A 20-year-old Mount Kenya University student, identified as Collins Mutuma, is at the center of a high-profile cybercrime case after allegedly hacking into Sidian Bank’s digital system and stealing more than KSh7.8 million.
Mutuma, a Bachelor of Education (Science) student, was arraigned before Chief Magistrate Lucas Onyina at the Milimani Law Courts on Monday, October 27, 2025, where he denied all the charges against him.
How the Cyber Heist Allegedly Happened
According to the prosecution, the digital theft occurred on January 11, 2025, at an undisclosed location in Kenya. Investigators believe Mutuma, working with yet-to-be-identified accomplices, illegally accessed Sidian Bank’s network and transferred millions of shillings from multiple customer accounts into his personal Diamond Trust Bank (DTB) account.
Court documents show that a total of KSh7,882,845 was siphoned from the bank’s system. Among the victims was Peninah Karoki, whose account allegedly lost KSh471,302 during the operation.
Investigators further revealed that shortly after receiving the funds, Mutuma transferred KSh300,000 to Dominic Gichiri Kagwina and KSh169,000 to an M-Pesa account registered under Samuel Mukola Matheka—transactions prosecutors say were intended to conceal the trail of the stolen money.
“This was not a random theft—it was a coordinated digital attack executed with precision,” one investigator close to the case told CourtNews.co.ke.
Charges and Defense
Mutuma faces three serious charges under Kenya’s Penal Code and Proceeds of Crime and Anti-Money Laundering Act:
-
Conspiracy to defraud,
-
Stealing, and
-
Acquisition of proceeds of crime.
In court, Mutuma’s lawyer insisted that his client is innocent and is a victim of mistaken identity.
“He is a young university student with no prior record and no technical ability to hack a financial institution,” the defense argued. “The real perpetrators are still at large.”
Chief Magistrate Lucas Onyina granted the student KSh200,000 cash bail with one contact person and set the matter for pre-trial hearing on November 3, 2025.
Investigators Trace Wider Cyber Fraud Network
Prosecutors say the case is part of a wider cybercrime ring targeting financial institutions across Kenya. Detectives from the Banking Fraud Investigations Unit (BFIU) have launched an extensive probe to trace other individuals who may have participated in or benefited from the scheme.
The forensic analysis of digital transactions is ongoing, with investigators tracking electronic footprints linking the stolen funds to multiple bank and mobile money accounts.
Kenya’s Growing Cybercrime Threat
This case follows another incident earlier this month, where a 26-year-old Meru University dropout was arrested at Tatu City for allegedly hacking a payment service provider connected to a betting firm and stealing KSh11.4 million.
The two cases have intensified debate over the rising wave of youth-driven cybercrime in Kenya and the vulnerability of financial institutions to digital attacks.
Authorities from the Banking Fraud Investigations Unit have cautioned that cybercrime is on the rise, urging banks and digital payment platforms to enhance cybersecurity systems, conduct real-time fraud detection, and educate customers about digital safety.
“With increased digital banking adoption, criminals are exploiting system gaps,” said a BFIU spokesperson. “The only defense is constant vigilance and robust cybersecurity investment.”
Public Concern and Sectoral Impact
The Mutuma case has triggered widespread discussion online, with many Kenyans expressing concern about data protection, banking security, and the temptation of quick money among young people.
Legal analysts warn that the case could become a landmark precedent in Kenya’s fight against digital financial crime, especially if investigators prove the student acted as part of a larger syndicate.
For now, the prosecution continues its investigation as the case heads to pre-trial. Meanwhile, the banking sector is under growing pressure to seal digital loopholes and rebuild public confidence.