Mulot Boys Nabbed in Mombasa: Inside DCI’s Daring Operation Against Kenya’s Tech-Savvy Cybercriminals
In the quiet, leafy suburb of Nyali in Mombasa County, detectives from the Directorate of Criminal Investigations (DCI) were preparing to strike. Their target? A shadowy cybercrime syndicate that had been silently draining mobile money accounts across Kenya, one phone call at a time.
These weren’t your average criminals. Nicknamed the “Mulot Boys”, this group of six had mastered a dangerous craft using caller ID spoofing technology to pose as customer care agents from banks and telecom companies.
For long, they had preyed on innocent Kenyans. A call would come in, displaying a trusted bank or Safaricom number. A panicked voice would warn of a suspicious transaction. “Confirm your PIN to secure your account,” the caller would urge.
Fearing loss, the victim would comply.
Seconds later, thousands, sometimes millions, would vanish.
👥 The Faces Behind the Fraud
DCI’s Operation Directorate had been watching. And on May 31, 2025, the trap was set.
Inside APA Apartments, House No. B2, detectives stormed the hideout, which had been converted into a tech lab. This wasn’t just a home — it was a control center, a fraud academy where the group trained and executed scams.
Arrested were:
-
Fortune Muthina Kinyanzui, also known as Albanas Kyalo, is believed to be the mastermind and owner of the spoofing software.
-
Ruel Kipkoech Yator, alias Papa Ruel
-
Laban Kipkirui Koech
-
Weldon Kipyegon Rono
-
Towet Kipkorir Alphonce
-
Kelvin Kipyegon Koech
Detectives say Muthina was the brain behind the operation, renting out his high-tech spoofing app to other criminals for over KSh 500,000, providing not just access but also configuration and IP addresses.
📱 The Spoils of Cybercrime
What detectives found confirmed their worst fears.
Inside the apartment were 19 mobile phones, SIM cards from Safaricom, Airtel, Telkom, and MTN Uganda, cardholders, and even a handwritten book listing names and numbers of potential victims.
The apartment had been turned into a base for fraud, complete with tools, phones, and notes.
⚖️ Court Action and Public Warning
The six suspects were quickly presented before Kahawa Law Courts on June 3, 2025. The DCI filed a miscellaneous application seeking to hold them longer as investigations continued. The court scheduled the next mention for June 6, 2025.
Currently, all suspects are being held at the Capitol Hill Police Station.
The DCI has since issued a warning to the public:
“If you receive suspicious calls demanding urgent personal information, don’t panic. Hang up. Then call your service provider directly.”
They also urge anyone who may have fallen victim to report to the nearest police station or contact DCI Headquarters for case follow-up.
The arrest of the Mulot Boys is a clear sign: cybercrime is evolving, but so are the efforts to fight it.
It is a victory for law enforcement, but also a wake-up call to all Kenyans.
Verify before you trust. Don’t share your PIN. And always remember, the real customer care will never ask for your password over the phone.
