DNK International By Elizabeth Were,Nairobi.
Six suspects have been presented before the Chief Magistrate’s Court at Kibera as detectives seek custodial orders to complete investigations into an alleged online fraud scheme involving fake Standard Gauge Railway (SGR) ticket sales.
The Directorate of Criminal Investigations (DCI), through its Serious Crime Unit, is seeking to detain Evaresto Obwoya Omaywa, Kelvin Kibet alias Festus Kibet, John Omayo Obwocha alias Collins, George Kibet, Brian Cheruiyot and Brian Onwonga for 21 days while investigations continue.
According to court documents, the suspects are under investigation for alleged cyber squatting contrary to Section 28 of the Computer Misuse and Cybercrimes Act and obtaining money by false pretences contrary to Section 313 of the Penal Code, among other offences.
Investigators told the court that the complaint was lodged by the Kenya Railways Corporation, which reported that individuals had allegedly created fake “Madaraka Express” pages on Facebook and TikTok closely resembling the corporation’s official social media platforms.
The DCI alleges that the suspects used the accounts to purport to sell SGR tickets and offer seat reallocation services, allegedly defrauding members of the public after directing them to make payments.
The agency further states that the fraudulent content was disseminated across multiple online platforms, necessitating extensive digital forensic investigations.
According to the application, the six suspects were arrested by officers from the DCI Headquarters in Nakuru County before being transferred to Nairobi and booked at Muthaiga Police Station in the early hours of July 13, 2026.
The investigating officer informed the court that detectives recovered multiple mobile phones believed to have been used in the alleged offences and are seeking orders authorising the DCI Digital Forensic Laboratory to extract and analyse data from the devices.
Investigators are also asking the court to compel the suspects to provide passwords and other login credentials to facilitate the forensic examination.
The DCI says the digital examination is intended to establish ownership and control of the alleged fraudulent accounts, recover deleted data, analyse communication records, identify possible accomplices and preserve electronic evidence.
In seeking custodial orders, investigators argue that they require additional time to record statements from more than 20 alleged victims across different parts of the country, obtain M-Pesa and Airtel transaction records, verify the suspects’ identities and complete forensic analysis of the seized electronic devices.
They further contend that releasing the suspects at this stage could expose the investigation to interference or lead to the alteration or deletion of electronic evidence.
[DNK-International@July 14,2026]
