In brief
From WhatsApp impersonation to fake investment schemes, these are the scams targeting Ugandans, Kenyans and Tanzanians today, and the red flags that expose them.
Scammers evolve faster than most people update their passwords. The scams that worked in 2020 have been replaced by far more sophisticated versions in 2025. Here are the ten most common online scams targeting East Africans right now, and how to recognise them before you become a victim.
1. WhatsApp impersonation ("Mum, I lost my phone")
You receive a WhatsApp message from an unknown number claiming to be your child, sibling or close friend: "Mum/Dad, I lost my phone, this is my new number. I need money urgently for [emergency]."
Red flags: The person refuses to take a voice call. They ask for mobile money, not bank transfer. The writing style is slightly different from the real person.
Protection: Always verify through a voice or video call before sending money. Ask a question only the real person would know.
2. Fake investment / "ponzi" schemes
"Invest UGX 100K today and get UGX 500K in 7 days!" These schemes use early investors' money to pay fake "returns" to later investors, until the scheme collapses and the operators disappear. In 2024, several Ugandan schemes collapsed with billions in losses.
Red flags: Guaranteed high returns with "no risk." Pressure to recruit others. No physical office. No registration with the Capital Markets Authority.
Protection: If an investment promises returns far above bank interest rates with "zero risk," it is a scam. Verify registration with the CMA (cmauganda.co.ug) or FIA.
3. Fake online shops on social media
A beautiful Instagram or Facebook page selling phones, clothes or electronics at half the market price. You send money via mobile money. The page blocks you, and the goods never arrive.
Red flags: Prices far below market. No physical address. Comments are disabled or all comments are suspiciously positive. The page was created recently (check Page Transparency on Facebook). They refuse cash on delivery.
Protection: Buy from established businesses with physical locations. Check for genuine customer reviews across multiple platforms. If possible, use cash on delivery. TFast can build your business a legitimate e-commerce store with secure payments that customers trust.
4. Job scam / fake recruitment
"Urgent hiring: 50 positions at [big company]. No experience needed. Salary: UGX 2M. Pay UGX 50K processing fee to apply."
Red flags: You must pay to apply or "secure" the job. The email comes from Gmail, not the company domain. The interview is only on WhatsApp. They ask for your national ID and bank details before any formal offer.
Protection: Legitimate employers never charge applicants. Verify job postings on the company's official website or LinkedIn page. Call the company directly to confirm.
5. Romance scam
A "romantic partner" you met online (Facebook, dating app) builds a relationship over weeks or months, then begins requesting money for "emergencies," "visa fees to come visit you," or "a business opportunity we can share."
Red flags: They avoid video calls. Their photos look like stock images (do a reverse image search on Google). They fall in love unusually quickly. They always have a crisis that only money can solve.
Protection: Never send money to someone you have not met in person. If they cannot video call, they are not who they claim to be.
6. Fake police / URA / authority call
Someone calls claiming to be from police, URA (Uganda Revenue Authority), UCC or a bank. They say you owe taxes, are under investigation, or your account is compromised. They demand immediate payment or personal information.
Red flags: They call from a personal number, not an official line. They demand mobile money, not official bank payment. They threaten you with immediate arrest. They refuse to give you time to verify.
Protection: Hang up. Look up the official number of the agency they claim to represent and call back yourself. No legitimate government agency demands mobile money payments over the phone.
7. Lottery / promotion winner scam
"You have won UGX 10,000,000 in the [MTN/Airtel/Coca-Cola] promotion! To claim your prize, send UGX 100K for processing fees."
Red flags: You do not remember entering any promotion. You must pay to receive a "prize." The message comes from a personal number, not an official shortcode.
Protection: Legitimate promotions never require winners to pay fees. Check the company's official website or customer service line to verify any promotion.
8. Fake tech support scam
A pop-up or call claims your computer has a virus. The "Microsoft technician" needs remote access to fix it, for a fee. They install malware or steal your files while you watch.
Red flags: Unsolicited calls about computer problems. Requests to install remote access software (AnyDesk, TeamViewer). They ask for credit card or mobile money payment.
Protection: Microsoft, Google and Apple do not make unsolicited support calls. Never grant remote access to strangers. If you need genuine tech support or secure software, work with a verified local provider.
9. Fake loan apps
An app on Play Store offers instant loans with minimal requirements. During installation, it requests access to your contacts, messages and photos. Once installed, it harvests your data, harasses your contacts when you "default" on terms you never saw, or simply steals your information.
Red flags: The app requests excessive permissions. It has few or suspiciously positive reviews. There is no physical office or registration in Uganda. Interest rates are not clearly stated.
Protection: Only use loan apps registered with the Uganda Microfinance Regulatory Authority (UMRA). Check app permissions before installing, a loan app does not need access to your photo gallery.
10. SIM swap social engineering (advanced)
This is the most technically damaging scam. The fraudster gathers your personal information from social media (birthday, full name, location, family details). They call your mobile network pretending to be you, using this information to pass security checks, and convince the agent to issue a replacement SIM.
Red flags: Your phone loses service for an extended period. You receive calls asking "personal verification questions" from someone claiming to be your network.
Protection: Limit personal information shared publicly on social media. Set a SIM PIN. Read our full guide on mobile money and SIM swap protection.
If you have been scammed
- Report immediately: contact your mobile money provider to freeze your account. Report to police (Cyber Crime Unit). File a report with Uganda CERT (cert.ug).
- Change all passwords: if you shared any login information, change passwords on all accounts immediately.
- Warn others: share your experience (without sharing personal details that could be used against you further). Scammers count on victims staying silent out of embarrassment.
- Do not pay "recovery agents": scammers sometimes pose as people who can "recover your money for a fee." This is a second scam.
TFast Digital Agency builds secure systems and can advise on digital security for businesses, from secure websites to encrypted payment processing that protects your customers.
<!-- SEO keyword optimization: online scams east africa -->Focusing on online scams east africa is essential for modern business success.