Bitcoin Scams in Kenya: How to Spot Them Before You Pay
Bitcoin scams can start with fake profits, altered M-Pesa details or a support call. Check the warning signs, protect account secrets and know where to report.
On this page
Cryptocurrency scams received at least US$14 billion on-chain in 2025, according to Chainalysis. The firm projected that the total could exceed US$17 billion as it identifies more scam wallets. These are global crypto figures. They are not measured Bitcoin losses in Kenya.
Kenya's Capital Markets Authority issued an investment-scam warning on 11 September 2026. It cautioned against entities offering investment services without the required licensing or approval. It also directed affected people to local DCI offices.
For a Bitcoin buyer, the danger can appear before the first purchase. It may start with a fake checkout, a promised return or someone claiming to help with an account.
Check the recipient, the order and the business before sending money. A familiar logo or an M-Pesa payment option does not prove that the offer is genuine.
The global data show larger scam payments
Chainalysis reported that the average scam payment rose from US$782 in 2024 to US$2,764 in 2025. That was an increase of about 253%.
This is an average payment in its global analysis. It is not the average Kenyan victim's loss. A person can make several payments to the same scheme.
| Category | Value (USD) |
|---|---|
| 2024 | 782 |
| 2025 | 2764 |
Global cryptocurrency data. These figures are not Bitcoin-only losses or a Kenya-specific estimate. Average payment is different from total loss per victim.
Source: Chainalysis, 2026 Crypto Crime Report, scams chapter
A convincing first message can lead to repeated requests for money. The important decision is often whether to make the next payment.
1. Guaranteed returns and referral pressure
An offer promises fixed daily profits from Bitcoin trading. It may reward you for recruiting friends. The promoter shows successful withdrawals and asks you to deposit before a deadline.
Bitcoin's price can fall. A claim that returns are guaranteed should trigger an independent check of the business and the product.
A small early payout does not establish where the money came from. It does not prove that later withdrawals will work.
Ask who generates the return, who holds the assets and what risks are disclosed. Check any claimed regulatory permission directly with the relevant authority.
2. Fake investment apps and withdrawal fees that keep changing
A website shows a rising balance. The operator encourages a larger deposit. When you try to withdraw, a new tax, clearance payment or account upgrade appears.
The FBI's investment-fraud warning describes this pattern. Fraudulent platforms can display invented profits, then demand more money when victims attempt to withdraw.
A disclosed withdrawal charge should have clear terms. An unexpected payment to a new personal account to release supposed profits needs scrutiny.
Do not send more money to unlock a suspected scam balance. A number on a dashboard is not proof that the assets exist.
3. P2P payment tricks and requests to leave the marketplace
A counterparty asks you to cancel the official order. They offer a better rate in a private chat. They may also change the receiving account after the trade starts.
Keep the order and messages within the marketplace. Check the recipient against the official payment instructions. Follow its rules for identity matching and escrow.
A forged receipt creates another risk. A P2P seller should check funds in their own account before releasing crypto.
For a buyer, check both the completed M-Pesa transfer and the Bitcoin delivery status. A payment delay alone does not prove fraud.
See how direct M-Pesa purchases compare with P2P in Kenya for the different payment and counterparty checks.
4. Fake support agents and lookalike websites
A caller says your account is under attack. They ask for a code, a wallet recovery phrase or a transfer to a safe address.
Coinbase's phishing guidance describes this form of impersonation. It says its agents do not ask for seed phrases, passwords or transfers to an external address.
End the conversation. Open the genuine app or type the known website address yourself. Contact support through the details published there.
Check the full domain before signing in. A padlock only shows an encrypted connection. It does not establish that the business is the one you intended to use.
Never give a seller or caller your M-Pesa PIN, one-time code or wallet recovery phrase. Do not install remote-access software at their request.
5. A trusted online contact becomes an investment adviser
Someone builds a relationship over days or weeks. The conversation later turns to a platform, a trading expert or an opportunity they say has worked for them.
The FBI's warning describes schemes that develop trust before introducing a fake investment website. Familiarity with the contact is not an independent check of the service.
Verify the business through sources outside that conversation. Be cautious when every review, support contact and payment instruction comes from the same person.
Do not borrow money or recruit friends because a contact pressures you to increase a deposit.
6. Recovery services that demand another payment
After a loss, a new person offers to recover the money. They claim to be a lawyer, investigator or blockchain specialist. They want an upfront payment.
The FBI's recovery-fraud warning describes services that take fees, disappear or demand more payments after producing a tracing report.
A tracing report does not prove that funds have been frozen or returned. A promise of guaranteed recovery needs scrutiny.
Use official reporting channels. Verify any professional independently. Do not send money or sensitive information to a stranger who contacts you after a loss.
Warning signs worth checking before an M-Pesa payment
| What you are asked to do | What to check |
|---|---|
| Accept guaranteed trading profits | The business, product, risks and claimed permission |
| Pay a new fee to release a balance | Published withdrawal terms and the recipient |
| Move a P2P trade into private chat | Whether the official order and its protections remain in place |
| Share a PIN, code or recovery phrase | End the request and contact genuine support independently |
| Pay a different person from the order | Recipient identity and official payment instructions |
| Pay for guaranteed recovery | Independent credentials and the basis for the claim |
These are screening questions. They are not a numerical fraud score or proof that every delayed order is a scam.
Before you buy Bitcoin with M-Pesa in Kenya, check the provider and payment instructions. Review the final KSh amount, fees and BTC received.
Finlazo's personal payment policy requires your own verified M-Pesa account. Third-party funding is not permitted in that flow.
Check claimed licences through official regulator websites. Match the legal name and the service covered. A company-registration document alone does not establish permission for the financial service being advertised.
If you have already sent money
Stop sending further payments to the suspected scheme. Keep the original transaction record, order ID, website address and messages.
Contact the payment provider and the platform through their genuine support channels. Ask what protective action or dispute process is available. Do not assume a reversal or refund is guaranteed.
If credentials were exposed, use the genuine service's account-security process. Tell support what was shared. If a wallet recovery phrase was disclosed, treat that wallet as compromised.
Report suspected criminal fraud to the DCI. Its official contact page lists 0800 722 203 as the toll-free number.
The CMA's September warning also directs affected people to their nearest local DCI office. For an investment-services complaint, use the CMA's official complaint route where relevant.
| Issue | Where to seek help | Useful evidence |
|---|---|---|
| M-Pesa transfer or account problem | Safaricom's official support channels | Receipt code, amount, date and recipient |
| Crypto order or account problem | The platform's genuine support or appeal process | Order ID, payment record and account activity |
| Suspected criminal fraud | Local DCI office or the DCI's official contact route | Messages, URLs, payment records and wallet transaction IDs |
| Investment-services complaint | CMA's official complaint route, where relevant | Business identity, advertised offer and transaction evidence |
Keep evidence private. Give it to genuine support or investigators. Publishing PINs, identity documents or recovery phrases can create another loss.
A clear purchase quote is a starting point
Buying BTC is different from handing money to someone promising to trade it for guaranteed profit. Check exactly what the payment buys.
A straightforward purchase should identify the order, the recipient and the BTC due. It should explain payment matching and what happens if delivery stalls.
Review Finlazo's Bitcoin purchase page for M-Pesa users. Treat an indicative market rate as information. Use the actual order terms to judge the purchase.
Pause when the recipient changes, a secret is requested or another payment is needed to free supposed profits. Verify the request independently before money moves.
Sources and methodology
- Chainalysis — 2026 Crypto Crime Report: scams. Global on-chain scam receipts, the projected total and average payment figures.
- CMA — Public caution against investment scams. Warning dated 11 September 2026 and guidance to report to local DCI offices.
- FBI/IC3 — Cryptocurrency investment schemes. Trust-building, fake balances and extra-payment demands.
- FBI/IC3 — Cryptocurrency recovery schemes. Upfront-fee recovery fraud and false claims of authority.
- Coinbase — Phishing. Support impersonation and credential requests.
- DCI — Contact us. Kenyan reporting contact.
- CMA — Submit a complaint. Official complaint portal.
Sources checked on 13 October 2026. Chart values are global average payments. Growth: (2,764 minus 782) divided by 782, or about 253%. They do not estimate Kenyan Bitcoin losses.
The warning-sign tables are Finlazo's editorial synthesis. No Kenya-specific scam prevalence, provider safety rating or guarantee of recovery is claimed.
