[kictanet] Sim card swap: How Farah Bashir lost Sh2.6m to fraudsters in hours

Tue May 31 07:18:21 EAT 2022

The messaging from Safaricom is a bit confusing.

On the FAQ below it asks:-

*When should I whitelist my line?*-
When you receive the below notification of an attempted SIM swap on your
line that you did not initiate.

‘Dear customer, we have received your SIM SWAP request. If you are not
aware of this, kindly dial *100*100# immediately to stop the swap. Thank
you.’

See the link below:-

https://www.safaricom.co.ke/faqs/faq/857

But then I have a question:-

Can we whitelist NOW without waiting for someone to try Sim Swapping OR we
can only do it when someone IS trying to Sim Swap our phones?

Regards

*Ali Hussein*

Fintech | Digital Transformation

Tel: +254 713 601113

Twitter: @AliHKassim

Skype: abu-jomo

LinkedIn: http://ke.linkedin.com/in/alihkassim
<http://ke.linkedin.com/in/alihkassim>

Any information of a personal nature expressed in this email are purely
mine and do not necessarily reflect the official positions of the
organizations that I work with.

On Mon, May 30, 2022 at 9:19 PM Victor Kapiyo via KICTANet <
kictanet at lists.kictanet.or.ke> wrote:

> The *100*100# is a recent feature for  Safaricom prepaid users introduced
> a few weeks ago. Apparently, postpaid users have the feature activated by
> default.
>
> Anyone with an idea of what happens on Airtel and Telkom?
>
> Victor
>
> On Mon, 30 May 2022, 20:58 Bradley Kisia via KICTANet, <
> kictanet at lists.kictanet.or.ke> wrote:
>
>> I see this link doing rounds on WhatsApp.  How valid is it?
>> https://techweez.com/2022/05/30/stop-sim-replacement-at-mpesa-agent/
>>
>> On Mon, 30 May 2022 at 13:32, Barrack Otieno via KICTANet <
>> kictanet at lists.kictanet.or.ke> wrote:
>>
>>> You hit the nail on the head. Most good accounts have relationship
>>> Managers. I doubt they would just sit there and watch a fat account being
>>> decimated.
>>>
>>> Regards
>>>
>>> On Mon, 30 May 2022, 5:05 pm Alex Watila via KICTANet, <
>>> kictanet at lists.kictanet.or.ke> wrote:
>>>
>>>> Good afternoon,
>>>>
>>>> The Kenya Bankers Association and the Telcos are conveniently avoiding
>>>>  the evidence that most of these frauds involve insiders
>>>>
>>>>
>>>>
>>>> Without dealing with the insider threats in the banks and telcos the
>>>> frauds will continue
>>>>
>>>>
>>>>
>>>> At the moment they have just identified the sim swap vulnerabilities
>>>> (actually some of the international banks have made 2FA mandatory and are
>>>> using Authentication apps that are not based on your sim)
>>>>
>>>>
>>>>
>>>> Regards,
>>>>
>>>>
>>>>
>>>> Consultant
>>>>
>>>> ICT4D
>>>>
>>>> *Quality Management Systems
>>>> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b> *
>>>>
>>>> *Information Security Management Systems
>>>> <https://advisera.com/27001academy/#a_aid=621f58ced9bb1&a_bid=f79f3b0b>*
>>>>
>>>>
>>>>
>>>> *From:* KICTANet <kictanet-bounces+awatila=
>>>> gmail.com at lists.kictanet.or.ke> *On Behalf Of *David Indeje via
>>>> KICTANet
>>>> *Sent:* Monday, May 30, 2022 10:59 AM
>>>> *To:* Alex Watila <awatila at gmail.com>
>>>> *Cc:* David Indeje <davidindeje at gmail.com>
>>>> *Subject:* Re: [kictanet] Sim card swap: How Farah Bashir lost Sh2.6m
>>>> to fraudsters in hours
>>>>
>>>>
>>>>
>>>> Dear Listers,
>>>>
>>>>
>>>>
>>>> These cases are emerging at an alarming rate. Indeed, the Kenya Bankers
>>>> Association says consumer education will play a central role in addressing
>>>> emerging security challenges. The association cites cases of phishing
>>>> emails, and malware attacks, to have scaled up in tandem with the enhanced
>>>> uptake of internet and mobile transaction platforms.
>>>>
>>>>
>>>>
>>>> “A study paper on human-centered cybersecurity: Kenyan Fintech sector,”
>>>> prepared by KICTANet, in collaboration with Trust4Cyber Flagship Deutsche
>>>> Gesellschaft für Internationale Zusammenarbeit (GIZ) GmbH,  says emerging
>>>> threats in Kenya are organized crime, exporting cybercriminals to the East
>>>> African region.  https://bit.ly/3vBc5SA
>>>>
>>>>
>>>>
>>>> *Kind Regards,*
>>>>
>>>>
>>>> *David Indeje *_____________________________________
>>>>
>>>> +254 (0) 711 385 945 |  +254 (0) 734 024 856
>>>>
>>>> <https://www.linkedin.com/in/david-indeje/>
>>>> _______________________________________________
>>>> KICTANet mailing list
>>>> KICTANet at lists.kictanet.or.ke
>>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>>>> Twitter: http://twitter.com/kictanet
>>>> Facebook: https://www.facebook.com/KICTANet/
>>>>
>>>> Unsubscribe or change your options at
>>>> https://lists.kictanet.or.ke/mailman/options/kictanet/otieno.barrack%40gmail.com
>>>>
>>>>
>>>> KICTANet is a multi-stakeholder Think Tank for people and institutions
>>>> interested and involved in ICT policy and regulation. KICTANet is a
>>>> catalyst for reform in the Information and Communication Technology sector.
>>>> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
>>>> Research, and Stakeholder Engagement.
>>>>
>>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>>>> online that you follow in real life: respect people's times and bandwidth,
>>>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>>>> not spam, do not market your wares or qualifications.
>>>>
>>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy
>>>> engagement platform.
>>>>
>>> _______________________________________________
>>> KICTANet mailing list
>>> KICTANet at lists.kictanet.or.ke
>>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>>> Twitter: http://twitter.com/kictanet
>>> Facebook: https://www.facebook.com/KICTANet/
>>>
>>> Unsubscribe or change your options at
>>> https://lists.kictanet.or.ke/mailman/options/kictanet/bkisia%40gmail.com
>>>
>>>
>>> KICTANet is a multi-stakeholder Think Tank for people and institutions
>>> interested and involved in ICT policy and regulation. KICTANet is a
>>> catalyst for reform in the Information and Communication Technology sector.
>>> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
>>> Research, and Stakeholder Engagement.
>>>
>>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>>> online that you follow in real life: respect people's times and bandwidth,
>>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>>> not spam, do not market your wares or qualifications.
>>>
>>> KICTANet - The Power of Communities, is Kenya's premier ICT policy
>>> engagement platform.
>>>
>> _______________________________________________
>> KICTANet mailing list
>> KICTANet at lists.kictanet.or.ke
>> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
>> Twitter: http://twitter.com/kictanet
>> Facebook: https://www.facebook.com/KICTANet/
>>
>> Unsubscribe or change your options at
>> https://lists.kictanet.or.ke/mailman/options/kictanet/vkapiyo%40gmail.com
>>
>>
>> KICTANet is a multi-stakeholder Think Tank for people and institutions
>> interested and involved in ICT policy and regulation. KICTANet is a
>> catalyst for reform in the Information and Communication Technology sector.
>> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
>> Research, and Stakeholder Engagement.
>>
>> KICTANetiquette : Adhere to the same standards of acceptable behaviors
>> online that you follow in real life: respect people's times and bandwidth,
>> share knowledge, don't flame or abuse or personalize, respect privacy, do
>> not spam, do not market your wares or qualifications.
>>
>> KICTANet - The Power of Communities, is Kenya's premier ICT policy
>> engagement platform.
>>
> _______________________________________________
> KICTANet mailing list
> KICTANet at lists.kictanet.or.ke
> https://lists.kictanet.or.ke/mailman/listinfo/kictanet
> Twitter: http://twitter.com/kictanet
> Facebook: https://www.facebook.com/KICTANet/
>
> Unsubscribe or change your options at
> https://lists.kictanet.or.ke/mailman/options/kictanet/info%40alyhussein.com
>
>
> KICTANet is a multi-stakeholder Think Tank for people and institutions
> interested and involved in ICT policy and regulation. KICTANet is a
> catalyst for reform in the Information and Communication Technology sector.
> Its work is guided by four pillars of Policy Advocacy, Capacity Building,
> Research, and Stakeholder Engagement.
>
> KICTANetiquette : Adhere to the same standards of acceptable behaviors
> online that you follow in real life: respect people's times and bandwidth,
> share knowledge, don't flame or abuse or personalize, respect privacy, do
> not spam, do not market your wares or qualifications.
>
> KICTANet - The Power of Communities, is Kenya's premier ICT policy
> engagement platform.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.kictanet.or.ke/pipermail/kictanet/attachments/20220531/769a376f/attachment.htm>