A woman posing as a Social Health Authority registration officer was arrested in Mtwapa, Kilifi County, on Tuesday after detectives linked her to a SIM-swap fraud scheme that used fake SHA sign-ups to harvest personal details — and, ultimately, money — from elderly Kenyans. The Directorate of Criminal Investigations (DCI) says the group, a woman and two men, moved through Mwea, Machakos, Kitui and Mwingi posing as government officials before the arrest in Kilifi. One suspect remains at large. Here is how the scheme worked, who has been caught, and what to do if someone claiming to register you for SHA shows up at your door.
How Did the Fake SHA Registration Scam Work?
According to the DCI, the suspects presented themselves as Social Health Authority officials conducting registration drives in Mwea, Machakos, Kitui and Mwingi. Members of the public — particularly elderly residents — handed over personal information during what they believed was a legitimate government exercise.
Detectives say that information was then used to carry out SIM-card swaps, a fraud technique that lets criminals take control of a victim’s phone number and, with it, any M-Pesa or bank accounts tied to it. Once the suspects controlled a victim’s line, they allegedly moved money out of the affected mobile money and digital wallet accounts into accounts they controlled.
Who Has Been Arrested?
Acting on intelligence, detectives from Kilifi South and Nyali mounted an operation in the Kwa Chief area of Mtwapa, where they arrested one of the suspects, a 37-year-old woman, while she was driving a Mazda that has since been impounded for examination. A search of the vehicle turned up several insurance certificates and two number-plate casings, according to the DCI. Her alleged accomplice, one of two men said to have worked with her, escaped during the operation and remains at large. The DCI has asked anyone with information on his whereabouts to report it through its #FichuaKwaDCI platform.
Had SHA Already Warned About This?
The arrest comes months after the Social Health Authority itself flagged the broader problem. In a public notice issued on July 1, 2026, SHA said it had received reports of people falsely presenting themselves as its officers and offering unofficial help with registration, claims processing or accreditation — in some cases demanding money, gifts or “facilitation fees” in exchange for promises of faster service. SHA has repeatedly stressed that its registration and services are handled strictly through official channels: SHA branch offices, Huduma Centres, and its own verified platforms, not door-to-door agents.
Red Flags to Watch For
| Warning sign | Why it matters |
|---|---|
| Someone asks to register you for SHA at home, unannounced | SHA registration is handled at branch offices, Huduma Centres and official platforms — not door-to-door visits |
| They ask for your phone, SIM card or PIN | No legitimate registration requires access to your phone or mobile money PIN |
| They ask for an OTP (one-time password) sent to your phone | An OTP request is the clearest sign of an attempted SIM-swap or account takeover |
| They demand a fee for “faster” registration or approval | SHA registration and services do not require facilitation fees |
| They target older relatives specifically | Elderly Kenyans have been the primary target in this and earlier impersonation schemes, per DCI and SHA |
How Can You Protect Yourself From SIM-Swap Fraud?
- Never hand over your phone, SIM card, PIN, password or any OTP to a stranger, regardless of what organisation they claim to represent.
- Confirm any SHA registration exercise through official channels — a SHA branch office, a Huduma Centre, or the authority’s own verified website — before sharing personal details.
- Ask door-to-door “officials” for identification and, if in doubt, call the organisation directly to confirm the visit is genuine rather than trusting the ID card on sight.
- Set up SIM-swap protection with your mobile network operator where available, so a swap cannot be completed without you physically present.
- Watch for a sudden loss of network signal on your phone with no obvious cause — it can be an early sign that a SIM swap is already underway.
- If you suspect you’ve already been targeted, contact your bank and mobile network operator immediately to freeze the line and affected accounts, then report the incident to the DCI.
What Should You Do if You Think You’ve Been Targeted?
The DCI is urging anyone who has information about the suspect still at large, or who believes they or a relative may have fallen victim to the scheme, to come forward through its #FichuaKwaDCI reporting platform. Detectives are also warning the public more broadly not to hand over phones, SIM cards, PINs, passwords or OTPs to anyone claiming to be conducting a government registration exercise, regardless of how official the visit appears.
Kenya has seen a string of SIM-swap and mobile-money fraud cases in recent years, and DCI officers have separately flagged a rise in online fraud cases more broadly. Anyone unsure whether a registration visit is genuine can also contact SHA directly through its official website to confirm before sharing any details.
Frequently Asked Questions
Does SHA register people door-to-door?
No. SHA has said its registration and services are handled through official branch offices, Huduma Centres and its own verified platforms, not unannounced home visits.
What is a SIM-swap fraud?
It’s a scam in which a fraudster uses personal details stolen from a victim to convince a mobile network operator to transfer, or “swap,” that victim’s phone number onto a SIM card the fraudster controls, giving them access to calls, texts, one-time passwords and any mobile money or banking apps tied to that number.
What should I do if someone asks for my SIM card or PIN during a “registration”?
Refuse, and report the encounter to the DCI through its #FichuaKwaDCI platform. No legitimate SHA or government registration exercise requires your SIM card, PIN, password or an OTP.
How many suspects were involved in this case?
The DCI says a woman and two men were involved. One woman has been arrested in Mtwapa, Kilifi County; her alleged accomplice escaped and remains at large.
Where did the scheme operate before the arrest?
Detectives say the suspects moved through Mwea, Machakos, Kitui and Mwingi posing as SHA registration officials before the arrest was made in Kilifi County.
Kenyans looking for more on fraud and cybercrime enforcement can read 254.ke’s coverage of a Nairobi court approving the extradition of three Kenyans to the US over cybercrime charges and how the DCI regained control of hacked social media accounts in an earlier case. For context on how central mobile money has become to daily life in Kenya — and why it’s such an attractive target for fraudsters — see how M-Pesa transformed lives and businesses in Kenya. For official guidance on registration and verified SHA services, visit the Social Health Authority’s official website.
By the 254.ke Newsroom
