The Kenya Revenue Authority (KRA) has issued an urgent alert to the public after its official X (formerly Twitter) customer support account, @KRACare, was hacked and its handle changed to “StandsX.”
In a statement released on its corporate X page, KRA warned Kenyans not to interact with any posts, messages, or requests from the compromised account, cautioning that any attempts to solicit personal information or money were fraudulent.
“The official @KRACare X (formerly Twitter) account has been hacked and its handle changed to ‘StandsX’. Members of the public are strongly warned not to engage, share personal information, or send money to any messages or posts from this account, as they are fraudulent,” the authority said in its statement.
KRA confirmed that it had launched an urgent recovery effort in collaboration with X’s security team to regain access and secure the compromised account.
The authority also reassured taxpayers that official communication will continue exclusively through verified KRA platforms, including its Facebook page and WhatsApp support line (0711 099 999).
“The Kenya Revenue Authority (KRA) has launched urgent efforts in collaboration with X to retrieve and secure the official account. Official updates will be shared through verified KRA communication channels. You can still reach us via Facebook at facebook.com/KRACare or through WhatsApp 0711 099 999,” KRA added.
The cyberattack comes amid a growing trend of digital breaches targeting both government and corporate social media accounts.
Earlier in February 2025, the Directorate of Criminal Investigations (DCI) experienced a similar incident when its Facebook and X accounts were temporarily taken over by cybercriminals who posted misleading information before authorities regained control.
At the time, DCI confirmed it had initiated a forensic investigation to trace and prosecute those responsible for the cyber intrusion.
“For some moments this evening, we experienced a cyberattack on the DCI digital platforms (X and Facebook) but have since regained full control. A scrupulous interrogation into the criminal activity has been activated to bring to book the perpetrators,” DCI said in its February 9, 2025 statement.
KRA has urged Kenyans to remain vigilant against online scams and to verify all tax-related communication through official channels to avoid falling victim to fraudulent schemes.
