INTERPOL Flags Rising Threat of AI-Driven Synthetic Identities Using Stolen Kenyan Data

Kenya faces an escalating cybercrime challenge as criminals increasingly exploit artificial intelligence (AI) to create synthetic identities using stolen personal information, according to the INTERPOL African Cyberthreat Assessment Report 2026.

What Are Synthetic Identities?

Synthetic identities blend genuine personal details with fabricated data to form new digital personas that can bypass automated identity verification systems. Unlike traditional identity theft, these synthetic profiles can evade know-your-customer (KYC) checks, enabling fraudsters to exploit services without needing full account credentials.

AI's Growing Role in Cybercrime

• In 2025, AI was involved in 55% of recorded cybercrime cases across Africa.
• Criminals use AI for reconnaissance, phishing, extortion, and evading detection.
• AI-generated synthetic identities have been used to circumvent KYC processes.
• Personalised phishing attacks and malware crafted by AI are increasingly common.

Kenya's Vulnerabilities

The report highlights Kenya’s significant exposure to identity-related cybercrime, including a 327% surge in SIM-swap fraud in 2025. SIM swapping allows criminals to hijack mobile numbers, intercept verification messages, and gain access to sensitive accounts.

INTERPOL also points to a critical gap in real-time information sharing among banks, telecom firms, and law enforcement, which hampers swift responses to fraud attempts. Legal and technical constraints often delay interventions like freezing accounts or stopping SIM swaps.

Additionally, Kenya ranks among African countries with numerous exploitable weaknesses such as outdated routers, vulnerable VPNs, and misconfigured web systems, increasing the risk of data breaches.

The Growing Value of Personal Data

With AI’s ability to fabricate convincing synthetic identities, fragments of stolen personal data become highly valuable. Criminals no longer need complete credentials; partial data combined with AI-generated details can defeat verification systems.

This evolution means that protecting personal information is as crucial as securing passwords or PINs. As digital services in banking, telecommunications, and technology platforms expand, so does the need for coordinated detection and information sharing to mitigate these sophisticated threats.

The INTERPOL report underscores that Kenya’s fight against cybercrime must adapt to this new landscape where identity fraud moves beyond theft to the creation of entirely synthetic identities.