Omanghana
The United States government is seeking the extradition of six Kenyan nationals accused of participating in a sophisticated Business Email Compromise operation that targeted American government agencies, universities and other institutions.
The suspects allegedly used deceptive internet domains, fraudulent email accounts and social-engineering techniques to redirect legitimate institutional payments into bank accounts controlled by members of the network.
US authorities want the suspects transferred to the Eastern District of Virginia, where they face federal charges connected to computer intrusions, wire fraud and identity theft.
Six Kenyans Named in Extradition Proceedings
The individuals named in the extradition cases are:
- Elvis Omari Obaigwa
- Francis Mobisa Asanyo
- Peter Omari
- Linus Karani
- Bernard Morara Osoro
- Godfrey Julius Mbogori
All six remain accused persons, and the charges against them must be proven in court. Extradition proceedings do not determine guilt; they decide whether the legal requirements for surrendering a suspect to another country have been satisfied.
Kenyan authorities previously arrested Peter Omari, Francis Asanyo and Elvis Obaigwa following requests linked to the American investigation.
A Nairobi court initially ordered the three men detained at Kileleshwa Police Station while Kenyan and US officials prepared the necessary extradition documents. Their detention was subsequently extended as proceedings continued.
Godfrey Mbogori was arrested in Meru County on February 19, 2026, following an Interpol Red Notice. Kenya’s Office of the Director of Public Prosecutions reportedly received a formal US extradition request concerning him on February 26.
How the Alleged Scheme Operated
According to allegations presented in Kenyan court and linked to indictments in the US District Court for the Eastern District of Virginia, the operation began sometime before April 2019.
The suspects allegedly registered internet domains designed to look almost identical to those belonging to legitimate companies that supplied goods or services to American state and local governments, universities and other public institutions.
Minor changes to a domain name can be difficult to detect, particularly when an email appears within a familiar conversation about an expected invoice or payment.
Prosecutors allege that the network used email accounts connected to these deceptive domains to impersonate legitimate vendors. Fraudulent messages were then sent to employees responsible for processing institutional payments.
Through social engineering, the senders allegedly persuaded staff to change the bank account information attached to forthcoming transactions. Payments intended for legitimate contractors were consequently redirected to accounts controlled by members or associates of the alleged conspiracy.
Funds Allegedly Routed Through Mule Accounts
Once a fraudulent transfer was completed, the money was allegedly moved through accounts operated by individuals commonly described as money mules.
Money mules receive or transfer illegally obtained funds on behalf of other people. Some knowingly participate in criminal activity, while others may be recruited through false job offers, romantic relationships or misleading business arrangements.
Moving money through several accounts can make it more difficult for banks and investigators to trace the original payment. Prosecutors allege that portions of the stolen funds were eventually transferred outside the United States, including to Kenya.
Reports differ over the total value attributed to the broader operation. The Standard reported that the extradition cases concern alleged fraud targeting US public institutions and universities, including a case involving approximately KSh96 million. The complete financial exposure will ultimately depend on the evidence presented in each defendant’s case.
Serious Federal Charges
The suspects face allegations that include conspiracy to commit computer intrusions, conspiracy to commit wire fraud, aggravated identity theft and related offences under US federal law.
Wire-fraud conspiracy and computer-intrusion charges can carry lengthy prison terms. Aggravated identity theft may also attract a mandatory additional sentence when a defendant is convicted. Any punishment would depend on the precise charges proved, the loss attributed to each defendant, their individual role and the US federal sentencing process.
A conviction is not automatic following extradition. If surrendered, the suspects would be entitled to legal representation and the opportunity to contest the allegations before a US federal court.
Asanyo Challenges Extradition Process
Francis Asanyo has challenged aspects of the proceedings in Kenya, arguing through his legal team that his detention and proposed extradition must comply with the Kenyan Constitution.
His lawyers have also sought his release on bail, describing the allegations as non-violent economic offences and questioning whether prosecutors demonstrated that he posed a genuine flight risk.
Kenyan prosecutors opposed his release, citing the seriousness of the charges, international arrest notices and the possibility that he could leave the country before the extradition case is concluded.
The High Court challenge could affect how the government proceeds with his case, but it does not independently determine whether the American allegations are true.
Courts to Decide Extradition Requests
Kenyan courts must examine whether the US requests satisfy domestic extradition law and applicable international cooperation arrangements. The process may include reviewing arrest warrants, indictments, supporting evidence and guarantees concerning how the accused persons will be treated if transferred.
Defense lawyers may challenge the requests on constitutional, procedural or evidentiary grounds. Any extradition order could also be subjected to further appeals.
The cases highlight the increasingly international nature of cyber-enabled financial crime. A fraudulent email may be sent from one country, target an institution in another and redirect money through accounts spread across several jurisdictions.
Business Email Compromise remains particularly dangerous because it frequently relies on human trust rather than highly technical hacking. Institutions can reduce their exposure by independently confirming changes to payment instructions, requiring multiple approvals for large transfers and training employees to identify lookalike domains and suspicious email requests.
Source: Omanghana
