The digital heist: Crypto scams, biometric fraud, and recovery solutions

In Part 1, we explored how mobile money fraud costs Africa $4 billion annually through SIM swaps, identity theft, and agent-assisted schemes. Now, the emerging threats and whether the continent can fight back.

If mobile money is Africa’s established fraud battleground, cryptocurrency is the lawless frontier.

Africa has the smallest crypto economy in the world by volume (around $8 billion transacted annually), but the highest growth rate and some of the most spectacular frauds ever perpetrated.

Africrypt (South Africa, 2021): Two brothers, Ameer and Raees Cajee, ran a Bitcoin investment platform promising high returns. In April 2021, they claimed the company had been “hacked.” Then they vanished, along with $3.6 billion worth of Bitcoin.

It was the largest cryptocurrency theft in history at that time. Not the largest in Africa. The largest ever, globally. The brothers disappeared. The Bitcoin disappeared. Recovery rate? Zero.

Mirror Trading International (South Africa, 2020): Johann Steynberg convinced investors to pour money into an automated trading bot. When it collapsed, $588 million had evaporated. Steynberg vanished, last spotted in Brazil. Still at large. Funds never recovered.

These are the headline heists. The daily grind is even more insidious. Kenya lost Sh5.6 billion ($43 million) to crypto fraud in 2024 alone, a 73% increase from 2023. Zambia saw a single investment scheme steal $300 million from 65,000 victims.

So, an average loss of $4,600 per person in a country where annual per capita GDP is around $1,000. People lost four years of their country’s average income.

Why is crypto fraud so rampant? Currency instability drives Bitcoin adoption as a store of value. Limited investment options make crypto attractive. Most African countries have zero crypto regulations.

Nigeria’s Central Bank banned banks from facilitating crypto, but that just pushed activity to peer-to-peer platforms. And once stolen, cryptocurrency is gone, irrecoverably, globally, forever.

Kenya just passed its Virtual Asset Service Providers Bill in 2025. Better late than never, but the barn door is wide open, and the horses are in Tanzania.

When your face isn’t yours anymore

Biometric authentication was supposed to be the answer. Your fingerprint, your face, your iris, these can’t be faked, right?

Wrong. Biometric fraud in Africa hit an all-time high of 16% in Q2 2024, the highest rate in three years. That means 16% of biometric authentication attempts were fraudulent. Not failed but actively being used.

Methods range from crude (holding up photos to webcams) to sophisticated (AI-generated deepfakes already detected in 0.6% of Kenya attempts and 2.2% in South Africa).

In Tanzania, 41% involved edited ID cards. In Nigeria, 61% involved forged IDs. Kenya’s M-Tiba health platform breach exposed 4.8 million people’s biometric information, nearly 10% of the country’s population.

The paradox is that biometric authentication, when implemented properly, shows 72% fraud reduction. But “when implemented properly” is doing heavy lifting. The race to onboard customers means shortcuts including cheaper cameras, weaker liveness checks, inadequate security. And once your biometric data is compromised, you can’t exactly change your face.

The trend that should alarm every fintech CEO? Fraud during authentication is four times higher than during registration. Everyone obsesses over KYC including making sure sign-ups are real. But once you’re in? The rate quadruples. Because authentication is where money moves, and in Africa, authentication is overwhelmingly SMS-based, so easily intercepted, not encrypted, tied to a SIM card that can be hijacked.

63.5% of mobile money transactions use USSD, not apps. The technology that makes financial inclusion possible is also the technology that makes it easiest.

The recovery crisis

The most depressing statistics: Cryptocurrency fraud recovery rate? Near zero. Mobile money recovery for “authorised” transactions? Near zero.

In the US, only 12% of Zelle scam victims get money back and that’s developed-market consumer protection. Now imagine Africa, where consumer protection laws are nascent, mobile money operators face limited requirements to reimburse, and cross-border transactions are nearly impossible to trace.

In South Africa, the continent’s most regulated financial market, only 65.1% of fraud victims even bother reporting anymore. Why? Because 57% of those who do report hear nothing back.

When reporting is futile, people stop reporting. When people stop reporting, the data gets worse. It’s a vicious cycle.

The Africrypt billions? Gone. Mirror Trading’s $588 million? Gone. Kenya’s Sh5.6 billion? Largely unrecoverable. You can’t freeze Bitcoin. You can’t reverse blockchain transactions. You can issue warrants and watch perpetrators laugh from jurisdictions with no extradition treaties.

3 countries, 3 crisis levels

Nigeria: ₦52.26 billion ($32 million) lost to fraud in 2024, up 196% over five years. But fraud cases dropped 31%. This isn’t more fraud. It’s better. Q1 2025: fraud losses jumped 603% while cases rose only 7.63%. These are fraud farms with warehouses, staff shifts, supervisors, and executives.

INTERPOL arrested 1,209 cybercriminals across Africa; Nigeria featured prominently. The country has processed over $1 trillion in instant payments, but fraudsters innovate faster than defenders.

South Africa: R1.888 billion ($103 million) in annual losses. Digital banking fraud surged 86% in 2024. 65.3% of all fraud now comes from digital platforms. But South Africa is also fighting back as it improved 9 positions in the Global Index in one year through AI detection, mandatory multi-factor authentication, and intelligence sharing. Proof that African countries can fight effectively.

Kenya: 2.5 billion cyber threats in Q1 2025, up 202%. By mid-2025: 4.6 billion threats in three months. Total losses: Sh29.9 billion ($230 million). The M-Tiba breach exposed 4.8 million people’s data. But Kenya is also innovating – Central Bank cybersecurity centre, Virtual Asset Service Providers Bill, M-Pesa biometric rollout showing 72% fraud reduction.

The challenge is scale: when mobile money is embedded in every transaction, the attack surface is the entire economy.

What actually works

This story has been bleak. Here’s hope:

The solutions exist. They work. They’re proven.

• Biometric authentication: 72% fraud reduction when properly implemented.
• AI fraud detection: Real-time machine learning catches thousands of fraudulent attempts monthly.
• Mobile SDKs: Detection rates jump from 32% (APIs) to 68% when intelligence is built into apps.
• Agent training: Tanzania’s program reduced agent-assisted fraud 51% through education.
• Cross-border law enforcement: INTERPOL operations arrested 1,200+ cyber-criminals, recovered nearly $100 million.
• National ID systems: Ghana’s system, linked with mobile money, creates infrastructure harder to fake.
• Regulatory evolution: Kenya’s Virtual Asset Service Providers Bill, Nigeria’s enhanced NIBSS tracking, South Africa’s SABRIC transparency. That is real progress.

The technology and tactics to fight fraud exist. What’s missing is deployment at scale, funding, political will, and cross-border coordination.

5 things that must happen now

1. SIM protection must be mandatory: SIM swapping is the master key to Africa’s financial infrastructure. Requirements: mandatory biometric verification for SIM replacement, 24-hour cooling-off periods, instant notifications, criminal liability for telecom employees who facilitate fraud.

2. Authentication must evolve beyond SMS: 63.5% of transactions use USSD. Solution can’t abandon these users, but needs transaction limits for SMS-authenticated operations, biometric requirements for high-value transactions, device binding, and behavioural analytics.

3. Consumer protection laws must exist: Right now, if you’re tricked into authorising a transaction, you have no recourse. This must change. Clear liability frameworks, mandatory reimbursement for certain types, and dispute resolution mechanisms.

4. Cross-border coordination must be funded: Fraudsters don’t respect borders. Single-country enforcement fails. INTERPOL operations prove coordination works when funded and prioritised.

5. Digital literacy must be a development priority: Only 50% of African countries include computer skills in curriculum (versus 85% globally). Educated users are harder to scam. The literacy gap is a fraud enabler.

For the victims like Samuel Okafor, the composite character who opened Part 1, the data represents real loss, real trauma, and real barriers to rebuilding. Their losses are rent money, medical bills, school fees, and dreams deferred.

The post The digital heist: Crypto scams, biometric fraud, and recovery solutions first appeared on Technext.