A scam becomes a legal problem at the moment money, property or access credentials leave the victim’s control. The first hours matter because a bank transfer may still be traceable, an account may still be restricted, an online advert may still be live and messages may still exist on a device. The instinct to argue with the scammer can therefore be less useful than preserving evidence and contacting the institutions that can act.

This guide considers Kenya, Uganda, Mainland Tanzania and Rwanda. It covers online and financial scams as well as common property scams. It does not promise that lost money can always be recovered. It explains how to avoid losing the legal trail as well.

Preserve first, then investigate

Do not begin by deleting the embarrassing messages. Save them.

Preserve the phone number, email address, username, social-media profile, advertisement, website address, payment instructions, bank or mobile-money account, transaction reference, receipts and the entire message history. Take screenshots, but also keep original emails and devices where possible because original metadata can contain information that a screenshot does not.

Write a short chronology while events are fresh. Record when first contact occurred, what was promised, who introduced the parties, when payments were made and what happened when the promised goods, investment, job, property or service failed to appear.

If the scam involved a fake website, record the exact address before it disappears. If it involved a property viewing, record the location, people present and copies of documents shown. If a supposed agent sent an identification document, preserve it without assuming it is genuine.

Call the bank or payment provider immediately

Where money has just moved, speed can matter. Ask the bank, mobile-money provider or card issuer to record the transaction as suspected fraud and to consider the lawful steps available to stop, recall, trace or restrict funds. None of these remedies is guaranteed, particularly after funds have been withdrawn or moved again, but waiting normally reduces the available options.

The Central Bank of Kenya’s current Fraud Safety guidance is direct: a victim who shared banking details should inform the bank immediately, change online passwords and report the fraud to police. The same practical sequence is sensible throughout the region.

Do not continue sending money because the scammer says an additional “release fee,” “tax,” “lawyer’s fee” or “verification payment” will unlock the original funds. That is a common way of converting one loss into several losses.

If credentials were compromised, change passwords from a trusted device, secure email accounts, end active sessions and enable stronger authentication. Contact the mobile network if a SIM swap or loss of phone control is suspected.

A police report and a bank complaint do different work

Reporting to the bank does not replace reporting suspected crime. The financial institution looks at the account and transaction under its systems and regulatory obligations. Police investigate possible criminal offences and can use investigative powers that a private customer does not have.

In Kenya, the Directorate of Criminal Investigations maintains specialist capacity for banking fraud and has continued to report cyber-fraud arrests in 2026. In Uganda, the Uganda Police Force’s 2025 Annual Crime Report records significant cybercrime and land-fraud caseloads, demonstrating that these are active police categories rather than merely private disputes.

In Mainland Tanzania, the Tanzania Communications Regulatory Authority expressly directs telecommunication-fraud victims to report to Police, obtain an RB number and an investigator; TCRA also provides the UTAPELI reporting mechanism for telephone numbers associated with fraud. In Rwanda, Rwanda National Police maintains online crime-reporting services in addition to ordinary reporting channels.

Keep the police reference number and the name or unit handling the matter. Supply the chronology and copies of the evidence rather than a disorganised phone full of screenshots.

Use the financial regulator route where the complaint is about the provider

Sometimes the complaint is not that the bank committed the scam, but that the customer believes the bank or payment provider handled an unauthorised transaction, complaint or account restriction improperly.

Those disputes have consumer-protection routes. The Bank of Tanzania requires a consumer to use the financial institution’s internal complaint process first. Its current procedure generally expects the institution to resolve the complaint within fourteen days, with escalation to the Bank where the consumer is dissatisfied or has not received the required response.

Rwanda’s National Bank administers financial-service consumer-protection laws and regulatory channels. Kenya and Uganda also have financial consumer and regulator complaint mechanisms depending on the institution involved.

A regulator complaint should be different from a criminal report. State what the provider did or failed to do, give the transaction and complaint references, identify the remedy requested and attach the provider’s response. Do not simply write “I was scammed, refund me” if the real regulatory issue is a disputed unauthorised debit, delayed complaint or failure to follow an account-security process.

Property scams require an official title check, not a convincing photocopy

A forged title can look convincing. A genuine title can also be shown by someone who has no authority to sell. Property due diligence should therefore be conducted through the official land system before major payment.

In Kenya, an official land search can reveal the registered proprietor and entries such as charges, cautions or restrictions. Uganda’s land information system provides official title and parcel search services. Mainland Tanzania’s e-Ardhi system has expanded digital land-information and registration services. Rwanda’s National Land Authority and Irembo processes allow parcel information and ownership-transfer checks using official land identifiers.

A buyer should compare the seller’s identification with the official owner, inspect the land, identify co-ownership or family interests where legally relevant, and have the proposed transfer reviewed before releasing the purchase price. Payment should be tied to verifiable legal milestones.

If fraud is discovered after payment, immediately preserve the sale documents and payment trail, report the matter and obtain legal advice before the property is transferred again. In an urgent case, a lawyer may need to consider a caution, caveat, injunction or other preservation step depending on the country and the status of the title.

Online marketplaces and investment offers need a different evidence set

For an online purchase, preserve the listing, seller profile, product description, delivery promise and platform order record. Report the seller to the platform, but do not assume the platform complaint is the only legal step.

Investment scams require verification of the entity that supposedly received the money. Check the relevant financial regulator’s licensing register. A certificate of incorporation merely proves that a company exists; it does not prove that the company is licensed to take deposits, sell regulated investments or provide another controlled financial service.

Rwanda’s National Bank, for example, has developed tools allowing consumers to verify licensed financial service providers, partly in response to fraudulent actors. Similar verification should be performed through the relevant regulator before investing elsewhere in the region.

Promises of unusually high or guaranteed returns, pressure to act immediately, refusal to provide independently verifiable licensing details and demands to pay into personal accounts are warning signs. None alone proves fraud, but together they justify stopping the transaction until the facts can be checked.

Civil recovery may still be needed even after a criminal report

A police investigation is aimed at crime. It does not automatically produce a civil judgment requiring the defendant to repay every loss.

Where the scammer’s identity and assets are known, the victim may need a civil claim based on contract, misrepresentation, unjust enrichment, restitution, conversion or another cause of action recognised by the applicable law. The correct claim depends on the facts.

Evidence of the amount matters. Your website already has a separate Kenya article explaining why receipts and clear figures matter in money claims. This guide takes the next practical step: keep the payment evidence from the moment the fraud is discovered so that a later recovery claim is not based on memory alone.

Where assets are at risk of being moved, early legal advice becomes more important. Courts can have preservation tools, but such orders are fact-sensitive and usually require proper evidence. A victim who waits until the defendant has disappeared may still have a legal claim but no practical asset against which to enforce it.

Do not fall for the recovery scam

Fraud victims are attractive targets for a second scam because they are already desperate to recover money. Be cautious when an unknown person claims to be a police officer, hacker, tracing expert, lawyer or international recovery agency and promises guaranteed recovery in exchange for an advance payment.

Verify lawyers through the relevant professional body and verify financial institutions through the regulator. Ask how the person obtained information about the loss. Do not send remote-access codes, passwords or further funds simply because the caller knows the original transaction amount.

No legitimate adviser can guarantee that stolen money will be recovered. A professional can explain the available steps, evidence, cost and probability. Certainty is itself a warning sign.

Know when the matter has become too serious for self-help

Professional assistance becomes particularly important where the amount is large, land or a business is involved, the suspect is outside the country, several victims are involved, identity theft continues, confidential business data was compromised, a limitation period may be running, or urgent court action may be needed to preserve property.

A lawyer should receive the evidence in an organised form. A bank should receive the transaction references. Police should receive the chronology and supporting documents. A regulator should receive the complaint history. Giving each institution the information relevant to its function is more effective than sending the same emotional narrative to everyone.

Foreign residents should also keep immigration documents and contact details current if they expect to leave the country while the investigation or civil claim continues. Departure does not necessarily end the claim, but representation and reliable contact information may be needed.

The first legal objective after a scam is not to prove the entire case in one day. It is to stop further loss and preserve the ability of the bank, police, regulator, lawyer or court to understand what happened.

Secure the accounts, preserve the evidence, report through the appropriate channels, verify property and licensing records, and separate criminal investigation from civil recovery. Those steps cannot guarantee repayment, but they give recovery a far stronger foundation than panic, deletion or another payment to the fraudster.

Source note and disclaimer. This article is based principally on current fraud-safety guidance of the Central Bank of Kenya and 2026 Directorate of Criminal Investigations material; Uganda Police Force crime-reporting material and financial-consumer frameworks; Bank of Tanzania consumer-complaint procedures and Tanzania Communications Regulatory Authority fraud-reporting guidance; and current National Bank of Rwanda consumer-protection material and Rwanda National Police crime-reporting services. It also refers to official land-information and registration systems in the four jurisdictions. Criminal and civil remedies depend on the facts and recovery is never guaranteed. This article is general public legal information, not advice for a specific fraud or property dispute.

Suggested citation:

Ronald Serwanga, “Early Action: East Africa Scam Recovery Legal Guide” East Africa Legal Insight (14 September 2026).