From Mobile Money to Banking Apps: The Changing Fraud Landscape in Kenya

Kenya is where mobile money grew up. For much of the world, M-Pesa and its peers turned the phone into a wallet years before “digital banking” was a phrase most people used. Today the picture is more layered: customers move seamlessly between mobile-money wallets and full banking apps, sweeping funds back and forth many times a week.

That fluidity is a triumph of financial design. It is also the seam where a growing share of Kenyan fraud now lives - in the handoffs between the mobile-money world and the banking world.

Two ecosystems, one customer, many transitions

A typical Kenyan customer might receive wages into a bank account, sweep part of it to a mobile wallet, pay merchants and peers over mobile money, top the wallet back up from the bank app, and withdraw cash through an agent. Each transition is a moment where value changes rails - and where the two systems each see only half of the story.

Fraudsters exploit exactly these transitions:

• Account takeover that jumps rails. Compromise the wallet or the bank app, then move funds across to the ecosystem with weaker monitoring or faster cash-out.
• SIM swap. The phone number underpins both wallet and, frequently, bank verification. One successful swap can unlock both.
• Social engineering. Victims are coached to move money “to keep it safe” or to “reverse a mistaken payment,” walking funds from bank to wallet to cash.
• Mule accounts spanning both worlds. Stolen funds are layered across wallets and bank accounts to break the trail before cash-out.
• Cross-channel behavior that no single system sees. A suspicious app-side login followed by a rapid wallet cash-out is obvious only if someone is watching both.

Why single-ecosystem monitoring falls short

Mobile-money platforms and banks each have controls, but those controls tend to reason within their own walls. The bank sees a sweep to a wallet and calls it a legitimate transfer the customer initiated. The wallet sees an inbound top-up and a normal-looking cash-out. Neither sees the full sequence: takeover on one side, rapid movement to the other, cash-out at the edge.

This is the same structural blind spot that enables cross-bank fraud, sharpened by the speed and frequency of wallet-to-bank movement in Kenya. When money can hop rails in seconds, a review model that thinks in single-ecosystem terms is always one step behind.

What effective detection needs

Protecting Kenyan customers means reasoning about risk across the customer’s whole financial journey, not just within one platform:

• Cross-channel context. Connecting app-side and wallet-side events so a takeover on one rail informs the risk on the other.
• Behavioral baselines per customer. Understanding how a specific customer normally moves money between wallet and bank, so out-of-pattern sweeps stand out.
• SIM-swap-aware risk. Treating a recent number change as a strong risk multiplier across both ecosystems.
• Beneficiary and mule intelligence. Flagging destinations - wallet or bank - associated with rapid pass-through and cash-out.
• Real-time, low-friction scoring. Because the whole point of mobile money is speed and accessibility; controls cannot reintroduce the friction it removed.

How Paygilant addresses the Kenyan reality

Paygilant is built for mobile-first markets where customers live across multiple channels - exactly the Kenyan pattern. Rather than evaluating an event inside a single ecosystem, it builds a continuous risk picture across device, session, user, account, and transaction history, and it works across both rich apps and low-telemetry channels like USSD.

That cross-channel, continuous view is what turns the wallet-to-bank seam from a blind spot into a detectable pattern. A login anomaly in the banking app, a recent SIM swap, an out-of-character sweep to a wallet, and a rapid cash-out to a high-risk beneficiary stop being four unrelated events at four different systems and become one coherent, scorable story - caught in real time, before the money reaches the agent counter.

Kenya showed the world how fluid money could be. Protecting that fluidity means watching the whole journey, not just one stop along it.