The Kenya Revenue Authority (KRA) official X account (formerly Twitter) has been compromised by unknown hackers. The compromised account’s handle has been changed to “StandsX”.
The tax agency has issued a statement strongly cautioning the public against engaging with the fraudulent account, including sending money or sharing any personal information in response to messages or posts emanating from it.
“The official @KRACare X (formerly Twitter) account has been hacked and its handle changed to ‘StandsX’. Members of the public are strongly warned not to engage, share personal information, or send money to any messages or posts from this account, as they are fraudulent,” read a statement from the KRA.
The compromised account reportedly boasts a significant following, with online sources indicating it has over 300,000 followers, making the security breach a high-risk situation for unsuspecting Kenyans seeking official tax guidance. The last genuine post on the account was noted to be on Thursday, October 30, before the takeover.
The high-profile cyber intrusion is particularly notable as it occurs during Cyber Week Africa 2025, a major international conference being hosted in Nairobi from October 27th to 31st, focused on strengthening the continent’s digital resilience and cybersecurity posture.
The hacking of a vital government communication channel during such a key security event underscores the severe and constant nature of cyber threats targeting Kenyan institutions.
KRA has confirmed it has launched urgent efforts in collaboration with the platform’s security team to retrieve and secure the official account.
In the interim, the Authority has redirected the public to use its verified communication channels for all official business.
Go to TECHTRENDSKE.co.ke for more tech and business news from the African continent.
Follow us on WhatsApp, Telegram, Twitter, and Facebook, or subscribe to our weekly newsletter to ensure you don’t miss out on any future updates. Send tips to editorial@techtrendsmedia.co.ke
