Uncovering Online Harassment & Defamation
We identify anonymous harassers, preserve court-admissible digital evidence, and build the forensic case you need for a civil claim — all under PSRA licence and full ODPC compliance. If you are being cyberbullied, defamed, or harassed online in Kenya, act now before evidence disappears.
A cyberbullying investigation in Kenya is a forensic process in which a PSRA-licensed investigator collects, preserves, and analyses digital evidence of online harassment, defamation, or cyber abuse — to identify the perpetrator and build a court-admissible case for civil proceedings. The investigation covers evidence from social media platforms (Facebook, X/Twitter, WhatsApp, TikTok, Instagram), blogs, and messaging apps. Under Kenya’s Computer Misuse and Cybercrimes Act No. 5 of 2018 (as amended 2025) and the Defamation Act (Cap. 36), victims can pursue both criminal reports and high-value civil damages claims. Ultimate Forensic Consultants Ltd is Kenya’s leading forensic cyberbullying investigation firm — PSRA-licensed, ODPC-registered, with a 99% High Court report acceptance rate.
Cyberbullying in Kenya has escalated sharply with the expansion of mobile internet, the growth of WhatsApp, and the rise of anonymous accounts on X (formerly Twitter) and TikTok. What was once a playground dispute has become a sophisticated tool of reputational destruction — deployed against professionals, business owners, public figures, and private individuals alike.
The challenge for victims is not the law — Kenya’s legal framework is robust — but evidence. Screenshots taken on a phone are rarely sufficient for court. Anonymous accounts can vanish. Metadata is lost when content is reshared. Platform disclosure requests require court orders. Without forensically preserved, legally compliant digital evidence, even the strongest civil claim fails on proof.
Ultimate Forensic Consultants bridges that gap. Our investigators apply the same forensic methodology used in criminal digital investigations to civil harassment and defamation matters — preserving evidence in its legally intact form, identifying perpetrators through OSINT and IP analysis, and producing reports that satisfy the admissibility standards of the Kenya Evidence Act (Sections 78A and 106B).
This is a civil-first service. While we support clients who also wish to file criminal reports with the DCI Cybercrime Unit, our primary purpose is building the evidence package that wins a civil defamation or harassment claim in the High Court — with damages awards that reflect the real harm done to your reputation, livelihood, and wellbeing.
Every case is different. We investigate all forms of digital harassment and defamation that give rise to civil liability under Kenyan law.
Fake or anonymous accounts used to send threatening messages, spread rumours, or make repeated attacks on a target’s reputation on X, Instagram, Facebook, or WhatsApp. We identify the real person behind the account using OSINT and metadata analysis.
False statements of fact published on social media, blogs, WhatsApp groups, or online forums that damage a person’s or business’s reputation. We preserve the publication record, reach evidence, and reader engagement data for a civil defamation claim under the Defamation Act (Cap. 36).
Intimate images shared without consent (“revenge porn”) — a specific offence under Section 27A of the Computer Misuse and Cybercrimes Act. We preserve distribution evidence, identify sharers, and document the platforms on which content appeared.
Fake accounts created in your name or using your likeness to deceive others, damage relationships, or defraud contacts. Actionable as identity theft under Section 26 of the Computer Misuse and Cybercrimes Act and under civil law.
Organised campaigns in which multiple accounts amplify false narratives or abuse targets simultaneously — often using WhatsApp groups, Telegram channels, or X spaces. We map the coordination network and identify organisers.
Defamatory statements sent in WhatsApp groups constitute publication to third parties under Kenyan case law (SMW v ZWM [2015] eKLR). We preserve group message records forensically and establish publication to the required number of recipients for a civil claim.
Six forensic stages. Every step documented for court. From first contact to expert witness testimony if required.
The first 24–48 hours are critical. Harassers delete posts, deactivate accounts, and scrub metadata. Our investigators immediately capture and forensically preserve all accessible digital evidence — screenshots with hash verification, web archive captures, and metadata extraction — before it is lost. This step is available as a standalone service if you simply need evidence preserved quickly.
⏱ Delivered in 24–48 hoursUsing open-source intelligence, we build a detailed behavioural and identity profile of the harassing account — analysing posting patterns, linguistic fingerprints, profile images (reverse image search), follower networks, account age, linked handles, and cross-platform presence. In the majority of cases, OSINT alone is sufficient to identify the individual without any court order.
🔎 OSINT · Social Media ForensicsImages, documents, and files shared by the harasser contain embedded metadata — device identifiers, GPS coordinates, creation timestamps, and software signatures. We extract and analyse this data forensically, often revealing the perpetrator’s real-world identity, location, and device — even when the account itself was anonymous.
💾 Metadata · EXIF · Device AnalysisWhere OSINT and metadata are insufficient, we support your legal counsel in applying for court-ordered disclosure from social media platforms and ISPs — requiring them to produce the IP address and account registration data associated with the harassing account. We prepare the technical affidavits and expert statements required to support the application under Section 48 of the Computer Misuse and Cybercrimes Act.
🌐 Court-Ordered · ISP · Platform DisclosureWe document the reach of the harassing content — the number of views, shares, and reposts; the identity and size of audiences reached; and the duration of exposure. This evidence directly supports the court’s assessment of general and aggravated damages in your civil claim. We also capture testimonial evidence from third parties who witnessed the content.
📊 Reach Analysis · Damage EvidenceAll findings are compiled into a structured forensic report — methodology documented, sources cited, chain of custody maintained, hash values verified — designed from the outset to satisfy the admissibility requirements of the Kenya Evidence Act (Sections 78A and 106B). Our lead forensic examiner is available to provide expert witness testimony in any civil proceedings where the report is challenged.
📄 Report · Expert Witness · High Court ReadyFor a civil cyberbullying or online defamation case in Kenya, admissible digital evidence must meet the standards of the Kenya Evidence Act (Sections 78A and 106B). It must be forensically preserved with hash verification (to prove it has not been altered), collected with chain-of-custody documentation, and presented through an expert forensic witness. The evidence collected by Ultimate Forensic Consultants — including metadata-verified screenshots, cross-platform account analysis, IP disclosure records, and reach data — is structured specifically to satisfy these standards and has been accepted in 57+ High Court matters.
Screenshots captured with hash verification (SHA-256) and timestamp authentication — proving the content existed at a specific time and has not been altered. Self-collected screenshots are routinely challenged; ours are not.
Kenya Evidence Act s.78A compliantArchived captures of web pages, social media posts, and blog articles — preserving content that may later be deleted or edited, with independent third-party timestamp verification via the Internet Archive and WebCite.
Third-party verification · Deletion-proofImages and documents shared by harassers contain embedded EXIF data — GPS coordinates, device model, creation date, and software used. This data frequently identifies the perpetrator’s device and physical location at the time of posting.
Device · Location · Timestamp dataWe identify connections between anonymous accounts across platforms — shared profile images, writing style analysis, posting schedules, follower overlap — to link a harassing account to a real identity or to other known accounts.
OSINT · Behavioural forensicsDocumented evidence of the content’s reach — view counts, share numbers, the size and nature of audiences exposed — is essential for quantifying damages in a civil defamation claim. We capture this before the harasser deletes or makes content private.
Damage quantification · Audience evidenceAccount registration data and IP logs obtained via court-ordered disclosure from social media platforms (Meta, X Corp, Google) and Kenyan ISPs — legally compelling the platform to reveal the real identity behind an anonymous account.
Section 48 CMCA · Court-orderedYes. Cyberbullying and online harassment are illegal in Kenya under the Computer Misuse and Cybercrimes Act No. 5 of 2018 (as amended by the Computer Misuse and Cybercrimes Amendment Act, assented to 15 October 2025). Section 27 criminalises cyber harassment with penalties of up to KES 20 million or 10 years imprisonment, or both. Online defamation is separately actionable as a civil wrong under the Defamation Act (Cap. 36) — Kenya’s High Court has awarded civil damages of between KES 500,000 and KES 7 million in recent online defamation cases. Note: criminal defamation was declared unconstitutional in Jacqueline Okuta & Another v Attorney General [2017] eKLR — but civil defamation remains fully enforceable.
Kenya’s core cybercrime legislation. The 2025 Amendment, assented to by President Ruto on 15 October 2025, expanded several offences including cyber harassment.
Civil defamation — the primary route for online reputation harm — is governed by the Defamation Act (Cap. 36) and common law principles confirmed in recent High Court and Court of Appeal judgments.
The Data Protection Act 2019 governs all collection and processing of personal data in Kenya — including data collected during a cyberbullying investigation. Evidence gathered in breach of data protection law may be challenged in court.
Not all digital evidence is admissible in Kenyan courts. The Kenya Evidence Act (as amended) sets strict standards that must be met before digital evidence can be relied upon in civil proceedings.
Civil damages awarded in digital defamation cases — demonstrating the value of a forensically sound evidence package.
| Case | Court | Year | Platform | Damages Awarded |
|---|---|---|---|---|
| SMW v ZWM [2015] eKLR | High Court | 2015 | WhatsApp / Facebook | Damages awarded Landmark: online publication established |
| James Ochieng Oduol v Nation Media Group [2023] eKLR | High Court | 2023 | Online publication | KES 5.6M general damages KES 1.4M aggravated damages |
| Mpasho News defamation (Civil Case E3154/2023) | High Court | 2024 | Online news / Facebook | KES 500,000 (in lieu of apology) |
| Sen. Erick Okong’o Omogeni & J. Mogeni v NMG [2025] eKLR | High Court | 2025 | Online publication | Senator: KES 5M · Judge: KES 1.5M |
| HCC No. E031 of 2025 (Machakos) | High Court | 2025–2026 | Social media posts | Injunction & deletion order granted Articles 28 & 31 constitutional basis |
⚠️ Do not delay: Digital evidence can be permanently deleted within hours of a harassment incident. The longer you wait to contact a forensic investigator, the higher the risk that critical evidence — the anonymous account, the post, the metadata — is gone forever. Contact Ultimate Forensic Consultants now for a free confidential assessment. We can begin emergency evidence preservation within 4 hours of instruction.
Online harassment does not discriminate. We serve individuals and organisations across Kenya and the East African region.
Doctors, lawyers, engineers, and senior managers targeted by defamatory posts that damage professional standing, referral networks, or regulatory registration. We build the evidence needed for a damages claim that reflects the real career impact.
SMEs and brands targeted by competitors or disgruntled former employees through fake reviews, false social media narratives, or coordinated attacks. We identify the source and preserve evidence for civil action and takedown orders.
Kenya’s public figures face coordinated online attacks that move faster than police can respond. We provide rapid forensic evidence preservation and perpetrator identification for high-stakes civil matters.
School-based cyberbullying through WhatsApp groups, TikTok, or Snapchat. We work discreetly on behalf of parents — preserving evidence for school disciplinary proceedings, civil action, or police reporting where appropriate.
We are a forensic partner to Kenyan advocates representing defamation and harassment clients. We provide the technical evidence collection and expert witness support that turns a strong legal argument into a winning case.
Intimate image abuse causes profound and immediate harm. We work with complete discretion to identify perpetrators, document distribution, and build the evidence for both civil and criminal action under Section 27A of the CMCA.
Cyberbullying investigation costs in Kenya depend on the complexity of the case and the number of platforms involved. Emergency evidence preservation starts from KES 15,000. A standard OSINT and social media forensic investigation with perpetrator identification report is KES 25,000–45,000. A full civil case forensic package — including evidence preservation, OSINT profiling, reach analysis, damage documentation, and court-ready report — is KES 50,000–120,000 depending on the number of platforms and whether court-ordered disclosure is required. Contact Ultimate Forensic Consultants for a free, confidential case assessment.
| Service | What’s Included | Ideal For | Indicative Cost (KES) |
|---|---|---|---|
| Emergency Evidence PreservationTurnaround: 24–48 hours | Forensic screenshots with hash verification · Web archive captures · Metadata extraction · Chain-of-custody record | Immediate threat · Content being deleted · Urgent court deadline | From KES 15,000 |
| OSINT Perpetrator ReportTurnaround: 3–5 days | Anonymous account profiling · Cross-platform correlation · Behavioural analysis · Identity hypothesis with supporting evidence | Knowing who is behind the account before deciding next steps | KES 25,000–40,000 |
| Standard Civil Evidence PackageTurnaround: 5–7 days | Evidence preservation + OSINT profiling + reach/publication analysis + damage documentation + forensic report | Civil defamation suit · Law firm brief · School disciplinary matter | KES 45,000–80,000 |
| Full Investigation with Court Disclosure SupportTurnaround: 2–4 weeks | All above + technical affidavit for platform/ISP disclosure application + IP tracing + expert witness statement | Anonymous perpetrator · High-value damages claim · Multiple platforms | KES 80,000–150,000 |
| Expert Witness TestimonyScheduled per matter | Lead forensic examiner attends High Court or ELRC hearing · Cross-examination on report methodology · Evidence authentication | Contested civil trial · High Court Commercial Division · ELRC | On quotation |
* Prices are indicative. Final fees depend on case complexity, number of platforms, and urgency. VAT applicable. Contact us for a precise quote after your free assessment.
Clear, legally accurate answers to the questions victims of online harassment in Kenya ask most often.
Yes. Cyberbullying and online harassment are criminalised in Kenya under the Computer Misuse and Cybercrimes Act No. 5 of 2018, as amended by the Computer Misuse and Cybercrimes Amendment Act assented to on 15 October 2025. Section 27 criminalises cyber harassment with penalties of up to KES 20 million or 10 years imprisonment, or both. Note that Section 27(1)(b), (c) and (2) were suspended by the High Court on 22 October 2025 pending constitutional review — but the remaining provisions and the civil remedies under the Defamation Act remain fully operative. Online defamation is a civil wrong under the Defamation Act (Cap. 36), with High Court damages awards ranging from KES 500,000 to over KES 7 million.
In most cases, yes. Forensic investigators use a combination of OSINT (open-source intelligence), social media behavioural analysis, metadata extraction from shared images and files, and — where necessary — court-ordered disclosure from platforms and ISPs. In the majority of cases, OSINT and metadata analysis are sufficient to identify the real person behind an anonymous account without any court process. Do not delete messages or repost content — contact UFC immediately so evidence is preserved in its forensically intact form before acting.
A criminal report is filed with the DCI Cybercrime Unit or the nearest police station. The state prosecutes the offender; you are a witness, not a party. Outcomes include fines and imprisonment — you receive no compensation. A civil case is brought by you in the High Court (or Magistrates Court depending on quantum). You control the proceedings and can claim general damages, aggravated damages, and a mandatory injunction requiring content removal. You can pursue both simultaneously — and a strong forensic evidence package serves both routes. Our service is civil-first, but we support criminal reports where the client chooses to pursue them.
Yes. The High Court confirmed in SMW v ZWM [2015] eKLR that defamatory statements sent in a WhatsApp group constitute publication to third parties — satisfying the publication element of a civil defamation claim in Kenya. The same principle applies to WhatsApp Status updates, Telegram groups, and private Facebook messages shared beyond the original sender. We forensically preserve WhatsApp group message records and establish the number of recipients for court purposes.
Do not delete anything. Do not repost or screenshot without guidance. Your instinct may be to remove the content or take screenshots yourself — but screenshots without metadata and hash verification are routinely challenged in court. The correct steps are: (1) contact UFC immediately via WhatsApp (+254 100 177 094) for emergency evidence preservation; (2) do not confront the perpetrator online, as this may give them warning to delete; (3) block further contact only after evidence is preserved; (4) file an OB number at your nearest police station or the DCI Cybercrime Unit if you wish to pursue a criminal report alongside the civil case.
Kenya’s High Court has awarded general damages of between KES 500,000 and KES 5.6 million for online defamation in recent cases, with additional aggravated damages where the defendant’s conduct was particularly egregious. The quantum depends on: the gravity of the defamatory statement; the reach of the publication; the harm to your professional or personal reputation; and the duration of exposure. A forensic investigation report that documents the reach, the audience, and the reputational impact directly supports a higher damages award. In addition to damages, courts have ordered mandatory content removal, public apologies, and injunctions.
Yes. You can apply to the High Court for an interlocutory injunction requiring a person or platform to remove defamatory content pending the hearing and determination of your civil suit. The Court can also issue a preservation order requiring the platform to retain the evidence before it is deleted. In HCC No. E031 of 2025, the Machakos High Court granted both an injunction and a deletion order in a social media defamation matter. A forensic investigator’s affidavit setting out the evidence and the harm is typically required to support these urgent applications.
Emergency evidence preservation can begin within 4–24 hours of instruction. An OSINT perpetrator profiling report is typically delivered within 3–5 business days. A full civil evidence package takes 5–7 business days. Cases requiring court-ordered platform or ISP disclosure take 2–4 weeks depending on the responsiveness of the platform. If you need to move urgently — for example, to support an injunction application — tell us at the outset and we will prioritise accordingly.
If you are being harassed, defamed, or bullied online in Kenya — do not wait. Digital evidence can be deleted in hours. Our PSRA-licensed investigators begin emergency preservation within 24 hours of instruction. Free, confidential assessment. No obligation. Response within 4 hours.
