Nairobi Residents Demand Justice After Identity Photos Fuel Digital Scams

Residents across Nairobi's informal settlements and middle-class estates are raising alarms about a growing crisis: their personal photographs, scraped from social media profiles and ID documents, are being reused in fraudulent mobile loan applications, fake business listings, and forged digital identities. The practice, commonly called duplicate image replacement fraud, has accelerated alongside Kenya's rapid expansion of digital financial services, leaving ordinary people scrambling to clear their names from debts they never incurred.

The issue has gained urgency in mid-2026 because Kenya's Hustler Fund and M-Pesa-linked credit products now reach millions of previously unbanked citizens, many of whom register using a single selfie and a national ID number. That low-barrier entry, designed to promote financial inclusion, has simultaneously created a ready pipeline for photo-theft fraud. The Communications Authority of Kenya received more than 4,200 complaints related to digital identity misuse in the twelve months ending March 2026, according to figures the authority published in its most recent annual report.

Voices From the Ground

In Mathare North, along Juja Road, residents describe a particular pattern: their photographs appear on Fuliza overdraft accounts or third-party loan apps they never downloaded. One household in the area discovered the problem only when a debt collector arrived at the door. Community paralegals attached to the Mathare Social Justice Centre on Juja Road say they have handled dozens of such cases since January 2026 alone, helping residents file complaints with the Office of the Data Protection Commissioner, whose offices sit on Upper Hill's Upperhill Close.

In Westlands, the problem takes a slightly different shape. Several small business owners on Waiyaki Way have found their headshots duplicated on fake company profiles listed on business directories and government procurement portals, raising concerns about reputational damage and disqualification from tenders. The Nairobi chapter of the Kenya ICT Action Network, which runs digital literacy clinics at iHub's space on Ngong Road, says demand for its identity-protection workshops tripled between January and June 2026 compared with the same period a year earlier.

Residents in Kibera's Soweto East zone report that fraudsters often combine a stolen photograph with a genuine but separately obtained ID number, two pieces of data that together are enough to pass biometric checks on at least three popular Kenyan lending apps, according to a briefing note published in May 2026 by the Strathmore University @iLabAfrica research centre on Madaraka Estate's Strathmore campus. The centre flagged that liveness-detection technology, which can distinguish a live face from a printed photograph, is present in fewer than half of the apps it tested.

What Victims and Advocates Are Demanding

Affected residents are asking for three specific changes. First, they want the Data Protection Commissioner to mandate that all digital lenders implement liveness detection by December 2026, a deadline the Commissioner had previously floated but not yet formalised as of July 4. Second, they want a fast-track complaints desk at the Nairobi City County's Huduma Centre on Mama Ngina Street that can issue a formal dispute letter within 48 hours, usable as evidence against debt collectors. Third, community groups want the government's ongoing Silicon Savannah regulatory sandbox, run through the Kenya Revenue Authority-linked Konza Technopolis Development Authority, to include mandatory fraud-resilience audits for any fintech startup operating consumer credit products.

Practically, residents who believe their image has been misused are advised to file a formal complaint with the Office of the Data Protection Commissioner through its online portal at odpc.go.ke, attaching screenshots and, where possible, links to the fraudulent profiles. Complaints should simultaneously go to the Communications Authority and to the relevant app's own reporting mechanism. Residents near Ngong Road can also access pro-bono legal support through the Law Society of Kenya's Consumer Protection Clinic, which runs sessions at the LSK Centre on Gitanga Road every Tuesday and Thursday morning. Acting quickly matters: Kenya's Data Protection Act of 2019 sets a 30-day window for controllers to respond to erasure requests, but enforcement has historically lagged without documented pressure from complainants themselves.