Kenya Warns of Stiff Penalties for Attempted Cybercrime, Including Ksh7 Million Fine

Nairobi — October 24, 2025

Kenya’s Interior Principal Secretary, Raymond Omollo, has issued a stern warning to would-be cybercriminals, saying that even failed attempts to commit cyber offences could lead to hefty fines or prison terms.

In a statement posted on X on Thursday, Dr Omollo said the law does not distinguish between successful and attempted cyberattacks.

“What if someone tries to commit a cybercrime but doesn’t succeed? A person who attempts to commit or prepares to commit a cyber offence is still guilty under the Act,” he said.

More on this story

Kenya Warns of Stiff Penalties for Attempted Cybercrime, Including Ksh...

No Personal or Government Data Was Lost in Suspected Cyberattack, Says CS Kabogo
Kenyan Man Freed After Sh3 Million Ransom Paid to Ethiopian Abductors
Shoot the Legs’ Order Risks Chaos, Kenyan Activist Warns Ruto
Expectant Police Officers Get New Uniforms as Ruto Unveils Kenya’s New Police Look

Under the Computer Misuse and Cybercrimes (Amendment) Act, 2024, anyone found guilty of attempting or preparing to commit a cyber offence faces a fine of up to Ksh7 million, a prison term of up to four years, or both.

Dr Omollo explained that punishing attempted offences helps prevent digital crimes before they occur.

“By punishing attempted or preparatory acts, the law stops crimes before they happen, thereby protecting systems, data, and individuals from potential harm,” he said.

Aiding and Abetting Cybercrime

The Interior PS also outlined the implications of aiding or abetting cybercrime, saying that those who knowingly assist or encourage others to commit online offences will face the same punishment as the perpetrators.

“It means knowingly and wilfully helping, supporting, or encouraging another person to commit a cyber offence under the Act,” he said, noting that penalties include up to Ksh7 million in fines or four years in jail.

He added that because cybercrime often involves collaboration, this provision ensures accountability across the digital chain, discouraging organised online criminal networks.

Understanding Phishing

Dr Omollo also took time to explain phishing — one of the most common forms of online fraud.

“Phishing happens when someone creates or operates a fake website, or sends deceptive messages, to trick people into revealing personal information or to gain unauthorised access to computer systems,” he said.

The offence carries a fine of up to Ksh300,000, a three-year jail term, or both. He noted that the provision is intended to shield users from identity theft, financial scams, and other digital deception schemes.

Debate Over the New Cyber Law

Omollo’s remarks come amid growing debate following President William Ruto’s assent to eight new Bills last week — among them, the contentious Computer Misuse and Cybercrimes (Amendment) Bill, 2024.

The new law has split opinion. Supporters argue that tighter controls are needed to curb online fraud, hate speech, and misinformation. Critics, however, warn that some of its provisions could limit freedom of expression and be misused to silence dissent.

Government officials, including Omollo and Dennis Itumbi, Head of Presidential Special Projects and Creative Economy, have dismissed claims that the cybercrime amendments are entirely new. Mr Itumbi said the changes build on existing law rather than introduce fresh restrictions.

Omollo, for his part, framed the legislation as an effort to promote accountability and protect Kenya’s digital infrastructure.

“The government is committed to protecting digital spaces, promoting accountability, and safeguarding citizens from online threats,” he said.

As the debate continues, the government faces the delicate task of balancing cyber security with digital freedoms — a challenge shared by many nations navigating the modern online landscape.