The Kenya Revenue Authority (KRA) has issued a warning to the public after its official customer care handle, KRA Care, was compromised on X (formerly Twitter). The authority cautioned Kenyans to beware of impostors posing as official tax officers using a fake account created following the hack.
Taking to its verified KRA Corporate account on Saturday, November 1, 2025, the taxman raised a “SCAM ALERT”, warning users against engaging with the fraudulent account that emerged soon after the hack.
“SCAM ALERT! Don’t be their ‘Esteemed Taxpayer’, please! Our real account, KRA Care, took an unplanned vacation with the hackers,” read the post.
“Stay alert; don’t share your info with impostors. Report and block any suspicious accounts,” KRA added.
The fake account, cleverly designed to mimic the official KRA Care page, even linked to the KRA website, tagged the KRA Corporate handle, and displayed the official customer care phone number to appear legitimate. However, the account’s lack of verification and fewer than 100 followers served as clear red flags.
The incident followed the October 31 hack of the genuine KRA Care account, whose handle was temporarily changed to “StandsX.” At the time, KRA advised taxpayers not to share personal details or send money to the compromised page, urging them instead to use KRA’s official Facebook page for assistance.
“The Kenya Revenue Authority (KRA) has launched urgent efforts in collaboration with X to retrieve and secure the official account. Official updates will be shared through verified KRA communication channels,” the authority stated.
As of November 2, 2025, the KRA Care account appears to have been successfully recovered, with normal operations restored and no suspicious activity detected.
KRA continues to urge taxpayers to remain vigilant online, interact only with verified pages, and report any suspicious messages or accounts claiming to represent the tax authority.
