Suspect Arraigned Over Sh11.4 Million Cyber Heist Targeting Microfinance Firm
By Daily Report KE | Updated October 1, 2026
Seth Mwabe Okwanyo, also identified by investigators as Seth Onyango Odhiambo, was arraigned over an alleged Sh11.4 million cyber fraud targeting a Kenyan microfinance institution.
What the DCI Says Happened
According to the Directorate of Criminal Investigations, the case arose from 38 fraudulent transactions carried out on July 16, 2025, causing a reported loss of KSh11,410,165.
Investigators said the transactions appeared successful to recipients but were absent from the institution’s internal records. The DCI alleged that system and database logs had been erased and that an unauthorised Java application had been installed to manipulate the institution’s systems.
Charges and Plea
The suspect faced 20 counts that included unauthorised access to a computer system, computer fraud and money laundering. He pleaded not guilty.
The court granted bond of KSh1.5 million or an alternative cash bail of KSh500,000. The matter was scheduled for mention on March 3, 2026.
Why the Technical Detail Matters
The alleged use of software to alter records is significant because it shows how cyber fraud can target both payment systems and the audit trails institutions rely on to detect suspicious activity. For financial institutions, controls such as access management, log monitoring, segregation of duties and independent transaction reconciliation are central to identifying this type of anomaly.
Legal Status of the Case
The claims about system manipulation and money laundering were allegations presented by investigators. The accused entered a plea of not guilty and remained entitled to the presumption of innocence unless a court determined otherwise.
Why Financial Institutions Treat Log Tampering Seriously
Transaction logs are part of the evidence institutions use to reconstruct what happened during a suspected breach. If logs are altered or erased, investigators may need to rely on backups, network records, external payment data and forensic copies from other systems.
What Customers Can Learn From the Case
The allegations concern an institution’s internal systems rather than ordinary customer fraud, but the case still highlights why account holders should review statements and report unexplained transactions quickly. Early reporting can help institutions identify patterns before losses grow.
Court Proceedings Still Determine Responsibility
An arrest, charge sheet or DCI statement is not a conviction. The prosecution must prove the charges in court, and the accused has the right to challenge the evidence and present a defence.
