Six detained in DCI probe on fake SGR ticket scam

Six suspects have been detained by a Kibera magistrate court to allow detectives to complete investigations into an alleged online fraud scheme involving fake Standard Gauge Railway (SGR) ticket sales.

The Directorate of Criminal Investigations (DCI), through its Serious Crime Unit, had sought to detain Evaresto Obwoya Omaywa, Kelvin Kibet alias Festus Kibet, John Omayo Obwocha alias Collins, George Kibet, Brian Cheruiyot and and an alleged minor for 21 days to complete their probe.

Kibera chief magistrate Stella Atambo directed the suspects be detained until Thursday when a ruling will be delivered.

According to court documents, the suspects are being investigated for alleged cybersquatting contrary to Section 28 of the Computer Misuse and Cybercrimes Act and obtaining money by false pretences contrary to Section 313 of the Penal Code, among other offences.

Investigators told the court that the complaint was lodged by the Kenya Railways Corporation, which reported that individuals had allegedly created fake "Madaraka Express" pages on Facebook and TikTok closely resembling the corporation's official social media platforms.

The DCI alleges that the suspects used the accounts to purport to sell SGR tickets and offer seat reallocation services, allegedly defrauding members of the public after directing them to make payments.

Detectives say the fraudulent content was disseminated across multiple online platforms, necessitating extensive digital forensic investigations.

According to the application, the six suspects were arrested by officers from the DCI Headquarters in Nakuru County before being transferred to Nairobi and booked at Muthaiga Police Station in the early hours of July 13, 2026.

The investigating officer informed the court that detectives recovered multiple mobile phones believed to have been used in the alleged offences and are seeking orders authorising the DCI Digital Forensic Laboratory to extract and analyse data from the devices.

Investigators are also asking the court to compel the suspects to provide passwords and other login credentials to facilitate the forensic examination.

The DCI says the digital examination is intended to establish ownership and control of the alleged fraudulent accounts, recover deleted data, analyse communication records, identify possible accomplices and preserve electronic evidence.

In seeking custodial orders, investigators argue that they require additional time to record statements from more than 20 alleged victims across different parts of the country, obtain M-Pesa and Airtel transaction records, verify the suspects' identities and complete forensic analysis of the seized electronic devices.

They further contend that releasing the suspects at this stage could expose the investigation to interference or lead to the alteration or deletion of electronic evidence.

Kibera chief magistrate Stella Atambo directed that the suspects be detained till Thursday when a ruling on the matter will be delivered.

She said there was need to establish the exact age of the alleged minor before a ruling is made.