Tags: Milimani Court, SIM Swap, Cybercrime, Nairobi, IPOA, DCI, Police, Kenya Judiciary
A Milimani court has ordered that Kiprotich Ronoh Brian be held for seven days as investigators probe an alleged SIM swap and extortion scheme involving the mobile line of Nairobi Central Police Station’s Officer Commanding Station (OCS) Samson Kiprotich Talaam. Brian was arrested on 20 July 2025 in the Pipeline area of Nairobi and presented in court on 21 July 2025.
The disputed line is a critical exhibit in the separate investigation into the murder of blogger and teacher Albert Omondi Ojwang. The handset and SIM were reportedly placed under the custody of the Independent Policing Oversight Authority (IPOA) on 15 June 2025. Yet, beginning mid-June, Talaam’s lawyers and relatives began receiving messages from that number demanding KSh80,000. On 18 June 2025, counsel Cliff Ombeta informed the court about the suspected fraud, prompting Principal Magistrate Benmark Ekhubi to direct the Directorate of Criminal Investigations (DCI) to establish who was using the device.
Appearing before Magistrate Caroline Mugo, Investigating Officer Nickson Kiunga said preliminary findings indicate Brian executed a SIM swap that allowed unauthorized access to the line. Officers allegedly recovered multiple handsets, assorted used and unused SIM cards, and electronic storage media during the arrest. Digital forensic work is under way, and investigators are awaiting Call Data Records and subscriber details to map the full scope of the scam and identify possible accomplices.
Prosecutors had asked to hold Brian for 14 days to pursue leads on suspected offences that include unauthorized interception, computer fraud, identity theft, and participation in organized criminal activity under the Computer Misuse and Cybercrimes Act No. 5 of 2018 and the Prevention of Organized Crimes Act. Magistrate Mugo granted seven days, citing the seriousness of the allegations and the need to safeguard evidence and witnesses while inquiries continue.
The court directed that the matter be mentioned on 28 July 2025, when investigators are expected to update on progress and indicate whether formal charges will be filed. Meanwhile, individuals who received payment demands purporting to originate from the OCS’s number are urged to preserve the messages and provide statements to investigators. SIM swap attacks typically involve fraudsters convincing a mobile operator to reassign a victim’s number to a different SIM card, enabling control of calls, texts, and mobile money accounts. Authorities say such schemes are increasingly linked to broader financial and identity crimes across Kenya’s digital ecosystem. Investigations remain active under multi-agency coordination at this stage, ongoing.
