Booming digital credit triggers fresh push for fraud control

Digital lenders tighten security as mobile borrowing rises and fraud risks grow. [iStockphoto]

Kenya's digital lenders are tightening identity checks and account monitoring as more Kenyans rely on mobile credit for everyday expenses, with industry data showing usage climbing to 91 per cent of borrowers in 2026 from 87 per cent a year earlier.

The shift has made digital credit a primary door to formal financial inclusion and a prime target for fraudsters. TransUnion reported that 4.5 per cent of account creation attempts in Kenya were suspected of fraud in 2025, with the initial sign-up process identified as the most vulnerable moment for identity theft.

"Seeing usage reach 91 per cent really highlights how digital credit has shifted from an occasional safety net to an everyday necessity for millions of Kenyan households and micro-enterprises," Tabby Mugechi, Senior Compliance and Ethics Manager at Tala, said in an interview. "But with that reach comes a serious responsibility."

Digital lenders are responding by deploying electronic Know Your Customer (eKYC) systems that verify identity remotely and without paperwork.

Tala said the process now works in three layers, including matching National ID details against the government's Integrated Population Registration System (IPRS) through TransUnion; capturing photos of the ID card and a live selfie check to confirm a real, physically present person is applying.

"A quick selfie match against the photo on the National ID shared during registration protects your account so nobody else can use your identity," Mugechi said. "It's a fast and easy step that gives you peace of mind while getting started on onboarding."

The stakes are high for consumers. Identity theft can ruin credit bureau records, saddle innocent people with debt they never took on and create lasting financial stress. Mugechi said Tala blocks fraudulent accounts, waives fraudulent loan balances and helps the legitimate ID holder securely set up their own account when identity theft is confirmed. Customers who suspect their identity was used to attempt a Tala registration can reach the lender for delinking support.

"The initial account setup is the most vulnerable moment for identity theft and fake account creation," Mugechi said. "Bad actors frequently try using stolen National ID details or automated scripts to create fake profiles. Relying on static data like ID numbers alone leaves security gaps."

Digital lenders are also extending protection beyond onboarding. Tala said it continuously screens accounts against global sanctions lists and uses automated transaction monitoring to catch suspicious activity and unusual patterns, in line with Central Bank of Kenya guidelines.

"Stopping fraud requires strong checks during onboarding to keep bad actors out from the start. But continuous protection is just as vital," Mugechi said.

The push comes as regulators and industry players seek to balance security with financial inclusion. Mugechi cited international FATF guidelines, noting that security measures should make financial services accessible rather than create hurdles for honest users. Digital lenders can achieve this through tiered KYC, intuitive app design and simple prompts during image capture, she added.

"Pairing trained support teams with seamless backend checks allows genuine applicants to enjoy a smooth, reassuring experience without compromising safety," she said.

Tala said its automated systems cross-reference National ID details against official IPRS records through TransUnion, with each ID strictly tied to a single active account, duplicate registration attempts falling sharply, and identity fraud across its portfolio reduced.

For consumers, Mugechi offered practical advice: never share one-time passwords, PINs or passwords; download loan apps only from official app stores and confirm the provider is licenced by the Central Bank of Kenya; never send photos of National ID or SIM details to third parties claiming to act as loan brokers; and report lost IDs or phones immediately to police, mobile operators and financial providers.

"Protecting the ecosystem requires genuine collaboration across the board," she said, calling on lenders to upgrade eKYC tools and report suspicious activities, regulators to provide clear risk-based guidance, identity providers to ensure reliable and affordable access, and consumers to stay alert against social engineering scams.

[e-mail]