KCFR Kenya Crypto Fraud Registry
Reporter guide

How to file a useful report

A report does the most good when the next person who searches the same identifier finds enough information to recognise the operator. Here is how to write one.

Before you start

What to include

  1. What happened, in your words. The platform you were contacted on, the conversation pattern, the specific moment money moved, what was promised. Aim for a short paragraph — not an essay.
  2. Every identifier you encountered.
    • Wallet addresses (paste the whole address — we normalise per chain).
    • M-Pesa Pochi / till / paybill numbers.
    • The phone the M-Pesa was sent from / to.
    • Social handles (Telegram, WhatsApp, X, Instagram).
    • Any domain or website used.
    The cluster is only as good as the identifier list.
  3. Amount lost (if any).KES preferred. Approximate is fine; we don’t need forensic precision.
  4. Date of the incident. Approximate is fine.
  5. Scam type.Pick the closest match from the dropdown. If nothing fits, choose “Other”.

What to leave out

What happens after you submit

  1. The report enters our triage queue. A moderator reviews it within a few days (usually faster).
  2. If it’s plausible and the identifiers are internally consistent, the moderator accepts it as redacted — the public registry now shows the report with identifier values partially redacted.
  3. If two or more reports name the same cluster, a REVIEWER may verify it. Verified clusters publish identifier values in full.
  4. If the operator named in the report files an appeal via Right to reply, a moderator reviews and may demote or withdraw the report. You will not be contacted as part of the appeal — we don’t deanonymize reporters.

What we will not do

If your loss is large

Filing here is useful but it is not a substitute for an OB number. Report to the nearest DCI station or via 112. KCFR exists to help the next person; the formal complaint is what gets your case investigated.

Ready? File a report →