Updated 2 November 2026
Loan app scams in Kenya usually follow one pattern: an app, SMS or social media page promises an instant loan, then asks you to pay a “processing”, “insurance” or “activation” fee first, and disappears with the money. A licensed digital lender is banned from taking deposits or cash security under regulation 8(2) of the CBK (Digital Credit Providers) Regulations, 2022, so any upfront payment request is a red flag. Before you borrow, check that the company behind the app is one of the 281 digital credit providers in CBK’s directory (updated 29 September 2026).
Updated November 2026. Based on the CBK (Digital Credit Providers) Regulations, 2022 (Legal Notice No. 46), CBK’s directory of licensed digital credit providers and Safaricom’s published fraud guidance.
In this guide
- The 7 most common loan app scams in Kenya
- Why an upfront fee is always a warning sign
- How to check if a loan app is real
- What licensed lenders cannot do when you owe them
- What to do about loan app scams in Kenya if you are a victim
- Avoiding loan app scams in Kenya: safer ways to borrow
- Frequently asked questions
The 7 most common loan app scams in Kenya
| Scam | How it works | Red flag |
|---|---|---|
| 1. Upfront fee scam | You are “approved” for a big loan but must first pay a fee to release it | Any payment before you receive the loan |
| 2. Fake app | An app copies a known lender’s name and logo, collects your ID and selfie, then asks for a fee or vanishes | Developer name not in CBK’s list; few reviews; new listing |
| 3. Fake agent on social media | A Facebook, WhatsApp or Telegram “agent” promises to raise your limit or approve a loan for a fee | Personal mobile number; payment to a personal M-Pesa line |
| 4. “Limit unlock” deposit | You are told to deposit savings as security to unlock a higher limit | Digital lenders cannot take deposits or cash collateral |
| 5. Fake customer care call | A caller “from the lender” or Safaricom asks for your PIN or the code sent to your phone | Safaricom says it calls only from 0722 000 000 and never asks for your PIN |
| 6. Data harvesting app | An app demands access to contacts, photos and SMS, then uses them to pressure you | Permissions that have nothing to do with lending |
| 7. Fake debt collector | Someone claims you owe a lender and demands payment to a personal number | No loan account reference; threats to shame you |
Why an upfront fee is always a warning sign
Regulation 8(2) of the Digital Credit Providers Regulations says a digital lender cannot invite or collect deposits in any form, including cash collateral as security for a loan. Genuine apps deduct any fee from the loan or add it to what you repay; they do not ask you to send money first. Regulation 4 also bans anyone from running or advertising a digital credit business without a CBK licence.
If a lender is licensed, its fees still have to be disclosed. Before lending, it must give you the full terms and the total cost of the loan, and it needs CBK’s written approval to change its pricing. Read more in 10 things digital lenders are banned from doing in Kenya.
How to check if a loan app is real
- Find the company behind the app. CBK licenses companies, not app names. Look for the developer name on the Google Play page, in the loan agreement or on the lender’s website footer.
- Search CBK’s list. Our CBK licensed digital lenders list shows all 281 licensed providers with their phone numbers, emails and offices as published by CBK.
- Match the contacts. The phone number and email in CBK’s record should match what the app or caller gives you. A Gmail address or personal line that differs is a warning sign.
- Check the cost. Compare the app against the cheapest loan apps in Kenya and our loan apps guide.
- Review permissions. Refuse access to contacts, photos or call logs that the app does not need.
What licensed lenders cannot do when you owe them
Even when a loan is real, the regulations limit how lenders collect. Under regulation 20 they cannot threaten you, use obscene language, message your contacts or post your details online to shame you. Under regulation 14(3) they cannot list you with a credit reference bureau for an outstanding balance of KSh 1,000 or less, and for larger amounts they must give notice first. Someone who ignores these rules is either breaking the law or not a licensed lender at all.
What to do about loan app scams in Kenya if you are a victim
- Stop paying. Do not send a second “fee” to recover the first.
- Save evidence: screenshots of the app, chats, the number used, M-Pesa confirmation messages and dates.
- Report to Safaricom if M-Pesa was used: call 100 or 200, or text the scammer’s number to 333. See our M-Pesa fraud guide.
- Report to the police and get an OB number, which you will need for any follow-up.
- Report the lender to CBK if it claims to be a licensed digital credit provider or is lending without a licence.
- Report data misuse to the Office of the Data Protection Commissioner. Our guide on how to report loan app harassment to ODPC and CBK covers the steps.
- Change PINs and passwords if you shared any codes, and watch your M-Pesa and bank statements.
Avoiding loan app scams in Kenya: safer ways to borrow
If you need a short-term loan, start with lenders whose terms are published and easy to verify: products offered by your bank or mobile network, a Sacco loan if you are a member, or a licensed app you have already checked on CBK’s list. Compare total cost in shillings, not just the advertised interest rate.
Frequently asked questions
Do real loan apps ask for a processing fee before giving a loan?
No. Licensed digital lenders cannot collect deposits or cash security under regulation 8(2) of the CBK Digital Credit Providers Regulations, 2022. Fees are deducted from the loan or added to the repayment.
How do I know if a loan app is licensed by CBK?
Find the company name behind the app and search for it in CBK’s directory of licensed digital credit providers, which listed 281 companies as of 29 September 2026.
Where do I report a loan app scam in Kenya?
Report to the police, to Safaricom on 100, 200 or 333 if M-Pesa was used, to CBK for unlicensed lending, and to the ODPC for misuse of your personal data.
Can I get my money back after a loan app scam?
Report quickly to Safaricom and the police. Recovery is not guaranteed, but early reports give the best chance of tracing the receiving number.
Can a loan app share my contacts?
No. The regulations ban lenders from accessing your phone book to contact people and from sharing your data without consent.
Sources: Central Bank of Kenya, Digital Credit Providers Regulations, 2022 and directory of licensed DCPs (29 September 2026); Safaricom fraud guidance.
Prefer WhatsApp? Follow Business Radar on WhatsApp
Weekly, free. We only use your email for this newsletter and you can unsubscribe in one click. Privacy policy.
