 59.7 percent.

    The Client Exodus: KCB, Equity, NCBA, Airtel Africa

    Behind the headline numbers lies an account of client relationship management that raises questions about what, exactly, has been happening inside Scangroup’s agencies since Thakrar left. The requisition letter names KCB Bank, Equity Bank, NCBA and Airtel Africa as major clients lost during the five-year period under review. The shareholders allege that these departures accounted for nearly a quarter of the company’s revenues at the time of their exits.

    The Airtel Africa loss is particularly significant in its public profile. In May 2025, Ogilvy Africa, Scangroup’s flagship agency, lost a fifteen-year contract with the telecoms firm. The Capital Markets Authority separately disclosed the material contract change. The termination ended one of the longest-standing advertising relationships in the sub-Saharan African market. Staff headcount, which stood at 554 before layoffs in May 2023, had declined to 434 by December 2024, with further redundancies announced in 2025. A once-dominant agency is contracting on every measurable axis simultaneously.

    The Governance Scandal Inside the Scandal: The Sh1.2 Billion Loan

    The most explosive allegation raised by Thakrar’s minority shareholder bloc is not about lost clients or historic losses. It is about what the current board has allowed to happen with the company’s remaining cash.

    The requisition letter flags a Sh1.2 billion long-term loan that WPP Scangroup has extended to WPP Group Services SNC, a wholly owned subsidiary of WPP Plc, at an interest rate of five percent per annum. The minority shareholders argue that this rate is materially below prevailing market conditions, pointing to average deposit rates of 6.86 percent and average lending rates of 16.85 percent. In other words, a cash-depleted Kenyan subsidiary with no dividends and a collapsing share price is lending more than a billion shillings to its cash-rich British parent at rates that would not pass muster at a commercial bank.

    With cash reserves standing at only Sh864.48 million at year-end, the loan, at Sh1.2 billion, actually exceeds the company’s entire cash balance. The minority shareholders describe the terms as raising “serious questions as to WPP Plc’s continuing strategic, financial and governance commitment to the group.” They have also raised concerns about a Sh78 million receivable from Ogilvy South Africa, another WPP subsidiary, and have demanded detailed disclosure on repayment arrangements and recoverability.

    The question this raises is whether an independent board, acting in the interests of all shareholders rather than the majority, would have approved such a transaction. The Capital Markets Authority’s guidelines on related-party transactions and the Companies Act 2015’s requirements for director independence are not abstract protections. They exist precisely to prevent a controlling shareholder from extracting value from a listed subsidiary at the expense of minority investors.

    The Takeover Bid: Numbers, Names and the Arithmetic of Power

    The mechanism through which Thakrar is attempting his return is Article 44.4 of Scangroup’s Articles of Association, which requires the board to convene a general meeting when shareholders representing at least ten percent of the company’s issued share capital submit a written requisition. Thakrar and his wife Sadhana Thakrar hold 45,302,860 shares representing 10.48 percent of issued capital. A bloc of six additional minority shareholders brings the combined holding to 58,725,648 ordinary shares, or 13.59 percent of the total 432,155,985 shares in issue.

    Their requisition, dated May 8, 2026 and addressed to Chairman Richard Omwela, demands the removal of all nine sitting directors and their replacement with a slate of five new nominees. That slate is led by Thakrar himself, alongside his son Rishab Thakrar, former Scangroup Executive Creative Director Andrew White, businessman Carl Adam Ogola, and Kunal Kamlesh Bid, founder of Bid Securities. Andrew White is the copywriter behind some of Kenya’s most enduring advertising slogans, including “Mimi ni Member” for Equity Bank and “Milele” for Tusker.

    Arrayed against them is WPP Plc, which through Cavendish Square Holding BV and Ogilvy South Africa controls approximately 56 percent of issued share capital. On a straight vote, WPP defeats every single resolution. The majority shareholder can, if it chooses, ignore the requisition’s substantive demands entirely and simply outvote the minority at the AGM. That is the arithmetic reality of Thakrar’s position. He knows it. WPP knows it. The strategic question is not whether Thakrar can win the vote. It is whether his campaign generates enough public, regulatory and commercial pressure to force WPP into meaningful concessions.

    The AGM was scheduled for June 8, 2026 at 10:00 a.m. In a manoeuvre that critics read as pre-emptive damage control, the board announced on May 13, two days before publishing the formal AGM notice, that three of the nine directors named in Thakrar’s ouster resolutions had “retired” effective the same date. The three who departed were Jon Eggar, Patou Nuytemans and Shahid Sadiq. In their place, the board proposed Kagiso Musi, Nick Douglas and Manuel Segimon. Thakrar had previously claimed, without documentary evidence, that all three departing directors were no longer employed by WPP Plc. Their retirement days before the formal AGM notice validated that allegation publicly.

    WPP controls 56 percent of the shares and can defeat every resolution. But Thakrar is not playing for the vote. He is playing for the narrative.

    The Wider Context: A Global Template for Founder Pushback

    Thakrar’s fight with WPP has a more famous parallel than most Kenyan commentators have noted. WPP itself went through a structurally identical crisis in 2018, when its founder Sir Martin Sorrell, who had built WPP from a wire basket manufacturer into the world’s largest advertising holding company, was forced out following an investigation into alleged misconduct. Sorrell denied the allegations, departed with a protracted battle over his shareholding, and immediately founded S4 Capital, a competing digital advertising business that went public and grew rapidly.

    The parallel is instructive. WPP, which ousted its own founder in circumstances it considered embarrassing, turned around and applied a similar process to the founder of its African subsidiary. Whether that constitutes institutional consistency or corporate irony depends on one’s perspective. What is consistent is the pattern: whistleblower allegations, an investigation conducted under the authority of London-based corporate counsel, a resignation described by the subject as coerced, and a subsequent legal fight that WPP has tried, with mixed success, to contain.

    Globally, shareholder activism of the kind Thakrar is deploying has been rising. Activist investors have mounted record numbers of campaigns against underperforming companies in recent years, with targets ranging from energy conglomerates in the United States to consumer multinationals in Asia. In Kenya, such campaigns are exceptionally rare. The Nairobi Securities Exchange has few precedents for minority shareholders formally requisitioning the removal of an entire board at a listed company. Thakrar’s bid, whether or not it succeeds at the June 8 AGM, has already made that history.

    The New CEO Problem: Three Leaders in Five Years

    One dimension of the governance crisis that has received insufficient scrutiny is the leadership churn that has occurred at Scangroup since Thakrar’s departure. The company has now had three CEOs, and an interim period, in five years. Alec Graham served as interim COO following Thakrar’s suspension. Patricia Ithau was appointed substantive CEO in 2022, tasked with “rapidly steering the organization through dynamic shifts in the marketing and communication field.” Her three-year tenure produced one year of modest profit, surrounded by losses, before her contract ended in July 2025 without renewal.

    Miriam Kaggwa, the Chief Operating Officer, then served as interim leader while the board searched for a permanent replacement. In November 2025, Akua Brayie Owusu-Nartey was appointed Group CEO and Executive Director, effective from November 17, with a mandate to steer the company back to profitability. Owusu-Nartey brings regional experience from Ghana, Nigeria, Kenya, Tanzania and Zambia, and held roles at Ogilvy Africa and Publicis West Africa. She has been in post for less than seven months and is now at the centre of a hostile takeover attempt.

    The leadership question matters beyond individual competence. A company that cycles through chief executives while accumulating losses, shedding clients and contracting geographically is a company that has not resolved the strategic crisis at its core. The board that hired and let go of each of these CEOs has been chaired throughout by Richard Omwela, one of the directors Thakrar specifically names for removal.

    What a Thakrar Return Would Actually Mean

    For shareholders, clients and staff, the scenario of a Thakrar-led board carries implications that cut in multiple directions. The case for a Thakrar return rests on the proposition that the company’s post-2021 decline is attributable, at least in significant part, to the loss of relationships, institutional knowledge and client confidence that Thakrar personally embodied. For major Kenyan advertisers, Thakrar was not merely a CEO. He was the face and the relationship. The departure of KCB, Equity and NCBA in the years following his removal may partly reflect the evaporation of those personal connections.

    The case against rests on a different reading of the same history. Thakrar was, by the end of his tenure, running a company that WPP believed had serious governance problems. The original whistleblower reports alleged misconduct spanning multiple years. The investigation found no material financial irregularity, but that is not the same as finding no misconduct of any kind. The full Control Risks report has never been published. Thakrar’s own lawsuit continues to allege things that WPP denies. The court has not yet heard the merits. For institutional investors and CMA-regulated clients, the return of a CEO who resigned under an unexplained investigation, regardless of whether he was ultimately cleared of financial wrongdoing, is not a simple governance restoration.

    There is also the arithmetic problem. Even if every minority shareholder votes with Thakrar and the proxy campaign generates maximum participation from the retail shareholder base, WPP’s 56 percent holding means the June 8 vote is mathematically not competitive. Thakrar cannot win through the ballot box alone. His campaign is better understood as a public pressure strategy designed to force WPP either to negotiate, to make board concessions beyond the three pre-emptive retirements already announced, or to take seriously the prospect of a governance crisis that lands on the front pages of the London financial press.

    WPP itself is under independent commercial and investor pressure. The London-listed parent has been navigating its own restructuring, digital transformation challenges and falling share price. A sustained public fight about governance failures at an African subsidiary, conducted through Kenyan courts, data regulators, social media and NSE-listed company mechanisms, is not the kind of press that helps WPP’s own narrative with institutional investors in London. Thakrar, for all that he may be a deeply interested party in this dispute, clearly understands that dynamic.

    The PR Company With a PR Crisis

    There is a dimension to this story that has been substantially underreported: the company at the centre of this crisis is, at its core, a public relations and marketing firm. WPP Scangroup sells, to its clients, the capacity to manage reputation, control narrative, shape public perception and handle crisis communications. Its agencies include Ogilvy, one of the most storied brand-building operations in the world. The board and management of WPP Scangroup are, professionally speaking, the people who should know better than anyone how this kind of story unfolds and how to get in front of it.

    They have not got in front of it. The company has issued no substantive public response to the minority shareholders’ May 8 requisition letter, with its enumeration of Sh3.3 billion in losses, a collapsed share price, departed major clients and a questioned related-party loan. It preemptively retired three directors to limit the damage of the specific board-removal resolutions, but it has not addressed the underlying commercial and governance critique. Its current CEO, who has been in post for six months, has not publicly outlined a credible turnaround thesis with specific financial targets and client acquisition commitments. The company that sells crisis communications cannot manage its own crisis.

    For current and prospective clients of WPP Scangroup’s agencies, specifically Ogilvy Africa, Scanad, JWT, Y&R and the group’s other subsidiaries, the question of board stability and strategic direction is not abstract. Clients commit marketing budgets on twelve-month and multi-year cycles. They need confidence that the agency they brief in January will still have the same creative leadership, strategic team and institutional memory in December. A company that has cycled through three CEOs in five years, is losing clients at the pace documented in its own published results, and is now subject to a public hostile takeover attempt does not project that confidence.

    The Capital Markets Dimension: CMA and NSE Accountability

    Kenya’s Capital Markets Authority has regulatory responsibility for listed companies and their governance. The standards applicable to WPP Scangroup include requirements for director independence, related-party transaction disclosure, and the treatment of minority shareholders. The minority shareholders’ requisition letter explicitly raises concerns about whether the Sh1.2 billion loan to WPP Group Services at five percent interest was properly disclosed and properly approved under applicable related-party transaction rules. It also raises concerns about whether three board members who are no longer WPP employees were properly disclosed as having changed status.

    The CMA has the power to investigate, to require enhanced disclosure, and to take regulatory action where governance failures are established. Whether it chooses to exercise that power in relation to a company whose majority shareholder is a London Stock Exchange-listed multinational is a test of institutional independence that the authority should take seriously. The NSE listing, for WPP Scangroup, is not merely a fundraising mechanism. It carries obligations to Kenyan retail shareholders, pension funds and institutional investors who purchased shares on the basis of disclosures and governance standards that a listed company is bound to maintain.

    For retail shareholders who bought WPP Scangroup shares at Sh5.94 and are now holding paper worth Sh2.24, the question of accountability is not rhetorical. Those investors have lost 62 percent of their capital over five years while the board collected fees and the parent company received a Sh1.2 billion loan at below-market rates. That is the kind of outcome that shareholder activism exists to prevent. That it is happening now, five years too late, does not make it less necessary.

    Conclusion: A Reckoning Whose Outcome Is Not the Point

    Bharat Thakrar will almost certainly lose the June 8, 2026 vote. WPP controls 56 percent. The arithmetic does not change. The board will be re-elected under ordinary business, and the special business resolutions for board removal will be defeated by the simple deployment of the majority shareholder’s voting power. The Kenyan press will write it up as a defeat for the founder and a reaffirmation of WPP’s control.

    That reading would miss the point. What Thakrar has accomplished, regardless of the vote outcome, is to place on public record, in a formal requisition carrying legal standing under Kenya’s Companies Act, the most comprehensive and sourced indictment of a publicly listed company’s performance and governance ever assembled in Kenyan corporate history. The Sh3.3 billion in losses is documented. The 62 percent share price collapse is documented. The client exodus is documented. The Sh1.2 billion below-market loan is documented. The data protection violation is a regulatory ruling. The court case, though dismissed on jurisdiction rather than merits, is a matter of public record.

    WPP Scangroup’s board, its current CEO Akua Brayie Owusu-Nartey, its chairman Richard Omwela, and its majority shareholder WPP Plc now face a choice that extends beyond the AGM. They can treat the June 8 vote as a problem to be managed and won, retire to the silence of majority ownership, and continue the present trajectory of declining revenues, contracting operations and zero dividends. Or they can acknowledge that the company is in structural crisis, that the post-Thakrar strategy has not worked, and that the minority shareholders raising these concerns are entitled to a credible answer.

    Bharat Thakrar is not, in this fight, merely a bitter former CEO seeking revenge. He is a 10.48 percent shareholder who has watched five years of capital destruction and has chosen to do, with the tools available to him under Kenyan law, exactly what minority shareholder protections were designed to enable. Whether his proposed alternative is the right answer for Scangroup’s future is a separate question. The one question that cannot be avoided is whether the current arrangement is working. The numbers have answered it.

  • The Man Who Thinks He Has Everyone Covered: Speaker Wetang’ula, CS Mudavadi and a Bribed Judge in Wamukota’s Corrupt Blueprint to Seize KETRACO

    The Man Who Thinks He Has Everyone Covered: Speaker Wetang’ula, CS Mudavadi and a Bribed Judge in Wamukota’s Corrupt Blueprint to Seize KETRACO

    He was not whispering. That, above everything else, is what those who were present in that Nairobi establishment in the weeks before the June 2 application deadline for KETRACO’s chief executive position find most remarkable about what they heard. Antony Tawayi Wamukota, the long-serving General Manager for Design and Construction at the Kenya Electricity Transmission Company, twice appointed acting Managing Director of the same institution, and a man the Ethics and Anti-Corruption Commission has recommended for prosecution over an Sh18.5 billion scandal, was speaking with the unhurried confidence of someone who has calculated, with some care, that he cannot lose.

    The boast, as it was relayed to this publication through multiple independent accounts from individuals with direct knowledge of what was said that evening, was not a single claim but a catalogue, delivered in the specific language of a man who is not performing confidence but reporting a completed transaction.

    He claimed a sitting female Luhya judge had been secured for the sum of three million shillings and would deliver whatever court orders he required in proceedings directly connected to the KETRACO recruitment. He declared that the executive and the legislature stood behind him. He named, with the ease of a man naming people he has already paid, two of the most powerful figures from Western Kenya in the current national administration as his personal guarantee against anyone who might question his qualifications, his corruption record, or his right to the corner office at a company managing Sh200 billion in public infrastructure assets.

    “I have the executive, the legislature, and even influence reaching into the judiciary,” he reportedly told the room, adding with what sources describe as the slightly forced laugh of a man projecting control he needs others to believe he possesses: “Everything is covered.”

    “I have the executive, the legislature, and even influence reaching into the judiciary. Everything is covered.” — Antony Wamukota, overheard in a Nairobi establishment, as reported to Kenya Insights by multiple independent sources

    THE SILENCE THAT CONFIRMS EVERYTHING

    The names Wamukota has been dropping with such confidence are not hypothetical. They are Speaker of the National Assembly Moses Wetang’ula, the third in Kenya’s constitutional line of succession and the most senior elected official from the Luhya community, and Prime Cabinet Secretary Musalia Mudavadi, whose office’s authority reaches across the machinery of government with a breadth that makes his awareness of significant developments within his community’s political network a matter of institutional inevitability rather than mere probability.

    Both men have been publicly named by Wamukota as his political guarantors in a live recruitment dispute at a major state corporation where he faces disqualification on both academic and integrity grounds. Multiple sources with knowledge of these proceedings confirm that the reports of his public boasts have reached both men’s offices through channels that are well established.

    Both men have said nothing.

    In Kenya’s political culture, where figures of the stature of Mudavadi and Wetang’ula have spent careers demonstrating a sophisticated and finely calibrated understanding of when public denial is required as a political instrument, silence in the face of specific, named, public claims is not a passive condition. It is a choice. And choices made at this level of political seniority carry consequences and communications that the people making them understand with precision.

    A man facing active EACC prosecution recommendations is invoking your name as his personal guarantee of impunity in the recruitment for a public leadership role, claiming you will override formal qualification requirements and integrity standards on his behalf, and boasting in establishments across Nairobi that he has arranged judicial outcomes through payments made in your name’s shadow. If that claim were false, the denial would have come within hours. It has not come at all.

    “Wamukota does not speak those names the way a man speaks names he has stolen. He speaks them the way a man speaks names he has paid for. There is a difference, and people who have been in these rooms long enough know exactly which one they are hearing.” — Senior energy sector source, speaking on condition of anonymity

    THE FILE THAT MAKES THE BACKING NECESSARY

    The scale and determination of the political architecture Wamukota has assembled is itself the most precise available measure of what he knows about his own file. A man with a qualifying degree and a clean record does not require the Speaker of the National Assembly and the Prime Cabinet Secretary as his personal institutional shields in a CEO recruitment exercise. He applies, he is assessed, and if he is the best candidate, he gets the job. The architecture of political patronage that Wamukota has constructed and is now publicly describing, at personal and reputational risk to the figures being named, exists in direct proportion to the weight of what he is carrying.

    What he is carrying begins with the Loiyangalani-Suswa 400kV Transmission Interconnector, a 435-kilometre powerline designed to connect the Lake Turkana Wind Power plant in Marsabit to the national grid at Suswa. The project was catastrophically delayed under the contract management oversight of the man who was, at the relevant time, KETRACO’s General Manager for Design and Construction. The Spanish contractor Isolux Ingenieria went bankrupt mid-construction, and the cumulative failures of project stewardship produced a penalty bill of Sh18.499 billion paid to Lake Turkana Wind Power for electricity the plant generated but could not transmit because the line was not ready.

    The EACC’s investigation into this failure produced prosecution recommendations against a list of named individuals that includes Wamukota, former Energy Principal Secretary Patrick Nyoike, KETRACO colleagues Peter Njehia and Carol Kiara, and the officials of Luanda Concrete and Earth Movers Limited. The charges recommended encompass conspiracy to commit economic crimes, abuse of office, conflict of interest, fraudulent acquisition of public funds, and money laundering.

    The connection between Wamukota and Luanda is not a matter of rumour or anonymous assertion. It is documented in court filings forming part of the public record of High Court Petition E111 of 2023. EACC investigators seized from Wamukota a formal letter of introduction he had written for Luanda’s directors to the Development Bank of Kenya, bank transfer records from his personal account to Luanda Concrete and Earth Movers, documentation of equipment purchases where Luanda paid on behalf of a company in which Wamukota and his mother are named as shareholders, and a rubber stamp for Luanda physically found in his possession at KETRACO. The directors of Luanda carry the Wamukota family name. The investigation further identified his connection to Aliceson Investments Limited, with his mother listed as a co-director.

    This is not the conduct of a man who kept his professional and private interests at arm’s length during the project he was supposed to be overseeing. It is the conduct of a man who believed, with apparently justified confidence, that his political connections would insulate him from the consequences of using his institutional position as a procurement pipeline for companies carrying his family’s name.

    THE DEGREE THAT DOES NOT EXIST

    Against that backdrop arrives the question of his academic credentials, and the answer is both simple and devastating. KETRACO’s board advertised the managing director position requiring a master’s degree as a minimum. Wamukota’s publicly documented professional record lists a Bachelor of Science in Civil Engineering and a CPA qualification. No master’s degree appears anywhere in his documented credentials. Industry sources who have followed his career closely note that this gap has been an internal subject of institutional discussion since at least 2022, when he was placed in the acting MD role and questions were raised about whether his academic profile matched the authority he was being handed. The Nyakundi Report’s investigation adds a further detail that has circulated within KETRACO as settled institutional knowledge: questions have been raised internally about the standing of the institution from which he obtained even his undergraduate degree.

    Every other serious candidate in the current recruitment field holds postgraduate qualifications from accredited universities. Several hold multiple advanced degrees. The master’s degree requirement is not a frivolous bureaucratic imposition for an entity managing Sh200 billion in assets, handling World Bank and multilateral financing, and coordinating with regional power pools across East Africa. It is the minimum credential commensurate with that responsibility, and Wamukota does not have it.

    COFEK AND THE ART OF THE JUDICIAL PROXY

    The Consumer Federation of Kenya filed its petition in the High Court seeking to halt the KETRACO CEO recruitment on the grounds that the master’s degree requirement exceeds what the Government Owned Enterprises Act permits. The timing was precise: filed days before the June 2 application deadline. Its legal effect, if successful, would be to eliminate the one qualification requirement that most directly disqualifies the one candidate whose political backers most needed it eliminated.

    The GOE Act sets a statutory floor for appointment to state corporation leadership. It requires a degree, ten years of relevant experience, five years in senior management, and Chapter Six compliance. It does not prohibit a board from setting higher standards commensurate with the complexity of the institution. Legal analysts who have examined this argument with the seriousness it deserves are largely dismissive of the petition’s substantive merits. A board does not exceed its authority by determining that the chief executive of a Sh200 billion infrastructure entity should hold a postgraduate degree. It exercises that authority.

    What the petition does, and what its timing and the identity of its primary beneficiary makes impossible to avoid examining, is provide a judicial mechanism through which a political arrangement can be converted into a legal outcome. By eliminating the master’s degree requirement through conservatory orders, the petition would advance Wamukota’s candidacy to an interview stage where his political backing, rather than his academic credentials, becomes the decisive variable. That is precisely the stage at which the names he has been describing as his guarantee are expected to deliver their return on whatever investment has been made in their use.

    The question of who activated COFEK’s institutional machinery for this specific action, at this specific moment, on behalf of a primary beneficiary who does not hold the qualification being challenged, and what was communicated to Secretary-General Stephen Mutoro about the desired outcome, are questions that sit in the public interest with an urgency that the relevant investigative authorities should not allow to dissipate.

    The COFEK petition did not emerge from an independent assessment of consumer rights in public sector recruitment. Its primary beneficiary is a man who does not hold the qualification being challenged. Its timing was a deployment, not a coincidence of civic concern.

    MR. POWERPOINT AND THE TRANSFORMER THAT NEVER WORKED

    The corruption file and the political architecture are the dominant stories. But they do not exist in isolation from a record of technical stewardship that current and former KETRACO staff have described, in accounts shared with this publication across multiple independent conversations, as a catalogue of decisions whose consequences have been absorbed by Kenya’s electricity consumers in the form of avoidable costs, outages, and infrastructure damage.

    Staff within KETRACO refer to Wamukota by a nickname that has acquired the persistence of institutional truth: Mr. PowerPoint. The designation captures something precise about its subject, specifically a facility with presentation slides that exists in inverse proportion to his command of the technical substance those slides are meant to communicate. The nickname has circulated with enough durability to qualify as settled institutional knowledge rather than passing gossip.

    In 2022, he personally authorised the purchase of two 132kV power transformers for the Kitale-Ortum project at a voltage rating incompatible with that transmission line. When senior engineers identified the error and raised technical objections, he dismissed them. He reportedly suggested the transformers could be adapted through a process that the engineers confirmed was not technically possible. The equipment spent two years in a warehouse, components stolen during storage, while KETRACO paid Sh85 million in fees for equipment it could never deploy. The error was attributed to the supplier.

    During testing at the Suswa substation, a critical node in the Ethiopia-Kenya interconnector, a fault that experienced transmission engineers assessed as resolvable within fifteen minutes through standard isolation procedures prompted Wamukota, then serving as acting CEO, to order a complete emergency shutdown of the entire facility. Power was cut to three counties for six hours. The subsequent technical assessment of that decision was unambiguous: it reflected a fundamental misunderstanding of grid management protocols that postgraduate training in power systems engineering would have prevented.

    The incident that most clearly illuminates the human cost of this technical inadequacy is the dismissal of a lead project engineer who held a master’s degree from the University of Nairobi. He had corrected Wamukota’s technical assessments in front of colleagues on more than one occasion. He was removed from the project. His replacement was a family member carrying a diploma in business information technology. The project continued under the revised arrangement with the technical consequences that those qualifications made inevitable.

    THE JUDICIAL BRIBERY CLAIM AND THE JSC’S OBLIGATION

    Wamukota’s bar room declaration that a sitting female Luhya judge has been secured for three million shillings to deliver favourable court orders in proceedings connected to this recruitment is not a claim that can be received, noted, and allowed to dissipate without institutional consequence. It is a public claim of active judicial corruption in live proceedings, made by the primary beneficiary of those proceedings, with enough specificity to identify the nature of the judicial relationship being described.

    The Judicial Service Commission carries a constitutional obligation that is not satisfied by passive receipt of such information. The identity of the judge being described, the nature of her relationship to the COFEK proceedings and any related KETRACO litigation, and the conduct of any judicial officer who may have received or solicited payment in connection with these proceedings, are matters the JSC has both the authority and the obligation to examine with the urgency that active, live judicial corruption demands.

    That Wamukota made this claim publicly, in a room with witnesses, about specific proceedings in which he has a direct and documented financial interest, removes any ambiguity about whether the claim is serious enough to warrant institutional attention. It demands it.

    THE APPOINTING AUTHORITY’S MOMENT OF TRUTH

    This appointment arrives at a moment when President Ruto’s administration has invested public credibility in the proposition that Kenya’s state corporations will be led by people who qualify for the jobs they are given and who can withstand integrity scrutiny. The November 2023 suspension crackdown, directed by Head of Public Service Felix Kosgei on the EACC’s recommendation, was a public declaration that officials under active anti-corruption investigation would not continue to exercise authority over the institutions under scrutiny. Wamukota was on that list. He survived it. He has survived everything.

    But permanent appointment to the managing director role is a different category of decision from the employment relationship he has been litigating to preserve. It is an affirmative choice, made with full knowledge of the EACC’s prosecution recommendations, the documented Luanda financial relationships, the academic credentials gap, the technical stewardship failures, the political patronage network he has publicly described, and the judicial bribery claims he has been making in establishments across Nairobi.

    Appointing this man to lead KETRACO would not simply be a bad personnel decision. It would be a declaration, delivered through the machinery of the state, that the political network he has assembled is more powerful than the institutions designed to hold it accountable, that the EACC’s prosecution recommendations are advisory rather than consequential, that a missing master’s degree is a qualification that political backing can substitute for, and that the courts of this country can be purchased by the people with sufficient desperation and sufficient connections to make the call.

    The archives are public. The court filings are accessible. The EACC’s institutional position has not been withdrawn. The boast has not dissolved. It has reached the desks of people with the authority to act on it, and the country is watching what they choose to do with what they now know.

  • Port Tycoon Samuel Kairu Dragged Into Sh500 Million Mombasa Port Tax Scam

    Port Tycoon Samuel Kairu Dragged Into Sh500 Million Mombasa Port Tax Scam

    Businessman Samuel Kairu Njonde, the man behind Compact Freight Systems, has emerged as one of the prominent names linked to an explosive investigation into an alleged Sh500 million customs fraud scheme at the Port of Mombasa, a scandal that investigators say exposed deep vulnerabilities within Kenya’s most important maritime gateway.

    The investigation, being conducted jointly by the Directorate of Criminal Investigations (DCI) and the Kenya Revenue Authority (KRA), has already led to the arrest of eight government officials and is now widening its net to include freight forwarding companies and businessmen suspected of facilitating the movement of cargo through the port without payment of mandatory customs taxes.

    According to investigators, the alleged scheme relied on the recycling of legitimate customs entry numbers that had already been used and approved. Rather than creating fake documentation, suspects allegedly attached previously processed clearance records to new consignments, allowing containers to exit the port while appearing to have complied with all customs requirements.

    Authorities believe at least 238 containers left the Port of Mombasa irregularly between 2025 and early 2026, with fears that the final figure could surpass 300 containers. The suspected tax losses are estimated to exceed Sh500 million.

    Investigators say the operation involved a sophisticated network spanning both public and private sectors. Five KRA officers and three Kenya Ports Authority employees have already been identified as key suspects. Authorities allege that retired KPA employees’ login credentials were unlawfully used to access port systems and process container clearances under dormant digital identities.

    While no criminal charges against Kairu have been publicly announced, investigators are examining the role of firms linked to freight forwarding activities connected to the irregular container releases. His company, Compact Freight Systems, has been repeatedly mentioned in reports surrounding the ongoing probe.

    The latest allegations add to a long trail of legal and commercial disputes that have followed the businessman over the years.

    Court records show that Compact Freight Systems has repeatedly found itself embroiled in litigation involving cargo handling, contractual disputes and claims of cargo losses. One of the most notable cases involved allegations surrounding the loss of 153 bales of imported garments valued at more than USD 214,000 at the company’s Miritini-based container freight station. Courts handled multiple proceedings between 2022 and 2024 concerning liability for damaged or missing cargo.

    Kairu’s company has also battled creditors in court. In the long-running case involving Aswan Developers and Contractors Limited, judgment was entered against Compact Freight Systems for approximately Sh6.8 million. Attempts to stop execution of the decree were unsuccessful, leading auctioneers to target company assets, including a Reachstacker container-loading machine considered critical to the firm’s operations.

    The businessman has additionally been linked to a high-profile dispute involving cargo transportation arrangements for South Sudan. The disagreement pitted interests associated with Compact Freight Systems against entities linked to the family of former Mombasa Governor and Cabinet Secretary Hassan Joho.

    The dispute escalated into diplomatic and legal corridors after the South Sudan government moved to terminate cargo allocation arrangements. Justice Martha Mutuku subsequently directed the Kenyan government to comply with requests arising from the cancellation of the transport agreement involving Compact Freight Systems and Autoport Freight Terminal.

    The latest investigation has once again placed the spotlight on corruption and tax leakages at the Port of Mombasa, a strategic facility that serves not only Kenya but also Uganda, Rwanda, South Sudan and the Democratic Republic of Congo.

    Over the years, the port has witnessed numerous fraud scandals involving container diversion, tax evasion, cargo theft, under-declaration of imports and manipulation of customs systems. Anti-corruption agencies have repeatedly warned that criminal cartels often rely on insider access within government agencies to bypass controls and facilitate illegal cargo movements.

    Several previous investigations at the port uncovered networks involving customs officers, clearing agents, transporters and private businessmen working together to manipulate cargo declarations, alter documentation and evade taxes worth hundreds of millions of shillings.

    The current probe appears to fit that pattern.

    Investigators say the alleged fraud did not depend on crude document forgery. Instead, it exploited weaknesses within existing electronic systems and internal controls, making detection more difficult and potentially allowing the operation to continue for months before authorities uncovered the scheme.

    As investigators continue tracing the movement of hundreds of containers and following money trails linked to freight firms operating within and around the port, pressure is mounting on authorities to determine whether the scandal was the work of a few rogue officials or evidence of a far larger cartel embedded within Kenya’s maritime logistics sector.

    For Samuel Kairu Njonde, a businessman whose name has repeatedly surfaced in court battles and transport-sector disputes over the past decade, the investigation represents the most serious scrutiny yet of a business empire that has long operated at the centre of East Africa’s lucrative cargo movement industry.

    Whether investigators ultimately establish direct criminal culpability or merely business association remains a matter for the ongoing inquiry. What is already clear, however, is that the unfolding scandal has once again exposed the immense financial risks posed by corruption and systemic weaknesses at one of Africa’s busiest ports.

  • Betika Faces DCI Probe, Directors Arrest and License Revocation Over Massive 29.5 Million Safaricom Customers’ Data Breach

    Betika Faces DCI Probe, Directors Arrest and License Revocation Over Massive 29.5 Million Safaricom Customers’ Data Breach

    The May 13, 2026 High Court judgment in Constitutional Petition E095 of 2026 did not merely settle a civil dispute between a wronged citizen and Safaricom. It detonated a legal and regulatory bomb directly beneath Kenya’s dominant betting empire, Shop and Deliver Limited, trading as Betika, whose co-founders George Mburu and Chris Mwirigi are named by name in the Directorate of Criminal Investigations forensic analysis of WhatsApp communications that is now embedded in the High Court record as established judicial fact.

    The judgment is the beginning. What has followed is a formal, documented criminal complaint filed on May 19, 2026 by Benedict Kabugi Ndungu, the man who first reported the Safaricom data breach to police in 2019, addressed simultaneously to Mohamed I. Amin, the Director of Criminal Investigations at Mazingira Complex, Kiambu Road, and to Peter Maina Karimi, the Director General of the Gambling Regulatory Authority of Kenya at ACK Garden Annex, Bishop Road. That complaint demands criminal investigations against Shop and Deliver Limited trading as Betika, licence numbers BK-0001117 and PG-0001113, and demands the immediate suspension or cancellation of those licences. It is not speculation. It is a formal instrument of accountability, filed at the addresses of the men with the institutional power to act.

    To understand where Betika now stands, one needs only to look at what has already happened to Odibets.

    Andrew Aligula, co-owner of Odibets and the man identified in DCI forensic WhatsApp evidence as ‘Andrew’ in transactions for stolen Safaricom data, has been arrested and dragged into the cells at Gigiri Police Station. The Odibets app crashed for over five hours on the day of his arrest. That is the template. That is what the application of this law looks like. Betika’s founders should study it carefully.

    THE HIGH COURT HAS SPOKEN: WHAT PARAGRAPH 67 ACTUALLY SAYS

    The High Court judgment in Constitutional Petition E095 of 2026, delivered on May 13, 2026, is not ambiguous. Paragraph 67 of that judgment states, in terms that are now part of the public legal record, that the forensic analysis of WhatsApp communications exchanged between Safaricom’s former employees materially reinforces the inference of a sustained and systemic compromise of subscriber data. The court found that the contents of those communications reveal that the impugned subscriber and betting-related data was not confined to isolated or internal access, but was repeatedly disseminated and transmitted to multiple third parties for commercial purposes over an extended period spanning June 2018 to May 2019.

    The judgment goes further. In language that eliminates any ambiguity about who received the stolen data, the High Court found that the communications expressly reference various recipients of the data, including persons or entities identified as ‘Andrew’, ‘Odibet’, ‘the Mburus’, ‘Betika’, ‘Charles’, and ‘the Mule’, among others. That finding is now a judicial pronouncement. It was not made by a journalist, a regulator, or an activist. It was made by a High Court judge, in a formal judgment, on the basis of forensic evidence that Safaricom’s own lawyers introduced into the record as Annexure ATM-3. The evidence that destroys Betika was put before the court by Safaricom itself.

    The scale of what the court has validated is staggering. The DCI forensic report establishes that between June 2018 and May 2019, former Safaricom employees Simon Billy Kinuthia and Brian Wamatu Njoroge extracted and sold the personal data of 29.9 million Safaricom subscribers, with particular focus on the betting profiles of 11.5 million identified punters. The stolen records contained not generic contact information but the forensic architecture of financial vulnerability: full names, National Identity Card numbers, M-Pesa transaction histories, geolocation data at real-time and historical resolution, device identifiers including IMEI numbers, and detailed betting patterns documenting frequency, amounts wagered, and preferred platforms. It was, in the language of one data security expert who reviewed the records, a perfectly assembled targeting database for predatory marketing.

    Betika was not a casual or accidental recipient of stolen data. The forensic record and now the High Court judgment place the company’s name, and the names of its founders Mburu and Mwirigi, directly inside the criminal architecture of the theft. This is not allegation. This is court-validated forensic fact.

    THE ODIBETS BLUEPRINT: WHAT ARREST AND LICENCE SUSPENSION LOOK LIKE

    When observers want to understand the personal consequences that now threaten Betika’s directors, they need only examine what has unfolded with Odibets and its co-owner Andrew Akwesera Aligula, whose name appears in the DCI forensic evidence as ‘Andrew’ in the data transaction records.

    Aligula, a figure who had for years maintained such deliberate invisibility that even many industry insiders were unaware of his controlling role behind the green-and-yellow Odibets brand, has been arrested and held at Gigiri Police Station in Nairobi. The arrest followed directly from the application of the same forensic record that implicates Betika, the same High Court judgment that named him by first name in its findings, and the same post-judgment pressure that is now being channelled through formal criminal complaints filed with the DCI and GRAK. The day of his arrest, the Odibets application went down for over five hours, the operational manifestation of what it means when the architect of a betting empire is in a police cell.

    The arrest of Aligula is not a peripheral event in Betika’s story. It is the directly applicable precedent. The DCI forensic record names both ‘Andrew’ of Odibets and ‘Mburu’ and ‘Betika’ in the same WhatsApp conversation chain. The forensic report describes Betika as the most frequent buyer in the stolen data scheme, returning to purchase multiple separate tranches across the eleven-month criminal conspiracy. If the evidentiary threshold for Aligula’s arrest has been met by his appearance in those records, the question that Betika’s directors must now answer is what distinguishes their exposure from his.

    Beyond Aligula’s arrest, the Gambling Regulatory Authority of Kenya has moved against Odibets with licence action. The company whose director was found in the same forensic chain as Betika’s founders has had its operational continuity threatened by the regulator in a direct demonstration that GRAK is prepared to deploy the licence suspension and revocation powers that the Gambling Control Act, No. 14 of 2025, has now formalised and strengthened. For Betika, the Odibets precedent is not a cautionary tale from a distance. It is the operating manual for what comes next.

    THE CRIMINAL CHARGES: WHAT BETIKA’S DIRECTORS ARE NOW FACING

    The formal complaint filed on May 19, 2026, by Benedict Kabugi Ndungu, drawing on the High Court judgment and the DCI forensic record, lays out with methodical precision the criminal liability that now hangs over Betika, its corporate entity, and its directors. The charges catalogued in that complaint are not speculative. They arise directly from the forensic record that is now part of the court file, validated by judicial findings in the May 13 judgment.

    Handling stolen property under Section 322 of the Penal Code is the first and most direct charge. A person who receives or retains stolen property, knowing or having reason to know it to be stolen, commits a felony. The DCI forensic record establishes that Betika purchased stolen subscriber data on multiple occasions. The involvement of the company’s founders in those transactions, established through the WhatsApp evidence, creates the personal criminal liability that attaches to receipt and retention. Data constitutes property for the purposes of this provision. The betting companies knew or ought to have known the data was unlawfully obtained because, as the forensic record reveals, they were negotiating the purchase of subscriber records in WhatsApp conversations in which the criminal mechanics of the extraction were openly discussed.

    Computer fraud under Section 26 of the Computer Misuse and Cybercrimes Act is the second head of liability. Obtaining economic benefit through unauthorised access to computer data, or through data obtained through such access, is a criminal offence. Betika demonstrably used the stolen subscriber data to conduct targeted marketing to pre-qualified, high-probability gamblers, a commercial benefit extracted directly from the criminal exploitation of Safaricom’s computer systems. The maximum penalty under the Act reaches twenty years imprisonment for the most serious violations.

    Money laundering under Section 3 of the Proceeds of Crime and Anti-Money Laundering Act is the third. The payments made by Betika to the Safaricom employees through the intermediary structure described in the forensic record, payments channelled through third-party individuals referred to in the WhatsApp conversations as ‘mules’ to conceal the identity of the payers and the nature of the transactions, are a textbook layering exercise. The forensic evidence documents specific M-Pesa transfers to named intermediaries, including a KES 170,000 transfer to Billy Githioro, and references payments described as ‘Kshs 11 million’ and ‘Kshs 1 million’ in the context of data transactions. Structuring payments through mules to avoid detection is the classical method that triggers anti-money laundering prosecution.

    Conspiracy to commit a felony under Section 393 of the Penal Code is the fourth. The betting companies, acting through their directors and agents, conspired with the Safaricom employees to acquire stolen data for commercial gain. The sustained multi-month engagement between Betika’s representatives and the criminal sellers, documented in forensic detail in the WhatsApp analysis, satisfies every element of a criminal conspiracy charge: agreement between two or more persons, common criminal purpose, and actions in furtherance of that purpose.

    The complaint against Betika lists four separate criminal offences: handling stolen property, computer fraud carrying up to twenty years imprisonment, money laundering, and conspiracy to commit a felony. These are not the charges of a minor regulatory infraction. They are the charges of a serious criminal enterprise, filed against the company and its directors by name.

    THE LICENCE REVOCATION TRAP: POLICE CLEARANCE THAT CANNOT BE GRANTED

    Betika holds Gambling Regulatory Authority of Kenya licence numbers BK-0001117 and PG-0001113. The Gambling Control Act, No. 14 of 2025, which came into force on August 20, 2025, and under which all operators must now seek licensing, has transformed the regulatory landscape in ways that have created a trap from which Betika, if criminal investigations proceed, cannot escape.

    The Act, under Section 7(g), mandates GRAK to conduct security checks, vetting and due diligence in respect of gambling activities, licensees, their shareholders, directors, beneficial owners and staff. This is not a discretionary provision. It is a statutory obligation imposed on the regulator. The fit-and-proper test under the new Act is not the limited entity-level assessment that obtained under the old Betting, Lotteries and Gaming Act. It requires individual-level vetting of all key persons, including directors, senior managers, significant shareholders, and beneficial owners. The assessment criteria explicitly include verification of any past convictions, regulatory sanctions, or involvement in activities suggesting dishonesty or lack of probity.

    Here is the trap that now closes around George Mburu and Chris Mwirigi. A gambling licence under Kenyan law, both under the transitional provisions of the existing framework and under the full operation of the Gambling Control Act, requires that directors of licensed entities obtain and maintain police clearance certificates demonstrating the absence of active criminal proceedings or charges. A National Police Service Certificate of Good Conduct is a mandatory component of any fitness assessment for gambling sector principals. It is issued by the Directorate of Criminal Investigations. The same body to which the formal criminal complaint against Betika and its directors has been filed. The same body conducting the criminal investigation.

    When George Mburu and Chris Mwirigi apply for police clearance, as they must to maintain their fitness as directors of a licensed gambling entity, the DCI will be required to assess their status against active criminal proceedings. A director who is under investigation for computer fraud, handling stolen property, money laundering, and conspiracy cannot receive a clean certificate of good conduct. A director who has been arrested, as Andrew Aligula of Odibets has demonstrated, cannot maintain the regulatory standing necessary to direct a licensed gambling entity. The criminal investigation is not a separate track from the licence. It is directly embedded in the licence’s continuing validity.

    The Gambling Control Act further provides that GRAK may refuse to grant or renew a licence if the information contained in the application is false or untrue in any material particulars, or if the application does not meet any of the requirements for issuance or renewal. If Betika’s directors have represented themselves as fit and proper persons without disclosing the DCI forensic findings or the High Court judgment that places them in the record of a criminal enterprise, that representation was materially false. The consequence under the Act is licence refusal or revocation.

    SEVEN YEARS OF INSTITUTIONAL SILENCE, NOW EXPLODED

    The formal complaint filed with the DCI and GRAK on May 19, 2026, puts in writing what the evidence has demanded for years. Seven years have elapsed since Kinuthia and Wamatu were arrested in criminal proceedings in Criminal Case No. 962 of 2019. In those seven years, the DCI compiled a forensic report naming Betika as the most frequent buyer of stolen data, naming Odibets, naming Kwikbet, and naming individuals including ‘Mburu’ and ‘Andrew’ in the WhatsApp transaction evidence. In those seven years, not one official of Betika, Odibets, or Kwikbet was summoned, questioned, charged, or prosecuted.

    The complaint addresses this institutional failure with bluntness. It characterises the DCI’s conduct as selective investigation, targeting the low-level employees who sold the data while deliberately shielding the corporate beneficiaries of the criminal enterprise. It observes that Charles Njuguna Kimani, who admitted in a witness statement that he received the stolen data, downloaded it, and actively marketed it to betting companies, has never been charged. No forensic audit has been conducted on the banking records of Betika to trace the flow of funds from the company to the Safaricom employees through intermediaries. No investigation has examined how Betika structured its payments to avoid detection. No action has compelled the company to produce records of how it acquired, stored, and utilised the stolen subscriber data.

    The High Court judgment of May 13, 2026 has ended the plausibility of that silence. Paragraph 67 is now part of the public legal record. The reference to ‘Betika’, ‘the Mburus’, ‘Andrew’, and ‘Odibet’ in the judicial findings is not sealed, not confidential, and not subject to any restriction on its publication or its use by regulators, prosecutors, or law enforcement. The DCI cannot credibly maintain an investigation into the sellers of stolen data while declining to investigate the buyers when a High Court judgment has confirmed the buyers’ identities in terms that are part of the permanent legal record.

    The DCI compiled forensic evidence naming Betika’s founders and kept it in the file for seven years without acting. The High Court has now incorporated that evidence into a public judgment. The complaint filed on May 19 tells the DCI exactly what that means: the file must be opened, the men must be questioned, and the company must face the consequences of what the court has confirmed.

    ETHIOPIA ADDS ANOTHER DIMENSION OF HORROR

    As if the domestic criminal exposure were not sufficient to constitute a full-scale corporate emergency, Betika’s international regulatory record has added a dimension of exposure that compounds every question about the company’s fitness to hold any licence anywhere.

    In November 2025, the Ethiopian Lottery Service suspended the licences of twenty-two sports betting companies effective November 25, 2025, following a multi-agency investigation involving the National Intelligence and Security Service, the Financial Security Service, and the Ethiopian Federal Police. Betika, operating through its local entity Addis Telco Services Share Company, was among the suspended firms.

    The Ethiopian authorities allege that the suspended firms concealed more than 100 billion birr, equivalent to approximately Sh83.5 billion at prevailing exchange rates, in revenue that should have been remitted to the government as tax. The investigation found evidence of systematic under-reporting and diversion of funds, with authorities describing methods including complex payment chains, foreign-hosted financial systems, and hawala-type structures designed to evade regulatory detection. Twenty-four individuals associated with the suspended firms were arrested as part of the criminal probe. The Ethiopian Lottery Service confirmed that licences will be revoked within a specified period unless the investigation produces findings that allow reinstatement.

    Betika’s response was a notice on its Ethiopian website reading: ‘Dear customers, we would like to inform you that your favourite betting partner, Betika, has been suspended for an indefinite period. We will soon be back with improved odds, faster service, and a more efficient operation.’ The company has made no substantive public statement addressing the allegations of revenue concealment. It has not published any response to the Ethiopian government’s figures, has not initiated legal challenge to the suspension, and has said nothing publicly that would allow an independent observer to assess the credibility of the allegations.

    The methods described by Ethiopian authorities, complex payment chains, foreign-hosted systems, and hawala-type transfers to obscure the flow of funds, are precisely the financial patterns that the Kenyan anti-money laundering framework and the Financial Reporting Centre are statutorily required to investigate when they appear in the operations of a Kenya-registered entity. The question of whether Betika’s Kenya operations have employed similar revenue concealment structures is not a question that the company’s silence can answer.

    THE LICENCE NUMBERS, THE CORPORATE REGISTRY, AND THE MEN WHO MUST ANSWER

    The formal complaint against Betika targets the company and its directors with specificity. The corporate record is unambiguous. Shop and Deliver Limited holds GRAK licence numbers BK-0001117 and PG-0001113. Its company registration number is CPR/2010/37880, with registered offices at Beverly Court, Lenana Road, Nairobi. Chris Mwirigi Kaumbuthu is listed as a director and the controlling individual shareholder. Roamtech Solutions Limited, co-founded by George Mburu, is simultaneously a shareholder and a director of Shop and Deliver, embedding Mburu’s beneficial interest in the company’s ownership and control structure.

    George Mburu describes himself professionally as a technopreneur and co-founder of both Roamtech Solutions Limited and Betika.com. His professional trajectory included senior network and infrastructure roles at Cellulant Group Limited and Essar Telecom Kenya before he built a company that is now Kenya’s dominant betting platform. Chris Mwirigi Kaumbuthu’s background includes stints as Product Development Engineer at Cellulant, Head of Technology at Mtech Communications Kenya, and Web Application Developer at Yellow Pages Kenya. Both men are technologists by training. Both men understood the mobile telecommunications ecosystem, including Safaricom’s subscriber data architecture, with professional intimacy.

    Both men are named in the DCI forensic report. ‘Mburu’ appears by name in WhatsApp conversations through which the stolen subscriber data was negotiated and sold. ‘Betika’ is named as an entity. The WhatsApp message dated November 15, 2018, sent by Brian Wamatu, reads simply: ‘Mburu wants stats’. That four-word message, confirmed as authentic by the DCI forensic analysis and now validated by the High Court, is the most legally dangerous sentence in Betika’s corporate history. It places the founder’s name in the physical possession of the criminal sellers, at the moment of a data transaction, in a criminal enterprise that covered 29.5 million Kenyans’ most private financial information.

    The current CEO, Robinson Mutua Mutava, appointed in July 2024 after serving as head of finance from the company’s launch in 2016, deputy managing director from January 2023, and managing director before the group CEO elevation, carries his own questions to answer. He was present in the company’s finance function throughout the period in which Betika was paying for stolen subscriber data through intermediary structures. The forensic record documents payments flowing from Betika’s direction. As head of finance at the time, the question of what he knew, when he knew it, and what approvals he processed, is not a question that his subsequent elevation to CEO forecloses.

    ‘Mburu wants stats.’ Those three words, captured in a DCI forensic analysis, validated by a High Court judgment, and now cited in a formal criminal complaint filed with the Director of Criminal Investigations, are the sentence that could end Betika’s licence, its founders’ freedom, and its market dominance in a single enforcement action. Four words. Eleven years of empire. One reckoning.

    THE STOLEN DATA IS STILL OUT THERE

    One of the most alarming dimensions of the formal complaint filed on May 19, 2026, is its assertion, grounded in Safaricom’s own court admissions, that the stolen data has never been retrieved. Safaricom admitted in its pleadings in High Court Civil Suit No. 194 of 2019, and through the replying affidavits of its Senior Manager-Litigation Daniel Ndaba before the court, that it has been unable to secure, retrieve, or delete the subscriber data uploaded to Google Drive or downloaded onto the personal laptops and devices of its former employees and the third parties to whom it was sold.

    The data sold to Betika was never recovered. The betting patterns, M-Pesa histories, geolocation records, and national identity numbers of 11.5 million Kenyan gamblers remain, to this date, in the possession of unauthorised third parties. If Betika retains that data on its systems, as the forensic record suggests it received and utilised, the company is in continuing violation of the Data Protection Act, 2019, every single day it retains that data. The Office of the Data Protection Commissioner has jurisdiction to impose administrative fines of up to Sh5 million per violation or two percent of annual turnover, whichever is higher, under the current framework.

    The complaint characterises this continuing retention as a live ongoing data breach affecting 29.5 million Safaricom subscribers to perpetual risk, not a historical event with a fixed point of resolution. The harm is not spent. It continues. And for as long as it continues, the daily commission of violations of the Data Protection Act, Article 31(c) and (d) of the Constitution protecting the right to privacy, Article 28 protecting human dignity, and Article 46 guaranteeing consumer protection rights, accumulates against Betika as an active wrongdoer.

    THE BETTING COMPANY THAT BUILT KENYA’S GAMBLING ADDICTION ON STOLEN MAPS OF VULNERABILITY

    There is a dimension of Betika’s conduct that goes beyond the legal framework and into the moral reckoning that the evidence demands. The stolen Safaricom subscriber data was not merely a business intelligence asset. It was a map of which Kenyans were the most financially vulnerable, the most compulsively engaged with gambling, the most likely to respond to targeted offers, and the most likely to lose money they could not afford to lose.

    The stolen records documented betting patterns, including frequency, amounts wagered, preferred platforms, and time-of-day activity, for 11.5 million identified gamblers. Combined with geolocation data identifying the counties and localities of those gamblers, M-Pesa transaction histories revealing their financial circumstances, and demographic data identifying their age and gender, the database constituted the most powerful predatory marketing tool imaginable. A company in possession of that data knew not only who to target but precisely how, when, and where to target them, calibrated to the moment of maximum financial and psychological susceptibility.

    This is the company that has sponsored AFC Leopards, Police FC, and Sofapaka FC. That funded James Kagambi’s Mount Everest summit. That launched the Sh200 million jackpot in 2022. That positioned itself as Kenya’s homegrown success story of digital entrepreneurship. The brand is polished. The community investment is real. The sponsorships generated genuine goodwill. But beneath every billboard, every jersey, and every jackpot announcement, what the forensic evidence now makes impossible to deny is that the commercial engine powering all of it was built, in substantial part, on the stolen private data of the Kenyans who were betting against the house.

    WHAT THE DCI AND GRAK MUST NOW DO

    The formal complaint filed on May 19, 2026, addressed to the Director of Criminal Investigations and the Director General of GRAK, does not merely ask for action. It provides the legal framework under which action is mandatory. Section 35(1) of the National Police Service Act, 2011 obligates the DCI to investigate any matter that may constitute a criminal offence. Section 47A of the Anti-Money Laundering and Combating of Terrorism Financing Act mandates investigation of financial transactions suspected to involve proceeds of crime. Article 157(4) of the Constitution empowers the Director of Public Prosecutions to direct the DCI to investigate any matter.

    The Gambling Control Act, No. 14 of 2025, Section 7(g), requires GRAK to conduct security checks and due diligence on licensees, their shareholders, directors, and beneficial owners. This is not permissive. It is a mandatory statutory function. If GRAK has not conducted security checks on George Mburu and Chris Mwirigi in the context of the DCI forensic evidence that names them in a criminal conspiracy to purchase stolen data, it is in breach of its own statutory obligations. The complaint makes this explicit.

    The complaint demands the immediate suspension or cancellation of licence numbers BK-0001117 and PG-0001113 issued to Shop and Deliver Limited trading as Betika. It demands the initiation of criminal proceedings against the company and its named directors. It demands a forensic audit of Betika’s banking records to trace payments made to the Safaricom employees through intermediary structures. And it demands that GRAK explain why it renewed Betika’s licence for the 2025/2026 financial year without any reference to the DCI forensic evidence establishing the company as a serial buyer of stolen subscriber data.

    GRAK renewed Betika’s licence knowing that the DCI forensic report naming the company existed. It renewed Odibets’ licence knowing the same evidence implicated that company. Aligula is now in a police cell. The Odibets app crashed when he was arrested. That is what accountability looks like when it finally arrives. The complaint filed on May 19 is the mechanism that brings it to Betika’s door.

    BETIKA’S PR NIGHTMARE IS JUST BEGINNING

    For a company that has spent years cultivating a brand of Kenyan entrepreneurial pride, the convergence of the High Court judgment, the formal criminal complaint, the Odibets arrest precedent, the Ethiopian suspension, and the systematic exposure of its founders in the DCI forensic record constitutes a public relations catastrophe with no available exit.

    Betika cannot dispute the High Court judgment. It is final, public, and rendered by the institution whose findings cannot be walked back by a company statement or a communications consultant. George Mburu and Chris Mwirigi cannot explain away ‘Mburu wants stats’ because the sentence exists in a forensic record that a High Court judge has incorporated into a published judgment available to every regulator, journalist, advertiser, banker, and corporate partner with whom Betika conducts business.

    The company’s banking relationships are at risk. Every bank with which Shop and Deliver Limited maintains accounts is now on constructive notice of the High Court findings, the ongoing criminal complaint, and the Ethiopian suspension. The Banking Act and the Proceeds of Crime and Anti-Money Laundering Act impose obligations on financial institutions to report suspicious transactions and to assess the criminal exposure of entities with which they maintain relationships. A bank that continues to provide unrestricted banking services to a company whose directors have been named in a criminal complaint for money laundering, handling stolen property, and conspiracy, without conducting enhanced due diligence and reporting to the Financial Reporting Centre, is itself potentially in breach of its statutory obligations.

    The company’s advertising relationships are similarly exposed. Broadcasters and publishers that continue to carry Betika’s advertising while the company is under criminal investigation and while its directors’ fitness is formally in question may find themselves the subject of questions about the source of the advertising revenue they are accepting. Advertisers who associate their brands with Betika’s sports sponsorships are now associating with a company whose founders are named in a High Court judgment as recipients of stolen citizen data.

    And the company’s millions of users, the bettors who have already been defrauding of winnings, whose accounts have been frozen after large wins in the pattern documented in the Kenya Consumer Rights Alliance’s formal petition to the regulator, whose social media hashtag BetikaPayUs has trended repeatedly, now know something they did not know before: the company targeting them for gambling expenditure acquired a forensic map of their financial vulnerability through a criminal conspiracy, used it to build the marketing intelligence that drew them to the platform, and has retained the government’s own evidence of that conduct for seven years in the hope that institutional silence would protect it.

    That silence has ended. The May 13 judgment ended it. The arrest of Andrew Aligula ended it for Odibets. The formal criminal complaint filed on May 19 has begun the countdown for Betika.

  • The Kenyan in the Room: How Jeremy Gisemba Became a Principal in South Sudan’s Biggest Tax Heist

    The Kenyan in the Room: How Jeremy Gisemba Became a Principal in South Sudan’s Biggest Tax Heist

    NAIROBI / JUBA — In September 2019, as South Sudan was taking its first cautious steps toward mobile money and digital payments, a Kenyan businessman named Jeremy Gisemba sat down with reporters to voice concern about financial crime. He was serving at the time as business development and marketing director for LEM International, an Eritrean-owned trading firm embedded in Juba’s commercial ecosystem. His message was a warning. He told journalists that he did not feel there were currently enough controls in place on mobile money, and that all parties involved need to share anti-money laundering mechanisms, including knowing where the source of the money is coming from.

    Within the same twelve-month window, Crawford Capital Ltd. was being contracted by South Sudan’s Ministry of ICT as the exclusive provider of the country’s e-Government services without competitive tender, with the backing of the National Security Service, and on terms the UN Commission on Human Rights in South Sudan would later describe as unjustifiable and indicative of abuse of public office. Jeremy Gisemba would acquire a 26 percent stake in Crawford Capital Ltd. and a 23.4 percent stake in CapitalPay Ltd., the operational platform through which billions in South Sudanese public revenues would flow and from which his company took three-quarters of every dollar before the government saw a cent.

    The man who publicly worried about anti-money laundering controls became a principal shareholder in the company that, on May 12, 2026, the United States government sanctioned for siphoning money from South Sudan’s treasury and stealing foreign assistance funds intended to support the South Sudanese people. Jeremy Gisemba, private, unfamiliar to most in Nairobi, and almost invisible in the public record of this scandal, is now formally part of it.

    WHO IS JEREMY GISEMBA

    Gisemba is not a household name in Kenya or South Sudan. He has cultivated that anonymity deliberately. Unlike majority shareholder Garang Mayom Kuoc Malek — whose face appears in organograms circulated by accountability researchers, whose political lineage as the son of a former deputy minister is documented in UN reports, and who serves as CEO and Managing Director of Crawford/CapitalPay — Gisemba operated in the background. No press releases. No LinkedIn profile generating headlines. No government ministerial appointments connecting him publicly to the scheme.

    What the public record does show is a Kenyan national with years of direct commercial experience in South Sudan’s emerging digital economy before he took his stake in Crawford. His 2019 role at LEM International placed him precisely at the intersection of South Sudan’s financial system and its nascent digital payment infrastructure — the same intersection Crawford would occupy exclusively from the same year. He was not an outsider who stumbled into this deal. He was an insider who understood the terrain.

    The UN Commission’s September 2025 report, Plundering a Nation: How Rampant Corruption Unleashed a Human Rights Crisis in South Sudan, documents the full ownership structure of Crawford Capital Ltd. with clinical precision. Garang Mayom Kuoc Malek holds 68 percent of Crawford Capital and 61.2 percent of CapitalPay. Gisemba holds 26 percent of Crawford Capital and 23.4 percent of CapitalPay. Ruey Majok Guandong son of South Sudan’s ambassador to Turkey held 50 percent at incorporation before the structure was restructured. The Commission notes that the company’s financial beneficiaries extend further to include political elites and their close relatives, including documented links to Adut Salva Kiir, the President’s daughter.

    “The company is owned and run by family members of national political elites. At least 12 government ministries and entities have enabled Crawford’s corrupt activities.” — UN Commission on Human Rights in South Sudan, September 2025

    Gisemba’s stake was not a passive inheritance. He is the second-largest shareholder in both entities. At 26 percent of Crawford Capital and 23.4 percent of CapitalPay, his equity position entitled him to a proportional share of every pound, dollar, and South Sudanese currency unit that Crawford extracted under its 75-25 revenue contract with the government. Every crude oil accreditation fee. Every e-visa charge. Every business permit processed through CapitalPay’s portals. Every levy imposed on the humanitarian agencies that the UN found were being taxed in violation of international law.

    THE SCHEME HE BOUGHT INTO

    To understand Gisemba’s exposure, it is necessary to understand exactly what Crawford Capital did. Beginning with its 2019 contract with the Ministry of ICT a contract the UN Commission found was awarded without competitive tender and endorsed by the National Security Service’s then-Director General of the Internal Security Bureau, Akol Koor Kuc — Crawford was given exclusive control over South Sudan’s e-Government revenue collection infrastructure.

    The contract gave Crawford 75 percent of all revenues passing through its platforms. The remaining 25 percent went to the government. This was not a contractor’s service fee. It was a permanent structural diversion of public revenue into private hands. Revenues were held in Crawford’s own private bank accounts rather than channeled through the national treasury. The South Sudan Revenue Authority, which should have been the institution overseeing all of this, was documented by the UN Commission as complicit allowing Crawford’s representatives to collect and hold public funds directly, while the Authority itself was withholding 14.5 percent of collections far in excess of its legal 2 percent cap.

    75%  Crawford’s share of every rand, pound and dollar of public revenue it collected

    26%  Gisemba’s ownership stake in Crawford Capital Ltd.

    192 of 192  UN Human Development Index ranking — South Sudan

    $25.2 billion  Oil inflows since independence, before this scandal

    In September 2023, Crawford collected fees from international crude oil buyers under a mandatory Electronic Crude Oil Accreditation Permit system. In one documented transaction, Crawford pocketed more than 1.1 million dollars. The Ministry of ICT received approximately 367,000 dollars. In 2022, Crawford received a 10 million dollar advance for purported Ebola preparedness — equal to 80 percent of the entire Ministry of Health’s annual spending — despite the company having already failed on a COVID-19 related project.

    In 2024, Crawford implemented a fuel import levy that was extended, in violation of international law, to humanitarian organisations, UN agencies, and diplomatic missions. The World Food Programme suspended critical food aid distributions. The UN Humanitarian Coordinator for South Sudan described the situation as a direct impediment to saving lives. The levy was eventually withdrawn following international complaints, but not before significant damage had been done to operations feeding millions of acutely food-insecure people in one of the hungriest countries on earth.

    Jeremy Gisemba owned a quarter of the company doing all of this.

    THE REGIONAL DIMENSION: WHY A KENYAN BELONGS IN THIS STORY

    Gisemba’s nationality is not incidental to the analysis. Crawford Capital is registered in the United Kingdom. Its principals include British-linked directors alongside South Sudanese-UK dual nationals. The Kenyan Gisemba provides a third jurisdictional thread — East African commercial connectivity that gave the enterprise regional reach and, critically, the plausibility of a legitimate multi-national business operation rather than a nakedly domestic patronage vehicle.

    This matters for accountability purposes. Kenya’s Assets Recovery Agency and Directorate of Criminal Investigations have jurisdiction over Kenyan nationals engaged in cross-border financial crimes. The Financial Reporting Centre, Kenya’s anti-money laundering intelligence unit, is legally empowered to investigate suspicious financial flows involving Kenyan citizens operating abroad. The question of whether any portion of Crawford’s revenue stream the company’s 75 percent share of South Sudanese public taxes, fees, and levies passed through Kenyan bank accounts, Kenyan-registered entities, or Kenyan commercial infrastructure is now a matter of pressing national interest for Nairobi.

    The US sanctions on Crawford Capital do not name Gisemba individually. But they name the company in which he is the second-largest shareholder, for conduct in which that company’s revenues were generated by the scheme he co-owned. Secondary exposure under sanctions regimes is a well-established legal reality. Any financial institution that continues to process transactions for Crawford Capital, CapitalPay, or their associated entities including transactions involving their shareholders does so at risk of sanctions violation.

    THE POLITICAL SHIELD AND WHY IT CANNOT PROTECT GISEMBA

    Crawford Capital’s immunity within South Sudan has been underwritten at the very highest levels of the Juba government. When Trade and Industry Minister Atong Kuol Manyang Juuk issued a 90-day review directive in March 2026 citing technical failures, unreliable connectivity, and disruptions to legitimate trade operations she was overruled within days by Vice President James Wani Igga, who invoked a Council of Ministers resolution presided over by President Salva Kiir himself. The minister reversed her directive within eight days. The episode confirmed what accountability advocates had long suspected: Crawford operates under direct presidential protection.

    That protection is rooted in ownership. The UN Commission documented that the company’s founders, Garang Malek and Ruey Guandong, previously formed other companies with Mayar Salva Kiir, the President’s son. Investigative reporting by Radio Tamazuj has established that CapitalPay is widely believed to be linked to Adut Salva Kiir, the President’s daughter and Senior Presidential Envoy, whose image appears at the apex of the network structure documented by accountability researchers.

    But presidential protection in Juba does not translate into immunity before the United States Treasury, the United Nations Human Rights Council, the United Kingdom’s Serious Fraud Office, or Kenya’s own law enforcement institutions. Gisemba’s protection is political. His exposure is legal. Those are not the same shield.

    “The corrupt activities of these individuals robbed critical resources from a war-torn country.” — US Treasury, on earlier South Sudan sanctions designations, a template now applied to Crawford Capital

    THE HUMAN COST OF A 26 PERCENT STAKE

    Seven point seven million South Sudanese face acute food insecurity. Two point three million children are acutely malnourished. The entire South Sudanese health sector received less than 0.9 percent of the national budget between 2020 and 2024. The Ministry of Agriculture received less than 0.4 percent. The government spent 2.57 dollars per school-age child on education in 2023 to 2024. More than four million South Sudanese are internally displaced or living as refugees in neighbouring countries.

    These numbers exist in the same document the UN Commission’s 101-page September 2025 report — as the ownership structure of Crawford Capital Ltd. They are not separate stories. Crawford’s privatisation of South Sudan’s non-oil revenue streams is one thread in the systematic looting that has produced these outcomes. Jeremy Gisemba’s 26 percent stake makes him a shareholder in that thread.

    The man who in 2019 told journalists that people need to know where the money is coming from now faces a version of the same question directed at him. Where did Crawford Capital’s revenues come from? They came from South Sudanese taxpayers, crude oil traders, humanitarian organisations, businesses seeking permits, and citizens applying for visas at 75 cents on every dollar, before the government saw its quarter. And where did the proceeds of Gisemba’s 26 percent equity go? That is the question Nairobi, London, Washington, and Juba now have cause to ask him to answer.

  • The Karen Predator: Agnes Kagure Has Spent A decade Trying To Steal A Dead Briton’s Land, And Now Betting On A Technicality Loophole

    The Karen Predator: Agnes Kagure Has Spent A decade Trying To Steal A Dead Briton’s Land, And Now Betting On A Technicality Loophole

    There is a peculiar industry that has flourished in Kenya’s prime real estate belts, particularly in Karen, Runda, Lavington, and the corridor bordering the Ngong Forest. It preys on a specific category of property owner: the foreign national, the elderly absentee landlord, the dying man with no local family, the deceased with a complicated estate. The predators identify the land, manufacture documents establishing a prior purchase or gift, move in physically while litigation crawls, and then exploit every procedural crack in the legal system to outlast the estate’s legitimate representatives. They are patient, well-connected, and practiced at using the police, the lands registry, and the courts simultaneously as weapons and shields.

    Agnes Kariuki Kagure, who prefers the polished shorthand ‘Agnes Kagure’ for her political branding, has become the most prominent face of this playbook in Nairobi’s legal and land circles. Across more than a decade, her name has appeared at the centre of multiple land disputes, each bearing the same hallmarks: a deceased or elderly owner, documents of suspicious provenance, allegations of forgery, police involvement on her side of the fence, and a determination to keep litigation alive long after courts have ruled against her. The most audacious of these battles concerns a six-acre estate in Karen along Ushirika Road, bordering the Ngong Forest, that once belonged to Roger Bryan Robson, a childless British national who made Kenya his permanent home until his death on August 8, 2012. More than thirteen years after Robson died, Kagure is still fighting for land that a High Court has told her she never bought, that Robson’s own family has sworn was never sold, and that a judge declared was clearly intended for wildlife conservation and charity.

    The latest chapter, reported in late May 2026, involves a courtroom manoeuvre that encapsulates everything about how this playbook works. Kagure’s lawyer, Conrad Maloba, extracted an admission from Robson’s estate executor, Guy Spencer Elms, that neither the will nor the associated title deeds had been fully certified by the relevant authorities as Kenyan succession law demands. In the theatre of cross-examination, the trap was elegantly laid. But what Maloba is carefully not highlighting, and what no headline has yet fully exposed, is the breathtaking audacity of that argument: a woman whose own documents have been denounced as forgeries by witnesses, judges, and forensic examiners across multiple proceedings is now trying to benefit from procedural shortfalls in the legitimate executor’s paperwork. The mouse is arguing that the cat has untidy whiskers.

    A woman whose documents have been denounced as forgeries by witnesses, judges and forensic examiners is now trying to benefit from procedural shortfalls in the legitimate executor’s paperwork.

    ROGER BRYAN ROBSON: THE MAN AND THE ESTATE

    Roger Bryan Robson was no eccentric hermit stumbled upon by a predator. He was a British businessman of means who had lived in Kenya long enough to own substantial property, accumulate legal affairs managed by a qualified Kenyan advocate, and make considered decisions about his estate while in full possession of his faculties. On March 24, 1997, he walked into the office of his trusted lawyer, Guy Spencer Elms, and executed a will. The document was witnessed by two persons and drafted by an advocate, satisfying every formal requirement Kenyan law imposes on testamentary instruments.

    He was explicit in his directions: his six-acre Karen plot, identified as LR No. 2327/10 and LR No. 2327/117, and a block of Upper Hill apartments were to be sold upon his death, with proceeds distributed among his nephew, the Kenya Wildlife Service, the Kenya Forest Service, and an educational charity. He appointed Elms and a second executor, Sean Battye, to carry this out. Battye eventually left Kenya and renounced his executorship, leaving Elms solely responsible. Robson’s health declined in his final years. Witnesses who appeared before Justice Maureen Odero during the extended succession hearing described a man who by 2011 was frail, with hand tremors that made his signature appear unsteady and jerky. Lawyer David Michuki, who represented Robson in separate rate disputes with the Nairobi City Council as recently as 2011, told the court that the signatures Kagure produced on her purported sale documents did not resemble Robson’s genuine signature. He was blunt: the photo on her conveyance document was not even of the deceased.

    On August 5, 2012, Robson was taken to Nairobi West Hospital by a man named Jackson Mulinge. He died three days later, childless, his estate intact. His brother, Michael Fairfax Robson, appearing by video link from the United Kingdom during the protracted proceedings, told the court unequivocally that between January 2011 and the day his brother died, Roger remained in possession of all his land and entered into no agreement to sell any of it to anyone. A handwritten letter Robson sent his brother in March 2011, the very period Kagure claims a sale was executed, contained no mention of any transaction with a Nairobi businesswoman.

    THE CLAIM THAT CAME FROM NOWHERE

    Kagure’s account of how she came to own Roger Robson’s Karen land has never been supported by a single piece of independently verifiable evidence. She maintains she purchased parcels in Karen from Robson in November 2011 for Sh100 million, making her the legitimate owner of land that, under her account, Robson simply forgot to mention in his will, to his brother, to his lawyer, or to anyone else in any documented form. She produced documents purporting to show a sale agreement. The estate said the signatures on those documents were not Robson’s.

    In one of the most telling exchanges during the trial before Justice Odero, Kagure’s conveyance documents were placed before David Michuki. He had represented Robson himself in his final years and knew his signature intimately. Michuki said the signature on Kagure’s documents did not look like Robson’s. The photograph affixed to the document, he added, was not of the man he knew. A police forensic examiner, Chief Inspector Susan Wanjiru, told the court that signatures on the will appeared to come from different individuals. The defence’s own expert, forensic document examiner Jacob Oduor, told the High Court in 2022 that he had examined Robson’s known signatures and found no evidence of forgery on the genuine will.

    What the evidence could not accommodate was Kagure’s total inability to produce a payment trail. Sh100 million paid in 2011 to a British businessman in Kenya would have generated a bank transaction, a money transfer record, a stamp duty receipt, a valuation report, something. Courts heard no such evidence. Robson’s estate never received or acknowledged any such payment. The Karen property remained encumbered by a bank charge during Robson’s lifetime, a fact Elms pointed out, which by itself would have made any outright cash transfer of title legally impossible without the bank’s express release.

    Courts heard no payment trail. No bank record. No stamp duty receipt. No valuation. Just documents bearing what witnesses say are not Robson’s signatures.

    THE PHYSICAL INVASION AND THE POLICE’S ROLE

    While litigation was being prepared, Kagure was not content to wait for courts. Elms appeared before Justice Mary Gitumbi in 2015 and told the court what had happened at the Karen property. Kagure, he said, had hired men who arrived at Ushirika Road accompanied by police officers. They ejected the estate’s caretaker. Then construction of a perimeter wall began around the six-acre estate. Justice Gitumbi issued an injunction barring Kagure and her agents from laying claim to, encroaching upon, trespassing on, or otherwise dealing with the property. The wall went up anyway.

    When Elms subsequently visited the property, he found it fenced and manned by individuals who prevented him, the court-recognised personal representative of the estate, from entering land he was legally charged with protecting. A subsequent ruling by Justice Lucy Njuguna went even further, making an observation that should have triggered institutional response but largely did not. The judge found that police were actively aiding fraudsters in attempts to dispossess Elms of the land. Police escorting people conducting what a court would eventually find to be a fraudulent property seizure. Officers of the law enabling exactly what the law prohibits. That explosive finding passed with minimal public accountability. Kagure faced no criminal charges for the physical invasion. No police officer faced discipline for facilitating it.

    A SYNDICATE AND ITS METHOD

    What happened at Ushirika Road in Karen follows a recognisable operational template that investigators, land lawyers, and property registrars privately describe as an organised acquisition playbook. It works in phases.

    Phase one is target selection. Vulnerable estates are identified through a network of informants that includes hospital workers, estate agents, court clerks, and registry insiders who can flag properties with probate delays, foreign ownership, or absent heirs. Properties bordering forests or national parks attract premium interest because supply is permanently constrained.

    Phase two is document manufacture. This is where rogue advocates, complicit notaries, and registry insiders become essential. A backdated sale agreement is drafted, typically predating the owner’s death by a year or two to avoid obvious impossibility. The deceased’s signature is replicated using samples obtained from genuine documents held at the lands registry or in court files. A power of attorney, also backdated, may be manufactured to add a veneer of authority. Stamp duty receipts can be counterfeited or, in more sophisticated operations, genuine stamps obtained through bribed officials. Witnesses to the purported transaction are recruited, sometimes people who share surnames with the deceased’s associates.

    Phase three is registration. The title is transferred at the lands registry using the manufactured documents. Where complicit registry officials are involved, the transfer is processed without scrutiny. Once a questionable title is on the register, it carries the presumption of legality that the Land Registration Act confers on registered titles, placing the burden of disproving it on whoever challenges it.

    Phase four is physical occupation. The grabber moves in, typically using hired muscle with a veneer of legal authority from the questionable title. Police connections matter enormously here. A police-assisted occupation is significantly harder to dislodge than a purely private trespass, because any counter-force immediately becomes a public order problem rather than a civil trespass matter.

    Phase five is legal attrition. The legitimate estate files suit. The grabber files a counter-suit, typically alleging that the estate’s documents are themselves forgeries. Criminal complaints are filed against the legitimate executor. The DCI investigates. Forensic reports are disputed. The DPP files charges. The High Court’s Family and Succession Division, the Environment and Land Court, and the magistrates’ courts all become active simultaneously. Each thread of litigation takes years. Court backlogs in Kenya’s property divisions routinely stretch to a decade or more.

    Phase six is the technicality harvest. After years of failed frontal assaults, syndicate lawyers mine the estate’s procedural history for formal defects. Did the will get certified by every required authority? Was the grant of probate stamped by the correct office? Were title deeds transmitted through every step of the succession process without a single procedural lapse? In a complex probate spanning a decade, across multiple court divisions, with a cast of executors who come and go, the probability of finding at least one procedural gap approaches certainty. That gap, however minor relative to the substance of the case, becomes the escape hatch.

    In a complex probate spanning a decade, the probability of finding at least one procedural gap approaches certainty. That gap becomes the escape hatch.

    THE CERTIFICATION TRAP: WHAT MALOBA IS NOT SAYING

    At the hearing reported on May 27, 2026, Maloba drew from Elms an admission that neither Robson’s will nor the associated title deeds had been fully certified by the relevant authorities as Kenyan succession law demands. Under the Law of Succession Act and the Land Registration Act, a will must be probated through the High Court with a formal grant, and titles passing through an estate require a chain of transmission documents, death certificates, and official endorsements before they are fully regularised in the lands register. If those steps were not completed to the letter, Maloba’s argument runs, the estate’s documents are fatally defective, potentially invalidating Elms’s standing entirely.

    The argument is technically creative. Courts do take succession formalities seriously, and incomplete probate documentation can create genuine complications. What Maloba is carefully not highlighting, however, is that the same technical scrutiny applied to Kagure’s own documents would obliterate her claim entirely. She has produced no probated purchase agreement. She has produced no independently verified payment record. She has produced documents that forensic experts and two of Robson’s own advocates told courts do not bear his genuine signature. Justice Hillary Chemitei, in a 33-page judgment delivered in June 2025, found no shred of evidence that Robson was coerced, that the will was properly executed and witnessed, and that Kagure’s claim had no factual foundation.

    That judgment was supposed to end it. The Environment and Land Court was directed to handle the residual title questions. But the criminal proceedings against Elms, which Kagure’s original complaint set in motion in 2017, remain alive, and the certification argument is now being pressed in what appears to be a parallel track designed to either force a settlement or create enough procedural chaos to make the estate’s position untenable.

    THE PERSECUTION OF GUY SPENCER ELMS

    Senior Lawyer Guy Spencer Elm giving his witness testimony
    Senior Lawyer Guy Spencer Elm giving his witness testimony on 27 May, 2026.

    Guy Spencer Elms has spent nearly a decade as a criminal defendant for doing his job. In 2017, then-Director of Public Prosecutions Keriako Tobiko directed his arrest on charges that he had forged Robson’s will and power of attorney, fraudulently obtaining letters of administration over the estate. The stated basis was forensic findings that purported signatures on the will were not genuine.

    The charge sheet is worth reciting in full because of how badly it has aged. Count one alleged that on or before March 24, 1997, Elms made a false document, namely Robson’s will, purporting it to be genuine. Count two alleged that on February 10, 2015, he presented that forged will to DCI Corporal Samuel Kamau at DCI headquarters. Count three alleged he forged a power of attorney dated January 24, 2010. Count four alleged he uttered that forged power of attorney to Kamau on the same date. Count five alleged that on October 30, 2013, at the High Court, he filed the forged will to obtain probate over land valued at Sh100 million. Elms denied all counts and was released on Sh400,000 cash bail.

    What followed was a procession of findings that systematically demolished the prosecution’s theory. By 2019, DCI investigators themselves found insufficient evidence to sustain the case and the criminal probe effectively collapsed. In November 2022, forensic document examiner Jacob Oduor appeared before the High Court and testified that after examining Robson’s known signatures across multiple documents, he found no evidence of forgery on the will. In June 2025, Justice Chemitei’s comprehensive judgment upheld the will in every particular, stating it was lawfully executed, properly witnessed, and showed no sign of coercion or mental incapacity.

    Logically, these findings should have triggered the DPP to drop the criminal charges. The DPP agreed. An application was filed in the Milimani magistrate’s court to withdraw the charges, informing Magistrate Ben Mark Ekubi that Justice Chemitei’s judgment had definitively validated the very will that was the subject of the prosecution. Ekubi declined not once but twice. The DPP appealed to the High Court. In January 2026, Justice Martin Muya dismissed that appeal, ruling there was no good reason to interfere with Ekubi’s decision. Kagure’s side had successfully argued that the criminal case should continue even though the civil court had fully validated what the criminal case alleged was a forgery.

    In August 2025, the absurdity intensified. Elms failed to appear for a court mention, his lawyer citing a sick child. Magistrate Ekubi issued an arrest warrant. The charges against Elms for possessing and submitting a document that a High Court has found to be genuine remain, technically, active. He is living a wanted man’s existence for having been, courts have now found, a faithful executor of a legitimate will.

    The charges against Elms for submitting a document a High Court found to be genuine remain, technically, active. He is wanted for having been a faithful executor.

    A PORTFOLIO OF PREDATION

    The Karen operation is the grandest entry in Kagure’s property dispute portfolio, but it is far from the only one. A picture assembled from court records spanning nearly a decade reveals a pattern that goes well beyond bad luck in property transactions.

    The Makadara case is the most operationally brazen. Ruth Wambui Kimani, a widow, told the Environment and Land Court in case 345 of 2018 that her late husband Kimani Mungai had purchased a plot along Jogoo Road in Makadara in 1997 and the family remained in possession until 2015, when Kagure appeared claiming she had bought it for Sh10 million. The transfer bearing Mungai’s signature was registered on October 7, 2015. The problem: Wambui produced a death certificate showing her husband died on October 26, 2010, nearly five years before the transfer. The land had been, on the face of the documents, sold by a corpse.

    When the case came to court, something extraordinary happened. A man identifying himself as Francis Kimani Mungai appeared, very much alive, seeking to join the proceedings and confirming he had sold the land to Kagure on July 30, 2015, for Sh10 million. Kagure’s side produced a living man to contradict the death certificate. Whether that man was the genuine Kimani Mungai or someone recruited to perform the role, the widow maintained her husband had died in 2010 and the transfer was impossible. In April 2025, Judge Oguttu Mboya issued a permanent order stopping Kagure from entering, occupying, or claiming the Eastlands plot, ruling that the registration of the property in her favour was premised on illegal and unlawful documents and was therefore void.

    Joel Munyoki Munene had a comparable experience. In ELC case 65 of 2017, Munene sued Kagure over a Nairobi Eastlands plot valued at over Sh20 million. He had acquired the property in 2002 and obtained a formal allotment letter from Nairobi City County, but found when he went to formalise his title that Kagure had somehow registered it in her name through what Judge Mboya would later describe as illegal and unlawful documents.

    Then there is the matter of the German investor. In late 2022, three months after losing the Nairobi gubernatorial election, Kagure was introduced to Uwe Heinz Odenthal, a German national, through a chain of connections involving his compatriot Jurgen Haese and Haese’s Kenyan wife Rose Kirimi. The vehicle was Trojan Six Oil 2019 Ltd, a petroleum company in which Kagure, Said Mohamed Farah, and Franklin Were Juma are listed as directors. Odenthal says he was presented with annual dividends of 30 percent on his invested capital and handed over one million euros, approximately Sh142 million, after taking out a bank loan in Germany to fund part of it. He received nothing. He filed a report with the DCI saying he had been cheated, stolen from, and defrauded. Kagure dismissed the allegation as politically motivated noise.

    THE POLITICAL REINVENTION AND WHY IT SHOULD ALARM NAIROBI

    Kagure first entered political consciousness in 2018, when Nairobi Governor Mike Sonko nominated her to replace the departed deputy governor Polycarp Igathe. She was a leading candidate for confirmation. Then the Karen and Makadara cases became public. Sonko, who had made public theatre of his anti-land-grabbing stance, quietly shelved the nomination without ever formally withdrawing it. Kagure’s political ambitions survived intact. She ran for Nairobi governor as an independent candidate in August 2022, finishing fourth behind Johnson Sakaja, Polycarp Igathe, and Harman Grewal. She then pivoted immediately into preparation for 2027, declaring her candidacy through social media in early 2025 with the backing of a section of the Kikuyu Council of Elders.

    Her public persona across this period has been carefully curated. She presents as a women’s empowerment advocate, a philanthropist, a mentor to the youth, a businesswoman who built herself from nothing. Her social media is professionally managed. When allegations resurface, she frames them as politically motivated attacks by rivals threatened by her ambitions. ‘Ever since I hinted at my political ambitions, I have been seeing all sorts of attacks and stories that date back as far as 1901,’ she wrote on social media in October 2024, after the German investor story broke. Every documented allegation becomes, in her telling, a fabrication by political enemies.

    What that framing cannot explain is why the attacks come from judges, not politicians. Judges Oguttu Mboya, Hillary Chemitei, Mary Gitumbi, Maureen Odero, and Lucy Njuguna have all made findings, issued injunctions, or delivered rulings against Kagure across these various disputes. None of these judicial officers is known to be aligned with any of her political rivals. Justice Njuguna’s finding that police were actively aiding fraudsters in the Karen case was not a political statement. It was a judicial observation on what the evidence before the court showed.

    THE CERTIFICATION GAMBIT AND WHAT COMES NEXT

    Back in the courtroom in May 2026, Conrad Maloba’s cross-examination of Elms was not a philosophical exercise. It was a calculated move in a long game. By extracting Elms’s acknowledgment that the will and title deeds were not fully certified through every required authority, Maloba has created an argument that, if accepted, could do one of two things. It could void the estate’s standing entirely, theoretically opening the door for Kagure’s contested documents to be treated as the only surviving claim. Or it could create enough uncertainty about the estate’s title that a settlement becomes attractive to Elms and the beneficiaries, particularly the charities and conservation bodies that have been waiting since 2012 for proceeds from Robson’s generosity.

    What Maloba cannot explain away, and what the court will be required to weigh when the hearing resumes in October 2026, is the full context. The certification shortfall, if it exists, is a procedural defect in documents that a High Court has already found to be substantively genuine. Justice Chemitei’s June 2025 ruling did not say the will might be genuine. It said there was no shred of evidence of coercion, that the will was properly executed and witnessed, and that it satisfied every legal test of validity. Procedural cures exist for estates with technical registration gaps. Kenya’s courts have ample equitable jurisdiction to regularise probate processes where the underlying instrument is found to be genuine.

    The court will also have to reckon with the underlying reality that Kagure’s own documents have never survived forensic scrutiny. No payment trail has ever been produced. Robson’s family swore under oath that no sale occurred. Two of Robson’s own advocates confirmed that the signatures on Kagure’s documents were not consistent with Robson’s genuine signature. The property was under a bank charge at the time of the alleged sale, making a clean title transfer impossible. That is the substance that sits behind Maloba’s procedural argument, and it is deeply unflattering to his client.

    The hearing resumes in October 2026. If Kagure’s certification argument fails, she is left without a legal avenue on the Karen property. If it somehow succeeds, an extraordinary injustice will have been done: a man appointed executor of a genuine will, prosecuted for a forgery courts have found never occurred, subjected to a decade of litigation, will have watched the beneficiaries of Robson’s generosity lose because of a stamp not applied to documents every substantive finding has validated.

    If Kagure’s technicality argument succeeds, conservation charities and Robson’s nephew will lose because of a missing certification stamp on documents every court has validated as genuine.

    THE LOOPHOLE AND THE LAW: WHAT KENYA MUST CONFRONT

    The certification argument, even if legally ambitious, exposes a systemic vulnerability extending far beyond this case. Kenya’s succession system is a labyrinth. The Law of Succession Act, the Land Registration Act, the Civil Procedure Act, and the various practice directions governing probate together create a process that, for complex cross-border estates, can generate decades of procedural irregularities through nothing more sinister than administrative delay, bureaucratic turnover, and institutional dysfunction. A title that passes through a genuine estate but is not certified precisely as required at every step is not necessarily a fraudulent title. It is a common title with a fixable procedural gap.

    The land grabbing syndicate’s genius is that it understands this systemic reality better than most legitimate executors. Predators do not need to prove they own the property. They only need to create enough doubt about whether the estate’s documents are perfect. In a system where perfection is rare, doubt is cheap. Kagure’s lawyers have invested more than a decade manufacturing doubt. The question for October 2026 is whether any Kenyan court will reward that investment with a six-acre Karen estate that was willed to elephants, forests, schoolchildren, and a British nephew who has been waiting since 2012 to honour his late brother’s wishes.

    Agnes Kagure will call whatever follows a politically motivated attack. She will write on social media that her enemies fear her. She will appear at women’s empowerment events and give speeches about resilience. But in the High Court in October 2026, the record will speak for itself. It will speak of a British man who made a clear, witnessed, legally executed will in 1997. Of an executor who has been prosecuted for implementing it. Of a businesswoman who has never produced a single document of purchase that survives forensic scrutiny. Of police officers a judge found were aiding fraudsters. Of a dead man’s signature appearing on transfer documents long after his death in at least one of her other disputed acquisitions. And of a Karen estate, six acres of Nairobi’s most valuable land bordering the Ngong Forest, that has not yet reached the charities and conservationists its owner intended it to benefit.

    That is not a politically motivated attack. That is a court record. And it is damning.

  • Crawford Capital: The Corrupt, US-Sanctioned, UK-Registered Digital Firm That Milked South Sudan Dry

    Crawford Capital: The Corrupt, US-Sanctioned, UK-Registered Digital Firm That Milked South Sudan Dry

    JUBA — When the United States Department of State announced sanctions against Crawford Capital Ltd. on May 12, 2026, the move sent shockwaves across Juba’s political establishment and prompted a defensive chorus from at least four government ministries and the national revenue authority. Within hours, officials who rarely agree on anything had found common cause: defend the company at all costs.

    The spectacle was revealing not for what it said about Crawford Capital but for what it confirmed — that the firm’s tentacles had wound so deeply into South Sudan’s state apparatus that sanctioning it was tantamount to sanctioning the government itself. That is precisely the point. Crawford Capital Ltd. is not simply a corrupt company operating in a corrupt environment. It is the corruption, systemized and laundered through the language of digital transformation, presented to the world as a modernization initiative while stripping the country’s already catastrophic revenues bare.

    The evidence assembled by the United Nations Commission on Human Rights in South Sudan, by Radio Tamazuj, by Eye Radio, and now confirmed by the United States government, paints a portrait of institutional plunder so brazen, so multi-layered, and so ruthlessly protected that it stands as one of Africa’s most documented cases of state capture in the digital age.

    South Sudan ranked last — 192nd out of 192 countries  on the United Nations Human Development Index. It ranked 180th out of 180 on Transparency International’s Corruption Perceptions Index. Despite receiving more than 25.2 billion dollars in oil-related inflows since independence in 2011, more than half the population faces acute food insecurity, the health system has functionally collapsed, and more than four million South Sudanese are either internally displaced or have fled as refugees to neighbouring countries. Crawford Capital did not create this catastrophe. But as the UN Commission bluntly concluded in its September 2025 report, Plundering a Nation: How Rampant Corruption Unleashed a Human Rights Crisis in South Sudan, it became one of its most efficient instruments.

    THE BIRTH OF A DIGITAL RACKET

    Crawford Capital Ltd. is registered in the United Kingdom, a corporate detail that has allowed it to drape itself in the veneer of respectable Western business practices while functioning as a private tax collection bureau for South Sudan’s ruling elite. Its operational arm, CapitalPay, controls the country’s e-Government service delivery infrastructure — the electronic portals through which businesses obtain trade permits, visas, crude oil accreditation certificates, tax payments, and a growing list of government services with mandatory online processing.

    The architecture of the arrangement was set in November 2019, when Crawford was contracted as the exclusive provider of e-Government Services under an agreement with the Ministry of Information, Communication Technology and Postal Services, then headed by the powerful and long-serving Michael Makuei Lueth. The terms of that contract were not the result of open competitive bidding. There is no publicly available record of a tender process, despite requirements under South Sudan’s Public Procurement and Disposal of Assets Act of 2018. Instead, the UN Commission found that the procurement was endorsed by key ministries and, critically, by the National Security Service’s Internal Security Bureau, whose director general at the time, Akol Koor Kuc, personally wrote in support of the arrangement, proposing that Crawford should work in partnership with the intelligence service’s ICT department because the company was, in his assessment, aiming to create large databases and integrate online services. The intelligence service’s blessing on a commercial contract for a private fintech firm was not incidental. It was foundational.

    Documents reviewed by the UN Commission reveal that Crawford itself proposed the Ministry of ICT should be the face of the project while the company remained in the background but retained its majority share of all revenues generated. This was not a service contract. It was a hostile takeover of state revenue collection, dressed in the clothes of e-governance.

    “Crawford proposed the Ministry should be the face of the project, while the company remained in the background but still retaining majority shares.” — UN Commission on Human Rights in South Sudan, September 2025

    Under the contract’s terms, Crawford was entitled to 75 percent of all revenues collected through its platforms. The government’s share the money meant to fund hospitals, schools, roads, and the basic machinery of a state was capped at 25 percent. This split was not limited to administrative fees. It applied to taxes, visa charges, trade permits, customs-related levies, and crude oil accreditation fees. Every South Sudanese pound that passed through Crawford’s digital gateway was, by contractual design, routed primarily to a private company registered in the United Kingdom.

    The UN Commission described profit splits of this nature as unjustifiable and indicative of abuse of public office. The more apt description is highway robbery but with paperwork.

    THE OWNERSHIP MAP: FOLLOW THE FAMILY CONNECTIONS

    Crawford Capital Ltd. is majority owned by Garang Mayom Kuoc Malek, who holds 68 percent of the parent company and 61.2 percent of CapitalPay Ltd. He also owns 95 percent of Crawford Laboratory Ltd., a related entity. Garang Malek is the son of a former deputy minister and parliamentarian. He is not a technology entrepreneur who built something from nothing. He is a politically connected insider whose access to South Sudan’s government contracting machinery was, according to the UN Commission, a core reason the firm was able to secure a single-source government contract that should never have been awarded without open competition.

    The second-largest shareholder is a Kenyan businessman, Jeremy Gisemba, who holds 26 percent of Crawford Capital Ltd. and 23.4 percent of CapitalPay Ltd. Ruey Majok Guandong, the son of South Sudan’s ambassador to Turkey, previously held 50 percent of Crawford Capital at the time of its incorporation, before the ownership structure was restructured in ways the Commission found difficult to fully trace.

    But it is the company’s link to President Salva Kiir’s own family that transforms this story from a tale of ordinary elite capture into something far more disturbing. The UN Commission and multiple independent investigations have documented that Crawford Capital’s financial beneficiaries extend beyond its formal shareholders to include political elites and their close relatives. Garang Malek and Ruey Guandong previously formed another company together with Mayar Salva Kiir, the President’s son.

    Most significantly, investigative reporting by Radio Tamazuj has established that Crawford Capital and CapitalPay are widely believed to be linked to Adut Salva Kiir Mayardit, the President’s daughter and Senior Presidential Envoy for Special Programs, whose photograph appears at the top of the network chart titled the Crawford/CapitalPay Looting Squad circulated by accountability researchers. The organogram shows Adut at the apex, with Garang Malek listed as CEO and Managing Director below her, and Ariech Mayar Wol listed as CFO and Chair of the Board of Crawford/CapitalPay. To the side, connections run to the National Communications Authority, headed by Brigadier General Rizik Dominic Samuel as Director General, with Biong Deng Biong listed as Director of Finance and Tejwok Simon Ajak as Chairperson of the Board.

    “Both founders have deep political lineage, and Malek and Guandong have a history of forming companies with politically connected individuals.” — Radio Tamazuj investigation, March 2026

    Radio Tamazuj’s investigation further noted that Crawford Capital is registered to dual South Sudanese-UK citizens, including Garang Mayom Malek, Deng Daniel, Ariech Wol Mayar, and Kurtis Lathanial Dinnall-Bateman — the last name conspicuously British, suggesting deliberate use of the UK corporate framework to provide a veneer of Western legitimacy to what is, at its operational core, a Juba-based patronage enterprise.

    The company also registered Capital Pay Ltd. and Capital Pay Software Solutions Ltd. in the United Kingdom. All of these entities, according to investigative reporting, are used as business concerns to collect taxes on behalf of the South Sudan Revenue Authority and collect other monies from the public under the banner of e-Government Services.

    THE NUMBERS: A REVENUE HEIST QUANTIFIED

    The scale of the diversion documented by the UN Commission is staggering. Crawford began in 2020 by taking more than 75 percent of government visa fees collected through its new e-Visa portal. In 2021, it moved into e-Tax collections, receiving what the Commission described as a highly inflated proportion of taxes. In 2022, despite having demonstrably failed to deliver on a COVID-19 related project, Crawford was advanced 10 million dollars  equal to 80 percent of the entire Ministry of Health’s spending for 2022 to 2023 ostensibly for Ebola preparedness.

    In 2023, after then-ICT Minister Michael Makuei proposed a new fee for buyers of crude oil exports, Crawford collected a 0.3 percent levy from international oil traders seeking the mandatory Electronic Crude Oil Accreditation Permit. The UN Commission documented one specific transaction in September 2023 in which Crawford pocketed more than 1.1 million dollars from this arrangement while the Ministry of ICT received approximately 367,000 dollars a 75-25 split applied even to fees extracted from the global petroleum trade passing through South Sudan’s infrastructure.

    In 2024, Crawford implemented a new fuel import levy on trucks entering the country, again proposed by Minister Makuei, again at the 75 percent profit share. This levy was extended, unlawfully, to tax-exempt humanitarian organizations UN agencies, international NGOs, and aid operations whose vehicles and logistics are protected from taxation under international legal frameworks. The result was not an administrative oversight. Crawford’s collection apparatus began imposing fees on the very trucks and organizations keeping South Sudanese alive.

    The World Food Programme was forced to suspend critical food aid distributions. The UN Humanitarian Coordinator for South Sudan, speaking in April 2024 after the levy caused direct suspensions of food aid operations, described the situation plainly: it is vital that our limited funds are spent on saving lives and not bureaucratic impediments. The levy was eventually suspended in October 2024 following complaints from businesses and humanitarian agencies but not before the damage had been done, and not before Crawford had collected revenues from an operation that had no legal basis and no humanitarian justification.

    The South Sudan Revenue Authority, which officially endorsed and enabled Crawford’s operations, has its own documented record of malfeasance. The Authority withholds a percentage of all collections for its operational expenses, a practice that was supposed to have ended by 2023 and was never supposed to exceed 2 percent. By 2024 to 2025, the Authority was withholding 14.5 percent. The UN Commission has on file evidence of irregular withdrawals from the Authority’s retention accounts as recently as January 2025.

    NATIONAL SECURITY SERVICE AS SILENT ARCHITECT

    The role of the National Security Service in Crawford’s story is perhaps the most alarming detail in the entire scandal, and the one that has received the least public scrutiny. It was not merely that security officials endorsed the contract in 2019. The UN Commission found that security service networks, including former officials from the NSS Internal Security Bureau, allegedly facilitated access to sensitive government databases and revenue systems to enable Crawford’s operations.

    Akol Koor Kuc’s written endorsement proposed that Crawford work in partnership with the ISB ICT Department, citing the company’s ambition to build integrated online databases. The Commission found that the nature of the intelligence service’s involvement in the single-source procurement suggests that the e-Services infrastructure Crawford controls is likely being used without any consideration for personal data protection. In other words, the company that processes South Sudanese citizens’ visa applications, tax filings, and business permit data may be sharing that data or at minimum, integrating it with South Sudan’s domestic intelligence apparatus.

    This is not an allegation that Crawford is a surveillance tool. It is a documented concern raised by one of the UN’s most authoritative human rights monitoring bodies, arising directly from written communications between intelligence officials and company executives that the Commission reviewed. The implication is grave: a private, politically connected company registered in the UK has been given not merely access to government revenue streams but potentially access to population-level data flows, with the blessing of the country’s spy chief.

    THE MARCH 2026 SUSPENSION: WHEN A MINISTER TRIED TO FIGHT BACK

    On March 5, 2026, Trade and Industry Minister Atong Kuol Manyang Juuk did something almost no senior South Sudanese official had done in the preceding seven years: she tried to hold Crawford Capital accountable. She issued a directive ordering a 90-day administrative and technical review of the Crawford Capital Pay Digital Payment and E-Service System, citing unreliable electricity, weak internet connectivity, poor staff training, and serious disruptions to trade licensing, permits, and daily commercial operations.

    The reaction was immediate and overwhelming. Parliamentary committee chairperson Mayen Deng Alier wrote to the minister urging her to immediately reconsider the decision, invoking a presidential order requiring the use of the Revenue Authority’s e-Government system. Members of Parliament accused her of undermining revenue collection and disrupting government systems. Then came the decisive blow.

    Vice President James Wani Igga, who chairs the Economic Cluster, wrote to the minister on March 6 informing her that the Crawford Capital engagement had been approved by the full Council of Ministers under Resolution No. 34/2024, presided over by the President himself, and that her directive therefore violated administrative order and could not stand. Igga warned that interfering with Crawford’s operations would create revenue disruptions with consequences too severe to contemplate.

    By March 13, Minister Atong had reversed her directive. She informed her Undersecretary of the reversal, citing the Vice President’s advice, while pointedly maintaining that her underlying concerns about the system’s reliability and transparency remained valid. The episode lasted eight days. It achieved nothing, and it confirmed everything: that Crawford Capital operates under the direct protection of South Sudan’s highest political authority, that no single minister possesses the power to challenge it, and that even good-faith accountability attempts within the system are structurally impossible.

    “The engagement of Crawford Capital was not a unilateral decision, but the result of extensive deliberations by the Economic Cluster, which culminated in a formal Resolution No. 34/2024 of the Council of Ministers, presided over by H.E. the President.” — Vice President James Wani Igga, March 6, 2026

    US SANCTIONS AND THE GOVERNMENT’S DEFIANT RESPONSE

    Secretary of State Marco Rubio’s May 12, 2026 sanctions statement against Crawford Capital Ltd. placed the company in the same category as entities that have siphoned money from South Sudan’s treasury and stolen foreign assistance funds intended to support the South Sudanese people. Washington simultaneously announced visa restrictions against members of the transitional government, accusing them of impeding implementation of the 2018 Revitalized Agreement on the Resolution of the Conflict in South Sudan, warning that the country stood on the brink of a return to all-out war. The sanctions further noted that South Sudan People’s Defense Forces under President Kiir’s command had launched a military offensive in northern Jonglei State that displaced 300,000 people and created the conditions for a potential famine.

    The government’s response was unified and defiant. The Ministry of ICT, now led by Ateny Wek Ateny, issued statements framing Crawford as a legitimate digital transformation partner operating under Council of Ministers resolutions and government-approved reform priorities. The South Sudan Revenue Authority published a statement celebrating the platform’s role in raising monthly non-oil revenue collections to more than 130 billion South Sudanese pounds, with nearly one trillion pounds collected in eight months. The Authority insisted all engagements with Crawford were conducted lawfully and transparently.

    Neither the Ministry nor the Authority acknowledged the 75-25 revenue split. Neither addressed the humanitarian levies. Neither commented on the UN Commission’s finding that revenues were being held in Crawford’s own private bank accounts rather than channeled through the national treasury. The defiance was itself a form of confession these officials knew exactly what the arrangement entailed and had decided that defending it was preferable to explaining it.

    THE BROADER PLUNDER: WHAT CRAWFORD FITS INTO

    To understand Crawford Capital is to understand South Sudan’s broader political economy of extraction. The UN Commission’s September 2025 report documents multiple parallel looting mechanisms operating simultaneously, of which Crawford represents the non-oil revenue strand.

    The Oil for Roads programme, which received at least 2.2 billion dollars in government oil revenue between 2021 and 2024, is documented as South Sudan’s single largest corruption scheme. The construction companies linked to it, connected to Benjamin Bol Mel appointed as a Vice President of South Sudan in February 2025 built roads that cost twice the regional industry standard per kilometre, contracted lengths that overstated actual distances by 38 percent, built two-lane roads where four lanes were specified, and left most of the funds unaccounted for. Bol Mel-affiliated companies received between 1.5 billion and 1.7 billion dollars with no reasonable explanation given for the amounts.

    The parallel exchange rate gap, reintroduced in late 2024, allowed elites with access to both official and market rates to arbitrage donor funding, with humanitarian organizations required to use the official rate losing up to 64.5 cents of every dollar they spent in South Sudanese pounds. At the gap’s peak in July 2024, one million dollars of donor aid money had the purchasing power of just 355,000 dollars after the conversion loss.

    Monetary financing, the printing of currency through central bank overdrafts, generated 668 million dollars in inflationary financing in fiscal year 2022 to 2023 and 495 million dollars in 2023 to 2024, directly destroying the purchasing power of ordinary South Sudanese, driving food prices beyond the reach of millions, and contributing to the acute food insecurity affecting 7.7 million people more than half the country’s population documented in 2025.

    During the four fiscal years from 2020 to 2024, less than 48 percent of total revenues and oil entitlements reached the regular national government budget for core services. The Ministry of Presidential Affairs spent 19 times more than the Ministry of Health. The entire health sector received less than 0.9 percent of the regular national budget across those four years. The Ministry of General Education received an average of 2.3 percent of total budget spending, in flagrant violation of the Education Act’s 10 percent requirement. The Government spent 2.57 dollars per school-age child on education in 2023 to 2024. Funding to the judiciary in fiscal year 2023 to 2024 fell below 0.1 percent of the regular national budget.

    COUNTING THE DEAD AND THE HUNGRY

    These are not abstract fiscal anomalies. They have faces and body counts. South Sudan has among the lowest life expectancy figures on earth. Women and girls face a higher risk of dying in pregnancy and childbirth there than almost anywhere else on the planet. In a country convulsed by conflict and sexual violence, giving birth has become one of the most dangerous things a woman can do. Most women cannot access trained health workers, and those who are available frequently lack medicines, reliable electricity, and basic surgical supplies. The photographed image of dogs sleeping on surgery beds at the abandoned Malakal Teaching Hospital, damaged in conflict and still unrehabilitated years after the 2018 peace agreement, is not a shocking anomaly — it is a representative snapshot of the healthcare system’s reality.

    Two point three million children are acutely malnourished in South Sudan. The Ministry of Agriculture and the Ministry of Livestock and Fisheries together received less than 0.4 percent of total national spending from 2020 to 2024, despite South Sudan possessing fertile land and rich fisheries. The Ministry of Humanitarian Affairs and Disaster Management, the government body nominally responsible for addressing the hunger crisis, received across four budgets less than half the value of a single oil cargo. These are not funding shortfalls caused by poverty. South Sudan has received 25.2 billion dollars in oil-related inflows since 2011. The government simply chose to direct that money elsewhere.

    The donors who have filled the gap have provided more than 27.5 billion dollars in official development assistance since independence — more than the government’s own spending on its people. And even this international support is declining as humanitarian needs continue to climb. The more South Sudan’s elites steal, the more dependent its population becomes on charity from abroad, and the less accountable the government is to those it governs. Crawford Capital’s revenue diversion is not a footnote to this story. It is a chapter in the active destruction of the state’s capacity to serve its own people.

    “This is not mere mismanagement. It is a political economy of greed that has unleashed a human rights crisis.” — UN Commission on Human Rights in South Sudan

    UK REGISTRATION: A CORPORATE SHIELD WITH REAL CONSEQUENCES

    Crawford Capital’s UK registration is not an administrative detail. It is a deliberate strategic choice with real implications for accountability. Companies registered at Companies House in the United Kingdom are subject to British corporate law, including requirements for filing annual accounts and disclosure of persons with significant control. They can be investigated by the UK’s National Crime Agency and the Serious Fraud Office. They can, in theory, be sanctioned or de-registered.

    The UK has previously sanctioned Michael Makuei Lueth the very minister who presided over Crawford’s 2019 contract — for obstructing the political process in South Sudan and impeding implementation of the peace agreement. Yet Crawford Capital’s UK entities Crawford Capital Ltd., Capital Pay Ltd., and Capital Pay Software Solutions Ltd. have faced no equivalent scrutiny from British regulators, despite the company’s principals and their connections to sanctioned individuals being a matter of documented public record. The UK government’s failure to investigate or act on the Crawford Capital network, despite abundant evidence in UN reports and investigative journalism, represents a significant gap in the West’s stated commitment to combating illicit financial flows from fragile states.

    CRAWFORD’S DEFENDERS AND WHAT THEIR DEFENCE REVEALS

    The South Sudan Revenue Authority’s defence of Crawford deserves particular attention. The Authority cited nearly one trillion South Sudanese pounds collected in eight months as evidence that the system works. It did not mention that the South Sudanese pound has been systematically destroyed by monetary financing, that the parallel exchange rate gap has rendered revenue figures in pounds effectively meaningless for comparative purposes, that the Authority itself has been withholding 14.5 percent of collections in excess of its legal mandate, or that the UN Commission has documented irregular withdrawals from its accounts.

    Michael Makuei Lueth, who as ICT Minister designed and blessed the Crawford arrangement from 2019 onward and who as Government Spokesperson called the UN’s damning 2025 report unsubstantiated and lacking evidence, has since been reshuffled to become Minister of Justice and Constitutional Affairs — the very ministry responsible for the rule of law in a country whose laws Crawford Capital has been systematically violating. The appointment is a statement of impunity as government policy.

    Vice President Igga’s March 2026 intervention, invoking the President’s personal authority to protect the Crawford contract, confirmed what accountability advocates have long argued: the company is not merely tolerated at the highest levels of government. It is protected by them. The question of whether Crawford Capital is owned by, controlled by, or simply politically operated on behalf of the Kiir family is, in practical terms, immaterial. The outcome is identical.

    WHAT ACCOUNTABILITY WOULD REQUIRE

    The US sanctions are a start and not an end. Sanctions without supporting action from South Sudan’s international partners, from the UK government, from regional bodies, and from the financial institutions that process Crawford’s revenues are insufficient to dislodge a company this deeply embedded in state architecture. The UN Commission has issued 54 detailed recommendations to South Sudan’s government covering budget reorientation, single-treasury accounts, cancellation of illicit contracts, and genuine accountability for corruption.

    Dismantling Crawford Capital’s grip would require cancelling the 2019 contract, subjecting all revenues collected through its platforms to immediate national treasury oversight, commissioning a full and independent audit of every transaction since 2019, prosecuting those who designed and enabled the arrangement, and compensating humanitarian agencies for unlawfully imposed levies. It would also require the UK government to investigate the company’s UK-registered entities, freeze assets where evidence of criminal conduct exists, and revoke corporate registrations where the companies were used as vehicles for state theft.

    None of this will happen without political will. And political will, in South Sudan, has so far proved impossible to generate from within a system that has profited so comprehensively from its absence.

    CONCLUSION: DIGITIZATION AS A NEW FORM OF COLONIALISM

    The audacity of Crawford Capital’s operation lies not merely in its scale but in its framing. The company was sold to the South Sudanese public, to international observers, and to donors as a modernization project. E-Government. Digital transformation. Efficiency and transparency. The vocabulary of the twenty-first-century development agenda was deployed with precision to conceal what was, in practice, the privatization of a failed state’s last remaining revenue streams on behalf of the ruling family and its inner circle.

    The UN Commission called it what it is: a new corruption mechanism in which digitization replaced earlier looting methods without reducing the looting. South Sudan’s oil revenues were stolen through the Oil for Roads scheme, through off-budget patronage, through pre-sold crude cargoes, and through transfers to Sudan that the government cannot fully account for. When the pipeline to oil revenue narrowed following the February 2024 pipeline damage through Sudan, the non-oil revenue streams became more important, and Crawford Capital’s hold on those streams became more consequential.

    It is worth sitting with that reality. While 7.7 million South Sudanese faced acute food insecurity, while children died from preventable diseases in hospitals without medicine, while women died in childbirth in facilities without electricity, a company registered in London was legally entitled to take 75 percent of every dollar, pound, and South Sudanese currency unit that the government attempted to collect from its own people. And when a minister tried to stop it, the President’s office intervened to keep it running.

    The people of South Sudan are not poor because they lack resources. They are poor because their resources are being stolen, systematically and with institutional precision, by people with the power to make stealing legal and the audacity to call it governance. Crawford Capital is the most technically sophisticated expression of that theft the country has yet produced. And the United States has named it. Now the world must act.

  • The Invisible Hand: Al Jazeera Further Exposes How Safaricom Became The Regime’s Most Powerful Spy

    The Invisible Hand: Al Jazeera Further Exposes How Safaricom Became The Regime’s Most Powerful Spy

    When Al Jazeera’s investigative unit trained its cameras on the nerve centre of Kenya’s telecommunications infrastructure, it did not discover a scandal so much as confirm one that human rights organisations, investigative journalists, civil society and even a series of court proceedings had been assembling, piece by damning piece, for the better part of a decade.

    The documentary variously referenced in early circulation as Invisible Eyes: Inside State Surveillance in Kenya — draws a devastating portrait of a company that controls nearly 90 percent of Kenya’s mobile money transactions and holds intimate data on more than 44 million subscribers, and which, the film alleges, has quietly placed that empire of information at the disposal of the state’s security apparatus, often without the inconvenience of a court order.

    Safaricom did not respond to Al Jazeera’s requests for comment before the documentary aired. That silence, considered against the backdrop of everything that has come before it, is itself a statement.

    “Security personnel could pull subscriber data, location information, call records, and even mobile money transaction details without court orders or warrants.”

    A Decade of Warnings Nobody Was Supposed to Hear

    The story Al Jazeera is telling in 2026 was first told, with clinical precision, by London-based Privacy International in a 2017 report titled Track, Capture, Kill: Inside Communications Surveillance and Counterterrorism in Kenya.

    That document, based on interviews with current and former intelligence officers, military personnel and officials of the Communications Authority of Kenya, described an architecture of surveillance so embedded within Safaricom’s physical infrastructure that the line between the country’s largest private telecommunications company and its intelligence services had become functionally impossible to locate.

    The Privacy International report described, in terms that remain damning today, how approximately ten Criminal Investigation Department officers sat on a dedicated floor within Safaricom’s central headquarters building, providing information to all police branches.

    It described how the National Intelligence Service had stationed agents informally within Safaricom’s facilities undercover, their presence apparently known to Safaricom but not disclosed to customers.

    It described how NIS-owned base transceiver stations had been positioned to directly access Kenya’s telecommunications backbone, enabling the interception of live calls at NIS offices across Nairobi and regional centres.

    And it described, through the words of a serving Anti-Terrorism Police Unit officer, exactly how the arrangement was rationalised: if the intelligence request was not destined for court, no warrant was needed.

    The DCI officer attached to Safaricom would simply provide the data. Warrants were only required when the evidence had to be made fit for judicial consumption.

    A Communications Authority official interviewed in the same report said, without apparent embarrassment, that telecommunications operators largely felt they could not decline security agencies’ requests, in part because of the vagueness in the law — and in part because the agencies wielded the implicit threat of licence revocation.

    Safaricom, for its part, has maintained across every iteration of this story that it only shares customer data through lawful means and that its systems are not designed to enable live subscriber tracking.

    The company has said so in press releases, through its lawyers, and in letters to human rights organisations. What the courts, the human rights investigators, the international press and now Al Jazeera have collectively established is that those assurances and the documented reality are irreconcilable.

    Neural Technologies, the British Company at the Heart of the Machine

    When Nation Media Group published its landmark October 2024 investigation a months-long examination of how Kenya’s security agencies access Safaricom subscriber data it identified a detail that the company’s public statements had never disclosed: a little-known British software company called Neural Technologies had, at some point, embedded a data management system directly within Safaricom’s internal architecture.

    According to the investigation, that system gave Kenya’s security services virtually unrestricted real-time access to Kenyans’ call data. One component of the toolset was described as a browser portal capable of allowing security agency officers operating in the field to track individuals in real time through their call data records.

    The investigation also documented the mechanics of the Law Enforcement Liaison Office an institutional unit lodged within Safaricom headquarters and staffed by police officers from the Directorate of Criminal Investigations.

    Requests for subscriber data from police and prosecutors were supposed to flow through this office, logged and verified. What the Nation found was that the same officers who were attached to this office and who therefore had privileged access to the raw data were also officers from agencies accused of extrajudicial killings, enforced disappearances and renditions.

    The conflict of interest was not theoretical.

    The investigation found specific instances in which call data records certified by Safaricom as authentic bore signs of manipulation and falsification in cases involving suspected state-enforced disappearances.

    In one documented case involving a missing person named Ndwiga, police submitted CDRs to Safaricom’s Law Enforcement Liaison Office on February 3, 2022 days before a court order authorising the same disclosure was issued on February 8.

    The records submitted to court under both the pre-order and post-order requests covered the same time period and the same mobile line. They were not the same document.

    “The same officers attached to the Law Enforcement Liaison Office were from agencies accused of extrajudicial killings and enforced disappearances they handled the very data that could have implicated them.”

    The Kenya Human Rights Commission and Muslims for Human Rights wrote to Safaricom CEO Peter Ndegwa in November 2024 laying out seven specific allegations: routine data access without court orders; the handling of court-ordered CDRs by the very police officers suspected of crimes those CDRs might expose; the certification as authentic of records bearing signs of manipulation; the habitual refusal to provide complete records even when courts demanded them; the facilitation of tracking and capture of individuals whose subsequent fates disappearance, extrajudicial killing raised grave questions about why the state wanted to find them in the first place. Safaricom responded through its law firm MMC ASAFO. The allegations, the firm wrote, were not only false but malicious, or alternatively a product of ignorance about how Safaricom’s systems work.

    The company then suspended its advertising contract with Nation Media Group worth approximately five million US dollars per month, making Safaricom one of the country’s largest commercial advertisers and threatened a Strategic Lawsuit Against Public Participation, an instrument widely recognised internationally as a tool of corporate intimidation rather than legitimate legal redress. Reporters Without Borders condemned the pressure campaign.

    The Kenya Human Rights Commission, Katiba Institute and Muslims for Human Rights wrote to the Media Council of Kenya Complaints Commission urging it to reject Safaricom’s complaint as baseless. The commission, to date, has continued to entertain it.

    The Gen Z Dead, the Missing and the Map That Led State Agents to Their Doors

    Between June and August 2024, Kenya’s Generation Z shook the country. Young people poured into the streets across 44 of Kenya’s 47 counties to protest the Finance Bill and what they saw as a predatory tax regime imposed on ordinary citizens by an administration that had demonstrated contempt for their futures.

    The government’s response was documented by multiple international human rights bodies: police opened live fire into crowds, military vehicles patrolled civilian streets, and a covert campaign of abductions and enforced disappearances was launched against the movement’s perceived organisers and amplifiers.

    The Kenya National Commission on Human Rights documented 82 abductions and forced disappearances between June and December 2024.

    The targets were not exclusively political figures.

    They included online activists, student leaders and ordinary citizens who had, by virtue of a post on X or a location captured at the wrong moment, come to the attention of state security.

    Amnesty International, in its November 2025 report, stated that human rights defenders it interviewed believed state surveillance was supported by Safaricom, with the company’s data enabling clandestine police units to locate and track activists who were subsequently forcibly disappeared.

    The abductions spiked again in December 2024, following the viral circulation online of AI-generated images depicting President William Ruto in a coffin. The state treated a digital provocation as a national security emergency.

    Among those arrested in the coffin-image crackdown was David Oaga Mokaya, a fourth-year finance student at Moi University.

    His case would produce, entirely by accident and in open court, the most explicit judicial confirmation yet that Safaricom was sharing subscriber data with security agencies without the protection of a court order.

    In September 2025, a Safaricom employee identified in proceedings as Mr Daniaf admitted under cross-examination that the company had complied with a DCI request for Mokaya’s personal data his phone number, location coordinates, call details and submitted a comprehensive report covering nearly a month of his digital life, acting on nothing more than a written request letter from the DCI.

    No court order had been obtained before the data was disclosed. Chief Inspector Bosco Kisau, the lead DCI officer in the case, admitted separately that a detention warrant for Mokaya’s electronic devices was only obtained after Mokaya had already been arrested. Mokaya was acquitted on February 19, 2026.

    “A Safaricom employee admitted in open court that the company had handed over a student’s phone number, location and call records to the DCI on the basis of a letter alone no court order, no judicial oversight.”

    Following the acquittal, a demand letter was issued to Safaricom by advocates acting for Nairobi businessman Alex Mutuku Mbalezi, who had been subjected to the same treatment location tracking, warrantless data disclosure, arrest in a separate case.

    The letter demanded Sh250 million in compensation.

    The Law Society of Kenya filed a constitutional petition at the High Court seeking a court-supervised audit of every data request the DCI made to Safaricom between June 2024 and December 2025, a formal public apology published in national newspapers across fourteen consecutive days, the expungement of charges brought against protesters on the basis of illegally obtained data, and the creation of a victims’ compensation fund.

    The LSK described what it had found as an organised conspiracy to illegally surveil Kenyan citizens. Safaricom, the petition alleged, had maintained a near-real-time backend access arrangement with security agencies a clandestine pipeline of personal information flowing directly to the DCI that operated entirely outside the protections guaranteed by Kenya’s Data Protection Act, 2019.

    The Raphael Tuju Episode: When the Nation Watched Safaricom Hand a Man to His Hunters

    If there remained any residual possibility that the controversy over Safaricom’s data sharing arrangements was merely theoretical or confined to activist circles, it was extinguished on the morning of March 24, 2026.

    On that day, former Cabinet Secretary Raphael Tuju was arrested on the basis of location data that his lawyers and civil society commentators alleged Safaricom had provided to the DCI without judicial authorisation.

    Tuju’s arrest generated a furious public debate not merely about the propriety of the action against him, but about the infrastructure that had made it possible a debate that, with uncomfortable timing, was still unfolding on the day Al Jazeera’s documentary began circulating online.

    Critics drew a direct and disturbing line: the same apparatus that had been used to track Gen Z protesters in 2024, to locate a university student who posted a satirical image, to facilitate the disappearances of 82 Kenyans documented by the human rights commission, had been deployed against a senior political figure who had run afoul of those in power.

    The question being asked publicly was not whether Safaricom’s systems could do this. The question was whether there was any category of Kenyan citizen for whom they would not be deployed.

    The Data Breach That Wasn’t About the Government

    The surveillance controversy exists alongside, and is compounded by, a separate and equally disturbing scandal involving the commercial exploitation of Safaricom subscriber data. In October 2025, the Business Daily reported that two former senior managers at Safaricom had allegedly accessed and shared customer data names, phone numbers, birth dates, location records, gambling histories, passport and national identification numbers with a private businessman, who sold it onward to a major sports betting firm.

    The stolen data pertained to 11.5 million subscribers.

    A constitutional petition seeking Sh100 million for the primary victim and Sh10 million for each of the 11.5 million affected subscribers was filed in court. The company sought to block the sale or transfer of the data. The legal actions are ongoing.

    What this second scandal reveals, compounding the first, is that the risk to Safaricom subscribers comes not only from an authoritarian government that has decided their data belongs to the state, but from within the company’s own walls.

    A subscriber’s M-Pesa transaction history, their precise location at any given moment, their communication patterns, their gambling habits and their official identity documents exist within a single corporate ecosystem.

    The demonstrated willingness or failure to protect that ecosystem from both external coercion and internal exploitation has catastrophic implications for 44 million people whose daily lives are now inseparable from the network Safaricom operates.

    “Two former Safaricom senior managers allegedly sold data from 11.5 million subscribers names, locations, gambling histories, national ID numbers to a sports betting firm. The subscribers were never told.”

    Safaricom, the Surveillance Infrastructure and the 2027 Question

    Kenya moves toward the 2027 general election against a background of political turbulence without recent precedent.

    President Ruto’s administration has survived a wave of mass protests, the impeachment of a deputy president, sustained international criticism over extrajudicial killings and enforced disappearances, and mounting legal pressure over the data practices that Al Jazeera’s documentary has now placed before a global audience.

    The opposition has publicly warned that surveillance infrastructure will be turned against political rivals in the run-up to the vote.

    Their concern is not speculative.

    A commercial litigation filed at Milimani High Court in November 2024 revealed that aides to the President had allegedly sought to procure software described in court papers as having the capacity to spy on targets, ostensibly as part of efforts to manage communications ahead of the 2027 campaign. The defendants in that case include senior officials of the National Treasury and the Head of Public Service.

    The significance of Safaricom’s position in this landscape cannot be overstated. M-Pesa processes the overwhelming majority of Kenya’s mobile money transactions.

    Safaricom’s network is the primary mode of communication for the majority of Kenya’s adult population.

    Its subscriber database is, in effect, a near-complete map of Kenya where people live, where they travel, who they talk to, what they spend money on and when.

    In the hands of a security apparatus that has demonstrated both the willingness and the technical capacity to use that map to hunt its own citizens, the implications are not abstract.

    They were played out in real time in the streets of Nairobi in June 2024, in the detention facilities where protesters were held incommunicado, and in the cases that have since wound their way through the courts carrying evidence that was never supposed to see daylight.

    The Communications Authority of Kenya has, historically, been no safeguard.

    An official from the Authority confirmed to Privacy International nearly a decade ago that telecoms operators felt they could not decline security agencies’ requests without risking their operating licences.

    That institutional cowardice if cowardice is what it is, rather than active complicity has persisted through every subsequent scandal, every human rights report, every court revelation and every denial.

    The Office of the Data Protection Commissioner, established under the Data Protection Act, 2019, has issued penalty notices to small businesses and schools for privacy violations involving comparatively trivial datasets.

    Its conspicuous silence in the face of allegations concerning 44 million Kenyans and the country’s most politically significant data pipeline requires an explanation that, to date, it has not provided.

    The Architecture of Denial

    Safaricom’s response to each iteration of this scandal has followed a consistent template. Deny. Threaten. Advertise silence.

    The company has maintained at every turn that its systems are not designed to track the live location of any subscriber, that data is only shared through lawful means and for lawful purposes, and that the allegations are false and malicious.

    It has cited its ISO 27701 Privacy Information Management System certification as evidence of its commitment to data protection. It has pointed to the existence of the Law Enforcement Liaison Office as evidence that requests are channelled and logged.

    What the evidence — not allegations, evidence, placed before courts and documented by Amnesty International, the Kenya Human Rights Commission, Privacy International, Reporters Without Borders, Freedom House and now Al Jazeera shows is something different. It shows a company that constructed an institutional architecture, the Law Enforcement Liaison Office, that embedded police officers with access to subscriber databases in a system where the very same officers could handle, and potentially manipulate, the call data records that might otherwise implicate those officers in crimes.

    It shows a company that, under oath in the Mokaya trial, disclosed that it had complied with a DCI data request on the basis of a letter alone.

    It shows a company that pulled its advertising from the Nation Media Group the moment that newspaper published findings the company could not rebut on the merits.

    It shows a company that has repeatedly declined to address the specific factual allegations made against it, preferring instead to attack the credibility of those making them.

    That pattern of behaviour is not what an innocent party does. It is what a company does when the truth is more expensive than the denial.

    “Safaricom pulled Sh600 million in monthly advertising from Nation Media Group and threatened a SLAPP suit the moment a newspaper published findings it could not rebut on the merits. That is not what an innocent party does.”

    What Must Now Happen

    The Al Jazeera documentary does not introduce new facts to this record so much as it assembles the existing facts before an audience that extends far beyond Kenya’s borders. Vodacom, Safaricom’s parent company through its 34.94 percent shareholding, has been called upon by digital rights organisation Access Now to launch an independent investigation into Safaricom’s conduct.

    The call has gone unanswered.

    That silence is its own verdict on the priority Vodacom assigns to the rights of the 44 million subscribers it profits from through the Safaricom network.

    The High Court petition filed by the Law Society of Kenya, if prosecuted with the rigour the moment demands, could force into the public domain a complete record of DCI data requests to Safaricom across the period when Kenya’s Gen Z protests were being suppressed by violence and surveillance. That audit, if it happens, will be the definitive accounting.

    The question is whether the Judiciary which has itself, in this administration, come under sustained pressure and whose past judgments in cases touching on state power have not always reflected institutional independence will allow it to proceed.

    For every Kenyan who carries a Safaricom SIM card and that is very nearly every Kenyan adult the Al Jazeera documentary raises questions that will not recede.

    They are questions about the smartphone in their pocket, the M-Pesa transaction they completed this morning, the location data generated by a call they made last week. They are questions about who has access to that data, under what authority, and to what end.

    They are questions about whether the country that markets itself as East Africa’s technology capital has, instead, constructed one of the region’s most comprehensive and least accountable surveillance states and whether the most powerful private company in that country has been the willing instrument through which the state has made itself invisible to its own citizens while making its citizens entirely visible to itself.

    Safaricom has not responded to the Al Jazeera documentary. It has not responded to the specific findings of the Nation Media Group investigation. It has not responded to the open letter from the Kenya Human Rights Commission and Muslims for Human Rights.

    It has not appeared before a parliamentary committee to answer the probe launched by lawmakers over subscriber privacy breaches.

    Its CEO Peter Ndegwa has given no public accounting of the Law Enforcement Liaison Office, Neural Technologies’ embedded browser portal, the CDRs that bore signs of manipulation and falsification, or the real-time location data that has been used by security agencies to find and arrest people whose only documented offence was criticising the government of William Ruto.

    The company’s silence is understandable from a legal and commercial perspective. It is indefensible from any other.

    As June 2026 arrives one year since the first anniversary of the Gen Z protests that left dozens of Kenyans dead, shot by security forces in the streets of a country that calls itself a democracy the question of what Safaricom knew, what it enabled and what it concealed will not be answered by another press release.

    It will be answered in court.

    It will be answered through the Al Jazeera documentary now circulating among the 44 million Kenyans whose data this company holds. And it will be answered, ultimately, at the ballot box in 2027, when Kenyans will be asked to choose between a government that built this machine and an alternative whose own relationship with institutional power is, as yet, untested.

    The machine is real. The evidence is public. The denials have run out.

  • Why Mary Wambui’s Move To Delete Sh2.2 Billion Tax Evasion Articles Is Morally Untenable — And A Closer Look Into The Controversial Withdrawal

    Why Mary Wambui’s Move To Delete Sh2.2 Billion Tax Evasion Articles Is Morally Untenable — And A Closer Look Into The Controversial Withdrawal

    In 2014, the Court of Justice of the European Union handed a Spanish man named Mario Costeja Gonzalez the right to have Google suppress links to a decades-old newspaper notice about a debt auction he had long settled. The judgment was proportionate. The matter was resolved. The man was a private citizen. The information had no continuing public interest. European courts subsequently codified the right to be forgotten in law.

    Twelve years later, a Kenyan businesswoman who supplies military boots and cereals to the government, who funded presidential campaigns, who chairs a public regulatory body, and whose company is the subject of ongoing parliamentary and prosecutorial scrutiny has invoked that same Spanish man’s victory in a Kiambu High Court petition seeking to force Google to bury 35 news articles about her Sh2.2 billion tax evasion case.

    The two cases have almost nothing in common. And the audacity of the comparison reveals everything that is wrong with Mary Wambui Mungai’s petition.

    She is not asking for privacy. She is asking for impunity on demand — a digital eraser funded by the same wealth the public never saw taxed.

    The Anatomy of a Case That Disappeared

    The facts of the underlying tax matter are not disputed by Ms Wambui herself. In December 2021, she and her daughter Purity Njoki Mungai, both directors of Purma Holdings Limited, were arraigned at the Anti-Corruption Court in Milimani on eight counts of knowingly and unlawfully omitting income taxes between 2014 and 2019. The alleged unpaid taxes amounted to Sh2,231,789,125 — money that flowed from enormous state contracts for supplying boots, uniforms, cereals and medical supplies to the military, the Kenya Medical Supplies Authority (KEMSA) and other government departments.

    What followed was a masterclass in the art of evasion. When the Kenya Revenue Authority first summoned her in June 2021, she did not appear. When KRA pushed for her arrest, she reportedly surfaced at Weston Hotel — a property publicly associated with then-Deputy President William Ruto — and slipped away, leaving behind personal belongings including an identity card, bank cards, a firearms licence and a temporary travel permit to Zambia. The Directorate of Criminal Investigations issued arrest warrants. Airport and border checkpoints were sealed. The country watched a billionaire tenderpreneur duck and weave.

    KEY FACT: Wambui was also separately charged in January 2022 with illegal possession of a pistol and 22 rounds of ammunition without valid licences. That case was dropped in December 2022 — one month before the tax case was also withdrawn.

    By December 2022, President Ruto — the same man in whose hotel she had sheltered from police — appointed her chairperson of the Communications Authority of Kenya’s board. Days later, KRA wrote to the DPP requesting withdrawal of the charges, citing a December 6 compounding of offences and payment of fines. The case was withdrawn on January 10, 2023.

    She walked free. She did not receive an acquittal. She was not found innocent. She paid fines. The state absorbed the settlement. The public never learnt what the final tax figure paid was, or whether it bore any relationship to the Sh2.2 billion originally charged.

    A compounding of offences is not vindication. It is a transaction. Wambui bought her way out — and now wants to erase the receipt.

    The Google Petition: Anatomy of Reputation Laundering

    Ms Wambui’s petition, filed at the Kiambu High Court, asks the court to order Google LLC and Google Kenya Ltd to suppress all 35 links to news stories covering the tax evasion probe and the court proceedings from 2021 to 2023. She wants a temporary injunction prohibiting the links from appearing in searches pending determination of her substantive petition, which seeks their permanent removal.

    Her legal arguments rest on three pillars: the EU right to be forgotten as established in the Gonzalez judgment, section 25 of Kenya’s Data Protection Act, and constitutional Articles 28, 31 and 33 protecting dignity, privacy and reputation. Each argument falls apart on contact with the facts.

    On the EU precedent: the Gonzalez ruling explicitly excludes matters of genuine public interest from the right to be forgotten. A Sh2.2 billion criminal prosecution involving a government supplier who was evading taxes earned from public coffers is self-evidently a matter of public interest. The EU itself applies the public figure doctrine — holding elected officials and those in public life to lower privacy expectations regarding their exercise of public functions. Ms Wambui, as Communications Authority chair and now Athi Water Works board chair, is a public figure performing public functions.

    On the Data Protection Act: Section 25 requires that personal data be processed fairly and lawfully. News articles about public court proceedings are not ‘personal data’ in the private sense the Act is designed to protect. Court records are public by design. Journalism about criminal charges is protected expression. The Act was conceived to guard against surveillance, unauthorised data harvesting and digital exploitation — not to give powerful individuals a legal mechanism to suppress accountability journalism.

    On the constitutional arguments: Article 33, which she invokes to protect her reputation, must be read alongside Article 34, which protects freedom of the press, and Article 35, which guarantees the public’s right to access information. The Constitution does not rank reputation above press freedom, especially where the subject of reporting is a public official and the reported events are matters of public record.

    NOTABLE: Four of the 35 links Wambui wants suppressed lead to articles published by the Kenya Revenue Authority itself — the government’s own tax body. She is asking a court to help her bury the taxman’s own public record of the case.

    The Real Motivation: Sending Investors a Clean Search Page

    In her court papers, Ms Wambui is unusually candid about why these articles harm her. She states that ‘business engagements, particularly those involving foreign clients, donors, and partners, have been disrupted, as international stakeholders who carry out online due diligence encounter the outdated articles and are misled into doubting my integrity and suitability for engagement.’

    This is a confession dressed as a complaint. She is not arguing that the articles are false. She is arguing that they are inconvenient. Specifically, she is arguing that they are inconvenient to the due diligence process of her foreign investors and business partners. She wants to be able to send prospective partners a Google search result page that tells only the sanitised version of her story.

    What Ms Wambui calls ‘outdated information’ is, more accurately, accurate information about events that actually occurred. The prosecution happened. The arrest warrants were real. The eight criminal counts were formally charged. The fines were paid. The case is part of the permanent public record of the Kenyan court system. No Kiambu court order can change that. What she is asking Google to do is to ensure that investors who search her name cannot easily find that record.

    This is not a privacy case. This is a cover-your-tracks case — and the court must see it clearly.

    The Weston Hotel Escape: What The Record Shows

    For investors and partners conducting due diligence, the tax case is not the only chapter of the Wambui record that demands scrutiny. When KRA moved to have her arrested in December 2021, she was tracked to Weston Hotel along Langata Road — a property publicly and extensively associated with President Ruto. According to investigative reporting at the time, she and her daughter departed in a hurry, leaving behind personal items that no innocent person flees from police with.

    A court subsequently unfroze 13 of her bank accounts after a High Court judge found KRA had frustrated her stated willingness to pay. The unfreeze came before the compounding. The sequence matters: accounts unfrozen, a deal struck, fines paid, political appointment received, case withdrawn. All within a span of weeks straddling the December 2022 presidential appointment.

    The timing is not subtle. The appointment preceded the withdrawal by five weeks. The withdrawal preceded the formal dropping of the firearms case by the same prosecutorial office. Ms Wambui is right that the search results damage her reputation with foreign partners. Those foreign partners should be grateful for the information.

    A Pattern of Tenders, Scandals and Legal Intimidation

    The Sh2.2 billion tax case is not a standalone incident. It is the first published chapter in what has since become an extensive and documented record of controversies clustering around Purma Holdings and associated entities.

    In 2023, barely months after the tax case was closed, trade CS Moses Kuria disclosed in Senate testimony that Purma Holdings had been awarded KNTC contracts to supply 30,000 metric tonnes of rice, 12,500 tonnes of edible oil, and 20,000 tonnes of beans. Court testimony by KNTC Managing Director Lucy Anangwe subsequently established that Purma Holdings was paid Sh3.9 billion for rice whose actual market value was Sh3.1 billion — a Sh800 million markup that came out of the public purse. She also secured Sh2.5 billion for edible oil and Sh3.4 billion for beans, bringing the KNTC exposure alone to roughly Sh9.8 billion across these contracts.

    Separate associated entities — Charma Holdings, Enterprise Supplies Ltd and Evertec General Trading Company — each received additional KNTC contracts worth hundreds of millions. All four companies have documented connections to Ms Wambui’s network. The EACC opened an investigation. Former KNTC boss Pamela Mutua was charged. Ms Wambui’s companies were not charged. The pattern is consistent: proximity to scandal, distance from accountability.

    PATTERN: When Nation Media Group published the KNTC edible oils investigation in October 2023 linking Purma Holdings to the scandal, Wambui’s lawyers immediately demanded a retraction and threatened defamation action. NMG did not retract. The same playbook — suppress, threaten, litigate — is now being applied to Google.

    In 2024, the Directorate of Criminal Investigations froze bank accounts linked to her companies over the KNTC contracts. That freeze contributed, by her own account in court filings, to her inability to service an Sh8.267 billion loan from Equity Bank, secured against Glee Hotel, her flagship 211-room luxury property on the Northern Bypass.

    Glee Hotel: The Sh8 Billion Debt Mountain

    In January 2026, Nation Media Group reported that Ms Wambui and Glee Hotel Ltd had sued Equity Bank to block a planned February 5, 2026 auction of Glee Hotel after she defaulted on loans totalling Sh8.267 billion. Equity Bank’s court filings indicate that at one point she offered to pay Sh5 billion in full settlement, requesting the bank absorb a haircut of more than Sh3 billion. She later raised the offer to Sh7 billion. The bank declined both.

    The November 2025 correspondence from her camp, according to Equity Bank’s court filings, was not marked ‘without prejudice’ — a legal protection — meaning it constitutes an admission of the debts owed. Among assets charged as security are land parcels in Runda, Westlands, South B, Ruiru, Thindigua, Ruaka and Ongata Rongai. Her daughters are listed as guarantors.

    For a foreign partner or donor doing due diligence, this is the financial landscape: a businesswoman facing a multibillion bank default, whose core company has been implicated in a rice contract markup, whose bank accounts were frozen by the DCI, and who paid her way out of criminal tax charges rather than going to trial. These are not outdated stories. These are live, consequential facts.

    The irony is devastating: Wambui wants to suppress old articles to attract new investors, at the very moment that new articles are exposing why old investors should have been worried all along.

    The Communications Authority and Nightingale: The Conflict That Never Resolved

    When President Ruto appointed Ms Wambui as Communications Authority of Kenya board chair in December 2022, critics immediately flagged that her daughter Evelyn Nyambura Mungai was co-owner of Nightingale Enterprises, which had secured contracts to lay fibre optic cables under the government’s Sh5 billion Digital Super-Highway project. Investigations found that Wambui had transferred her shares in Nightingale to Evelyn shortly before the tender award — a move that critics argued was a cosmetic conflict-of-interest shield.

    The CA regulates the ICT sector. Nightingale was delivering ICT infrastructure under government contract. The Solicitor-General and the CA boss defended the appointment at the time. Ms Wambui served as chair until August 2025 when President Ruto revoked her appointment and simultaneously transferred her to chair the Athi Water Works Development Agency board — yet another parastatal responsible for public funds. The musical chairs of parastatal appointments has never slowed the controversies; it has merely moved them around.

    The Precedent Danger: Why the Court Must Reject This Petition

    The implications of granting Ms Wambui’s petition extend far beyond her personal reputation. If the Kiambu High Court orders Google to suppress search results about a criminal prosecution simply because the charges were tactically withdrawn through a financial settlement, it will establish a principle that any person with enough money to compound a criminal offence can also buy the erasure of the public record of that offence. Kenya’s accountability ecosystem cannot survive that precedent.

    Every corrupt official whose case is dropped by a politically influenced DPP could file similar petitions. Every tender fraudster who cuts a deal with investigators before trial could argue that the dropped charges create a right to be forgotten. Every tax evader who pays fine-level amounts to avoid conviction could demand that journalism about their prosecution disappear from the internet. The right to be forgotten would transform from a tool of personal dignity into a mechanism of institutional impunity.

    The court should also take note of the technical problems with Ms Wambui’s case against the respondents. Google Kenya Ltd has correctly argued that it is a separate legal entity that neither owns nor operates the Google search engine. It provides sales, marketing and research and development services exclusively. Its memorandum of association, attached as evidence, supports this. Google LLC, the actual operator of the search engine, has not filed a replying affidavit. The petition may collapse on jurisdictional technicalities before it ever reaches the merits.

    LEGAL CRACK: If Google Kenya Ltd is not a proper party — as it credibly argues — then Ms Wambui’s case against the entity that actually operates the search engine has a significant jurisdictional problem. The June 10 ruling on the interim injunction will test whether Kiambu court is prepared to grant sweeping relief against a respondent that may have no operational control over the outcome.

    What Foreign Investors Actually Deserve to Know

    Ms Wambui invokes foreign investors, donors and international partners as victims of Google’s search results. She argues they are being misled. The reality is the reverse. What foreign investors deserve is the complete picture — and the complete picture is this:

    The person they are evaluating is a tenderpreneur who built a fortune on government contracts, evaded taxes on that fortune for years, dodged a police dragnet by sheltering in politically connected premises, was charged on eight counts of tax evasion and two counts of illegal firearms possession, had both cases dropped following financial settlements and a high-profile political appointment, subsequently received multibillion-shilling KNTC contracts within months of the case withdrawal, is implicated by court testimony in a Sh800 million rice contract markup, is under an Sh8.267 billion bank default, and is now in court attempting to suppress the journalism that documented all of the above.

    That is not outdated information. That is the most current and relevant due diligence profile available on Mary Wambui Mungai. The 35 articles she wants buried are not a legacy of the past. They are the foundation without which no honest assessment of her present-day dealings is possible.

    If the truth about Mary Wambui’s history damages her reputation, that is the truth doing its job — not an injustice requiring judicial remedy.

    Conclusion: The Court Must Protect Public Interest, Not Private Image

    The Kiambu High Court will deliver a ruling on June 10 on whether to grant interim orders suppressing the 35 links pending the full hearing. That ruling will be closely watched not only by journalists and civil society, but by every Kenyan public official who has survived a criminal case through political intervention and wonders whether the digital record of that survival can be similarly managed.

    The court must reject the interim injunction. It must find that the public interest in the continued accessibility of accurate journalism about a criminal prosecution of a public figure outweighs the private inconvenience that journalism causes to that figure’s business dealings. It must recognise that the right to be forgotten — even if it were codified in Kenyan law — explicitly excludes matters of public interest, and that a Sh2.2 billion tax evasion prosecution of a government supplier is irreducibly a matter of public interest.

    And when the matter goes to full hearing, it must find that Google is not a publisher of defamatory content but an indexer of public information — that the news organisations who wrote the stories are not parties to this suit — and that the remedy Ms Wambui seeks is not available under Kenyan law as it currently stands.

    Mary Wambui built her fortune in the corridors of government procurement. She navigated two criminal cases by paying fines and leveraging political capital. She now chairs a public water authority. She runs a luxury hotel on borrowed billions. She is not a private citizen with a minor embarrassment from a distant past. She is a public figure with an active and ongoing public record.

    The public has a right to that record. The press has a right to report it. Google has no obligation to bury it. And the court has a duty to say so.

  • ‘Puzzle Over Mysterious Chinese Woman ‘Chimu Electric’ With Questionable Documents Bagging Multibillion On State Tenders

    ‘Puzzle Over Mysterious Chinese Woman ‘Chimu Electric’ With Questionable Documents Bagging Multibillion On State Tenders

    NAIROBI — Her name does not appear on any corporate register that can be easily pulled. Her company, referred to in insider accounts as Chimu Electric, leaves little publicly verifiable footprint in Kenya’s business registry. And yet, if a growing body of complaints lodged with procurement regulators, parliamentary committees, and investigative bloggers is to be believed, Du Ying Catic has constructed an invisible empire inside one of Kenya’s most strategically critical parastatals Kenya Power and Lighting Company quietly directing the flow of multibillion-shilling public contracts from the shadows while the men who are paid to provide oversight have looked the other way.

    The allegations against her are serious, specific, and multiply sourced. They describe a foreign national who has allegedly weaponised an intimate relationship with Kenya Power’s Managing Director and Chief Executive Officer, Dr. Joseph Siror, to navigate and manipulate a procurement architecture worth tens of billions of shillings annually. They describe tailored tender specifications, the systematic elimination of qualified competitors, a web of proxy companies designed to frustrate regulatory tracing, and a culture of fear inside the utility in which staff who questioned irregular contract awards found their careers destroyed. They describe, in the blunt language of those who have filed formal complaints, a foreign national who was allegedly told she was untouchable because the man at the top could not expose her without exposing himself.

    Siror, for his part, has not publicly addressed any allegation relating to Du Ying or Chimu Electric. Kenya Power has not issued any statement in response to the specific procurement complaints that have reached both the Public Procurement Regulatory Authority and Parliament. Neither Siror nor any official spokesperson for Kenya Power responded to questions submitted for this investigation. Du Ying Catic could not be reached for comment. The allegations reported here are, as yet, unproven in a court of law. But the documentary evidence from regulatory proceedings, parliamentary hearings, and court filings tells a story of procurement dysfunction at Kenya Power that demands scrutiny — and Du Ying’s alleged role at the centre of that dysfunction demands answers.

    “She uses these connections as leverage to secure contracts by any means. Many people feel intimidated and powerless to act because of her claimed protection.”

    THE GHOST IN THE MACHINE: WHO IS DU YING CATIC?

    Du Ying Catic is described by sources across Kenya’s energy sector as a Chinese national who has been resident in Kenya for an indeterminate period, operating under the commercial identity of Chimu Electric a company name that has surfaced repeatedly in the accounts of contractors, procurement insiders, and complainants who allege she has used it, alongside an array of other entities, to channel business from Kenya Power’s tender process into her personal network.

    A formal complaint submitted to the online platform of investigative blogger Cyprian Nyakundi — who subsequently published the initial allegations — is explicit in its description of her operating methods. According to the complainant, Du Ying “allegedly influences tenders at KPLC by using the names of Kenyan state agencies to intimidate competitors.” She is described as presenting herself as untouchable, boasting of “powerful friends within security agencies” and wielding those claimed connections as leverage to ensure preferred outcomes in competitive bidding processes.

    The complaint further alleges that there are “serious concerns about whether she pays the required taxes in Kenya” and documents what it describes as “alleged corruption practices that would not be tolerated in China but are being carried out here” a striking observation in itself, given Beijing’s increasingly aggressive domestic anti-corruption campaigns under President Xi Jinping, campaigns that have imprisoned thousands of officials and businesspeople for conduct of the type allegedly being perpetrated by Du Ying in Nairobi.

    Perhaps most damningly, the complaint notes reports from her own employees of “oppression and poor treatment” suggesting that whatever enterprise she has constructed extends beyond pure contract manipulation into the labour and commercial environment around her.

    What cannot be confirmed through this investigation is the precise corporate structure through which Chimu Electric operates, or the full scope of its directorship, shareholding, and registration history. Kenya’s Business Registration Service records, accessible through the eCitizen portal, require specific company number searches to return results a limitation that, critics note, makes the kind of opacity described by Du Ying’s accusers entirely achievable for a sufficiently motivated operator. What is confirmed is that the company name has been formally raised in investigative contexts, that the allegations have been put on public record, and that no rebuttal has been issued by anyone operating under that name.

    THE ANATOMY OF CAPTURE: HOW IT ALLEGEDLY WORKS

    Investigative accounts that have surfaced across multiple platforms describe a specific and sophisticated methodology. Du Ying does not, according to these accounts, operate through a single easily traceable corporate vehicle. Instead, she has allegedly cultivated what one account describes as a “constellation of proxy entities” — separate companies, each positioned to bid for a different category of Kenya Power tender, each maintaining the appearance of being an independent market participant, while in practice serving a single coordinating intelligence.

    This approach, if accurately described, represents a textbook exploitation of the structural weakness in Kenya’s public procurement framework. The Public Procurement and Asset Disposal Act requires transparency, competitive bidding, and documentary compliance. But it assumes that each bidding entity is genuinely independent. Where a single operator controls multiple apparently separate companies, the competitive dynamic that the law is designed to protect collapses entirely replaced by a performance of competition that delivers a predetermined result.

    The tender categories allegedly targeted by Du Ying’s network span the full breadth of Kenya Power’s procurement universe. Documented accounts name smart meters worth billions, electric motorcycles procured as part of Kenya Power’s fleet electrification programme, fleet tracking systems, spare parts for transformers, and a range of support services contracts. What they share, according to those who have raised concerns, is that the specifications for each were allegedly shaped in advance to match the capabilities — real or claimed — of Du Ying’s preferred companies, while the evaluation criteria were manipulated to disadvantage more qualified competitors.

    She has allegedly constructed a constellation of proxy entities each positioned to bid for a different Kenya Power tender category, each maintaining the appearance of being an independent market participant.

    Kenya Power’s own eProcurement portal, maintained at its Stima Plaza headquarters, lists hundreds of active and historical tenders across categories precisely matching those named by complainants. The portal itself is theoretically designed to ensure transparency a digital record of what was procured, from whom, and for how much. But investigators who have examined the portal’s output note that the beneficial ownership question who ultimately controls the companies being awarded contracts is nowhere answered by the public record. That opacity is Du Ying’s alleged operational environment.

    THE SMART METERS SCANDAL: WHERE THE PAPER TRAIL BEGINS

    The most extensively documented thread of what is alleged to be Du Ying’s procurement operation runs through the Sh5.4 billion smart meters tender a contract whose award was flagged, challenged in court, and publicly questioned by the Public Procurement Regulatory Authority in terms that left little room for ambiguity about the extent of the irregularities involved.

    Kenya Power advertised the tender in February 2023, initially restricting eligibility to local manufacturing firms. What happened next has been documented in PPRA correspondence, parliamentary testimony, and court proceedings. Kenya Power issued six addendums to the original tender documents — each one modifying the eligibility criteria in ways that, according to complainant Benedict Kabugi Ndungu, substantially and irregularly changed the original terms to custom-fit the tender for a small group of preferred bidders who were allegedly in collusion with senior KPLC staff.

    The final award went to four companies: Inhemeter Africa Company Ltd, awarded Sh5.4 billion; Smart Meter Technology Ltd, awarded Sh4.6 billion; Yocean Group Ltd, awarded Sh5.4 billion; and Magnate Ventures Ltd, awarded Sh5.4 billion. The total value of the contracts exceeded Sh21 billion across the programme.

    PPRA Director-General Patrick Wanjuki, testifying before Parliament, was direct in his assessment of the Smart Meter Technology award. He told MPs that Smart Meter Technology Ltd had an outstanding order for 91,000 smart meters that was due for delivery on 24 July 2020 — and that, by July 2023, not a single meter from that order had been delivered. Kenya Power’s own tender conditions, documented in the bidding data sheets, explicitly stated that bidders with more than 50 percent outstanding KPLC orders were ineligible to participate. Smart Meter Technology met that disqualification threshold and then some — its outstanding order represented 100 percent non-delivery. It was awarded a new contract anyway.

    The High Court, responding to Kabugi’s legal challenge, issued an order stopping the tender process, with Justice John Chigiti finding sufficient grounds to issue the injunction on the basis of alleged procedural and substantive breaches. The court papers describe inflation of meter prices, collusion between top KPLC management and the companies awarded contracts, deliberate watering down of financial requirements, changed technical specifications, and altered tender security requirements all, according to the complainant, calibrated to produce a result that competition alone would never have delivered.

    Sources directly link Smart Meter Technology Ltd to Du Ying’s business network. This newspaper has not been able to independently verify those links through corporate records. What the documentary record does establish, without dispute, is that PPRA found the award unlawful, Parliament was told the utility broke its own rules, and the courts intervened to stop a contract whose total value across the programme exceeded Sh21 billion.

    A CULTURE OF FEAR: WHAT HAPPENS TO THOSE WHO QUESTION

    A procurement scandal of this scale does not sustain itself without an internal enforcement mechanism — a way of silencing the staff, auditors, and contractors who might otherwise raise alarms. Multiple accounts that have reached this newspaper describe what sources characterise as a systematic culture of oppression inside Kenya Power directed at those who question irregular tender outcomes.

    Staff who have raised concerns about procurement irregularities reportedly find themselves professionally marginalised — transferred to less prominent assignments, denied promotions, or subjected to disciplinary processes whose timing and targeting raise questions about motivation. The message communicated by these actions, according to those familiar with the environment, is unambiguous: to challenge the wrong contract award is to end your career.

    This account is consistent with a broader documented pattern at Kenya Power under Siror’s tenure. In May 2024, Kileleshwa Ward MCA Robert Alai publicly alleged that Kenya Power’s only airmobile pilot whose specialised role involved using helicopters for rapid transmission line repairs, a critical operational function had been fired by Siror after refusing to participate in what Alai described as procurement irregularities. Siror gave no public explanation for the dismissal of the uniquely skilled officer. The pilot’s departure left Kenya Power without its sole helicopter-qualified line maintenance specialist.

    As recently as June 2025, more than twenty junior Kenya Power staff were dismissed in connection with corruption allegations. The wave of dismissals at junior level stands in contrast to the complete absence of any accountability action at the senior management level despite the volume and seriousness of the procurement complaints that have reached PPRA, Parliament, and the courts.

    Twenty junior officials were dismissed in 2025 for corruption. No senior manager has faced any disciplinary consequence. The asymmetry of accountability is itself the message.

    THE TAX QUESTION: STEALING FROM KENYANS TWICE

    Beyond the alleged manipulation of public tenders, Du Ying faces a separate category of allegation that speaks to the broader economic harm of her alleged operation. The formal complaint submitted against her raises specific concerns about her tax compliance asking whether she pays the required taxes in Kenya, and suggesting that her corporate structures are designed in part to minimise her tax footprint.

    If accurate, this allegation describes a particularly brazen form of double extraction. The first theft is from Kenya Power’s procurement budget public funds that, when channelled through inflated contracts to preferred suppliers rather than to genuinely competitive market participants, represent money taken directly from the national utility and ultimately from electricity consumers who pay tariffs that incorporate those inflated costs. The second theft is from the Kenya Revenue Authority the tax revenue that should flow from the profits of successful contracting activity, but which allegedly disappears into structures designed to keep it beyond the taxman’s reach.

    Kenya’s KRA has, in recent years, substantially expanded its capacity to pursue tax non-compliance among foreign-owned businesses and individuals. The KRA’s intelligence and surveillance division has developed tools for tracing beneficial ownership, identifying discrepancies between declared turnover and lifestyle indicators, and pursuing undeclared offshore income. Whether those tools have been applied to Du Ying or the entities allegedly connected to her network is not known to this newspaper.

    THE BROADER PATTERN: CHINESE BROKER NETWORKS IN KENYA’S PUBLIC SECTOR

    Du Ying Catic does not operate in a vacuum. Her alleged methods sit within a documented and much wider pattern of foreign nationals, including Chinese nationals, who have exploited governance weaknesses in Kenya’s public procurement system to extract value from state contracts.

    The pattern has attracted official attention at the highest international level. A report published on 29 March 2024 by the Office of the United States Trade Representative stated explicitly that American firms continue to report challenges competing against foreign firms willing to engage in bribery for Kenyan government contracts. The report noted that foreign firms, including those without proven track records, have won government contracts when partnered with well-connected Kenyan firms or individuals — a description that maps with striking precision onto the alleged operating model attributed to Du Ying.

    The USTR report also flagged Kenya’s Integrated Financial Management Information System as vulnerable to manipulation and hacking a procurement infrastructure weakness that, investigators note, creates fertile ground for exactly the kind of specification-bending and eligibility-altering that PPRA documented in the Kenya Power smart meters scandal.

    Beyond procurement fraud, the African Development Bank has in recent years blacklisted multiple Chinese construction companies operating across the continent, including China Henan International Corporation Group, for fraudulent practices. The Chinese construction giant CCCC which has operated in Kenya on major infrastructure projects has faced bans, blacklistings, and scrutiny across dozens of countries. Kenya itself has seen public uproar over a KURA tender notice issued in February 2024 that restricted bidding for a major Nairobi road project to Chinese nationals only, on the basis that the project was financed by China Exim Bank a practice that critics note effectively privatises public procurement in favour of a single foreign national group.

    These are not isolated incidents. They represent a documented ecosystem in which the combination of Chinese state financing, Chinese corporate participation, and in cases like the one allegedly involving Du Ying Chinese individual broker activity, has progressively captured significant portions of Kenya’s public contracting landscape in ways that domestic businesses and Kenyan taxpayers are bearing the cost of.

    THE BOARD’S SILENCE: OVERSIGHT THAT WAS NEVER THERE

    Kenya Power’s Board of Directors is the primary governance layer above Siror’s executive management. It carries a statutory obligation to ensure that the company’s procurement function operates with integrity, transparency, and compliance with the Public Procurement and Asset Disposal Act. On the basis of the public record, that obligation has not been discharged.

    Parliamentary scrutiny of Kenya Power’s accounts has produced a catalogue of findings that the board should, by any reasonable governance standard, have acted on. The Auditor General’s examination of Kenya Power’s financials identified weak IT controls, lax password policies, lack of activity monitoring across core systems, and unrestricted super-user access — vulnerabilities described by the Public Accounts Committee’s chair, Kimani Pkosing, as a “ticking time bomb” creating room for fraud. The committee also flagged a Sh55.9 million direct contract awarded in 2018 to an advertising agency without competitive bidding — a single data point in a much larger pattern.

    In November 2025, Pkosing’s committee subjected Siror and his management team to what one report described as “heated” questioning, exposing what investigators characterised as layer after layer of malfeasance. The findings included ghost suppliers who received full payment for delivering nothing, artificial shortages of essential materials like transformers and prepaid meters used to justify emergency purchases at inflated prices, and contracts awarded in 2024 alone through the Supplies Branch that bypassed competitive bidding requirements entirely.

    Through all of this, Kenya Power’s board has maintained what critics describe as a deafening silence. No public statement has been issued addressing the PPRA’s findings on the smart meters tender. No board-initiated investigation into the procurement complaints has been announced. No member of the board has appeared before Parliament to account for the oversight failures documented across multiple successive reports. The board’s failure to act is either evidence of incompetence at the level of collective institutional failure, or it is evidence of something worse.

    Ghost suppliers who deliver nothing but receive full payment. Artificial shortages of transformers used to justify emergency purchases at inflated prices. A board that has said nothing.

    THE COST TO KENYANS: WHO PAYS FOR THIS

    The consequences of the procurement dysfunction allegedly enabled by Du Ying and the broader corruption ecosystem at Kenya Power are not abstract. They are measured in shillings added to electricity tariffs, hours lost to power outages, businesses damaged by grid unreliability, and households pushed deeper into energy poverty by costs that should be lower.

    Every shilling allegedly extracted through inflated contract pricing is a shilling that should have been spent on infrastructure on new transmission capacity, on maintenance of existing grid assets, on the reliability improvements that would reduce the frequency of the outages that Kenyan businesses and households endure. Every shilling that allegedly flows to a proxy company rather than to a genuinely competitive supplier is a shilling that the most capable provider did not receive meaning that the goods or services delivered, if they are delivered at all, are likelier to be of lower quality or delivered later than a properly competitive process would have produced.

    Kenya Power reported current liabilities of Sh115.2 billion against assets of Sh44.2 billion in the Auditor General’s most recent detailed examination a negative working capital position of Sh71 billion that represented the third consecutive year of deficits and raised serious questions, documented in parliamentary proceedings, about the utility’s long-term solvency. That financial position does not exist in isolation from the procurement dysfunction that has been documented across the same period. The two are directly connected.

    WHAT THE INSTITUTIONS MUST DO

    The Ethics and Anti-Corruption Commission has the statutory power to investigate procurement irregularities at state entities and to pursue the individuals responsible for them, whether Kenyan or foreign. The complaints against Du Ying filed formally, with specific allegations, by named complainants who have engaged both regulatory bodies and the courts provide more than sufficient basis for a formal EACC investigation. That investigation should trace the full corporate network allegedly connected to her, examine the tender awards in which her companies or proxies participated, and determine whether criminal charges are warranted.

    The Kenya Revenue Authority should examine whether Chimu Electric and any associated entities have complied with their tax obligations whether they hold active KRA PINs, whether their declared turnover is consistent with the contract values allegedly awarded to them, and whether the profit extraction mechanisms alleged by complainants represent undeclared income.

    The Directorate of Immigration Services should review Du Ying’s immigration status and the regulatory basis on which she is operating commercial activities in Kenya. Foreign nationals operating businesses in Kenya are required to comply with the Work Permits Act and the associated regulations governing foreign participation in the economy. Where that compliance is absent or falsified, immigration consequences follow as a matter of law.

    The Director of Public Prosecutions should examine the documentary record assembled by PPRA, the courts, and Parliament and determine whether the threshold for criminal charges — against the procurement officials who processed the irregular tenders, against the corporate beneficiaries of those tenders, and against the individuals alleged to have orchestrated the manipulation — has been reached. On the basis of what is already in the public domain, that threshold appears to have been crossed.

    Siror’s position as Managing Director is, in the circumstances, untenable. A chief executive who has presided over documented procurement violations flagged by the PPRA, examined by Parliament, and challenged in the courts and who has yet to offer any public accounting for those violations — cannot credibly lead a strategically critical national asset. The Energy Cabinet Secretary has a responsibility to the Kenyan public to address that question directly.

    THE MYSTERY THAT MUST NOT REMAIN A MYSTERY

    Du Ying Catic remains, for now, a largely invisible figure in Kenya’s public record. There is no profile, no press conference, no corporate filing that places her in full view. That invisibility has been, if the allegations are accurate, a deliberate and carefully maintained operational asset. The less that is publicly known about her, the harder she is to challenge.

    This investigation will not be the last word on Du Ying. The questions it raises about who she is, how she entered Kenya, what companies she controls or benefits from, what contracts have been awarded to those companies, how much money has moved through those contracts, and what has been paid in taxes are questions that the relevant Kenyan institutions have the statutory power to answer. The question is whether they have the will.

    Kenya’s procurement system cannot be captured by a foreign national through a bedroom arrangement and a web of proxy companies without the active participation of domestic enablers and the passive complicity of oversight bodies that chose not to look. Du Ying’s alleged reign at Kenya Power is not, at its root, a story about one Chinese woman. It is a story about what Kenya’s institutions allow to happen when they abandon the Kenyan public they are constituted to serve.

    That story is not yet over. But the people who have the power to write its ending know who they are.

  • LifeCare on the Brink: SHA Fraud, Stolen Wages, and the Rotten Empire Jayesh Saini Built

    LifeCare on the Brink: SHA Fraud, Stolen Wages, and the Rotten Empire Jayesh Saini Built

    On the morning of Monday, May 25, 2026, dozens of doctors, nurses, clinical officers, and support staff walked out of LifeCare Hospital’s gleaming Eldoret premises and lined the road outside, their hospital ID badges still clipped to their uniforms. They were not on strike in the traditional sense. They were doing something rarer and, in the context of a private hospital that has spent years cultivating a polished public image, far more dangerous: they were telling the truth.

    The workers who gathered outside LifeCare Eldoret that morning alleged, with documented payslips in hand, that contributions deducted from their salaries for the Social Health Authority, the National Social Security Fund, and the Higher Education Loans Board had been withheld from the relevant state bodies for months. Healthcare professionals employed at a private hospital billing patients at full private rates had been left unable to access their own medical cover because, despite the deductions appearing faithfully on their payslips, the money was never forwarded. When they fell sick, management’s reported instruction was to seek treatment at the Moi Teaching and Referral Hospital.

    Dr. Amele Ndoli, the workers’ welfare chairperson, stood outside the facility that morning and articulated what many had been too frightened to say indoors. “We are working at such a prestigious hospital, yet we cannot afford quality healthcare ourselves due to the non-remittance of our SHA deductions,” he said. The threat that followed was delivered with the precision of someone who had watched internal complaints disappear without trace for months: “This sit-in is just a warning shot. If our grievances are not addressed within the next 48 hours, we are going to issue a formal strike notice in strict tandem with the Labour Relations Act. We will not be silenced.”

    Inside the hospital boardroom, Eldoret Human Resource Manager Joshua Rop met journalists and offered the response that institutions in denial almost always reach for: no formal written complaints had been received. The workers, in other words, had not used the right channels. What Rop did not explain, and what multiple current and former employees have now told this publication in detail, is that the right channels at LifeCare Eldoret do not exist in any meaningful sense. They lead to show-cause letters and dismissal notices, not resolution.

    Healthcare workers employed at a private hospital billing patients at full private rates were told to seek treatment at a public referral hospital.

    The Director and the Culture He Created

    The figure at the centre of the Eldoret collapse is Dr. Mayank Puri, the facility’s Senior Director and the person whose arrival staff consistently identify as the turning point at which the hospital began its managed decline. Puri’s professional profile is impressive on paper. He serves as Director of Hospital Operations for LifeCare Hospitals, bringing over twelve years of experience as a healthcare profit and loss leader with a stated focus on team building, cost optimisation, and revenue growth. As recently as February 2026, he was publicly addressing participants at the 7th Eldoret Marathon, speaking as Senior Director of LifeCare Hospitals Eldoret and articulating the hospital’s mission to safeguard athlete health.

    That public profile is, by all accounts from those who work beneath it, a fiction. Former employees and current staff who spoke to Kenya Insights under strict conditions of anonymity describe a workplace transformed by Puri’s arrival from a functioning hospital environment into one defined by suppressed grievance and low-grade terror. Any employee who raises a concern, questions a management decision, or advocates for better working conditions faces a show-cause letter or summary dismissal. The message, delivered repeatedly through both action and silence, is that dissent will not be tolerated.

    One former employee, who left after months of attempting to raise legitimate clinical concerns through internal structures, described the atmosphere with clinical precision: “Since he arrived, staff complaints are ignored, and anyone who tries to raise concerns risks being fired or issued with a show-cause letter. Employees are now living and working in fear because management no longer tolerates criticism or honest feedback from workers on the ground. He is not approachable at all. Most employees describe him as someone more focused on chest-thumping and maintaining a public image rather than solving the serious operational problems affecting the hospital internally.”

    The clinical consequences of this governance posture are not theoretical. A hospital where frontline workers cannot report drug shortages, equipment failures, or patient safety concerns without risking their livelihoods is a hospital operating with its own warning systems disabled. The patients who pass through LifeCare Eldoret’s doors are receiving care from a workforce that has been structurally silenced. The resignation of experienced staff — doctors, nurses, and clinicians who carry institutional knowledge accumulated over years — has accelerated since Puri’s installation, leaving behind a depleted and demoralised team.

    Locum Workers: Contracts Written to Be Broken

    Among the most concrete and verifiable allegations against Puri’s management is the treatment of locum staff. Workers hired under contracts stipulating nine-hour shifts are being compelled to work twelve-hour shifts. The additional three hours per shift are not voluntary, not compensated at an agreed rate, and not supported by any variation clause that the workers were asked to agree to. They are simply extracted.

    This is not a scheduling dispute. Locum workers in Kenya’s healthcare sector are among the most economically precarious members of the workforce, typically without the employment protections available to permanent staff and therefore among the least able to resist unlawful demands from management. Forcing locums to work beyond contracted hours without proper compensation constitutes a breach of the Employment Act, which requires that any variation in working conditions be agreed between the parties and that overtime be properly compensated.

    Multiple sources describe a deliberate and visible inequality in how permanent staff and locum workers are treated at the facility, with different standards applied to scheduling, discipline, and basic consideration. That two-tier system has generated resentment and fragmented what should be a unified clinical team. In a hospital already haemorrhaging experienced staff to resignation, the erosion of team cohesion among those who remain is a direct threat to patient care.

    Locum workers hired on nine-hour contracts are being compelled to work twelve-hour shifts — uncompensated, uncontracted, and apparently unchecked.

    The SHA Theft Hidden in Plain Sight

    The statutory deduction scandal is both the most damaging and the most verifiable dimension of the allegations against LifeCare Eldoret’s management. Permanent staff members report that deductions for SHA contributions, NSSF, and HELB appear each month on their payslips as normal line items. When those workers check their records with the relevant state bodies, the corresponding remittances are absent. The deductions were taken. The money was not forwarded.

    Under Kenyan law, statutory deductions are trust monies the moment they are withheld from an employee’s salary. They do not become the employer’s funds at any point. SHA contributions, calculated at 2.75 percent of gross salary with a minimum of Ksh 300 monthly, are due by the ninth of the following month. NSSF contributions from February 2025 operate under a revised two-tier structure, with both employee and employer contributions due by the same deadline. HELB remittances must reach the board by the fifteenth of the following month. Employers who deduct but fail to remit face fines of up to Ksh 2 million, imprisonment of up to three years, or both.

    The practical consequences for workers at LifeCare are compounding in real time. HELB borrowers face the risk of appearing as loan defaulters. SHA accounts show no active contributions despite years of deductions appearing on payslips. Pension records are incomplete. And the culture of fear that Puri’s management has cultivated means most workers have been suffering these losses in silence, calculating that the risk of speaking out exceeds the injury already done to them.

    There is a particular cruelty to this situation that bears stating plainly. These are healthcare workers, people who have dedicated their professional lives to caring for the sick, being denied access to the healthcare system they work within because the institution they serve has pocketed the contributions that should have activated that cover. When they fall ill, they are told to go to Moi Teaching and Referral Hospital. The hospital that employs them and bills their patients at private rates will not cover them.

    Life Care Hospital employees in Eldoret, Uasin Gishu County, demonstrate at the entrance of the hospital on May 25, 2026, over non-remittances of their statutory deductions, alleged use of abusive language by a director, intimidations, among other grievances.

    Chatan and the Ground Floor of Fear

    Puri is not operating alone. Beneath the Senior Director operates a support manager identified by multiple sources as Chatan, described as the head of support staff at LifeCare Eldoret. The description of Chatan’s management style is consistent across every account received by this publication. Rather than organising and motivating the support workers under his authority, he conducts himself through public confrontation, berating housekeepers, porters, and cleaners in hospital corridors in front of patients and colleagues. The effect is not discipline but humiliation. The result is not a high-performing support function but a demoralised workforce going through the motions while bracing for the next public dressing-down.

    This matters beyond the dignity of individual workers. A hospital that cannot maintain the morale and dignity of its housekeeping and support staff cannot maintain the standards of cleanliness, hygiene, and patient environment that clinical quality depends upon. The relationship between ward cleanliness, infection control, and patient outcomes is well established in healthcare governance. The conditions described at LifeCare Eldoret, where the person responsible for support staff management treats those workers as targets of aggression, are a patient safety issue as much as an employment one.

    Drug Shortages: Billing for What Is Not There

    For a 75-bed multispecialty facility that publicly positions itself as the pinnacle of healthcare excellence in the Eldoret region, equipped to handle everything from routine health assessments to the most intricate medical procedures, the recurring drug shortages described by staff are not a minor administrative gap. They are a fundamental breach of the hospital’s obligations to its patients, and they are happening while the institution continues billing those same patients at full private hospital rates.

    Frontline staff absorb patient anger daily over gaps that are entirely management-created. Patients presenting prescriptions are told to purchase drugs from external pharmacies. The gap between what LifeCare Eldoret charges and what it delivers has become a daily feature of clinical life inside the facility. The workers who described this situation to Kenya Insights did so with the exhaustion of people who have raised these concerns internally and been met with either silence or a show-cause letter.

    Patients are being directed to external pharmacies for drugs the hospital is simultaneously billing for on insurance claims.

    The SHA Fraud That Came Before: LifeCare Bungoma

    The Eldoret crisis does not exist in isolation. It is the continuation of a documented pattern of financial misconduct that the Africare Group has not been held to account for.

    On August 7, 2025, Health Cabinet Secretary Aden Duale announced the immediate suspension of 40 hospitals from the SHA scheme, following a sweeping forensic audit and review of suspicious claims flagged by SHA’s digital health system. The crackdown was the largest single enforcement action against healthcare fraud in Kenya’s recent history, bringing the total number of suspended facilities to 75 in under a month. The audit exposed a range of abuses: fake admissions, doctored medical records, patients billed for services they never received, outpatient visits fraudulently upgraded to inpatient admissions, duplicate claims for the same patient submitted across multiple facilities, and outright ghost patients.

    LifeCare Hospitals Bungoma was among those formally suspended, gazetted under Kenya Gazette No. 168 of August 7, 2025, in line with the SHA’s Transparency Policy. Bungoma alone accounted for four suspensions in the August crackdown, with LifeCare appearing alongside The Webuye Hospital, Maxicare Sunrise Hospital, and Nairobi Hospital. The CS was explicit: during the period of suspension, the facilities would not receive any SHA payments, reimbursements, or benefits, and surcharge recovery proceedings had been launched to claw back public funds already fraudulently claimed. “Any healthcare provider whose information is used to defraud SHA shall be held personally liable,” Duale warned.

    The allegations now emerging from Eldoret regarding SHA contributions deducted from workers but never remitted give the Bungoma suspension a different and darker context. If LifeCare Bungoma was billing SHA for ghost patients and inflated services on one side of the ledger while pocketing employee SHA contributions on the other, the institution’s relationship with the national health insurance system was not merely opportunistic but comprehensively parasitic. The financial misconduct at Bungoma, it now appears, was not an isolated branch failure. It was a group-wide posture.

    A Proprietor With a History

    Understanding the LifeCare crisis requires understanding the man whose name sits behind every facility in the Africare network. Jayesh Saini has built a sprawling private healthcare empire in Kenya, one that encompasses LifeCare Hospitals across five major counties, Bliss Healthcare — Kenya’s largest outpatient network with over 65 centres in 37 counties — Dinlas Pharma EPZ, Medicross, Fertility Point Kenya, and a stake in Nairobi West Hospital, the institution his father, Dr. Umesh Saini, established in the 1980s.

    Saini’s public positioning is that of a transformational healthcare entrepreneur, a man who saw the gap between what Kenya’s underserved communities needed and what existed, and built the infrastructure to fill it. He has been the subject of flattering profiles in multiple international business publications and has been repeatedly honoured for his contribution to accessible healthcare in East Africa.

    What those profiles do not address is the consistency with which his name has appeared at the centre of healthcare financing scandals stretching back over a decade. In 2012, parliamentary investigators named Saini as the driving figure behind Clinix Healthcare, a company that received at least Ksh 91.3 million from the National Hospital Insurance Fund’s civil servants’ medical cover scheme for facilities that investigators found to be non-existent or non-operational. The majority shareholder of Clinix was Pharma Investment Holdings, incorporated in the British Virgin Islands, the secretive offshore jurisdiction that Kenyan investigative committees have tracked in connection with several major financial scandals. Investigators noted that Saini also controlled Gesto Pharmaceuticals, which had separately been accused of supplying substandard drugs to the Kenya Medical Supplies Agency.

    The Clinix scandal did not result in a criminal conviction. It resulted in a parliamentary report and public hearings, after which Saini’s businesses continued their expansion. Clinix was later folded into the broader Bliss Healthcare network. The NHIF replaced by SHA in 2023. And Jayesh Saini’s network of hospitals was registered to receive reimbursements under the new scheme.

    The question that SHA, the DCI, and the Ministry of Labour must now confront is not whether the Africare Group has a pattern of exploiting public health financing and its own workers. That pattern is documented. The question is whether anyone in authority has the will to act on it.

    The HR Apparatus: Where It Started and Where It Leads

    The employment abuses at LifeCare do not begin with Mayank Puri and Chatan in Eldoret. They run deeper into the Africare structure, into the human resource machinery that governs how workers are recruited, employed, and discarded across the network.

    Varinder Singh, who served as Chief Human Resources Officer at Africare Global and was the most senior HR figure overseeing personnel across both LifeCare and Bliss Healthcare, previously faced explosive allegations of sexual harassment, including from female job seekers who encountered him in the course of applying for positions within the Africare umbrella. Singh was publicly celebrated by Africare as the architect of the group’s inclusive and high-performing culture, described as having nearly two decades of HR experience and as a champion of transparency and trust as the foundation of the Africare workplace. The allegations that had circulated about his conduct toward female job seekers described a very different encounter: women applying for positions at LifeCare or Bliss Healthcare facilities reported advances from Singh that went well beyond professional boundaries, with the power imbalance inherent in the application process making those advances particularly coercive.

    Those allegations did not result in any documented public accountability. Singh remained in his role. The institutional culture he embodied remained intact.

    Current employees are now raising strikingly similar complaints about leadership within Africare’s human resource function, alleging that female staff continue to face sexual advances from HR leadership, with employment opportunities, salary increments, and career placement used as leverage. That the same institutional culture appears to have persisted across different individuals holding HR authority at the same group of hospitals points not to isolated misconduct but to a structural failure of governance within Africare’s Kenya operations. The group’s HR department is, on this account, not the last line of protection for workers against abuse. It is the instrument through which abuse is administered.

    Under the Sexual Offences Act of Kenya, a person in a position of authority who persistently makes sexual advances that they know are unwelcome may be found guilty of sexual harassment. Where employment decisions are conditioned on the acceptance of those advances, the conduct constitutes a recognised form of workplace sexual coercion under Kenyan law. The affected women are entitled to file complaints with the National Gender and Equality Commission and to pursue action through the DPP under the Sexual Offences Act.

    The Meru Thread: Wages Withheld, Nurses Abandoned

    The Eldoret strike is not LifeCare’s only active employment crisis. Reports from Meru, where another LifeCare branch operates, describe a pattern in which nurses who have resigned after serving proper notice periods under the Employment Act of 2007 have been denied their final dues. The nurses raising these allegations describe their resignation letters being received and acknowledged, their notice periods being served, and yet upon exit, the hospital refusing to process their final pay. Management is said to have cited paperwork irregularities or internal policy requirements not referenced in their employment contracts as justification.

    Under the Employment Act, an employer is legally obligated to pay outstanding wages, accrued leave allowances, and any contractual terminal benefits upon an employee’s lawful separation from service. The law does not permit an employer to withhold these payments as leverage or on pretextual grounds. Healthcare workers, often young professionals carrying student loan obligations and family responsibilities, are particularly vulnerable to this kind of financial pressure. For them, a single month’s unpaid salary is not an inconvenience. It is a crisis.

    Mediheal’s Shadow: Eldoret’s Warning from Recent History

    LifeCare Hospitals is not the first private healthcare network in Kenya to present a polished public face while the interior decays. The collapse of Mediheal Group of Hospitals, which reached its most acute phase in 2024 and 2025, offers a template that LifeCare’s management and ownership should study with attention.

      Swarup Mishra.

    Mediheal, founded by Dr. Swarup Mishra and operating ten facilities across Kenya including a major presence in Eldoret, was for years celebrated as a model of private healthcare expansion. Its Eldoret Fertility and Transplant Centre was particularly prominent, handling the majority of Kenya’s kidney transplants. Then, in April 2025, a joint investigation by Deutsche Welle, ZDF, and Der Spiegel exposed a coordinated international organ trafficking network routed through the Eldoret facility, with vulnerable Kenyan donors lured by promises of large payouts and then underpaid, left without adequate post-operative care, and suffering chronic health complications that robbed them of their livelihoods. Health CS Aden Duale immediately suspended all transplant services at Mediheal and launched a parliamentary inquiry.

    While the parliamentary committee ultimately cleared Mediheal of the most serious trafficking allegations in April 2026, the scandal had already destroyed the group financially. By late 2024, auctioneers had seized property at Mediheal’s Nakuru facility to recover Ksh 40 million in unpaid doctor salaries. The Nakuru branch closed. The pattern replicated what investigators had documented at a hospital that had been growing unsustainably, billing aggressively, and managing its workers as a cost to be minimised rather than a clinical team to be invested in.

    The similarities to the situation now emerging at LifeCare are not incidental. Drug shortages that force patients to external pharmacies while the hospital bills comprehensively through SHA. Statutory deductions collected from workers and not remitted. Experienced clinical staff driven out by management practices that punish dissent. The warning signs at Mediheal were visible before the collapse. They are visible now at LifeCare.

    Mediheal collapsed after years of aggressive billing, deteriorating conditions, and unpaid workers. The warning signs at LifeCare are identical.

    What the Law Demands

    The legal exposure facing the Africare Group and its management is extensive and, if regulators act, potentially ruinous.

    The non-remittance of SHA contributions is prosecutable under the Social Health Insurance Act, 2023. The non-remittance of NSSF contributions is prosecutable under the NSSF Act, with employers facing fines and imprisonment. HELB non-remittance carries penalties under the Higher Education Loans Board Act. The Employment Act provides a clear framework under which workers who have been denied terminal dues or subjected to unlawful variation of their contracts may seek remedies before the Employment and Labour Relations Court. And the Sexual Offences Act, alongside the Employment Act’s provisions on workplace harassment, provides a framework under which the women who have been subjected to quid pro quo advances within the Africare HR structure may pursue criminal and civil remedies.

    The SHA has independent verification tools. A cross-network audit of Africare’s remittance records against payslip evidence would establish within weeks whether the deductions visible on workers’ payslips have been forwarded to the relevant bodies. The KRA similarly has access to payroll records. The Ministry of Labour can launch inspections. The question is not capability. It is will.

    The Accountability Deficit

    Jayesh Saini has built an empire on a narrative of accessible, affordable, values-driven healthcare. His companies conduct around 100 free medical camps across Kenya each year and fund community welfare through the LifeCare Foundation. His public statements consistently position the Africare Group as a mission-driven actor in Kenya’s health sector, not merely a commercial enterprise. The gap between that narrative and the documented reality of the group’s operations — the SHA fraud at Bungoma, the deducted but unremitted contributions at Eldoret, the locum contract violations, the culture of fear installed by management, the sexual harassment allegations within the HR structure, the withheld terminal dues in Meru — is not a minor inconsistency. It is a fundamental fraud against the workers who built the empire and the patients who fund it.

    Saini has not publicly responded to the allegations raised against his network. Mayank Puri has not responded to requests for comment. The Africare Group corporate offices have not responded to outreach from this publication or, prior to this, from InsideKE. That silence is its own statement.

    The workers who stood outside LifeCare Eldoret on the morning of May 25, 2026, were not asking for the impossible. They were asking for their own money. They were asking for contributions deducted from their salaries to be forwarded to the bodies those contributions are legally assigned to, so that they could access the healthcare system they spend their professional lives maintaining. They were asking for their employer to obey the law.

    The SHA owes the public a full account of its audit findings across the entire Africare network, not only the Bungoma branch that has already been gazetted. The Ministry of Labour owes the workers at LifeCare an independent inspection of payroll practices across all facilities. The Kenya Medical Practitioners and Dentists Council, alongside the Nursing Council of Kenya, owes healthcare workers at LifeCare a credible investigation into the clinical governance failures that have driven experienced staff from the network. And the DPP owes the women who have raised sexual harassment complaints within the Africare HR structure a review of whether the conduct described meets the threshold for prosecution under the Sexual Offences Act.

    The workers of LifeCare Hospitals have waited long enough. They are owed their money, their dignity, and their safety. The institutions that exist to protect them must now demonstrate that those obligations mean something.

  • Inside FAFSA Fraud: How Kenyan Cybercriminals Siphoned Millions from America’s Sh12 Billion Student Loan System

    Inside FAFSA Fraud: How Kenyan Cybercriminals Siphoned Millions from America’s Sh12 Billion Student Loan System

    From nondescript Nairobi cyber cafes and rented apartments in Kasarani to the corridors of American community colleges thousands of kilometres away, a sophisticated transnational fraud operation has been silently bleeding the United States federal government of hundreds of millions of dollars. The machinery is ingenious, the participants are young, and the money has been flowing into Kenya in staggering quantities, financing luxury lifestyles, real estate acquisitions, and an entire criminal subculture that law enforcement agencies on two continents are now racing to dismantle.

    The Loophole Nobody Locked

    The Free Application for Federal Student Aid, known universally as FAFSA, is the gateway through which millions of American students access federal grants and loans to finance their university education every year. Administered by the United States Department of Education’s Office of Federal Student Aid, the programme disburses tens of billions of dollars annually in Pell Grants, subsidised loans, and institutional aid to students who qualify on the basis of income, citizenship, and enrolment in accredited institutions.

    What the architects of that system did not fully anticipate was that digital enrolment would create a loophole large enough for entire criminal enterprises to walk through. When American colleges, particularly community colleges with open-enrolment policies and minimal application requirements, rushed to establish online learning infrastructure during the COVID-19 pandemic, they stripped away the physical verification mechanisms that had once served as a basic deterrent. A student no longer had to appear in person. They no longer had to produce documents in front of an administrator. They merely had to complete a digital form and pass automated processing checks that, it turned out, could be circumvented with a purchased identity package and a correctly configured VPN.

    The criminal networks that identified and exploited this gap did not emerge from thin air. They were the product of an already-thriving underground economy in Kenya, one that had spent years developing the technical skills, institutional knowledge, and transnational connections needed to run large-scale digital fraud at industrial volume.

    “In this case, one goes into the dark web and for as low as Sh1,000, you can buy personal information of someone in the US. You do not buy just one if you want to maximise profit.”

    The Mechanics of the Scam: How It Worked

    The operation, at its core, was a four-stage industrial process. The first stage was identity acquisition. Kenyan operatives accessed dark web marketplaces, many of which are reachable through the Tor browser and known within the criminal community by a rotating set of addresses. There, for prices as low as a thousand shillings per package, they purchased what the trade calls ‘fullz’ — comprehensive identity dossiers on real American citizens. A fullz package typically includes a Social Security number, full legal name, date of birth, residential address, driver’s licence details, and banking information. The identity of a deceased American citizen was particularly valuable because it could rarely be traced to a living person who might notice fraudulent activity and raise an alarm.

    According to a retrospective federal audit released on April 27, 2026, by US Secretary of Education Linda McMahon, more than thirty million dollars in student aid was siphoned specifically through accounts registered to deceased American citizens, whose Social Security numbers had been harvested from memorial websites, obituary databases, and breached healthcare records. Another forty million dollars was drained by automated bot networks that mimicked real student enrolment behaviour, completing registration forms, clicking through course modules, and even generating responses to automated assessment tools.

    The second stage was application construction. After securing a batch of identities, typically a hundred or more to maximise the odds of success, operators would use a properly configured Virtual Private Network to mask their Kenyan internet address and simulate the geographic location of the identity they were using. An identity associated with a California address required a VPN server reading as California. If the VPN location did not match the identity’s address, the application would be flagged and the applicant directed to appear before a commissioner of oaths to confirm their physical address, a step that collapsed the scheme immediately. This geographic alignment was not merely a technical nicety. It was the difference between a successful application and a wasted investment.

    With the correct VPN in place, operators would apply for FAFSA aid before selecting a school, a deliberate tactical inversion of the normal process. The reason, as insiders explained, was straightforward: selecting an institution first and then discovering that the purchased identity had already been used or was flagged as indebted would waste the investment. By confirming FAFSA eligibility first, operators could identify which identities remained clean and channel them toward the most lucrative enrolment pathways.

    The third stage was academic ghost maintenance. Once enrolled, the fictitious student needed to remain enrolled long enough for disbursements to flow. This is where Kenya’s vast informal academic writing economy became directly integrated into the fraud machine. Nairobi has for years sustained a substantial grey-market industry of contract academic writers who produce essays, assignments, dissertations, and examination answers for Western students willing to pay for them. These writers, many of them university graduates earning a fraction of what their work was worth through brokers, were now subcontracted by fraud operators to attend virtual classes, complete assessments, and generate just enough academic presence to keep the ghost student’s enrolment active and the disbursements flowing.

    The disbursement structure itself was engineered to maximise extraction. The US Department of Education typically releases student aid in tranches. A first disbursement of around a thousand dollars arrives early in the semester. A second disbursement of approximately eight hundred dollars follows after the student passes continuous assessment milestones. A third and final payment of twelve hundred dollars arrives later in the semester, assuming the student remains enrolled. For operators running a hundred enrolled identities simultaneously, even extracting only the first disbursement across all of them represented a gross income of roughly twelve million shillings before expenses.

    “The impatient ones, once they get $1,000 for 50 courses, they are out. That is why you find so many first-years joined virtual courses but did not complete them.”

    The most patient and sophisticated operators held on for the second semester. That patience paid exponentially: a student who passes their first semester and re-enrols becomes eligible for a federal student loan of up to ten thousand dollars per academic year. At that scale, a single successfully maintained ghost identity was worth more than a million shillings in loan disbursements alone.

    Moving the Money: The Cashout Syndicate

    Getting the money out was its own specialised operation. Disbursed student aid funds are deposited into a digital student wallet created for each enrolled student by the institution. The wallet holds funds remaining after tuition fees are deducted, with the government operating on the assumption that the balance covers living expenses for a genuine student. Moving money from that digital wallet required an American bank account, and real American bank accounts were not available to Kenyan operators sitting in Nairobi apartments.

    The solution was a secondary criminal infrastructure: a network of American-based collaborators who, for a commission of around thirty percent, received the money into their own accounts and laundered it back to Kenya through a combination of international wire transfers, mobile money systems, and cryptocurrency exchanges. These individuals, known in criminal parlance as ‘money mules,’ are often themselves members of the diaspora or recruited through the same social media networks that underpin the broader fraud economy. Some operators in rare cases managed to have physical cheques sent to friendly American addresses, with cooperating residents collecting and cashing them on behalf of their Kenyan contacts.

    The money’s ultimate destination in Kenya was rarely the simple bank account of a single fraudster. The proceeds flowed into a layered economy of visible consumption and concealed investment. Luxury vehicles, high-end electronics, prime rental accommodation in Nairobi’s wealthier neighbourhoods, and in more ambitious cases, real estate purchases, all served as both status symbols and instruments of money laundering. The Ahmednaji Maalim Aftin Sheikh case, which emerged in September 2025, illustrated this dynamic with stark clarity. Sheikh, a twenty-eight-year-old Kenyan national, was indicted by a federal grand jury in Minnesota for laundering millions of dollars in proceeds from the Feeding Our Future fraud scheme, a separate American federal programme fraud. According to the indictment, Sheikh used his share of the proceeds to purchase a twenty percent stake in a Nairobi company, acquire an apartment building in the South C neighbourhood adjacent to Nairobi National Park, and buy land in Mandera Town near the borders of Somalia and Ethiopia.

    The KYC Networks: Nairobi’s Underground Trading Floors

    The operational nerve centres of this economy were not housed in fortified server rooms or secret warehouses. They were WhatsApp groups. Known within the criminal ecosystem as KYC networks, a sardonic appropriation of the banking term ‘Know Your Customer,’ these sprawling invite-only groups served as the informal digital trading floors of Nairobi’s cybercrime economy. Within them, operators traded freshly harvested identity packages, advertised cashout services, shared tips on VPN configurations and new institutional targets, coordinated academic writing subcontracts, and recruited new participants into the scheme.

    The groups operated through layers of vetting. A new participant needed a trusted referral from an existing member. The more sensitive operational details, including specific institutional targets and cashout channel contacts, were reserved for smaller inner circles. The WhatsApp groups were, in effect, a living criminal market that could scale rapidly when new opportunities emerged and contract just as quickly when law enforcement pressure mounted.

    That model has now been significantly disrupted. Meta, WhatsApp’s parent company, executed a sweeping purge of these KYC forums, abruptly shutting down and permanently banning the most notorious groups and severing the peer-to-peer communication channels that allowed operators to coordinate at scale. The closures did not eliminate the criminal enterprise, but they fractured its operational fluency and forced operators to seek alternative channels, including encrypted platforms like Telegram, where oversight is both more complex and more contested.

    The Scale of the Damage in America

    The human and institutional wreckage left behind in the United States is not abstract. It is documented, quantified, and still being counted. The US Department of Education’s retrospective audit, announced on April 27, 2026, confirmed that approximately ninety million dollars in student aid had been disbursed to ineligible recipients over the previous three years. Federal investigators were at the same time actively tracing an estimated three hundred and fifty million dollars in siphoned funding flowing through international networks, with the Office of the Inspector General carrying more than two hundred active criminal investigations into student aid identity fraud accumulated over the preceding five years.

    The damage was sharpest within the California Community College System, which by virtue of its open-enrolment philosophy and sheer size presented the most accessible attack surface. California community colleges recorded more than 1.2 million fraudulent applications in 2024 alone, resulting in at least 223,000 suspected fake enrolments and more than eleven million dollars in unrecoverable financial aid losses. At the Foothill-De Anza Community College District in the San Francisco Bay Area, administrators flagged ten thousand suspect profiles out of twenty-six thousand applications received before the quarter could even commence.

    The College of Southern Nevada absorbed perhaps the most concentrated single-semester damage: a complete write-off of seven point four million dollars in fraudulent ghost student enrolments in the fall 2024 semester, money the college was ultimately required to repay to the Department of Education from its own funds. At Century College in Minnesota, a history instructor publicly noted that fifteen percent of students in one of his classes appeared to constitute what he described as an organised crime ring, submitting identical or algorithmically generated responses to assignments while never engaging with course content in any authentic way.

    KEY FIGURES IN THE FAFSA FRAUD CRISIS

    Sh11.7 billion: Amount confirmed lost to ineligible student aid recipients over three years (US Dept of Education audit, April 2026). Sh45.3 billion: Total funds under active federal tracing across international networks. 200+: Active OIG criminal investigations into student aid fraud over five years. 1.2 million: Fraudulent applications recorded by California community colleges in 2024 alone. Sh958 million: Amount written off by College of Southern Nevada in a single semester due to ghost student fraud.

    The FBI Moves Deeper into Nairobi

    The significance of what happened on the ninth of May 2026 at the Directorate of Criminal Investigations headquarters at Mazingira Complex in Nairobi is difficult to overstate. FBI Co-Deputy Director Andrew Bailey flew into the country for a closed-door session with DCI Director Mohamed Amin that officials on both sides described publicly in careful, measured language. Discussions, both agencies said, touched on counterterrorism, cybercrime, financial fraud, human trafficking, narcotics, money laundering, and crimes against children.

    What the official language did not say, but what the specific timing and operational context makes plain, is that the visit occurred in the direct aftermath of a period of intensive American investigative focus on Kenyan-connected financial fraud schemes. The FAFSA ghost student investigation, the Feeding Our Future laundering indictment, the Business Email Compromise extradition proceedings involving Peter Omari, Francis Asanyo, and Elvis Obaigwa, and the Operation Red Card cybercrime sweeps all converged within a compressed timeline that placed Kenya at or near the centre of American federal fraud investigators’ concerns.

    The headline outcome of that May meeting was an announcement that the FBI Legal Attache Office in Nairobi would be upgraded and expanded through the appointment of a Regional Transnational Anti-Corruption Programme Manager, a new position that would extend American investigative capacity across the broader East African region. The Nairobi office, which has served as a coordination hub for FBI cooperation across the continent, is being repositioned as a more proactive operational base rather than a passive liaison point. The meeting also produced commitments to deepen cooperation in digital forensics, artificial intelligence-assisted investigations, cryptocurrency tracking, and predictive analytics, all of which are directly applicable to the fraud architectures that Kenyan criminal networks have deployed.

    Bailey specifically acknowledged Kenyan officers who have been trained at the FBI National Academy in Quantico, Virginia, praising their role in strengthening cooperation between the two institutions. That recognition was both diplomatic and strategic: it signalled that the American investment in building Kenyan investigative capacity is expected to yield returns in the form of faster extraditions, more reliable intelligence sharing, and a domestic criminal justice system capable of prosecuting complex cybercrime cases without constant American intervention.

    The Extradition Pipeline Opens

    The extraditions and indictments accumulating in Nairobi courts and American federal dockets over the past eighteen months represent something qualitatively new in Kenya’s relationship with international law enforcement. For much of the previous decade, the perception persisted among operators within the cybercrime economy that Kenya’s distance from the United States, the complexity of extradition procedures, and the general slowness of the criminal justice system provided effective insulation. That perception is being systematically dismantled.

    In February 2026, a Milimani court ordered the detention of Peter Omari, Francis Asanyo, and Elvis Obaigwa at Kileleshwa Police Station pending extradition proceedings initiated by US federal authorities. The three had been indicted by the US District Court for the Eastern District of Virginia in November 2023 on charges of conspiracy to commit computer intrusions, wire fraud, aggravated identity theft, and related aiding and abetting offences. DCI investigators established that between 2019 and 2023, the trio had created fake internet domains mirroring legitimate businesses, tricked victims into redirecting payments to fraudulent accounts, and channelled the proceeds back to Kenya through American money mules. Their eventual arrest came through a joint operation involving the DCI, Interpol, and the FBI.

    Earlier, in September 2025, a federal grand jury in Minnesota indicted Ahmednaji Maalim Aftin Sheikh on charges of international money laundering connected to the Feeding Our Future scheme, a massive fraud on a federal child nutrition programme. Sheikh’s brother, the primary architect of the scheme, had stolen millions from a programme designed to feed vulnerable children, and Sheikh had helped conceal the proceeds by channelling them into Kenyan real estate. The indictment included documented conversations between the brothers, photographs of cash bundles exceeding 130,000 and 200,000 dollars, and a receipt recording a three-hundred-thousand-dollar money transfer.

    In a parallel case that concluded in 2026, a Kenyan national identified as Wamuigah pleaded guilty in October 2025 to conspiracy to commit wire fraud in connection with a scheme that caused losses of approximately 1.5 billion shillings. Wamuigah had fled the United States to Malaysia, was arrested there in 2022 at American request, and was extradited to face charges. His guilty plea was followed by a transfer to ICE custody for deportation back to Kenya, completing a transnational criminal justice arc that took years but ultimately reached its destination.

    Africa in the Frame: The Continent’s Cybercrime Epidemic

    Kenya does not stand alone in this crisis. It stands at the acute end of a continental phenomenon that Interpol’s March 2026 Global Financial Fraud Threat Assessment formally designated as one of the top five global crime threats, alongside illicit drug trafficking and money laundering. The assessment estimated that financial fraud inflicted 442 billion dollars in global losses in 2025 alone, a figure that situates the problem not as a peripheral criminal nuisance but as a systemic threat to the architecture of international commerce.

    Between 2024 and 2025, Interpol recorded a sixty percent spike in fraud-related police notices and diffusions across the African region. The threat report characterised regional criminal syndicates as having rapidly professionalised, adopting an industrialised hybrid model that exploits the continent’s expanding digital infrastructure to target high-value institutions and Western financial systems. The Communications Authority of Kenya’s own security audits placed the country second only to Nigeria in total continental cyber fraud losses.

    Nigeria’s parallel crisis illustrates both the geographic spread of the problem and the intensifying regional law enforcement response. The Economic and Financial Crimes Commission, pursuing the collapse of the Crypto Bridge Exchange platform in 2025, issued international arrest warrants for four Kenyan nationals identified as Johnson Okiroh Otieno, Israel Mbaluka, Joseph Michiro Kabera, and Serah Michiro. The platform, marketed under the acronym CBEX with promises of one hundred percent monthly returns powered by artificial intelligence, defrauded investors across Nigeria, Kenya, and Egypt of an estimated 840 million dollars. Nigeria’s EFCC confirmed it had arrested some suspects and recovered a portion of the funds, while announcing it was coordinating with Interpol and the FBI to locate the four Kenyans still at large.

    The West African dimension of this problem extends to documented extraditions from other countries on the continent. In Ghana, Maxwell Peter, a twenty-seven-year-old Ghanaian national, was extradited to the United States to face charges of wire fraud, computer fraud, money laundering, and identity theft after being part of an Africa-based cybercrime group that ran Business Email Compromise schemes, romance scams, and credit card fraud targeting American victims. In Nigeria, Matthew Akande was arrested at London’s Heathrow Airport in October 2024 at American request and extradited to Boston in March 2025 to face computer intrusion charges connected to theft of US government funds. Three Nigerian nationals involved in sextortion and associated money laundering were similarly extradited over a two-year period ending in February 2026, with the last defendant receiving a sentence confirmed in court after pleading guilty.

    Operation Red Card and the Multi-Agency Net

    The most dramatic demonstration of the coordinated international response to African cybercrime was Operation Red Card 2.0, an eight-week multinational law enforcement sweep that ran from December 8, 2025 to January 30, 2026, across sixteen African nations. The operation, conducted under Interpol’s African Joint Operation against Cybercrime with funding from the UK Foreign, Commonwealth and Development Office and additional support from the European Union, resulted in 651 arrests across the continent, the recovery of more than 4.3 million dollars in stolen assets, the seizure of 2,341 devices, and the dismantling of 1,442 malicious internet domains, servers, and IP addresses.

    In Kenya specifically, authorities executed twenty-seven targeted arrests focused on decentralised networks that used messaging applications, social media platforms, and fictitious investment dashboards to lure victims into high-yield investment scams. Investigators documented victims being shown fabricated account statements displaying impressive returns while withdrawal requests were systematically blocked. The total losses exposed by the operation exceeded forty-five million dollars, with 1,247 identified victims drawn predominantly from the African continent but also from Western nations.

    The operation also uncovered the cross-platform reach of the criminal networks. Over one thousand fraudulent social media accounts were taken down during the sweep. Six members of a sophisticated syndicate were arrested specifically for breaching the internal platform of a major telecommunications provider, highlighting that the threat has evolved well beyond individual fraud schemes into systematic attacks on critical communications infrastructure.

    The Mulot Shadow and Kenya’s Homegrown Cybercrime Economy

    To understand how Kenya became the operational theatre for frauds of this complexity and scale, one must understand what happened in a small market town straddling the border between Bomet and Narok counties over the course of fifteen years. Mulot, a cluster of three trading centres separated by the River Amalo, has for more than a decade been the acknowledged headquarters of Kenya’s SIM-swap fraud economy. What began as opportunistic mobile money theft grew, through a process of institutional learning and criminal entrepreneurship, into a sophisticated training ecosystem where operators paid fees of between fifteen thousand and forty thousand shillings to be schooled in increasingly advanced fraud techniques.

    The DCI has executed waves of arrests across Mulot and its satellite networks, most recently on November 6, 2025, when detectives arrested six suspects found in possession of 2,464 identity documents and more than 3,000 SIM cards believed to have been deployed in mobile money scams. Earlier that year, on February 22, suspects were arrested in Ruiru for incapacitating a victim and swapping his SIM card, sweeping 250,000 shillings from his mobile banking accounts. The DCI’s own intelligence assessments acknowledge that the Mulot-linked syndicates have dispersed their operations across Nairobi, Nakuru, Kericho, Kiambu, Mombasa, and Eldoret, making containment substantially more difficult than geographic enforcement sweeps alone can achieve.

    What the Mulot story represents, in the broader context of the FAFSA fraud economy, is the maturation of a criminal infrastructure that was always going to find international targets once it exhausted the domestic ones. The technical skills honed through SIM swapping, the money laundering networks built to process mobile money fraud proceeds, and the corrupted institutional relationships cultivated over years of local operations all translated directly into the requirements of a transnational scheme targeting American government systems.

    The Net Closes: America’s Counter-Response

    The US Department of Education’s April 27, 2026 announcement was the most significant institutional response to the crisis since it fully emerged into public view. Secretary Linda McMahon unveiled a nationwide fraud prevention initiative that activated real-time identity verification directly within the FAFSA application process itself, screening every applicant as they submitted their form and flagging high-risk submissions for a live camera-based identity check before the application could be completed. Applicants unable to complete the live verification receive a Reject Code 74 and a Comment Code 355, codes that financial aid offices across the country now treat as high-probability fraud indicators requiring no further processing.

    The Department introduced a four-tier risk screening architecture that assigns incoming applications to different verification tracks based on a combination of behavioural signals, geographic data, identity document characteristics, and enrolment pattern analysis. Institutions are no longer required to take action on rejected applications unless a legitimate student contacts them directly to resolve the issue, a policy that effectively reverses the burden of proof that had previously allowed ghost students to exploit administrative backlog and processing delays.

    Legislatively, Congressman Burgess Owens of Utah introduced the No Aid for Ghost Students Act, which passed the House Education and Workforce Committee in March 2026. The bill mandates the Department of Education to deploy a fraud detection system for every FAFSA application, establish formal identity verification procedures, notify applicants if their FAFSA is flagged as suspicious, and report annually to Congress on the effectiveness of the fraud identification systems. The bill specifically requires a yearly audit, creating an accountability mechanism that previous administrations had not imposed.

    The Department’s own retrospective data indicates that fraud prevention systems put in place from 2025 onwards thwarted false applications that would have cost the United States approximately 129 billion shillings had they succeeded. That figure, representing attempted rather than completed fraud, underscores both the ambition of the criminal networks targeting the system and the fragility of the defences that had previously stood between them and success.

    The Informant Economy and What Comes Next

    Perhaps the most revealing aspect of the FAFSA fraud ecosystem is how openly it was discussed within the circles of those who participated in it. The operators who sat in Kasarani apartments and suburban cyber cafes, running hundreds of ghost student applications through carefully configured VPN tunnels, were not a secret society operating in conspiratorial silence. They were, in many respects, the most visible members of their peer groups, distinguished by the quality of their vehicles, the frequency of their leisure expenditures, and the studied vagueness with which they explained their income sources.

    The academic writing economy that supplied the ghost maintenance labour for the scheme also operated in plain sight. Writers who produced dissertations and assignments for Western students were already a known feature of urban Kenyan economic life, sufficiently common that they had their own informal guild structures, price hierarchies, and reputational networks. The extension of that infrastructure into the service of a criminal scheme was, from the inside, experienced as a relatively minor ethical escalation: one more foreign client, one more opaque engagement, one more payment arriving through digital channels whose ultimate source was not interrogated.

    That social normalisation is precisely what makes the problem structurally durable. Enforcement operations arrest individuals. They dismantle specific networks. They freeze specific accounts and seize specific devices. But as long as the structural conditions that make fraud rational persist, including youth unemployment, digital skill concentrations without formal employment outlets, and the visible social rewards accruing to successful operators, new networks will emerge to replace those that fall. The FBI’s expanded Nairobi presence, the acceleration of extradition proceedings, and the tightening of FAFSA’s digital perimeter all represent genuine progress. They do not, on their own, constitute a solution.

    What they do constitute is the closing of a chapter in which the arbitrage between American institutional vulnerability and African criminal ingenuity was wide enough to sustain an industry. That arbitrage is narrowing rapidly, and the operators who bet their futures on its persistence are discovering, in courtrooms in Nairobi and federal detention centres in Virginia, Minnesota, and Nevada, precisely how costly that miscalculation has become.

  • LSK On The Spot For Renewing Rogue Lawyer Dennis Onyango’s Licence Despite Mounting Evidence He Held Foreign Investors’ Millions Hostage

    LSK On The Spot For Renewing Rogue Lawyer Dennis Onyango’s Licence Despite Mounting Evidence He Held Foreign Investors’ Millions Hostage

    Dennis Ochieng Onyango is not a household name in Kenyan legal circles, and that, sources close to multiple ongoing cases suggest, is precisely how he prefers it. The advocate, who operates under the nameplate of Dennis Onyango and Associates from the seventh floor of Wu Yi Plaza on Galana Road in Nairobi, has cultivated a reputation for keeping a low profile even as a cascade of complaints from foreign investors, documented court filings, formal letters to the Law Society of Kenya, and proceedings before the Advocates Complaints Commission paint a picture that is anything but quiet.

    At the centre of the storm is a question that the Law Society of Kenya took months to answer and, when it finally did, answered in a manner that will offer no comfort to the investors left waiting: why, in the face of mounting and documented evidence of client funds potentially misappropriated, did the Law Society renew Dennis Onyango’s practising certificate for the year 2026? The LSK’s eventual response was, in effect, that Onyango was due to face the Advocates Disciplinary Tribunal and that those with money on the line would have to wait until that process ran its course. For TL Cabin OU, the Estonian company whose USD 101,750 has been sitting unaccounted for since June 2023, that answer amounts to being told to join a queue for justice while the man responsible for their money continues to practise law.

    The Stanbic Bank account that three court orders say should hold USD 975,000 in escrow carries a balance of USD 22.78. The clients were told to wait for the Tribunal.

    Since this investigation was first published, the situation has deteriorated further, and the evidence has grown more damning.

    A court order obtained by John Solheim, the plaintiff in High Court Commercial Case No. HCCCOMM E756 of 2024, compelled Stanbic Bank to produce Onyango’s bank statements.

    What those statements reveal has shaken those familiar with the matter. The Stanbic account, which by the terms of at least three separate court orders ought to be holding approximately USD 975,000 in escrow funds, carries an actual balance of USD 22.78.

    Twenty-two dollars and seventy-eight cents.

    The Bank Statements That Expose Everything

    The revelations from the Stanbic Bank statements go further than the balance alone. Onyango had previously claimed that TL Cabin’s money, which was deposited into a Consolidated Bank account, had subsequently been transferred into the Stanbic account.

    The bank statements obtained by court order demonstrate that this claim is false. TL Cabin’s funds were never paid into the Stanbic account. There is no record of any such transfer. The paper trail that Onyango had been pointing to does not exist.

    Worse still, it now appears that the uncertified bank statements that Onyango sent to TL Cabin by WhatsApp in an earlier phase of the dispute were themselves forgeries.

    A forged Stanbic Bank letter had already been alleged in the proceedings brought by Norwegian investor John Birger Silheim, a letter the bank subsequently denied issuing.

    The WhatsApp bank statements now appear to belong to the same category of fabricated documentation. The account balance was misrepresented. The transactions were misrepresented. And an officer of the High Court of Kenya apparently allowed those misrepresentations to circulate in the context of live legal proceedings.

    Onyango sent TL Cabin bank statements by WhatsApp that now appear to have been forged. The Stanbic letter was forged. The account balance was a fiction. And he is still practising.

    What makes this particularly grave is the implication for the litigation itself. According to sources familiar with the proceedings, Onyango has allowed at least two active court cases to proceed on the premise that he is holding substantial sums in escrow.

    The court orders in those cases were framed around the existence of those funds. Interim orders were sought and granted on that basis. Other parties directed their conduct in reliance on those representations.

    The bank statements now obtained by court order reveal that the represented funds were not there. If those representations were knowingly false, then Dennis Onyango, as an officer of the court, may have misled not just his clients but the courts themselves.

    The Advocates Act is unambiguous about the obligations of advocates as officers of the court.

    The deliberate misleading of a court is among the most serious categories of professional misconduct, one that the Disciplinary Tribunal has the power to address by way of suspension or striking off the Roll. Those remedies remain, as of the date of this publication, still to be applied.

    The Tribunal Charges: A Step Forward, But Questions Remain

    There is, in the midst of this accumulation of scandal, one development that deserves to be acknowledged plainly.

    The Advocates Complaints Commission, the statutory body established under Section 53 of the Advocates Act to receive and investigate complaints of professional misconduct, has in the assessment of sources close to the matter performed its role with commendable diligence.

    The Commission has formally recommended charges against Onyango.

    The Advocates Disciplinary Tribunal has now formally charged him. Onyango has responded to those charges, and a hearing is currently scheduled for August 2026.

    That the Commission acted is worth noting, because the landscape of professional accountability for advocates in Kenya is often described by complainants as a place where nothing moves.

    Here, something has moved. The machinery has engaged. But the question of whether it has engaged fast enough, and whether what it does next will be proportionate to what the bank statements now reveal, remains entirely open.

    The LSK, when it eventually responded to the complaints submitted by Julian Garrison, indicated in effect that the renewal of Onyango’s practising certificate was a decision they would not revisit pending the outcome of Tribunal proceedings.

    This position is legally defensible in narrow terms. Under Section 9 of the Advocates Act, a practising certificate becomes invalid only upon formal suspension by the Tribunal. Until a suspension order is made, the LSK has limited formal grounds to withhold a certificate.

    But the law also gives the LSK Council discretion over the renewal process under Section 25 of the Act, and the LSK’s own objects under Section 4(c) of the Law Society of Kenya Act require it to ensure that those practising law meet appropriate standards of professional conduct. The question of whether those provisions were adequately applied in the Onyango case is one the LSK has not yet been asked to answer in public.

    The Disciplinary Tribunal has formally charged Onyango and a hearing is set for August 2026. But his practising certificate remains valid while the account stands at USD 22.78.

    The Escrow That Swallowed Itself

    The facts of the TL Cabin matter, as laid out in a signed letter dated 3 February 2026 from Lembit Niit, a representative of TL Cabin OU, to Dennis Onyango directly, are damning in their specificity.

    TL Cabin’s money was transferred into a Consolidated Bank account held by Onyango’s firm on or around 20 and 27 June 2023. The purpose of the funds was explicitly set out in clause 2.7 of the escrow agreement: the money was being held for the purposes of payment to the Seller for ascertained and agreed costs relating to export-related costs.

    The transaction concerned a gold purchase arrangement involving a company called Blu Afrique Limited.

    The escrow agreement itself foreclosed any genuine dispute about the ownership of the funds. Clause 2.8 confirmed that TL Cabin was the only client for the purposes of the Advocates (Accounts) Rules 1966 and that Blu Afrique Limited was a signatory solely for the purpose of receiving notifications and issuing a jointly signed release notice.

    The sale and purchase agreement between buyer and seller, dated 29 November 2023, contained an explicit acknowledgement by Blu Afrique Limited that the escrow funds could be returned to TL Cabin without protest or objection at the earlier of the completion of the gold sale or 12 December 2023.

    By 12 December 2023, the gold transaction had not completed. The trigger for return had been met. The money was not returned.

    And Onyango’s explanations for why that was so have shifted so many times that sources close to the proceedings say that even those following the matter closely lost track of which excuse was current at any given hearing.

    One of the defences Onyango raised in the proceedings involving John Solheim was that Solheim had used the funds to purchase an apartment. Onyango produced documentation said to evidence the transaction, documentation on which he himself appeared as the client’s advocate.

    When pressed, Onyango could not substantiate the claim. The apartment was never purchased. It appears to have been an invention, and one that Onyango could not maintain.

    As of the date of this publication, Onyango has still not responded to TL Cabin about their funds. He has not returned the money. He has not rendered a proper account. He has not communicated. The silence on his end has been as total as the emptiness of the account.

    A Norwegian Investor. Then a British One. Then Court.

    TL Cabin is not alone.

    The Norway-based businessman John Birger Silheim filed proceedings in the Milimani Commercial and Tax Division in July 2025 against Dennis Onyango, claiming that he deposited USD 403,097 into Onyango’s Stanbic Bank account at the Chiromo branch in four tranches between August and December 2023: amounts of USD 87,097, USD 86,000, USD 130,000 and USD 100,000, all from his personal Norwegian bank account, all for gold procurement purposes. Silheim alleged the production of a forged letter purportedly from Stanbic Bank, a document the bank has since denied issuing.

    His application sought urgent orders to freeze the Stanbic account and direct the DCI’s Banking Fraud Unit to investigate and report.

    The court orders that followed from that litigation, combined with the order obtained in HCCCOMM E756, are among the three orders now confirmed to have been made against the Stanbic account.

    Three court orders.

    USD 975,000 that should be sitting in that account by the representations made to the courts. USD 22.78 that is actually there.

    It is worth pausing on that arithmetic. If each of the investors and clients whose funds were directed to Onyango’s care did so in reliance on his status as a practising advocate holding money in accordance with the Advocates (Accounts) Rules 1966, and if the account now reveals that the money is gone, then what the bank statements evidence is not a dispute about accounting. It is the apparent disappearance of client funds on a scale that dwarfs the maximum Ksh 5 million compensation order that the Disciplinary Tribunal can make.

    Three court orders say USD 975,000 should be in that account. The account has USD 22.78. The Disciplinary Tribunal’s maximum compensation order is Ksh 5 million.

    Collins Osewe: The Serial Defendant Who Keeps Reappearing

    Collins Alphonce Odoyo Osewe is no stranger to Kenya’s legal system, except that in most of his appearances he sits not at the bar but in the dock.

    In October 2025, a Nairobi magistrate was compelled to order Osewe to appear for plea in a criminal case in which he is charged alongside accomplice Patroba Odhiambo Tobias with obtaining Ksh 35.7 million from businessman Bernard Shiaundu Aete by false pretences, through the fraudulent promise of 400 kilograms of gold.

    In a separate count, Osewe faces additional charges of swindling Adeyeye Enitan Ogunwusi of Ksh 26.1 million using the same device.

    All of these offences are alleged to have occurred in May 2023. When the plea date came, Osewe did not appear. His lawyers told the magistrate he was hospitalised and had booked an emergency procedure in India.

    Lawyer Collins Osewe.
    Lawyer Collins Osewe.

    None of this has prevented the Law Society of Kenya from issuing Osewe a valid practising certificate.

    Despite the criminal charges, despite the civil freeze orders on his accounts, despite his history before the courts as a defendant in gold fraud matters, Osewe holds a current LSK practising certificate.

    This is a decision that Garrison, who has repeatedly raised the matter with the Law Society’s compliance and ethics desk, describes as incomprehensible.

    Kenya Insights shares that assessment.

    The principle that an advocate currently facing criminal charges for professional conduct ought, at the very least, to have the question of their practising certificate actively reviewed is not a novel one. It is elementary.

    Earlier civil proceedings confirmed that in 2023, multiple plaintiffs sought and obtained orders freezing accounts held by Osewe, Odero Osiemo and Co. Advocates, and Collins Grace and Associates Advocates, at Ecobank across three separate account numbers, in connection with what they alleged was a USD 610,000 fake gold scheme.

    The orders were granted.

    The investigation by this publication confirms that Osewe, operating under the name Collins Grace and Associates, has entered an appearance in the HCCCOMM E756 proceedings, purportedly representing the third interested parties.

    He did so, the affidavit of service sworn by Onyango himself records, from House No. 182, UN Drive. Osewe was, at the time, listed as inactive on the LSK portal.

    There is also the question of that address.

    When Garrison’s team previously attempted to serve Osewe at the UN Drive premises while he was listed as active for 2025, a process server reported that the physical address did not exist.

    The same address appears in Onyango’s February 2026 affidavit. If the address does not exist, the service is a fiction. If the service is a fiction, the procedural steps built upon it collapse. And if Osewe was not lawfully entitled to practise at the time he purported to accept service, his involvement in the proceedings is itself a potential violation of the Advocates Act.

    Osewe faces criminal charges for gold fraud. He is listed as inactive on LSK’s portal. He accepted service in an active High Court case. And LSK has still issued him a practising certificate.

    Jonathan Opande and the Blu Afrique Connection

    The Blu Afrique thread that runs through the TL Cabin escrow dispute is not without its own colourful history. Jonathan Okoth Opande, a former aspirant for the Nyakach parliamentary seat, was publicly identified by the DCI in October 2023 as one of Nairobi’s most notorious fake gold scammers.

    Arrested at Jomo Kenyatta International Airport as he attempted to board a Kisumu-bound Kenya Airways flight, Opande had already survived multiple police dragnets across the preceding months.

    The DCI confirmed that Opande, operating as the alleged chief executive of Blu Afrique Limited, had obtained money from two Thai nationals, Kitvisit Songsri and Nutsaphol Songsri, with the promise of supplying gold.

    A raid on his Lavington office yielded fake gold bars, pellets, a makeshift smelting machine, KRA export seals, Ministry of Mining branded dust coats, company seals, and documentation of questionable authenticity.

    That an entity bearing the name Blu Afrique Limited now appears as an interested party in HCCCOMM E756, where Dennis Onyango is the defendant, and that Onyango continues to invoke that entity’s alleged interests as a basis for withholding TL Cabin’s escrow funds, is a detail that sources close to the matter regard as considerably more than coincidental.

    The DCI has identified Opande as operating through Blu Afrique as a vehicle for gold fraud.

    The escrow agreement in the TL Cabin matter was structured around a gold transaction in which Blu Afrique was the seller.

    The money deposited by TL Cabin with Onyango as escrow agent for that transaction has not been returned. And the account that ought to hold it carries a balance of twenty-two dollars.

    Lawyers as the Infrastructure of the Scam

    Kenya’s fake gold industry has, over the past decade, perfected the art of borrowed legitimacy.

    The most effective weapon in the arsenal of a Nairobi gold fraudster is not a smelting machine or a forged Ministry of Mining letter, formidable as those tools are.

    It is the escrow account of a practising advocate, preferably one registered with the Law Society of Kenya, bearing the stamp and signature of a High Court officer.

    When a foreign investor is told that their funds will be held securely in the client account of an advocate licensed by the Law Society, they believe it. They are supposed to believe it. The law says they should be able to believe it.

    The pattern is well documented across multiple cases. In July 2025, DCI detectives arrested advocate Michael Otieno Owano, proprietor of Otieno M.O. Law Advocates, in connection with a scheme in which a Canadian investor lost USD 618,000, with USD 318,400 wired directly into Owano’s law firm account following a fraudulent proforma invoice from a company called EAI Logistics.

    The victim was then directed to wire an additional USDT 300,000 to a cryptocurrency wallet.

    No gold was ever delivered.

    The DCI Director described the case as a disturbing abuse of legal privilege. In February 2026, Willis Onyango Wasonga was arraigned in connection with a separate scheme in which an American investor’s funds were deposited into what was presented as an escrow account operated by the same Owano, with fictitious legal representation agreements generated to create the illusion of bona fide commercial transactions.

    The use of advocate client accounts as conduit points is not incidental to these schemes. It is structural. Without the lawyer’s stamp, the foreign investor does not wire the money.

    The stamp is the product. The escrow arrangement is the mechanism. And the Law Society of Kenya is, in a meaningful sense, the guarantor of that mechanism’s credibility.

    When advocates implicated in these arrangements continue to hold valid practising certificates, the credibility of every legitimate advocate in Kenya is mortgaged to their conduct.

    The LSK’s Response and Its Limits

    The Law Society did, eventually, respond to Garrison’s correspondence.

    Its position was that Onyango was scheduled to face the Disciplinary Tribunal and that the question of his practising certificate would effectively await the outcome of those proceedings.

    This is, in isolation, a procedurally coherent position. The Advocates Act requires formal suspension by the Tribunal before a certificate becomes invalid under Section 9. The LSK cannot unilaterally revoke a certificate in the absence of a Tribunal order.

    But coherence is not the same as adequacy.

    The LSK’s objects under the Law Society of Kenya Act include the protection of the public interest and the assurance that those practising law meet appropriate professional standards.

    The LSK’s own Advocacy Standards Committee and compliance functions exist precisely to give effect to those objects before, not after, harm deepens.

    The bank statements now in the hands of the court, and now shared with the LSK, demonstrate that the harm in the Onyango matter has already been severe.

    If those statements do not accelerate the LSK’s engagement with the question of whether Onyango should continue to practise pending the August 2026 Tribunal hearing, the question of institutional accountability becomes inescapable.

    The LSK has now received copies of the Stanbic Bank statements. The account balance is on record. The court orders requiring funds to be held in that account are on record.

    The gap between the two is on record. What the LSK does next with that information will say a great deal about whether its response to Garrison’s original letters was a considered institutional position or a convenient deferral.

    The LSK now has the Stanbic bank statements. The account that should hold USD 975,000 has USD 22.78. The question of what the LSK does next has no comfortable answer.

    The New Website. Then Its Disappearance.

    When this investigation was first published, it noted that Onyango had constructed an impressive new website for his firm, one that described Dennis Onyango and Associates as leaders in regulatory compliance, AML and CFT advisory, and precious metals trade law.

    The claim to leadership in anti-money laundering advisory, from a firm whose principal now faces formal charges before the Disciplinary Tribunal and whose client account has been emptied while multiple court orders required it to be full, was remarkable for its audacity.

    That website has since been taken down. It follows a previous version of the firm’s website, which Garrison had earlier identified as having been created for the purpose of winning a specific tender by deception, and which was also removed once enquiries began.

    A pattern of erecting and dismantling digital faces to suit the moment is not, on its own, a criminal offence. But it is consistent with the broader picture of an advocate who understands the power of appearances and has repeatedly deployed that understanding to the disadvantage of those who trusted him.

    The Third Party Ruse and Its Procedural Implications

    Dennis Onyango’s tactical response to the mounting pressure in HCCCOMM E756 has been to issue Third Party Notices to three other parties in the proceedings.
    A Third Party Notice is the device by which a defendant seeks contribution or indemnity from third parties in respect of any liability they may face.

    In circumstances where a defendant has a genuine case to answer and a legitimate basis for seeking contribution, the device is proper litigation. In the present case, sources familiar with the matter argue that its function is delay. There are, they say, other and better devices available to resolve the underlying questions if Onyango’s intentions were straightforward.

    The procedural choreography of the third party notices also raises a question about Osewe’s involvement.

    If Osewe was not a practising advocate at the time he purported to accept service and file a notice of appointment, his involvement in the proceedings is legally ineffective and potentially constitutes the holding out of oneself as an advocate in contravention of Section 34 of the Advocates Act.

    That provision makes it a criminal offence for any person who is not an enrolled and certified advocate to wilfully pretend to be one. It is a question that the Law Society, the Advocates Complaints Commission, and the presiding court in HCCCOMM E756 may all need to engage with before the matter progresses further.

    A Pattern, Not an Anomaly

    What emerges from this investigation, updated with the developments of recent months, is not the story of one rogue lawyer operating in isolation. It is the story of a system that has allowed a particular model of fraud, using the architecture of the legal profession, to operate with insufficient consequence for those who benefit and insufficient protection for those who suffer.

    The Advocates (Accounts) Rules 1966 are unambiguous. Rule 13 requires advocates to maintain records of client funds and to account to clients on demand. The Advocates Complaints Commission exists to prosecute professional misconduct, and in the Onyango case it has, to its credit, done so.

    The Advocates Disciplinary Tribunal has formally charged Onyango and set August 2026 for a hearing. But the Tribunal’s maximum compensation order of Ksh 5 million is structurally inadequate to address losses that, if the bank statements are taken at face value, are measured in hundreds of thousands of US dollars.

    And the time between the original deposits in June 2023 and an August 2026 hearing represents more than three years during which Dennis Onyango has continued to practise, continued to hold a valid LSK certificate, and continued to say nothing to the clients whose money cannot be found.

    At the time of publication, the Advocates Complaints Commission had confirmed that formal charges had been laid and that proceedings before the Disciplinary Tribunal were scheduled for August 2026.

    The Law Society of Kenya had been provided with the Stanbic Bank statements and had not issued a public statement on the matter. Dennis Onyango had not responded to TL Cabin. He had not returned the funds. He had not rendered an account. His website had been taken down.

    The August 2026 Tribunal hearing will determine what formal sanction, if any, follows. What the bank statements have already determined, however, is that the money is gone. The question now is whether anyone in a position of institutional authority is going to treat that fact with the urgency it demands.

    The money is gone. The question now is whether anyone in a position of authority is going to treat that fact with the urgency it demands.

  • Your Medical Records Were Wide Open: How Three Digital Lenders Hacked the Heart of Kenya’s Health System and the DHA Chief Who Looked Away

    Your Medical Records Were Wide Open: How Three Digital Lenders Hacked the Heart of Kenya’s Health System and the DHA Chief Who Looked Away

    The messages arrived in a sequence that would alarm any person who understands what the Social Health Authority database contains. First came a screenshot of a complete SHA member profile, name, date of birth, national identification number, medical coverage status, OTP whitelisting controls, and a live button that the sender could press to refresh the member’s records directly from the AfyaYangu system. Then came the employer details of a relative. Then came the confirmation, in plain WhatsApp text, that the person sending all of this was a debt collector working for a licensed digital lending company.

    “Raha pesa is still pending,” the collector wrote. “There are so many ways of killing a rat, buddy.” Attached to the threat was a screenshot pulled live from within the SHA system, complete with the borrower’s SHA registration number, date of birth, and a functional interface button reading: Refresh Member and Dependants From AfyaYangu. Another button read: Request OTP Whitelisting for Member.

    This was not a leak. This was not a historical dump sold on a dark web forum. This was a live, active, real-time breach of a government health database, wielded as a debt collection weapon against a Kenyan citizen whose only offence was falling behind on a seven-day mobile loan worth a few thousand shillings.

    Kenya Insights has seen the complaint letter, WhatsApp transcripts, SMS records, and photographic evidence establishing that agents and employees of at least three digital lending companies, namely Payablu Credit Limited trading as Tuma Cash, Loan Plus Digital Credit Provider Limited trading as DG Loan, and Gotway Limited trading as Tena Pesa, had functional, logged-in access to the SHA member database in April 2026.

    The evidence shows that agents used this access to extract and weaponise the health, employment, and biographical information of borrowers and their family members during debt recovery operations.

    The evidence also shows that a written complaint documenting all of this was sent by email to the office of Eng. Anthony Lenaiyara, the Acting Chief Executive Officer of the Digital Health Agency, as far back as April 15, 2026. He has not responded. He has not acted. He has not acknowledged. The SHA system remained open.

    Inside the Breach: What the Loan Agents Could See

    The SHA database, managed operationally by the Digital Health Agency through its Comprehensive Integrated Health Information System and the public-facing AfyaYangu platform, holds the registration records of every Kenyan who has enrolled in the Social Health Insurance Fund since it opened in October 2024. As of April 2026, that figure exceeded 30 million registered members.

    The records stored in the system include full legal names, national identification numbers, dates of birth, SHA customer registration numbers, employer details, coverage periods, dependent relationships, medical history accessible through the health information exchange, and OTP management controls that govern a member’s access to health services.

    The screenshots reviewed by Kenya Insights show debt collection agents operating what appears to be an internal or third-party interface connected directly to the SHA backend.

    On one screen, a complete SHA member profile is displayed with active function buttons.

    The interface is not a static screenshot downloaded from a public page. It is a live panel with interactive controls, including a green button to refresh the member’s records from AfyaYangu in real time and an orange button to request OTP whitelisting, a function that modifies a member’s actual SHA account settings. The agent who sent these screenshots to a borrower described themselves, when confronted directly, as working for Tena Pesa.

    A second set of screenshots, from a separate agent operating from a different number, shows the SHA record of the borrower’s brother, including the brother’s name, employer identification, insurance policy period, and relationship status within the SHA system.

    The employer in question has been identified as a leading communications marketing firm in Nairobi. It was pulled directly from the SHA database, where the brother’s SHA contributory employer was recorded.

    The same agent then threatened to send correspondence to the official email addresses and phone numbers of the marketing , information also sourced, they confirmed, from within the SHA system.

    When asked directly how they had access to SHA and the wider Universal Health Coverage system, the agent responded casually: “Let me do it. Tupate pesa. Then I tell you more about it. Am very idle. I got lot of time to explain.” The agent later confirmed, unprompted, that this access is used against multiple borrowers. “You are not the first person,” the agent told the borrower.

    A third agent, using a WhatsApp number with the display name MODERATE, sent a stream of messages containing the borrower’s employer details sourced from the SHA system, repeated six times in succession, before issuing a tirade demanding loan repayment. The same shortcode channel sent messages containing details that could only have originated from the SHA database.

    The Companies: Who Are Tuma Cash, DG Loan, and Tena Pesa?

    Payablu Credit Limited, the company behind the Tuma Cash lending application, is registered in Kenya and offers short-term mobile loans typically repayable within seven days.

    Loan Plus Digital Credit Provider Limited, operating the DG Loan application, markets itself on the Apple App Store as a fast, secure, and fully licensed lender offering loans of up to Ksh 900,000 at stated APRs of between 12 and 36 percent.

    Its developer privacy disclosures on the App Store acknowledge that the application collects location data, contact information, identifiers, and usage data, and that this data may be used to track users across other apps and websites.

    Gotway Limited operates Tena Pesa, a third mobile lending application with a similar seven-day product structure.

    All three companies entered the market by offering instant, paperless loans disbursed directly to M-Pesa. All three required, as a condition of loan disbursement, access to a borrower’s phone data including contacts, a practice that has long served as the foundation for the harassment-by-contacts model that Kenyan regulators have spent years attempting to suppress.

    What distinguishes this case from ordinary digital lending harassment, however, is not the contact harvesting. It is the apparent integration with, or infiltration of, a government health database.

    The critical question is not only how these companies obtained access to SHA records, but whether that access was granted officially, procured through a rogue employee or contractor within the Digital Health Agency or SHA, or achieved through an API vulnerability that nobody in government has yet acknowledged. None of the three companies responded to questions sent by Kenya Insights prior to publication.

    The Warning That Went Nowhere: DHA’s Deafening Silence

    On April 13, 2026, a Nairobi resident who had been subjected to the attacks prepared a formal complaint letter addressed to three senior officials: Mr. Mohamed I. Amin, Director of Criminal Investigations; Eng. Anthony Lenaiyara, Acting CEO of the Digital Health Agency; and Dr. Kamau Thugge, Governor of the Central Bank of Kenya.

    The letter, which Kenya Insights has reviewed in full, described in methodical detail the specific companies involved, the nature of the access, the personal data that had been extracted, and the legal provisions it violated. It attached evidence and invoked Section 16 of the Access to Information Act 2016.

    On April 15, 2026, the complainant sent a follow-up email directly to the CEO Office of the Digital Health Agency, attaching the full complaint letter and marking it urgent.

    The subject line was clear: Sha Data Breach Complaint. The email named Payablu Credit, Loan Plus Digital Credit, and Gotway Limited explicitly. It described the live, ongoing nature of the breach and asked that it be contained immediately. It noted that over 30 million Kenyans had been exposed.

    Six weeks have passed. Eng. Lenaiyara has not responded. The DHA has issued no public statement about the breach. The SHA system, as far as any available public evidence indicates, has not been secured against this specific form of access. No arrest has been made. No company has been sanctioned. No investigation has been publicly announced.

    The irony is difficult to overstate.

    In December 2025, Eng. Lenaiyara told the media that the AfyaYangu platform is anchored under the Digital Health Act 15 of 2023 and that legal provisions exist to safeguard against risks around sensitive medical records.

    In June 2025, he stood beside Cabinet Secretary Aden Duale at Afya House to announce that digital transformation is the backbone of an efficient and transparent healthcare system.

    Just weeks before the SHA email arrived in his office, his agency was still issuing press statements boasting about portability of patient data across health facilities. The patient data was portable, indeed. Portable straight into the hands of a debt collector at a Nairobi loan app.

    The Digital Health Information Management Procedures Regulations of 2025, promulgated by the DHA’s own parent framework, require any health data controller to notify the CEO of the DHA within 48 hours of becoming aware of a data breach.

    They require a full incident report within 72 hours.

    They require implementation of an Incident Response Plan. Eng. Lenaiyara’s office was the recipient of the notification. His office is also, under the same framework, the body legally required to act on it. He received the complaint. He did nothing.

    A System Already Bleeding: SHA’s Catastrophic Security Record

    The data breach documented in this investigation does not exist in isolation.

    It is the latest wound on a health system that has bled consistently since SHA began operations in October 2024.

    The Auditor-General’s office has flagged Ksh 50 billion in unsupported, irregular, or untraced payments from the Social Health Insurance Fund in the year ending June 2025.

    Within that sum, Ksh 7.3 billion that SHIF reported transferring to SHA is not reflected in SHA’s own accounts. The money has simply vanished. A further Ksh 4.78 billion was disbursed using service codes that have never been gazetted. The system that was supposed to end the corruption of NHIF has thus far produced a scandal of staggering proportions.

    In October 2025, a catastrophic data breach struck M-TIBA, a Safaricom-backed mobile health platform.

    A threat actor known as Kazu claimed to have stolen 2.15 terabytes of health data covering up to 4.8 million users, including medical diagnoses, billing records, national identification numbers, and clinical visit histories from approximately 700 health facilities.

    The breach was advertised on dark web forums, with a 2 gigabyte sample offered as proof of access. The Office of the Data Protection Commissioner launched an investigation. No prosecution has been publicly confirmed to date.

    Then in March 2026, SHA’s own digital platform suffered what it described as a critical system failure, taking down pre-authorisation services across contracted health facilities nationwide for days.

    SHA CEO Dr. Mercy Mwangangi issued a public notice but offered no technical explanation of the failure’s origin.

    The pattern is consistent: a system of extraordinary national sensitivity, holding the health and biometric data of tens of millions of Kenyans, suffering repeated crises, with no accountability and no forensic transparency.

    Between April and June 2025, the Communications Authority of Kenya recorded more than 4.6 billion cyberattacks against Kenyan digital infrastructure, an 80 percent increase from the previous quarter.

    Kenya’s digital health systems are being built faster than they are being secured.

    The SHA database, containing 30 million members’ medical and biographical records, sits at the intersection of every vulnerability in that ecosystem.

    The Wider Scandal: An Industry Built on Stolen Data

    The digital lending industry’s relationship with data it has no right to possess is not a new story in Kenya.

    By early 2025, the Office of the Data Protection Commissioner had received more than 4,000 complaints from Kenyans alleging that digital lenders had misused their personal data. Of those, only a fraction resulted in formal investigations.

    The ODPC has signalled that it will audit at least 40 digital lenders for data breaches, but enforcement has been characterised by legal experts as slow and administratively thin against an industry that moves at the speed of a WhatsApp message.

    What makes the SHA breach qualitatively different from the known offences of the digital lending sector is the nature of the data being accessed. When a loan app harvests your contacts and calls your mother, it is committing an offence under the Computer Misuse and Cybercrimes Act and the Data Protection Act.

    When a loan app is operating inside the government’s national health database, refreshing your medical records in real time, viewing your coverage details, accessing your employer’s information from your SHA registration, and threatening to weaponise that information unless you pay a loan, it has crossed into territory that the complaint letter accurately describes as a national security matter.

    The agent who identified as working for Tena Pesa did not merely boast of having access. They confirmed, without any apparent concern about legal consequences, that this was routine. “You are not the first person,” they said.

    That statement implies an established practice, a business model that incorporates unauthorised health data access as a standard tool of debt recovery.

    The question for investigators is therefore not only how many borrowers of Tuma Cash, DG Loan, and Tena Pesa have had their SHA records accessed and weaponised, but whether other digital lenders operating in Kenya have found the same door open.

    The Business Laws (Amendment) Act, 2024, which took effect on January 1, 2025, elevated harassment by digital lenders from an administrative infraction to a criminal offence.

    The CBK Digital Credit Providers Regulations 2022 explicitly prohibit contacting third parties, including family members and employers, without prior consent.

    The Computer Misuse and Cybercrimes Act 2018 criminalises unlawful access to computer data under Section 5 and computer fraud under Section 26. The Penal Code provides for prosecution under handling stolen goods at Section 322 and conspiracy at Section 393.

    The Data Protection Act authorises the ODPC to impose fines of up to Ksh 5 million or two percent of annual turnover, whichever is higher.

    The law is comprehensive. The evidence is documented. The complaint was filed. The agency responsible for security was formally notified. Nothing happened.

    Questions That Demand Immediate Answers

    Kenya Insights sent questions to the Digital Health Agency, the Social Health Authority, the Office of the Data Protection Commissioner, the Directorate of Criminal Investigations, and the three companies named in this investigation: Payablu Credit Limited, Loan Plus Digital Credit Provider Limited, and Gotway Limited. At the time of publication, none had responded.

    The questions that require urgent public answers are these: How did employees or agents of these three digital lending companies obtain what appears to be live, interactive access to the SHA member database? Was this access granted through a formal integration, procured through a corrupt insider within the DHA or SHA, or achieved through an unpatched vulnerability in the system architecture? How many Kenyan borrowers across all digital lenders have had their SHA records accessed without their knowledge or consent? What disciplinary or criminal action is being taken against the named companies, their directors, and their agents? And why has Eng. Anthony Lenaiyara, the Acting CEO of the Digital Health Agency, failed to respond to a formal breach notification submitted to his office six weeks ago?

    Eng. Lenaiyara has been publicly articulate about the promise of digital health in Kenya. He has spoken at international forums, briefed parliamentary committees, and championed the AfyaYangu platform as a transformative tool. But a system that stores the medical history of 30 million Kenyans is only as valuable as its security, and a regulator is only as credible as his willingness to act when the system fails. The evidence presented in this investigation suggests that, on both counts, the Digital Health Agency has failed catastrophically.

    What Must Happen Now

    The DCI must immediately investigate Payablu Credit Limited, Loan Plus Digital Credit Provider Limited, and Gotway Limited for offences under the Computer Misuse and Cybercrimes Act, the Data Protection Act, the Penal Code, and the Anti-Money Laundering and Combating of Terrorism Financing Act.

    The investigation must include a full forensic audit of how these companies obtained SHA system access, who within the government or the technology supply chain facilitated that access, and how many individuals have been affected.

    The ODPC must immediately audit all licensed and unlicensed digital lenders for SHA system access and impose emergency enforcement measures against those found to be operating in the database. The CBK must suspend or revoke the licenses of the named companies pending investigation. The Ethics and Anti-Corruption Commission must examine whether any official within the DHA or SHA enabled or facilitated this access.

    And Cabinet Secretary Aden Duale, who has championed digital transformation at SHA with great political energy, must now answer for the man he appointed to guard it. Eng. Anthony Lenaiyara received a written, documented, evidence-backed breach notification six weeks ago. He is still in his office. The SHA database is still running. The companies that accessed it have not been charged.

    The health records of 30 million Kenyans were not an abstraction. They were a weapon. And someone in government left the armoury unlocked.

  • SEX SCANDAL ROCKS KISUMU POLYTECHNIC: Top Officials Linked as Secretary Accuses New Council Chairman of Naivasha Advances

    SEX SCANDAL ROCKS KISUMU POLYTECHNIC: Top Officials Linked as Secretary Accuses New Council Chairman of Naivasha Advances

    A bombshell complaint lodged at two police stations and copied to a battery of human rights bodies has thrust the Kisumu National Polytechnic into a scandal of its own making, exposing what sources close to the institution describe as a culture of entitlement at the top of its governing council. At the centre of the storm is Engineer Judah Abekah, the newly installed chairman of the institution’s Governing Council, who stands accused by a senior member of staff of sexually harassing her during an official council retreat in Naivasha. The woman, Mrs Laetitia Opiyo, a secretary attached to the office of the chief principal, has filed a detailed complaint that lays bare a web of pressure, coercion, and alleged procurement interference reaching deep into the council’s inner sanctum.

    “She resisted the advances of Abekah who promised to promote her if she yielded to his sexual demands.”

    The complaint, seen by this publication in full, reveals that Opiyo did not walk into the Naivasha encounter alone or by coincidence.

    According to her account, the chief principal’s own driver, a man named Peter Ochieng, was the instrument used to manoeuvre her toward Abekah’s location at the Lake Naivasha Resort, where two other council members, Duncan Oginga and Ishmael Noo, were also present. Opiyo says she was contacted and urged to join the gathering, which she declined on grounds of professional ethics.

    What followed, according to the complaint, was a campaign of pressure, inducement, and ultimately retaliation.

    Opiyo states that Ochieng made repeated telephone calls reproaching her for failing to cooperate with the council chairman, and that text messages from the driver to her phone make the pressure campaign explicit.

    This publication has seen those texts.

    In them, Ochieng’s language is blunt and reproachful, condemning Opiyo for her refusal to comply with what reads unmistakably as a directive from above.

    Ochieng, now officially indicted and awaiting further disciplinary and potentially criminal action, has attempted to distance himself from the messages by claiming they were intended for a different recipient.

    Investigators and colleagues who have seen the content of the exchanges find that explanation difficult to sustain.

    The complaint additionally reveals a dimension that turns this from a straightforward harassment allegation into something considerably darker.

    Before the advances began in earnest, Abekah allegedly demanded to know why a contractor named Chaju Builders had not yet been paid.

    That question, posed by the council chairman to a secretary who holds no payment-authorisation authority, reads to investigators less like administrative inquiry and more like leverage.

    Chaju Builders is no small name in the Kisumu government contracting landscape.

    Records show the company has accumulated hundreds of millions of shillings in public contracts across city and institutional projects in the region, including a Sh394 million construction project at the polytechnic itself, funded through a World Bank initiative.

    COMPLAINT FILED ACROSS FIVE BODIES

    Opiyo has ensured that her grievance will not be quietly smothered.

    The complaint has been formally copied to the Federation of Kenya Women Lawyers, the Commission on Administrative Justice, the Kenya National Commission on Human Rights, and the Witness Protection Agency.

    Cases have been registered at both the Naivasha Police Station, where the incident occurred, and the Kondele Police Station in Kisumu.

    That spread of institutions suggests Opiyo entered this fight knowing that single-point complaints in Kenya have a habit of disappearing and that the only defence against institutional capture is parallelism.

    Colleagues who were present at the Naivasha retreat have corroborated at least part of her account. According to sources with direct knowledge of events, Opiyo was subsequently found in a state of visible distress by fellow members of staff who described her as dazed and shocked.

    Those colleagues intervened and helped remove her from the immediate situation.

    Sources say the episode left witnesses shaken, not because it was shocking by the norms they had come to know inside the institution, but because it had happened so openly and with such apparent confidence on the part of those involved.

    “Senior officials within the State Department for TVET are attempting to shield the chairman while intimidating junior staff with threats of demotion if the case is not withdrawn.”

    Most alarming is the reported conduct of officials within the State Department for Technical and Vocational Education and Training, the national oversight body for institutions like Kisumu National Polytechnic.

    Multiple sources, speaking to this publication independently, allege that senior figures within the TVET directorate have moved to insulate Abekah from accountability.

    Junior members of staff at the polytechnic have reportedly been warned that their employment is at risk if they support the complainant or refuse to distance themselves from her account.

    The use of demotion threats to silence witnesses in an active harassment investigation is not merely a human resources matter. It is, depending on how investigators choose to characterise it, an act of obstruction.

    AN INSTITUTION WITH A HISTORY OF CRISIS

    The sexual harassment allegations arrive at an institution that has spent the better part of two years lurching from one scandal to another.

    Any honest examination of the Kisumu National Polytechnic’s recent record must begin with September 2025, when the institution was forcibly shut down after students staged a week-long uprising that culminated in running battles with riot police. The trigger was money.

    The Kisumu National Polytechnic Students Association, known as KINAPOSA, led by its president Silas Adem, accused the management of charging students as much as Sh88,000 per year in tuition and associated levies, a figure they said exceeded the government-stipulated cap of between Sh67,000 and Sh72,000 by at least Sh16,000 per head.

    With a student population that was then documented at over 15,000, Adem told the Ministry of Education directly that the arithmetic pointed to a scheme of staggering proportion.

    If the excess charge held across the student body, the institution would have been collecting upwards of Sh240 million per year beyond what policy permitted, with no transparency about where that money was going.

    Chief Principal Catherine Kelonye ordered the institution’s closure on September 19, 2025, through an internal memo that acknowledged students had raised serious allegations of corruption, mismanagement, and unexplained fee increases.

    She did not, in that memo, deny the substance of those allegations.

    The Ministry of Education constituted a formal investigation committee within a week, summoning both KINAPOSA and the institution’s senior management to present evidence before the committee at the Resource Centre Board Room on September 29, 2025.

    The Principal Secretary for TVET, operating under reference MOE/TVET/2/21/1, formally appointed that committee on September 26, 2025.

    Students had demanded two things above all else: that Kelonye and the finance manager step aside pending an impartial forensic audit, and that fees improperly collected be refunded. Neither demand was ultimately met.

    The ministry’s representative, Maryan Hassan, confirmed at an October 24, 2025 meeting chaired by Kisumu County Commissioner Benson Leparmorijo that a review of the institution’s financial records had found no unauthorised alterations to the approved fee structure.

    Hassan acknowledged that certain levies existed above the base fee, but characterised them as government-sanctioned and applied uniformly across national polytechnics.

    Kelonye was confirmed in her position.

    The polytechnic reopened in phases beginning October 27, 2025, with examination candidates returning first.

    What that outcome meant for the students who had been charged the excess amounts, and for the principle that institutional misconduct carries consequences, remains a question this publication considers unresolved.

    Adem’s accusation that a group within management was enriching itself from student payments was never publicly answered with the forensic detail his petition demanded.

    The finances of the institution have not, to this publication’s knowledge, been subjected to the independent forensic audit students sought.

    THE CONTRACTOR AT THE CENTRE

    The mention of Chaju Builders in Opiyo’s complaint is not incidental.

    The company has been the principal contractor on the polytechnic’s most significant and most heavily funded infrastructure project in its recent history, the Regional Flagship TVET Institute for Textile Technology, a Sh394 million construction contract awarded under the World Bank’s East Africa Skills for Transformation and Regional Integration Project, known as EASTRIP.

    The groundbreaking ceremony for that facility was held on February 23, 2022, with the presence of then-Cabinet Secretary for Education George Magoha, Kisumu Governor Peter Anyang’ Nyong’o, and TVET Principal Secretary Mike Kuria. The total EASTRIP-funded programme at the polytechnic was valued at Sh1.08 billion.

    Chaju Builders is not new to large government contracts.

    The company had previously been awarded a Sh659 million non-motorised transport facility contract by Kisumu City, and was publicly recognised by city management as its best contractor of the year for workmanship on an earlier phase of that project.

    For a council chairman to allegedly invoke an unpaid Chaju Builders invoice in the same conversation where sexual pressure is applied to a subordinate raises questions that go well beyond personal misconduct.

    It raises questions about who within the institution’s governance structure has financial influence over that contractor, and what relationship, if any, connects payment decisions to the kind of access that was reportedly being solicited in Naivasha.

    Sources within the polytechnic, speaking on strict condition of anonymity, say the Chaju Builders payment question had been a source of internal tension for some time before the Naivasha retreat, and that the contractor’s invoices had been caught in administrative processes whose delays were not entirely explained by paperwork alone.

    This publication put specific questions to both Engineer Abekah and a spokesperson for the polytechnic’s administration regarding the contractor payment inquiry and its proximity to the harassment allegation.

    No substantive response had been received at the time of publication.

    COUNCIL MEMBER DYNAMICS UNDER SCRUTINY

    The presence of two other council members at the Naivasha gathering described in Opiyo’s complaint, Duncan Oginga and Ishmael Noo, places the incident in a context that is not merely one individual’s alleged predation but a question about the collective character of the body that governs the institution.

    A council retreat is, by its nature, a formal occasion at which members exercise their oversight function.

    That function, according to Opiyo’s account, was accompanied in Naivasha by an apparent willingness on the part of at least some members to participate in, or at minimum to be present during, an attempt to coerce a junior member of staff.

    Neither Oginga nor Noo have publicly responded to queries about their presence at the gathering and their knowledge of what occurred.

    This publication reached out through available institutional channels and received no response.

    The Ministry of Education has also not publicly commented on whether the conduct of council members falls within the scope of any ongoing investigation.

    The polytechnic’s council has in recent history operated under what insiders describe as a compressed timeline of change.

    Abekah is identified in the complaint as the new chairman, implying his appointment is recent.

    His predecessor, Engineer Meshack Kidenda, whose name appears in institutional records from as recently as 2024, was photographed with Chief Principal Kelonye at EASTRIP project site visits. The transition between the two chairmanships, and what it meant for the governance of a body overseeing over a billion shillings in World Bank-funded infrastructure, has not been publicly documented by the ministry.

    THE WOMEN IN THE LINE OF FIRE

    The detail that has stayed with sources inside the polytechnic is not the brazenness of the alleged approach in Naivasha, nor even the scale of the fee scandal that preceded it.

    It is the pattern.

    Opiyo is not described in her complaint as the first woman at the institution to face this kind of pressure. Multiple staff members, speaking in terms that were careful enough to avoid attribution, indicate that the environment within the polytechnic’s administration has for some time been one in which female employees at various levels understand that advancement and security are not uncoupled from compliance with the expectations of powerful men.

    The complaint is unusual not because the dynamics it describes are novel, but because someone wrote them down and sent the letter to five separate institutions.

    The Federation of Kenya Women Lawyers, which received a copy of the complaint, has in recent years pursued a number of workplace harassment cases in educational institutions.

    Their involvement signals that Opiyo’s complaint will be tracked by legal professionals who understand the full weight of what the Sexual Offences Act and the Employment Act require of institutions when harassment is reported.

    The Commission on Administrative Justice, separately, has the mandate to investigate maladministration in public institutions.

    The Kenya National Commission on Human Rights has the authority to investigate violations of constitutional rights in the workplace.

    The Witness Protection Agency’s inclusion in the notification list is the most telling detail of all.

    It says, without saying it explicitly, that Opiyo believes she may need protection from within the institution that employs her.

    “The inclusion of the Witness Protection Agency in the complaint’s notification list says, without saying it explicitly, that Opiyo believes she may need protection from within the institution that employs her.”

    WHAT ACCOUNTABILITY LOOKS LIKE

    The trajectory of institutional accountability in Kenya’s TVET sector does not inspire confidence.

    The 2025 student crisis at Kisumu National Polytechnic ended with Kelonye confirmed in post, the forensic audit that students demanded never conducted, and the institution’s gates reopened with no named consequence for any individual.

    That outcome was not exceptional. It was, in the view of education sector observers, a fairly standard resolution of the sort that happens when the people who would be harmed by accountability are students and junior staff, and the people who would be harmed by its absence are the same.

    The sexual harassment complaint changes the calculation in one critical way. Civil society is watching, and so, apparently, are the police in two counties.

    The texts from Peter Ochieng to Laetitia Opiyo exist.

    They have been seen.

    Ochieng himself has been indicted, which means at least one institutional actor has acknowledged that something improper occurred.

    The question is whether the institutions that received Opiyo’s complaint will treat it as what it appears to be, which is evidence of serious misconduct at the apex of a public institution managing hundreds of millions in donor and government funds, or whether the standard architecture of delay and deterrence will once again assert itself.

    Engineer Judah Abekah, Duncan Oginga, and Ishmael Noo were contacted for comment. Chief Principal Catherine Kelonye was contacted for comment.

    The TVET Principal Secretary’s office was asked whether any investigation into the conduct of the council chairman was underway, and whether staff members had been warned against cooperating with investigators.

    None of the parties had responded substantively at the time of going to press.

    The Kisumu National Polytechnic was built, and continues to be funded in substantial part by international money, on the premise that it exists to educate and equip the youth of Kenya’s Nyanza region.

    The men and women who govern it, whether on the council or in the principal’s office, hold that mandate in trust.

    The events described in Laetitia Opiyo’s complaint suggest that trust is being abused in ways that have nothing to do with education and everything to do with power.

  • Denial Under Duress: The Untold Collapse Threatening David Lagat’s DL Group’s Empire

    Denial Under Duress: The Untold Collapse Threatening David Lagat’s DL Group’s Empire

    When a man with David Langat’s resources sends a corporate notice denouncing a story as ‘inaccurate and misleading’, the instinct of any seasoned journalist is not to reach for a corrections form. It is to ask the question the denial was designed to prevent: what is it, exactly, that he does not want you to know?

    On May 7, 2026, DL Group of Companies issued a statement reacting to reports carried by Africa Intelligence and amplified across business platforms that Kipchimchim Group, one of Kenya’s most acquisitive agricultural conglomerates, was in active discussions to purchase tea assets linked to Langat’s business empire.

    The company called the claims false, vowed to contact authorities, and assured stakeholders its operations were intact.

    The statement did its job in one sense: it generated headlines saying DL Group denied the sale. What it failed to do was explain why the speculation existed in the first place, or address the compounding body of court records, auction notices, and debt enforcement actions that have quietly accumulated around DL Group’s agribusiness operations for the past three years.

    “No discussions at all have taken place at any level regarding such purported sale and there is no intention whatsoever to make such sale.” That assurance would carry more weight if it had not been preceded by two separate forced auction listings of the same property.

    That denial, it turns out, is the story DL Group does not want told.

    A Debt Trail That Tells Its Own Story

    Let us begin with the numbers, because they are not in dispute.

    In July 2023, auctioneers acting on behalf of Transnational Bank published formal notices to sell two of Langat’s flagship assets: the DL Koisagat Tea Estate in Nandi County a 1,342-acre property with 2.47 million tea bushes, processing factories, fuel stations, labour camps, two schools, and a chairman’s residence  as well as prime commercial property in Shimanzi, Mombasa, registered under the name Koifan Developers Ltd. The combined debt cited at the time was Sh2.1 billion. That auction was cancelled without explanation.

    Less than twelve months later, the same properties were relisted for a second forced auction, this time scheduled for September 10, 2024, at a venue in Westlands, Nairobi.

    By this point the tea estate alone was independently valued at approximately $14.73 million against an underlying bank debt of approximately $15.5 million, meaning the asset’s forced-sale value had fallen below the debt it was being seized to recover. That second auction’s outcome was never publicly confirmed.

    Meanwhile, a separate lender, Stanbic Bank, was engaged in its own dispute with Langat’s companies over a dollar-denominated loan of $16,129,427 advanced in April 2020 at a rate of 9.25 percent per annum and repayable over 120 months.

    The bank had already contracted Ascendas Kenya Limited to value the Nandi tea estate arriving at a market value of Sh2.42 billion and a forced sale value of Sh1.821 billion and the Mombasa property at Sh238 million market value. Langat’s companies rushed to court contesting the valuation and arguing, among other things, that a planned sale of his Tanzanian assets had stalled due to regulatory difficulties. The High Court ordered a fresh valuation in February 2025, giving the tycoon another brief reprieve.

    Then, in April 2026, Synergy Industrial Credit Ltd a relatively small financial services company moved to enforce a judgment it had obtained against Langat and DL Koisagat Tea Estate Ltd over vehicle loans advanced in April 2016.

    The original principal was Sh67.1 million, lent to finance nine heavy commercial motor vehicles repayable over 48 months, ending May 2020.

    Langat and his company did not enter an appearance to defend the case. An interlocutory judgment was entered against them in August 2024.

    By April 2026, the debt with accumulated interest and costs stood at Sh87 million.

    A High Court order now freezes three of Langat’s personal land parcels in Cheptalal, Kericho County; Kiplombe, Eldoret; and Kaptel, Nandi County — barring him and his spouse from selling, transferring, or gifting any of them.

    Three banks. Three creditors. Repeated auction notices across three years. A court freeze on personal land. And a rival conglomerate known to be in talks to buy the very assets DL Group says it has no intention of selling.

    Synergy’s Sh87 million is a minor figure in isolation. But the fact that Langat’s firm did not even bother to appear in court to contest it and that the debt traces to loans taken in 2016 and never fully serviced speaks to a chronic rather than situational liquidity problem.

    The Tanzania Gamble and Its Hidden Costs

    In 2018, at the height of his influence, Langat made his boldest move. He spent approximately $46.5 million to acquire a 99 percent stake in three Tanzanian tea companies from British firm Rift Valley Corporation: Mufindi Tea and Coffee, Rift Valley Tea Solutions, and Kibena Tea. The deal gave DL Group an estimated 11,000-tonne annual production capacity in Tanzania, placing it among Africa’s top tea producers.

    What followed was years of non-payment to Tanzanian tea farmers and factory workers in the Njombe region a crisis that became serious enough to attract the personal attention of President Samia Suluhu Hassan, who publicly announced at a campaign event in Lupembe ward that DL’s Tanzanian operation had finally secured funds to begin settling its debts. The company only began meaningful disbursements in mid-2025, some seven years after acquiring the operations.

    It was this Tanzanian acquisition financed partly through debt that Langat cited in court as part of his difficulty in meeting his obligations to Stanbic Bank.

    He told the court that a sale and purchase agreement for the Tanzanian assets was meant to be concluded within three months but ran into ‘requisite regulatory approvals’ that he could not obtain. He expressed confidence that the lender would ‘appreciate his circumstances.’ The bank was less sympathetic, noting that it had restructured the facilities multiple times and found the restructuring ‘unsuccessful’.

    Kipchimchim Circles the Carcass

    Africa Intelligence, a respected platform covering African business intelligence, reported in late April 2026 that Kipchimchim Group was in discussions to acquire DL Group’s tea assets.

    The report was specific enough to prompt DL Group’s formal corporate denial the very denial that has now become the pivot around which this investigation turns.

    Kipchimchim is not a casual player. Founded in Kericho from a single kiosk by Samuel Kipsoi Kipterer Ngetich in the 1990s, the group now run by his children Alfred Soi and Benard Soi controls seven tea factories, a 1,250-tonne-per-day sugar plant, thirteen supermarkets, ten bakeries, twenty-eight restaurants, mining operations, construction, and logistics. It is one of Kenya’s most aggressively expanding agricultural conglomerates, and it has been growing fastest since President William Ruto took office in 2022.

    That last detail is not incidental.

    Langat and Ruto were once close.

    The tycoon is widely acknowledged to have funded Ruto’s political campaigns across multiple cycles. After Ruto’s 2022 election victory, Langat was appointed to the National Investment Council alongside other billionaires including Humphrey Kariuki and Safaricom’s Sitoyo Lopokoiyit. The appointment was read as a reward for loyalty.

    Then, in January 2024, a company linked to Langat won a Sh60 billion tender to supply machinery to the Kenya Ports Authority.

    The deal was blocked before it could be completed, according to multiple sources, by powerful interests within the system.

    Insiders have alleged, on condition of anonymity, that pressure was applied to KPA management to redirect the award.

    Separately, when an Indian firm won a Kenya Revenue Authority stamp-printing tender for which Langat was positioned as local agent, he was removed from the arrangement without explanation.

    At his mother’s burial in September 2024, David Langat made remarks that observers across the political spectrum interpreted as a direct public reproach of President William Ruto the man he had financed and who had appointed him to a national advisory body.

    What followed was remarkable.

    Political activist Morara Kebaso posted on X, alleging that Ruto had encouraged Langat to take out loans to finance his campaigns with promises of profitable returns after assuming power, and that Ruto was now among those positioned to benefit from the subsequent forced auction of Langat’s properties. Kebaso was arrested and arraigned in court the following month.

    The arrest of a critic for repeating albeit in more inflammatory terms what Langat himself had publicly implied at a burial, raised questions that neither DL Group nor State House has answered.

    And the timing of Kipchimchim’s reported acquisition discussions, involving a group that has expanded fastest under the current administration, adds a layer of political texture that no corporate statement can neutralise.

    A Pattern of Defaults, Not a One-Off Crisis

    DL Group’s corporate statement described the circulating reports as part of an attempt by unnamed actors to spread misleading information and sow panic among stakeholders.

    But the pattern of debt default that underlies those reports is documented in court files, not online rumours.

    In October 2021, Langat and members of his family were sued by African Touch Safaris Limited over an unpaid travel bill of $152,000 incurred over a single year 2018 to 2019 covering domestic and international flights for himself, his spouse, nine children and relatives.

    The travel firm alleged that Langat’s company, DL Group, agreed in February 2020 to settle the bills on a monthly basis with two percent interest, but never did. Langat’s family denied there was any contract.

    Vehicle loans from 2016, unpaid by 2020.

    A travel bill from 2018, unpaid by 2021. A dollar bank facility from 2020, in dispute by 2023. Tanzanian farmers owed money since 2018, paid only partially in 2025. This is not a cashflow blip. It is a structural picture.

    What the Denial Actually Reveals

    DL Group’s May 7 statement is, in the plainest reading, a crisis communication document. It was issued not to inform the public but to contain the damage from a specific intelligence report that named a buyer and described live acquisition discussions.

    The company did not deny that it is under financial pressure. It denied only that it has had discussions about selling its tea assets.

    That is a narrow denial.

    It does not address whether creditors are pressing for asset liquidation. It does not address whether the Tanzania assets are still on the market. It does not address what happened to the Stanbic Bank dispute or whether the fresh valuation ordered in February 2025 has concluded.

    It does not explain why, if DL Group’s ‘business strategy and asset ownership’ remain unchanged, the same flagship property has been publicly listed for forced auction twice in three years.

    It also does not address the political dimension of Kipchimchim’s reported interest.

    If an entity closely associated with the current government’s business orbit is in discussions to acquire assets from a man who publicly signalled he felt betrayed by the president, that is not a routine commercial transaction. That is a political economy story, and it deserves to be treated as one.

    DL Group says it has contacted ‘relevant authorities’ to investigate the source of the claims and the motive behind them.

    That is the language of intimidation, directed at a publication that accurately reported a story the group finds uncomfortable. It is also the language of a company that cannot contest the underlying facts and so reaches for the machinery of the state.

    The Investors Are Watching

    DL Group’s statement spoke of its ambition to ‘grow into a well-established African group that can compete internationally.’ That is a vision statement, not a financial position. Investors and counterparties who read this story alongside the court records will draw their own conclusions.

    The group has legitimate assets. Nyali Mall in Mombasa, the Eldoret Special Economic Zone, the proposed Eldo Medicity hospital, DL Farms, and interests across renewable energy and industrial development are real.

    The group is not a fiction. But the tea operations its foundational asset class and the source of its earliest export revenues are encumbered, contested, frozen in parts, and now reportedly the subject of acquisition discussions from a rival.

    A man who borrowed $46.5 million to buy Tanzanian tea estates and could not pay those estates’ own farmers for seven years is not a man with idle capital to deploy. A man whose flagship domestic tea estate has been listed for forced auction twice in fourteen months is not a man operating from a position of strategic choice. And a man who sat at the National Investment Council while the president’s allies blocked his largest pending tender deal is not a man who can confidently claim the protection of political proximity.

    None of this means DL Group is finished.

    Langat has survived crises before.

    He has restructured, negotiated, delayed, and on at least one occasion in 2023 avoided auction through means that were never publicly explained. He may do so again.

    But the question now being asked in Nairobi’s financial corridors is not whether DL Group can survive.

    It is whether the group’s tea assets, under whatever legal or commercial arrangement eventually emerges, remain under the control of David Langat.

    The denial issued on May 7 does not answer that question. It merely confirms that someone asked it.

  • THE INSURER THAT TOOK YOUR PREMIUM AND FORGOT YOUR NAME: How ICEA Lion Left a Client Begging for Sh7.8 Million Across Four Months

    THE INSURER THAT TOOK YOUR PREMIUM AND FORGOT YOUR NAME: How ICEA Lion Left a Client Begging for Sh7.8 Million Across Four Months

    On a Friday morning in early May 2026, a Nairobi motorist named Alex Njenga logged onto X and typed words that no insurance company in Kenya wants to see trending: his claim number, his registration plate, and the name of his insurer. He had spent 118 days doing things by the book. He had filed on time. He had submitted every document. He had signed and returned the discharge voucher that the insurer itself had issued, a document that in industry parlance signals a deal done and a cheque owed. And still, Njenga was broke, vehicleless, and begging.

    The insurer was ICEA Lion. The claim was KSh 7,800,000, covering a Landcruiser Prado registered KDV 187J under a comprehensive motor policy for which Njenga had paid premiums exceeding KSh 300,000. The incident that triggered the claim had been investigated by both the police and independent assessors, with findings concluded by March 2026. By every metric the insurance industry uses to define a settled claim, this case was closed. Yet the money did not move.

    What moved instead was a social media storm that would strip the mask off one of Kenya’s most aggressively marketed financial brands, expose a claims department that had apparently mastered the art of delay, and drag into public view the uncomfortable arithmetic at the heart of Kenya’s insurance sector: an industry that is extraordinarily good at collecting money and structurally reluctant to return it.

    A Claims Department Running on Empty Promises

    Njenga’s account of his four-month ordeal reads like a manual for institutional stonewalling. From the moment he filed his claim in late January 2026, he was routed to a claims officer named Magdalene Nekesa, through whom the company would deliver a sustained programme of empty assurances. Each week brought a new promise. Each promise expired unredeemed. Njenga later told his growing audience on X that he had been forced to “beg the claims department every day,” a phrase that should detonate alarm bells at a company whose brand promise is “Better Together.”

    “I’m tired of begging them to compensate my claim of Ksh 7.8 million for KDV 187J,” Njenga posted directly at the insurer. “The claims department have been taking me in circles since I filed my claim in January 2026.”

    The bureaucratic choreography reached its most cynical point when ICEA Lion’s customer service account responded on April 23, 2026, claiming the claim had already been paid on April 15. It had not. Njenga was still waiting. Whether the company had processed a payment that was then reversed, or whether its customer service division was operating on information entirely disconnected from its claims department, the practical consequence was the same: a man with a valid, assessed, voucher-signed claim was publicly told he had been paid money he had never received. The company later apologised for “the experience” and invited him to DM details for follow-up. It did not, at any stage, explain why a fully documented, high-value claim sat unresolved for nearly four months after a discharge voucher had been issued and returned.

    The Breaking Point: Regulators, Cancellations, and a Country Watching

    By the first week of May 2026, Njenga had exhausted the private channels. He had threatened to report the matter to the Insurance Regulatory Authority. He had cancelled his life insurance policy with ICEA Lion, telling the company in public that he no longer trusted it to honour obligations to his dependants. That statement, quiet and personal as it was, carried the specific gravity that insurance companies fear most: a client who had concluded that the promise underwriting his family’s financial security was worthless.

    The public amplification accelerated on May 7.

    Users across X began sharing Njenga’s posts, tagging the IRA’s official handle and demanding regulatory intervention. One widely circulated post issued a demand framed with surgical clarity: “You had no business insuring the car if you knew you weren’t ready to pay.” Others shared their own histories with delayed ICEA Lion claims, transforming a single policyholder’s grievance into a pattern-recognition exercise the company could not suppress.

    On the morning of May 8, Njenga renewed his threat to involve the IRA. Hours later, an RTGS transfer landed in his account. By Friday, he confirmed the full KSh 7,800,000 had reflected, thanking what he called the “X family” for support that had achieved in hours what four months of legitimate process had failed to deliver. ICEA Lion has not issued a public statement. It has not explained the delay. The silence is itself a statement.

    The Sector’s Dirty Numbers

    What happened to Alex Njenga is not unique. It is not even unusual. It is, by the Insurance Regulatory Authority’s own data, a representative experience of what Kenyan policyholders routinely endure. IRA data shows complaints against insurers rose for the fourth straight year to 1,962 in 2023, surpassing the 1,878 in the previous year, with delayed settlement of claims accounting for 1,045 cases, or 53.3 percent of the complaints. That figure means the single largest source of policyholder suffering in Kenya’s insurance sector is not fraud, not mis-selling, not mis-pricing. It is an insurer taking your money and then not paying when it is due.

    The claim rejection crisis has grown so acute that the IRA published the draft Insurance (Claims Management) Guidelines, 2025, introducing tighter procedures amid a sharp rise in declined payouts, with insurers rejecting claims worth KES 1.51 billion in the first half of 2025, up from KES 879.9 million in the same period the previous year.

    The draft guidelines that followed from this crisis are so elementary in their demands that their very necessity indicts the industry they seek to reform. Under the proposals, insurers will be required to acknowledge claim notifications within two working days and make settlement offers or communicate decisions within seven days of receiving investigation reports. They will also be barred from requesting information at the claims stage that should have been obtained when issuing the policy.

    That such rules need to be written into law reveals what the industry has been doing in their absence. According to Kenya’s insurance law, an insurer should admit or deny liability, determine the amount, identify the claimant and pay within 90 days, with a company able to request a 30-day extension, and failure to pay within the set deadlines attracting a five percent penalty on the unpaid amount. Njenga’s claim sat for 118 days. If ICEA Lion did not apply for and receive a formal extension, the statutory penalty provisions were arguably triggered. The regulator has not commented.

    AAA-Rated, KSh 194.2 Billion in Assets, and Still Running Clients in Circles

    The particular cruelty of ICEA Lion’s conduct in the Njenga case lies in the company’s own positioning. ICEA Lion is not a struggling mid-tier underwriter scraping for liquidity. In June 2024, GCR Ratings affirmed ICEA LION Life Assurance Limited and ICEA General Insurance Company’s national scale financial strength rating at AAA (KE) with a stable outlook for the third year running, affirming ICEA LION Insurance Holdings’ solid financial profile characterised by very strong capitalization and above-average earnings. The group’s asset base stood at KES 194.2 billion as of the 2023 year-end results, and it serves over 1.6 million clients.

    The group’s modern identity was forged through the 2012 merger of the Insurance Company of East Africa and Lion of Kenya Insurance Company Limited, a strategic horizontal integration that combined two top-five insurers to enhance competitiveness, efficiency, and market share. ICEA LION Holdings is owned by First Chartered Securities with a majority stake of 75.9 percent, which is in turn wholly owned by the ultimate parent company Asset Managers Limited, with the remaining shareholding held by Prudential Financial Inc, an entity incorporated in the United States.

    A company sitting on KSh 194.2 billion in assets, rated AAA, and collecting premiums north of KSh 300,000 from a single comprehensive motor policy, found itself unable to process a KSh 7.8 million payout for 118 days after the discharge voucher was signed. The premium Njenga paid represented less than four percent of the claim he was owed. The only rational explanation for the delay is that the company calculated it would cost less to defer than to pay.

    ICEA Lion’s Pattern: Uganda and Now Nairobi

    The Njenga case is not the first time ICEA Lion has been publicly confronted over motor claim delays. In late 2023, Ugandan media personality Andrew Kyamagero alleged in a lengthy thread that ICEA Lion refused to honour his comprehensive motor insurance policy that remained unsettled since mid-November 2023. The company issued a statement describing the claims as misleading, attributing the delays to complications arising from Kyamagero’s choice of a non-panel repair garage. The dispute was ultimately resolved privately, after the social media noise reached sufficient volume.

    The Uganda incident and the Kenya incident share a structural fingerprint. In both cases, a policyholder with a legitimate claim found that their only effective leverage was public humiliation of the insurer. In both cases, resolution came after social media pressure rather than before it. The question this pattern raises deserves a direct answer from ICEA Lion’s board: how many policyholders without a social media following, without the language to articulate their grievance, without the networks to amplify it, are still waiting?

    The Trust Deficit Strangling the Industry

    Insurance uptake in Kenya remains low compared to other key economies, with insurance penetration coming in at 2.2 percent as at H1 2025, according to the IRA and Central Bank of Kenya, a decline of 0.2 percentage points from 2.4 percent recorded in 2024, against the global average of 7.4 percent per the Allianz Global Insurance Report 2025. The insurance sector recorded 9.4 percent growth in gross premium to KSh 395.3 billion in FY 2024, while insurance claims increased by 12.5 percent to KSh 105.7 billion.

    Trust issues, specifically slow claims processing and complex policy terms, consistently discourage insurance sign-ups among Kenyan consumers. When delayed settlement accounts for more than half of all formal complaints to the regulator for four consecutive years, that distrust is not paranoia. It is pattern recognition.

    The IRA’s Long-Overdue Reckoning

    The Insurance Regulatory Authority has started the process of reviewing the current underwriting laws to cut claims payment period from the current 90 days, while the Competition Authority of Kenya and courts have been forced to step in for some insurers to honour claims payments in the wake of mounting complaints, widening the trust deficit between customers and insurers.

    The draft Insurance (Claims Management) Guidelines outline specific grounds that can no longer be used to decline claims. Insurers will not be allowed to decline claims from incidents that have been reported late without considering and documenting the reasons for the delay. The Association of Kenya Insurers responded with predictable ambivalence. AKI’s manager for general insurance business called the proposed guidelines “a mixed bag,” noting that having grounds for not rejecting claims spelled out raised concerns, since reporting a claim late may in some circumstances mean the insurer cannot collect any evidence to determine whether they are dealing with a genuine claim.

    What the regulatory discussion has not confronted directly is the question of accountability for patterns of deliberate delay. A five percent penalty on an unpaid claim does not compensate a policyholder who spent four months without a vehicle, whose livelihood was disrupted, and whose psychological endurance was ground down by an institution contractually obligated to protect them. The penalty structure assumes delay is an occasional operational failure. The complaint statistics, and the Njenga case, suggest it is a routine commercial strategy.

    Social Media as Kenya’s Unofficial Insurance Regulator

    What the Njenga case has demonstrated, most sharply, is that Kenya’s formal accountability mechanisms for insurance disputes are functionally inadequate for the policyholders who need them most. The IRA complaints process exists, but it is slow, requires documentation, and places the burden of pursuit on the aggrieved party. The courts exist, but litigation is expensive and inaccessible to most claimants. The industry’s own internal processes, as Njenga’s 118-day experience illustrates, are easily weaponised against the policyholder through deferral, misdirection, and invented confirmations of payments never made.

    Social media has stepped into that vacuum. It is imperfect. It favours the articulate and connected. It creates perverse incentives for companies to resolve the loudest complaints while ignoring quieter ones. But in the Kenyan insurance context, it has become the most reliable enforcement mechanism available to an ordinary policyholder with a legitimate grievance and no institutional leverage. That is an indictment, not of social media, but of every formal structure that was supposed to make it unnecessary.

    Njenga, who works as an insurance broker and described the ordeal as a “nightmare,” said he plans to switch to third-party motor cover in future and is shopping for a replacement Landcruiser 100 Series. He urged ICEA Lion’s claims department to “evolve or they will lose plenty of clients.” The company, which has built a brand on the promise that it will be there in life’s defining moments, spent four of those months proving the opposite. The AAA rating speaks to solvency. It says nothing about conscience, and it says nothing, it turns out, about the willingness to pay.

  • The $24 Million Heist at the End of the World

    The $24 Million Heist at the End of the World

    On the morning of 27 March 2026, Dr. Chol Deng Thon Abel sat in the Undersecretary’s chair at South Sudan’s Ministry of Petroleum in Juba for what would prove to be his last hours in office.

    A presidential decree signed by Minister of Presidential Affairs Africano Mande Gedima was already in motion, naming Dr. Santino Ayuel Longar as his replacement under Republican Decree No. 108/2026.

    Before clearing his desk, Dr. Chol signed two of the most consequential letters of his turbulent tenure: allocation awards granting South Sudan’s sovereign crude oil to Chiang Wei LLC FZ and Euro American International Energy, the two trading companies that have quietly dominated Juba’s oil corridor for years.

    What happened next, across a span of eight days and three conflicting allocation letters for the very same cargo, is one of the most brazen acts of resource capture ever documented against an African state.

    Kenya Insights has reviewed internal South Sudanese Ministry of Petroleum documents, official allocation award letters, compliance reports, shipping schedules, United States Department of Justice civil forfeiture complaints and United Kingdom High Court judgments to piece together a story that goes far beyond oil trading corruption.

    It reaches into the financial architecture of Iran’s Islamic Revolutionary Guard Corps, touches a sanctioned network dismantled by American prosecutors and implicates officials who have been recycled through the petroleum ministry with the regularity of a cargo loading window.

    Within eight days, the same 600,000-barrel cargo was allocated three times to two different companies. South Sudan was paid at $70 a barrel while the oil was worth $100 on the open market.

    THE LAST-MINUTE LETTERS

    Reference number RSS/MoP/J/O/U/3/26/262, dated 27 March 2026, bears the official seal of the Republic of South Sudan and the signature of Dr. Chol Deng Thon Abel.

    The letter is addressed to Mr. Choul Laam, Managing Director of Chiang Wei LLC FZ. Its subject line reads: Nile Blend Final Award Letter for April 2026 Cargo to Chiang Wei LLC FZ. The cargo: 600,000 barrels of Nile Blend crude, loading window 30 April to 2 May 2026.

    The stated pricing basis: dated Brent average of the month of loading at a discount, described as the tender discount average of first two bids.

    Buried in the body of the letter is the sentence that makes the allocation extraordinary: Chiang Wei LLC FZ has already advanced $60,000,000 (Sixty Million United States Dollars) against the estimated value of this April 2026 cargo.

    On the same date, reference number RSS/MOP/J/O/U/3/26/251, Dr. Chol signed an equivalent award letter addressed to Mr. Taha, Managing Director of Euro American International Energy, Dubai, UAE.

    Its subject: Dar Blend Final Award Letter for April 2026 Cargo to Euro American International Energy DMCC. Another 600,000 barrels, loading window 29 to 30 April 2026.

    Two cargoes worth a combined $120 million at then-prevailing market prices, committed in the final hours of an outgoing official’s mandate to two companies that have been at the center of South Sudan’s most contested oil dealings for years.

    This was not an isolated exercise of last-minute authority.

    Internal shipping schedules reviewed by Kenya Insights show a pattern stretching back through 2025 in which RSS-designated cargoes consistently flowed to Cathay Petroleum, BGN, Wellbred and the Chiang Wei and Euro American network on dates that correspond to administrative transitions.

    Officials cycle through the Petroleum Ministry’s undersecretary role with bewildering frequency: Dr. Chol himself has been appointed, dismissed, reassigned and reinstated more than ten times in twelve years, a churning that governance analysts in Juba describe as a system deliberately designed to prevent institutional memory while allowing connected intermediaries to operate continuously across every change of personnel.

    THE CARGO THAT CHANGED HANDS THREE TIMES

    The Dar Blend April 2026 cargo allocated to Euro American International Energy on 27 March became the site of an administrative collision that reveals the entire mechanism of capture.

    Four days after Dr. Chol signed his award to Euro American’s managing director Idris Taha, his successor Dr. Santino Ayuel Longar issued his own letter. Reference RSS/MOP/J/O/U/31/03/101, dated 31 March 2026, is addressed to Mr. Ken Mugambi, Group CEO of Trinity Energy Limited, Juba, and copies in the African Export Import Bank, Afreximbank. Its subject: Dar Blend Final Award Letter for April 2026 Cargo to Trinity Energy Limited.

    The cargo awarded to Trinity was identical: 600,000 barrels of Dar Blend, loading 29 to 30 April 2026.

    The incoming Undersecretary directed that all proceeds from the cargo’s sale be retained by Afreximbank and applied to the Government of South Sudan’s financing obligations.

    The legal basis for the reassignment was a Ministry of Finance and Planning letter, reference RSS/MOFP/J/VSF/03/2026-27 dated 31 March 2026, and an existing Petroleum Allocation letter reference RSS/MOP/J/U/O/12/25/086 dated 23 December 2025, suggesting the Trinity arrangement was rooted in a pre-existing commitment that pre-dated Dr. Chol’s tenure entirely.

    Then, on 3 April 2026, a third document surfaced.

    A further allocation letter, attributed the same 600,000-barrel loading window once more to Euro American International Energy DMCC, this time with authority for Euro American to retain the proceeds for application to government financing obligations.

    Idris Taha’s company had vanished and reappeared across three documents in eight days, each claiming legal authority over the identical cargo.

    Whether one cargo or multiple overlapping claims, the result was the same: competing entitlements, legal uncertainty and the opening for a connected intermediary to assert control regardless of which document a shipper chose to honour.

    Idris Taha’s Euro American International Energy vanished and reappeared across three documents in eight days, each claiming legal authority over the identical cargo.

    THE PRICE THAT ROBBED SOUTH SUDAN OF $24 MILLION

    The allocation letters are silent on the most devastating detail.

    Internal documents reviewed by Kenya Insights indicate that at least one cargo lifted in March 2026 was priced against February benchmark levels, when dated Brent crude traded in the range of $70 to $72 per barrel.

    The timing was catastrophic for South Sudan’s treasury and enormously profitable for the intermediary that held the pricing option.

    On 28 February 2026, the United States and Israel launched strikes on Iran’s nuclear programme.

    The geopolitical shock that followed sent global oil prices into the sharpest single-month surge in recorded history, according to the International Energy Agency’s April 2026 Oil Market Report.

    With the Strait of Hormuz effectively closed and more than 20 million barrels per day of regional crude disrupted, benchmark prices soared to between $100 and $110 per barrel through March and into April.

    The IEA described the March price movement as oil’s largest-ever monthly gain.

    For South Sudan, the arithmetic is brutal.

    A cargo of 600,000 barrels priced at February’s $70 benchmark generates approximately $42 million in gross revenue.

    The same cargo lifted in late March or April, priced at market, would have been worth between $60 million and $66 million.

    The differential: $18 million at the low end, $24 million at the top.

    That is the sum that did not reach South Sudan’s government on a single shipment, captured instead by whichever intermediary held the contractual right to apply the earlier, lower pricing formula.

    On a state whose oil revenues represent 85 to 90 percent of government income, and whose civil servants face persistent delays in salary payments, $24 million is not an accounting rounding error. It is the monthly wages of tens of thousands of public workers.

    CHIANG WEI, WELLBRED AND THE TEHRAN CONNECTION

    The Chiang Wei LLC FZ that received the Nile Blend allocation letter on 27 March 2026 is not simply an obscure Dubai-registered free zone company.

    A compliance report dated 9 March 2026, reviewed by Kenya Insights, identifies WellBred Trading DMCC as the financial backer of Chiang Wei LLC FZ’s oil cargo operations in South Sudan.

    The report flags RMB-denominated transactions between Chiang Wei and Shandong Hi-Speed Group in connection with oil lifting operations, and identifies potential financial links to networks associated with sanctioned Iranian oil.

    WellBred Trading DMCC is, at this moment, the subject of United States Department of Justice civil forfeiture proceedings.

    Case number 1:26-cv-00802, filed in March 2026, seeks to seize $12,973,529 that US prosecutors allege was intended for WellBred Capital Pte Ltd and its subsidiary WellBred Trading DMCC.

    The complaint names Mohammad Hossein Shamkhani, son of Ali Shamkhani, a senior adviser to Iran’s Supreme Leader, as the operator of what investigators describe as the Shamkhani Network: a sprawling apparatus of front companies, shell entities and shipping firms designed to move sanctioned Iranian crude onto world markets in violation of the International Emergency Economic Powers Act.

    Shamkhani was killed in the American-Israeli strikes on Tehran on 28 February 2026.

    According to the DOJ complaint, Shamkhani maintained internal organisational charts showing WellBred’s precise position within the Shamkhani Network.

    The companies’ nominal leadership served as a front while actual operational control rested with Shamkhani and his associates.

    The Shamkhani Network, investigators allege, laundered billions of dollars from Iranian and Russian oil sales, primarily routing barrels to buyers in China.

    The FBI, Homeland Security Investigations and the IRS Criminal Investigation Global Illicit Finance Team are pursuing the case.

    The compliance report reviewed by Kenya Insights recommends suspending all commercial relations with Chiang Wei LLC FZ pending a financial investigation into the company’s relationship with WellBred and any consequential exposure to Iranian oil networks under sanctions.

    The report had been circulated internally within South Sudan’s Petroleum Ministry. On 27 March 2026, the day it was issued into wider circulation, Dr. Chol signed the allocation letter granting Chiang Wei a $60 million cargo.

    The compliance report had been circulated within South Sudan’s Petroleum Ministry. On the very same day, Dr. Chol signed an allocation letter granting Chiang Wei a $60 million cargo.

    THE ALLOCATION LEDGER: WHAT THE SHIPPING SCHEDULES REVEAL

    Internal cargo scheduling tables covering South Sudan’s crude exports from January 2025 through May 2026, reviewed by Kenya Insights, show RSS-allocated cargoes flowing with remarkable consistency to the same cluster of offtakers: Cathay Petroleum International, BGN, WellBred and the chain of entities connected to Euro American International Energy.

    The pattern is not incidental. Cargoes designated as RSS, the notation indicating government-discretionary allocation as distinct from commercial partner entitlements, appear in the schedules at regular monthly intervals and are consistently assigned to this network.

    In January 2026, BGN received a DAR-RSS cargo loading 7 to 8 January. In December 2025, WellBred received a DAR-RSS allocation loading 27 to 28 December. BGN reappeared for an October 2025 allocation. Cathay Petroleum received RSS cargoes loading in September, July, May, March and February 2025.

    The schedule reveals not a competitive tender system but a revolving allocation among a handful of entities that appear to have secured near-permanent access to South Sudan’s sovereign crude sales through mechanisms that are neither published nor subject to independent scrutiny.

    THE CAPTURE THAT LEADERSHIP CHANGES CANNOT BREAK

    The South Sudanese government has periodically attempted, or at least performed, accountability within the Petroleum Ministry.

    The arrests of senior energy officials in February 2026 were presented as a response to financial malpractice.

    The dismissal of Dr. Chol on 27 March 2026 and his replacement by Dr. Santino Ayuel Longar was framed as a further corrective step. Neither action changed the underlying allocation architecture.

    Euro American International Energy, owned by Dubai-based Sudanese businessman Idris Taha, continued to appear across allocation records through the transition.

    London’s High Court had already heard, in November 2025, that Euro American and Meridian Energy Pte Ltd had purchased a disputed Nile Blend cargo that BB Energy was attempting to recover against a $100 million pre-payment debt.

    A UK High Court judge, Justice Christopher Butcher, noted in his November 2025 judgment that there were good grounds to believe South Sudan itself lacked the funds to satisfy any damages award, citing Transparency International’s classification of South Sudan as the world’s most corrupt country.

    The court issued an injunction against the cargo’s transfer before the parties reached a settlement that allowed lifting to proceed.

    The structure documented across the allocation letters is specifically designed to survive personnel changes. Incoming officials inherit commitments made in the final hours of their predecessors’ mandates.

    Allocation letters create competing claims that require weeks or months to unwind, and in that window the connected intermediary has already lifted and sold the cargo.

    The incoming Undersecretary Santino signed a reassignment to Trinity Energy on 31 March.

    Before that letter could be operationalised, a further document on 3 April restored Euro American’s position.

    The formal administrative chain was overridden by the practical reality of who controlled the contractual instruments.

    WHAT STRUCTURAL REFORM WOULD ACTUALLY REQUIRE

    Oil governance experts and the United Nations Commission on Human Rights in South Sudan, whose September 2025 report titled Plundering a Nation documented the systematic looting of petroleum revenues by political elites, have identified specific reforms that would begin to break the capture cycle.

    Publication of all allocation decisions in advance, with identified ultimate beneficiaries, would eliminate the opacity that enables last-minute awards to persist unchallenged.

    Competitive tendering with independent oversight would prevent the revolving allocation to a closed network.

    Escrow accounts holding proceeds until independently verified delivery of revenue to government accounts would end the practice of proceeds being recycled into subsequent transactions before reaching the treasury.

    Market-based pricing with no contractual option to apply earlier benchmarks would have placed an additional $18 million to $24 million in South Sudan’s government accounts from the single March 2026 cargo alone.

    Alignment of pricing to the date of lifting rather than any prior period would remove the mechanism through which intermediaries capture the upside of rising markets at the state’s expense.

    Independent auditing of every allocation decision, every pricing formula and every payment flow would create a paper trail that could survive the personnel churn that currently resets accountability with every reshuffle.

    South Sudan formally owns its oil. But the same companies capture its value, through mechanisms so embedded in the administrative structure that no single dismissal can dislodge them.

    THE NUMBERS BEHIND THE SILENCE

    South Sudan produces approximately 150,000 barrels of crude per day, split between Nile Blend and Dar Blend grades, piped north through Sudan to the terminal at Port Sudan’s Bashayer facility.

    At $100 per barrel, that daily output represents $15 million in gross revenue.

    Over a month, $450 million. Of that, oil-backed debt repayments to Afreximbank, QNB, Nasdec General Trading and other creditors consume a substantial share. The UN estimated South Sudan’s total outstanding oil-backed debt at approximately $2.3 billion as of mid-2025.

    Against that backdrop, the pricing differential captured by intermediaries on government-allocated cargoes is not a marginal rounding error.

    The compliance report reviewed by Kenya Insights describes a model in which Chiang Wei secures allocations, arranges lifting and resale, and retains part of the proceeds rather than transferring them fully to South Sudan.

    The report characterises this as a closed-loop financing structure, in which oil value is recycled into subsequent transactions, limiting the proportion of revenue that reaches the state.

    The WellBred connection, if confirmed, would add sanctions exposure to a system already burdened with debt, governance failure and institutional capture.

    RIGHT OF RESPONSE

    Kenya Insights sought comment from Euro American International Energy, Chiang Wei LLC FZ, the Republic of South Sudan’s Ministry of Petroleum and the Ministry of Presidential Affairs prior to publication.

    No responses were received.

    Idris Taha, managing director of Euro American International Energy, did not respond to questions submitted regarding his company’s role in the April 2026 cargo allocation sequence, the pricing mechanisms applied to March 2026 cargoes and the company’s relationship with other entities in the allocation network.

    Choul Laam of Chiang Wei LLC FZ did not respond to questions regarding the $60 million advance payment, the compliance report recommending suspension of commercial relations and any relationship between Chiang Wei and WellBred Trading DMCC.

    DOCUMENTS: This investigation is based on South Sudan Ministry of Petroleum allocation award letters RSS/MoP/J/O/U/3/26/262 and RSS/MOP/J/O/U/3/26/251 (both 27 March 2026); Dar Blend Award Letter RSS/MOP/J/O/U/31/03/101 to Trinity Energy Limited (31 March 2026); internal South Sudan crude cargo scheduling tables (January 2025 to May 2026); a compliance report dated 9 March 2026; US DOJ civil forfeiture complaints 1:26-cv-00802 and 1:26-cv-00807; UK High Court proceedings in November 2025 (Justice Christopher Butcher); IEA Oil Market Reports for March and April 2026; and reporting by the Organised Crime and Corruption Reporting Project (OCCRP), Radio Tamazuj and Global Trade Review.

  • The Judge, The Disgraced Magistrate, The Auctioneer-Husband, The Fixer And The Lawyer: Anatomy Of A Sh16 Million Judicial Bribery Racket

    The Judge, The Disgraced Magistrate, The Auctioneer-Husband, The Fixer And The Lawyer: Anatomy Of A Sh16 Million Judicial Bribery Racket

    When Raphael Tuju walked into Entim Sidai Wellness Sanctuary on the afternoon of March 9, 2026, the property had already been stripped from him by a High Court ruling delivered hours earlier.

    What happened inside that serene Karen retreat would not stay serene for long.

    Anti-corruption detectives were watching from a distance, Tuju was wired with audio-visual recording devices, and in his bag was one million shillings belonging to the Ethics and Anti-Corruption Commission, treated and ready to be traced. Within the hour, four men had been arrested, the cash had been recovered, and a bribery scandal of extraordinary proportions had burst into the open.

    That afternoon did not happen in isolation. It was the final act of a scheme that the EACC says was negotiated across months, involved multiple middlemen, escalated from polite suggestions to demands denominated in American dollars, and at its core, according to investigators and a confession relayed by Senior Counsel Nelson Havi, was orchestrated with the knowledge of the very judge presiding over Tuju’s most consequential case.

    Lady Justice Josephine Wayua Wambua Mongare of the High Court’s Commercial and Tax Division has denied any wrongdoing.

    But the names of those arrested, the phone records extracted from seized devices, a speakerphone call in which Tuju says he heard a judge’s voice discussing his own case, and the staggering coincidence that the arrest and the adverse ruling landed on the same day, have produced a scandal Kenya’s judiciary has not seen in a generation.

    THE ORIGINS OF A DEBT

    To understand what is alleged to have happened inside Entim Sidai on March 9, it is necessary to travel back to 2015, when Tuju, then a businessman and former Cabinet minister, approached the East African Development Bank for financing.

    Through his company Dari Limited, he secured a loan of approximately 9.3 million US dollars, later valued at about Sh1.2 billion, to develop a luxury hospitality complex in Karen anchored around Dari Restaurant and the Entim Sidai wellness sanctuary.

    The properties pledged as collateral were his most prized assets. The loan was disbursed in July 2015. By the second quarter of 2016, it had defaulted. Tuju’s account attributes the collapse partly to disbursement shortfalls by the bank, arguing that EADB paid Sh932.7 million for the first tranche against an agreed figure of Sh943.9 million and later declined to release a further Sh294 million earmarked for the construction of luxury villas whose proceeds were intended to service the debt. EADB’s account is blunter: the money was borrowed, it was not repaid, and not a single cent has been returned since August 2016, when a payment of $10,000 was the last the bank ever received.

    What followed was a decade-long legal war prosecuted across two continents. EADB filed proceedings in London, where the High Court of Justice ruled in 2019 that Dari Limited and Tuju owed $15,162,320. That judgment was domesticated in Kenya in 2020 by the Nairobi High Court and has since been affirmed at every appellate level, including the Supreme Court, which declined to suspend its execution.

    The debt, accumulating interest and penalties, has since ballooned to an estimated Sh4.5 billion. Three prime Karen properties, Entim Sidai Wellness Sanctuary, Tamarind Karen, and Dari Business Park, stand as the collateral. One of them, Dari Coffee and Garden Restaurant, was auctioned in October 2024 for Sh450 million to a company linked to businessman Jackson Kiplimo Chebett, a figure whose name would surface again in other controversies.

    Tuju contested the valuation fiercely, arguing properties worth Sh3 billion to Sh4 billion were being stripped for a fraction of their worth.

    On the same day EACC detectives arrested four men at Tuju’s Karen property, Justice Mongare delivered her ruling striking out Tuju’s case as a ‘blatant abuse of court process.’ The coincidence, if it is one, has not been explained.

    THE APPROACH

    According to the EACC affidavit sworn by investigator Emmanuel Kubasu and now before the court, Tuju filed his first complaint with the commission in February 2026, alleging that individuals had begun approaching him with an unmistakable proposition: pay money, and the judge handling your case would be persuaded.

    The approach, as investigators describe it, did not begin with a blunt demand. It began with assurances. Men who described themselves as connected to the highest levels of the judiciary told Tuju they could secure a favourable outcome in the pending matter before the Commercial and Tax Division. They named figures. They suggested sums. And then they escalated.

    By early March 2026, the demands had crystallised into explicit financial terms. Tuju was asked to part with $80,000, equivalent to approximately Sh10.3 million.

    A separate demand of Sh5 million was issued in connection with related proceedings. In an earlier episode that the EACC affidavit describes in forensic detail, one of the intermediaries told Tuju the judge was travelling and needed money urgently.

    An initial demand of Sh1 million was negotiated down to Sh500,000.

    Tuju paid Sh250,000 via mobile phone to the intermediary’s number. He later produced the remaining Sh250,000 in cash. The digital forensic examination report attached to the EACC filings confirms the mobile money transfer and corroborates the timeline through call logs and WhatsApp communications extracted from Tuju’s phone.

    Most damning of all the elements described in the affidavit is the speakerphone incident.

    According to EACC investigator Kubasu, one of the intermediaries, described as a debt restructuring and recovery consultant, sought to convince Tuju he had direct access to the judge.

    To demonstrate this, the consultant placed a call in Tuju’s presence and put the judge on speakerphone. The affidavit states that during that conversation, details of Tuju’s pending case were openly discussed, and that Tuju was left convinced the person on the other end of the line was the petitioner, Justice Mongare.

    The specificity of the case details discussed in the call, details only someone with intimate knowledge of the proceedings would hold, formed the basis of Tuju’s certainty.

    THE MEN IN THE ROOM

    On March 9, the EACC handed Tuju one million shillings in treated currency, fitted him with recording equipment, and sent him to a meeting already arranged at Entim Sidai Wellness Sanctuary, his own Karen property.

    What the detectives monitoring from a distance would witness, and what the audio-visual recordings now preserved in the EACC files would capture, was the meeting of four individuals whose collective presence in one room constitutes an extraordinary indictment of the networks that allegedly operate within and around Kenya’s commercial court.

    The first man arrested was Justice Joseph Mutava. Mutava is not merely a former judge. He is a former judge who was removed from the bench in disgrace. A tribunal convened in 2016 found him guilty of gross misconduct and recommended his removal.

    He challenged the finding all the way to the Supreme Court, which dismissed his application in 2019 and upheld the tribunal’s determination that he be removed from office.

    That Mutava was subsequently re-admitted to practice as a private advocate raises questions the Law Society of Kenya has not publicly answered. That he was at a meeting in which, according to investigators, Sh1 million was handed over in circumstances described as the culmination of a multi-million-shilling bribery scheme raises questions of a different and graver order.

    Nelson Havi, the Senior Counsel who has waged a sustained public campaign on this matter, states publicly that Mutava, upon arrest, confessed that he was collecting money on behalf of Justice Mongare. That assertion has not been confirmed in court filings available on the public record, but Havi, a named Senior Counsel posting under a verified identity, has not retracted it.

    The second man arrested was advocate Kimani Wachira.

    Wachira was introduced to the circle through a businessman named Tom Awili, who claimed Tuju had asked him to identify competent legal representation following a series of adverse rulings. Wachira’s own legal team has mounted an aggressive counter-narrative, describing the arrests as unlawful, procedurally unfair and an abuse of process. They argue their client was present simply as a lawyer reviewing a brief, that he solicited nothing, and that the money was produced by Tuju unsolicited before the meeting had even properly begun.

    A statutory declaration by Awili supports this account. Awili himself, however, is the third man arrested, the very person who arranged the meeting, and his credibility as an exonerating witness is undermined by the fact that he too sat in the same room when the EACC descended.

    The High Court declined to grant Wachira conservatory orders blocking investigations, finding the application failed to meet the urgency threshold.

    The fourth man is the figure whose identity detonates the entire architecture of coincidence that Justice Mongare and the Judicial Service Commission would prefer the public to dismiss as unrelated.

    Kennedy Mulwa, described in court documents and investigative reports as an auctioneer, is, according to Nelson Havi and multiple reporting outlets, the spouse of Lady Justice Josephine Mongare.

    Havi has stated publicly that Mulwa and the judge were in telephone communication in the minutes before the arrests took place.

    That communication, he says, has been reviewed by the EACC. If that spousal relationship is established and the phone communication record is what investigators say it is, then the judge’s husband was among the four men arrested in a sting operation targeting a bribery scheme allegedly aimed at influencing her court.

    The Garam Investment Auctioneers firm, in which Mulwa has been associated, features as a named party in aspects of the very Dari Limited property litigation over which Justice Mongare was presiding.

    Kennedy Mulwa, described as an auctioneer, is according to Senior Counsel Nelson Havi the husband of Justice Josephine Mongare. He was in phone contact with the judge minutes before EACC detectives moved in. His auctioneering firm is a named party in the same case Mongare was presiding over.

    THE JUDGE FIGHTS BACK

    Justice Mongare’s response to the EACC’s attempt to summon her was swift, constitutionally framed, and institutionally consequential. When the commission addressed a letter dated March 17, 2026, to the office of the Deputy Registrar of the High Court, directing that she present herself at the Integrity Centre on March 19 for questioning, she did not comply.

    Instead, she moved to the High Court herself and filed a petition.

    On March 19, 2026, Justice Bahati Mwamuye granted conservatory orders halting any arrest, detention, investigation, summoning or adverse action against Mongare pending the determination of her petition. The orders extended to the seizure of her property, devices and records. The case has since been closed to public access.

    Mongare’s constitutional argument is not without legal texture. She contends that Article 160 of the Constitution, which guarantees judicial independence, is the appropriate framework within which complaints against sitting judges must be processed, and that the Judicial Service Commission, not the EACC, is the proper forum for such allegations.

    She further argues that the summons was issued in a procedurally improper manner, directed at a subordinate officer rather than to her directly, and that singling her out among the eight judges of the Commercial and Tax Division constitutes harassment and selective targeting.

    The EACC disagrees, emphatically. Its replying affidavit argues that while judicial independence protects the act of judicial decision-making, it does not confer immunity from criminal investigation. The commission cites a letter from the Chief Justice encouraging investigative agencies to pursue corruption within the judiciary as institutional support for its mandate.

    It argues that routing all such investigations through the JSC, a body whose own integrity has been publicly questioned in this very matter by Senior Counsel Havi, would effectively insulate judges from accountability. The EACC says its constitutional mandate to investigate bribery and corruption extends without exception to the offices that hold power over those very proceedings.

    The JSC, for its part, chose a response that speaks volumes without saying anything. It transferred Justice Mongare to the Machakos High Court. Machakos lawyers were unimpressed.

    At an annual general meeting on April 10, 2026, advocates of the Machakos region unanimously resolved to boycott all proceedings before Mongare, effective immediately, until the corruption allegations are conclusively and transparently addressed.

    The bar’s chairperson, Priscilla Kioko, said in a formal statement that while the advocates recognised the presumption of innocence, the standard applicable to judicial officers demands impeachable integrity.

    The JSC’s decision to transfer rather than investigate has drawn sustained condemnation. Critics, Havi loudest among them, have accused the commission of shielding the judge from accountability and of having a track record of resolving complaints against judges not through due process but through financial persuasion, a charge the JSC has not publicly answered.

    THE RULINGS THAT SHAPED EVERYTHING

    On the morning of March 9, 2026, before any arrests had been made and before Tuju had walked into Entim Sidai with treated money and a recording device strapped to his body, Justice Mongare delivered her ruling in the matter of Dari Limited and Raphael Tuju versus the East African Development Bank and Garam Investment Auctioneers. She struck out the amended plaint filed by Tuju and Dari Limited. Her language was categorical and unsparing. She found that the plaintiffs were seeking to re-hear an injunction already denied, reopen a debt already adjudicated internationally and recognised domestically, and re-litigate the enforceability of securities over properties already subject to multiple court orders.

    She called it a blatant abuse of court process designed to frustrate the bank’s lawful recovery efforts after years of default and litigation. There was no way, she ruled, that the amended plaint could survive. It was struck out. Auctioneers were cleared to move.

    That ruling and the arrests of the four men at Entim Sidai are not merely events that occurred on the same date. They are, if the EACC’s case holds, two sides of a single transaction. Senior Counsel Havi’s reading of that coincidence, made on a named and verified platform, is that the men arrested at Entim Sidai had been dispatched to collect money on behalf of the judge who, within hours of the collection, was disposing of the case. Whether the money was to secure relief Tuju never received, or whether the ruling regardless of its legal merit was tainted by the parallel negotiation happening in the background, are questions the Director of Public Prosecutions and eventually a trial court will have to answer.

    Since that ruling, Tuju has continued to fight on every available front. Justice Moses Ado, before whom the matter now sits, issued interim orders barring further transfer of the disputed property while a stay application is considered.

    A ruling on that application was scheduled for May 7, 2026, the day after the Mongare petition is set for mention.

    The property dispute, the bribery investigation, the judicial petition and the JSC silence are all reaching a simultaneous inflection point in the week the nation watches.

    THE ARCHITECTURE OF THE RACKET

    What the EACC affidavit describes, in aggregate, is not an impulsive act of individual greed but a structured intermediary network. There was a consultant who served as the primary contact and who allegedly received at least Sh500,000.

    There was a former judge whose presence at a meeting served to lend the scheme institutional credibility, to suggest, as investigators put it, that the network reached into the courts.

    There was a lawyer introduced as competent counsel but whose presence in the same room as a disgraced former judge, at a meeting with no prior written correspondence or formal fee arrangement, strains the innocent explanation his legal team has offered.

    There was an auctioneer who, if the spousal link alleged by Havi is accurate, was the closest human connection between the network and the judge herself. And there was a judge, still sitting, who obtained conservatory orders preventing investigators from even asking her questions.

    The forensic picture assembled by investigators adds to this account in ways that are not easy to dismiss. Phone records extracted from seized devices document repeated contact between Tuju and suspects across the period during which the scheme was allegedly being negotiated.

    WhatsApp chats, SMS messages and call logs form a digital timeline that the EACC affidavit says corroborates every material element of Tuju’s account.

    The mobile money transfer of Sh250,000 is confirmed in the forensic report.

    The speakerphone call is described in detail sufficient to anchor it to a specific time and location. The treated Sh1 million, recovered at the scene on March 9, is in the hands of investigators. This is not a case built on rumour.

    That does not mean it is a case without complication. Wachira’s lawyers have raised serious procedural challenges.

    Tom Awili’s statutory declaration offers an account of the March 9 meeting that, if believed, dismantles the bribery narrative and recasts it as a facilitation fee.

    Awili further alleges that after his arrest he was pressured by investigators to change his statement to implicate the lawyers, a claim the EACC has not formally addressed.

    Justice Mongare’s legal arguments about the separation of investigative powers are not frivolous.

    And Tuju himself, it should be recalled, is a man who defaulted on a nine-million-dollar loan, has fought every attempt to enforce a decade of court orders against him, and has powerful political motivation to cast the entire recovery process as corrupt.

    But the question is not whether Tuju is a sympathetic complainant.

    The question is whether the evidence assembled by the EACC, the recordings, the digital forensics, the treated currency, the phone logs, the alleged confession relayed by a Senior Counsel, the spousal connection between an arrested auctioneer and the presiding judge, is sufficient to sustain a prosecution. That is a question for the Director of Public Prosecutions, who has received the investigation file and has not yet communicated a charging decision.

    A disgraced former judge removed from the bench for gross misconduct. A city advocate who walked into the same room. An auctioneer married to the presiding judge. A consultant who allegedly relayed Sh500,000 to the bench. The EACC has the recordings. The DPP has the file. Kenya is waiting.

    THE LARGER RECKONING

    This case has already forced a reckoning that extends far beyond the fate of three Karen properties or the guilt or innocence of the individuals arrested on March 9. It has forced the question of whether judicial independence, invoked with constitutional precision by Justice Mongare to block her own investigation, is a shield against accountability or a guarantee of impartiality. The two are not the same thing. A judge may issue rulings that are legally correct and independently arrived at, and those rulings deserve constitutional protection from political interference. That protection does not, and cannot, extend to shielding a judge from investigation into whether she or he has taken money in exchange for those rulings.

    The JSC’s handling of this matter will define its institutional credibility for a generation.

    Its silence in response to Havi’s public naming of Mutava as a man who confessed to collecting money on the judge’s behalf is a silence that speaks. Its decision to transfer Mongare to Machakos, a move the Machakos bar responded to with a boycott, suggests an institution more concerned with managing optics than confronting corruption.

    If the JSC’s position is that the EACC has no jurisdiction to investigate a sitting judge, it has not explained what it intends to do with the material in the EACC’s file. If its position is that it will conduct its own investigation, it has not commenced one.

    If its position is that Mongare is innocent and the allegations are without foundation, it has not said so.

    It has simply moved her, a bureaucratic sleight of hand that may satisfy neither the Machakos bar nor the Kenyan public.

    The case is set for mention on May 6, 2026. A ruling on the Tuju property stay application was expected from Justice Ado on May 7. The DPP has the investigation file.

    The conservatory orders protecting Mongare from EACC investigation remain in force.

    The recordings exist. The digital trail has been forensically extracted. The treated money was recovered.

    And somewhere in the records of an EACC interview room, if Senior Counsel Havi’s account is accurate, a disgraced former judge told investigators whose instructions he was operating under when he sat down at a table inside a Karen wellness sanctuary and watched a former Cabinet Secretary reach into a bag.

    Kenya has seen judicial corruption scandals before. It has not often seen one assembled with this degree of documentary precision, this density of named individuals, this many converging lines of evidence pointing toward a sitting member of the bench.

    The institutional response so far has been conservatory orders, a transfer, and silence.

    What comes next will determine whether accountability in this country means something, or whether it means something only for those who cannot afford to file a petition.

  • Green Gold, Rotten Roots: How Kenya’s Biggest Avocado Firms Hijacked a Sh5.8 Billion Harvest Ban

    Green Gold, Rotten Roots: How Kenya’s Biggest Avocado Firms Hijacked a Sh5.8 Billion Harvest Ban

    The numbers do not lie, even when the regulators do. Between November 2025 and the last days of March 2026, a total of 3,107 shipping containers loaded with fresh avocados left Kenya for international markets.

    The Agriculture and Food Authority had explicitly closed the sea export season from October 20, 2025, a directive backed by the weight of the Crops (Horticultural Crops) Regulations, 2020.

    The ban existed for one purpose: to stop immature, unripe fruit from reaching European supermarket shelves and destroying the hard-won reputation of Kenya’s most valuable export fruit.

    It failed. Not because the ban was unenforceable.

    It failed because the very agencies mandated to enforce it were issuing the certificates that made the exports legal on paper.

    According to export data released by KenTrade, the Horticultural Crop Directorate approved Sh5.832 billion worth of avocado export certificates during the 12-week closed season.

    The 33,205 tonnes that left Kenya during this period represents, by the most conservative industry estimates, roughly one-third of the country’s entire normal annual avocado production.

    The second flush of avocados from Western Kenya and the North Rift, the only crop that qualifies for limited exemptions under the regulations, amounts under normal circumstances to approximately three percent of the national harvest.

    No mathematical contortion brings three percent close to thirty percent. The arithmetic alone is damning.

    Among the major firms whose names appear in connection with the banned consignments are Seasons Orchards, Keitt Exporters, and Kenya Fresh Exporters Limited.

    These are not small backstreet operators.

    They are established commercial players with packhouses, export certifications, and relationships with international buyers stretching across Europe and the Middle East.

    That these firms continued shipping during the ban, with export licenses issued by AFA and phytosanitary certificates from the Kenya Plant Health Inspectorate Service, tells only part of the story.

    The larger scandal is the system that allowed it to happen, again and again, while the industry watched and regulators looked away.

    “These companies never stopped exporting, and they have left the country with scanty supplies of fit avocados.” — Senior industry executive, speaking on condition of anonymity

    THE ANATOMY OF A REGULATORY COLLAPSE

    To understand how thousands of tonnes of banned produce obtained official clearance, one must understand the architecture of Kenya’s avocado export system.

    Two agencies hold the keys. The Horticultural Crops Directorate, a directorate within AFA, issues export licenses and certificates authorising each shipment.

    The Kenya Plant Health Inspectorate Service issues phytosanitary certificates confirming that the produce meets the health and safety standards of the receiving country. Without both documents, a container of avocados cannot legally leave Kenya for international markets.

    KEPHIS Managing Director Theophilus Mutui, confronted with the evidence of exports occurring during the ban, offered a defence that would be remarkable in its audacity were it not so transparently self-serving.

    His agency, Mutui said, only issues phytosanitary certificates after confirming that produce meets required export standards. The export licenses, he insisted, come from AFA.

    He did not explain how his inspectors were certifying as export-ready fruit that was, by multiple European buyer accounts, so immature it turned black upon thawing and collapsed on supermarket shelves within days of arrival.

    He also did not explain how his agency was issuing phytosanitary certificates for consignments that, by his own implicit admission, should not have been leaving the country at all.

    AFA Director General Bruno Linyiru had, in the weeks before the ban collapsed into public scandal, been issuing strongly worded notices to the industry. He accused exporters of violating packaging regulations, sourcing from unregistered suppliers, and obstructing government inspectors. What he did not explain was why his directorate was simultaneously issuing the export certificates that allowed those same exporters to fill containers and ship fruit to Rotterdam.

    The AFA ultimately admitted at a stakeholder meeting on March 31, 2026, that exports had taken place during the ban. The authority said it was compiling a list of offenders. As of the time of publication, no license had been publicly revoked and no name had been released.

    HCD Director Christine Chesaro told the March 31 stakeholders meeting that her directorate had compiled a list of exporters who had received certificates in breach of the ban, and that action would be taken.

    When pressed for specifics by journalists a week later, Chesaro said she needed to ask the exporters themselves whether they would permit their names to be released.

    That a government regulator believes it requires the consent of rule-breakers before naming them in a public accountability process speaks to the depth of institutional capture within this sector.

    The HCD extended the ban publicly, citing poor rainfall. Privately, industry insiders say the real reason was that the orchards had already been emptied.

    THE MOROCCO TRAIL: KENYA’S STOLEN BRAND

    The consequences of repeated regulatory failure are already reshaping the global avocado trade in ways that will cost Kenya billions of shillings in the years ahead. Industry sources with direct knowledge of European buyer behaviour have told Kenya Insights that the pattern of immature Kenyan fruit arriving in European markets during banned periods triggered a commercial workaround that has become an open secret within the trade.

    Kenyan avocados, their country of origin a liability rather than an asset, were being rerouted through Morocco to strip the Kenyan brand off the packaging before reaching European retailers.

    FAO trade data from 2025 lends weight to those accounts. Morocco’s declared avocado exports doubled to 141,000 tonnes in 2025 from fewer than 60,000 tonnes the previous year. Morocco does not produce anything close to that volume domestically.

    Its own avocado industry, while growing, has nowhere near the scale or established export infrastructure to explain such a surge.

    Morocco has become, according to multiple trade sources, a laundering route for Kenya’s reputation-damaged fruit.

    The Kenyan brand, built over decades by farmers across Murang’a, Kiambu, Nakuru, and Kisii, is being quietly buried under North African labelling so that buyers in Amsterdam, Berlin, and Paris will not know what they are buying.

    The market consequences are severe and mounting. Morocco overtook Kenya as Africa’s largest avocado exporter in 2025 by volume, a historic shift attributable in significant part to the erosion of Kenyan supply chain reliability and product quality.

    Moroccan avocados command higher prices in European markets, according to the USDA’s Foreign Agricultural Service.

    The price gap between Kenyan and Moroccan fruit reflects directly the reputational discount European buyers now apply to Kenyan-origin produce.

    Kenya, which accounts for approximately six percent of global avocado production and exports the vast bulk of its harvest to Europe and the Middle East, is watching that market position erode in real time.

    ON EUROPEAN SHELVES: THE EVIDENCE REJECTED

    A European importer has confirmed to industry contacts the rejection of an entire consignment traced to Seasons Orchards, citing pest infestation and fruit immaturity.

    The consignment, routed through the Netherlands before onward shipment to Germany, arrived with fruits that had a critically short shelf life.

    Upon thawing, the avocados turned black, a definitive indicator of harvest well below the minimum twenty percent dry matter content required for export certification.

    The fruits were rubbery, bitter, and commercially worthless. The dispute between the exporting firm and the European importer has not been publicly resolved.

    In a weeks-long investigation by FarmBizAfrica, which tracked banned consignments from Kenyan packhouses to European supermarket shelves, quality controllers at receiving importers shared dated photographs of the fruit alongside its branded Kenyan packaging.

    The images, described by those who reviewed them, showed produce that had clearly been harvested months before biological maturity.

    The EU classifies Kenya as a high-risk source for the False Codling Moth, a quarantine pest that triggers one-hundred-percent consignment rejection at European ports of entry upon detection.

    That risk is compounded at every point when immature, poorly inspected fruit leaves the country with legitimate-looking regulatory documentation attached to it.

    Investigators tracked more than seven sites where avocados were sourced and exported during the ban without the mandatory farm inspections that the limited exemption provisions require.

    The regulations explicitly provide that any second-flush crop qualifying for exemption must undergo a complete farm inspection confirming maturity indices before a certificate is issued.

    None of the seven sites investigated had received such an inspection. The certificates were issued regardless. This is not a technicality. It is the core mechanism by which the ban was rendered meaningless.

    “Tonnes of avocados were exported between November and March, some of it immature. This will heavily impact jobs and the industry next year.” — Avocado oil processor, speaking anonymously

    THE ARTIFICIAL SHORTAGE: WHO PROFITS FROM SCARCITY

    The consequences of the ban’s hollowing out fell with crushing force on the nearly three hundred compliant exporters who had honoured the closed season restriction.

    When AFA finally reopened the export season on April 2, 2026, almost a month later than the normal season-open date, those exporters arrived at packhouses to find orchards across the major growing counties already stripped bare.

    The fruit was gone.

    The companies that had shipped through the ban had sourced country-wide during the closed period, approaching smallholder farmers desperate to sell their perishable produce and purchasing at whatever price the power imbalance allowed.

    Waithaka Wagura, chief executive of the Avocado Exporters Association of Kenya, confirmed the outcome without equivocation. There is an artificial shortage, he said, and it was created by the illegal exports.

    The association had raised formal complaints with regulators.

    The complaints produced no enforcement action before the damage was complete. Wagura later issued a statement distancing AEAK from any suggestion of complicity in the illegal exports, but the broader industry consensus is unambiguous: a small number of well-connected exporters used regulatory access to devastate the seasonal cycle for everyone else.

    Oil processors have been particularly hard hit. Kenya’s avocado oil processing sector expanded dramatically in the 2024-2025 period, attracting significant domestic and international investment on the back of surging global demand for avocado oil in premium food and cosmetics markets.

    Avocado oil production tripled between 2024 and 2025, rising from 3,326 metric tonnes to 10,188 metric tonnes in a single year. That trajectory now faces direct threat. Processors require mature, high-dry-matter fruit that cannot be sourced when orchards have been pre-emptively stripped. Several processors have approached the Kenya Association of Manufacturers to intervene with the Horticultural Crops Directorate. At least one processor warned publicly that company closures are a genuine prospect if the regulatory failure is not addressed before the next season.

    A PATTERN OLDER THAN THIS SCANDAL

    What is happening in 2026 is not an aberration. It is the acceleration of a pattern that industry insiders say began in earnest two years ago, when AFA introduced the closed season framework specifically to stop the export of immature fruit.

    The framework was designed in direct response to European buyer complaints about the quality of Kenyan avocados.

    In 2023, HCD closed sea exports from November 3 of that year.

    In 2024, the closure came into effect from October 25. Each year, a handful of major exporters continued shipping. Each year, the regulatory documentation followed the shipments. Each year, the ban was publicly maintained while being privately circumvented.

    The Avocado Society of Kenya had been raising the alarm as far back as December 2023, when its chief executive Ernest Muthomi publicly named specific companies allegedly exporting immature fruit and accused HCD of colluding with them. HCD’s response was not to investigate the named companies.

    It was to write a letter to the Avocado Society accusing it of spreading unverified information, causing disharmony in the industry, and injuring Kenya’s trade relations. The agency that was being accused of regulatory capture responded by attempting to silence the accuser. The named companies were not suspended. No inspections were announced. The exports continued.

    Industry experts have noted that the problem worsened precisely when it should have improved. The 2025 closed season ban came into effect on October 20, backed by the same regulatory language that had failed to stop the pattern in previous years.

    Agriculture Principal Secretary Paul Ronoh publicly warned of cartels exploiting farmers in rural areas, brokers who dupe smallholders into harvesting early and then disappear.

    The warning was accurate and entirely useless in the absence of any enforcement action against the well-capitalised exporters doing exactly what Ronoh described at an industrial scale.

    Kenya’s avocado output hit 848,122 tonnes in 2024. The country is losing its market dominance not because it cannot grow the fruit, but because a cartel within the industry has captured the regulatory apparatus that should protect it.

    THE KRA WALL AND WHAT LIES BEHIND IT

    Kenya Insights sought to obtain granular export data from the Kenya Revenue Authority to verify the full scale of the in-ban exports and identify the specific entities responsible for the largest volumes.

    The KRA declined to release the data, citing confidentiality provisions under the Tax Procedures Act, 2015.

    The provision is legitimate in the context of individual taxpayer information.

    Its application here, to aggregate trade data from a public export certification system operated by a government directorate, represents a misuse of the confidentiality framework that benefits the firms whose names remain hidden.

    KenTrade data, however, provides enough of the picture to be deeply troubling. The 3,107 containers cleared during the ban represent a volume of trade that simply cannot be explained by the legitimate second-flush exemption that both KEPHIS and AEAK acknowledge was the only legal basis for any export during the closed period.

    The second flush from Western Kenya and the North Rift, the two regions with a biological basis for later-maturing crops, typically yields approximately three percent of the national harvest.

    The exports during the ban amounted to a figure approaching one-third of the annual national total. The gap between three percent and thirty percent is not an administrative oversight. It is the signature of organised, systemic fraud conducted through an officially licensed export documentation process.

    THE MARKET DAMAGE: COMPETITORS ARE ALREADY MOVING

    Kenya’s avocado sector earned Sh41 billion from fruit exports in 2024, a jump of Sh8.7 billion from the previous year, on the back of a thirty-four percent increase in production to 848,122 tonnes. That trajectory was supposed to continue in 2026, with the USDA forecasting export growth of 7.4 percent to approximately 130,000 tonnes.

    The forecast assumes a functioning regulatory environment.

    What actually exists is a sector where the dominant commercial actors can violate a government ban and obtain official documentation to cover their tracks, without facing any public enforcement action months after the violation became public knowledge.

    The competitive consequences are structural. South Africa, Tanzania, and Peru are all positioned to capture market share that Kenya’s quality failures make available.

    China’s market, newly opened to Kenyan avocados under the zero-tariff arrangement flagged off in March 2026, offers an enormous commercial opportunity.

    Kenya’s ability to exploit that opportunity depends entirely on its ability to present Chinese buyers with consistent, mature, traceable produce.

    A sector where thirty percent of the annual production equivalent is shipped before biological maturity, without proper farm inspections, and in violation of the government’s own closed-season rules, is not a sector that can credibly pitch itself as a reliable premium supplier to the world’s largest consumer market.

    European buyers, who absorb the majority of Kenya’s avocado exports through the Netherlands redistribution hub, have raised quality concerns with sufficient seriousness that Kenya was already classified as high-risk on pest grounds before the scale of the 2026 ban violations became public.

    The EU’s rapid alert system for food and feed is triggered by individual pest detections. A systematic pattern of immature, poorly inspected fruit entering European supermarket chains from Kenyan exporters is precisely the kind of supply chain failure that results in enhanced inspection requirements, higher rejection rates, and, in the worst case, temporary suspension of market access.

    WHAT ACCOUNTABILITY WOULD LOOK LIKE

    The Horticultural Crops Directorate has, as of the writing of this investigation, neither published a list of the exporters it says it has compiled, nor confirmed that any enforcement action has been taken, nor explained how its own certification processes approved Sh5.8 billion worth of exports that it now acknowledges were non-compliant.

    This is not a complicated accountability question.

    The directorate issued export certificates.

    Those certificates are numbered, dated, and attached to named exporting entities. The data exists within HCD’s own systems. The directorate’s refusal to release it, and its suggestion that it requires the consent of the rule-breakers before naming them, constitutes an active obstruction of public accountability.

    AFA Director General Bruno Linyiru, whose directorate is implicated both in the failure to prevent the exports and in the issuance of the certificates that authorised them, has made no public statement since the March 31 stakeholders meeting acknowledging that exports occurred during the ban.

    The authority has pledged to revoke licenses.

    No license has been publicly revoked.

    Agriculture Cabinet Secretary Mutahi Kagwe, who oversees both AFA and the broader horticultural sector, has not publicly commented on the scandal despite its scale and the damage it is inflicting on one of Kenya’s most valuable agricultural export industries.

    What enforcement would require is straightforward in legal terms. The Crops (Horticultural Crops) Regulations, 2020, are explicit.

    Handling produce in non-compliant packaging, sourcing from unregistered suppliers, obstructing inspectors, and exporting outside the designated season without the required farm inspection are each violations for which license revocation is a specified sanction.

    If the export certificates were issued by HCD employees in breach of the ban, those officials are potentially liable under multiple provisions of the Public Service Commission Act and the Anti-Corruption and Economic Crimes Act. The Director of Criminal Investigations has the authority to investigate.

    The Ethics and Anti-Corruption Commission has the authority to investigate. Neither agency has announced any inquiry.

    Nearly a million Kenyan farmers grow avocados. They are the last people who will benefit from the capture of the regulatory system by a cartel of exporters. They are the first to pay the price.

    THE FARMERS PAY FIRST

    Behind the volumes and the regulatory failures and the European supermarket photographs are approximately 966,000 Kenyan farmers who grow avocados, seventy percent of them smallholders farming less than one acre with between ten and twenty trees per household.

    For these farmers, avocados are not a hedge fund commodity.

    They are school fees and hospital bills and the difference between a meal and hunger.

    When brokers allied with the large exporting companies arrived in their shambas during the closed season and offered to buy their fruit, those farmers did not know they were being recruited into a regulatory violation.

    They knew they had perishable produce and someone with a truck was offering money.

    The cartels that Agriculture PS Ronoh warned about operate precisely at this intersection of farmer desperation and buyer sophistication.

    They strip orchards of immature fruit at farmgate prices calibrated to smallholder vulnerability, aggregate that fruit into the industrial volumes that fill export containers, and process the shipments through a certification system that has been captured well enough to issue compliant-looking documentation for non-compliant produce.

    The farmer gets paid below-market rates for fruit that was not yet ready. The exporter gets Sh5.8 billion worth of export revenue in twelve weeks. The regulator gets nothing on record.

    The Kenya Association of Manufacturers, approached by oil processors seeking intervention with HCD, has reportedly promised to raise the matter. This is the state of governance in Kenya’s avocado sector.

    Industry associations are lobbying other industry associations to approach a government directorate to enforce the government’s own regulations against the government-certified export companies that violated them.

    The circularity would be comic were the stakes not so severe.