Cyberbullying vs Cyber Harassment vs Cyberstalking vs Defamation in Kenya: What Each Term Means in Law
Four terms, three legal routes. Learn which label fits what is happening to you, which law applies, who decides, how long you have to act and what evidence each route needs.
In Kenya, cyberbullying is an everyday word, not a defined offence. Cyber harassment is a crime under section 27 of the Computer Misuse and Cybercrimes Act, 2018. Cyberstalking is generally pursued under the same provision. Defamation is a civil claim under the Defamation Act (Cap. 36) and must generally be filed within 12 months. One incident can engage several of these at once.
Victims usually describe what is happening to them as “cyberbullying”. Police officers, advocates, schools and platforms each hear that word differently, and only some of them can act on it. In court the conduct has to be translated into a legal label that actually exists: an offence the State can prosecute, or a civil wrong you can sue on.
The cost of choosing the wrong label is real. You can report to the wrong office, plead the wrong claim or miss a deadline: a defamation claim in Kenya generally has to be filed within a year. This guide defines each term, shows where it sits in Kenyan law, and explains how a forensic investigator would build the evidence for each route. It reflects the court rulings of 2026.
The four terms at a glance
| Term | What it describes | Where the law sits | Criminal or civil | Typical outcome |
|---|---|---|---|---|
| Cyberbullying | Repeated hurtful, threatening or humiliating online conduct aimed at a person | No offence by this name in the 2018 Act; the conduct is charged or sued under other labels | Depends on the conduct | Depends on the label used |
| Cyber harassment | Wilful communication that causes fear of violence, detrimentally affects a person, or is indecent or grossly offensive | Section 27, Computer Misuse and Cybercrimes Act, 2018 | Criminal | Prosecution after a DCI investigation; on the 2018 text, a fine up to KES 20 million, up to 10 years, or both |
| Cyberstalking | A pattern of monitoring, tracking, following or repeated unwanted contact online | No stand-alone offence of that name that we are aware of; usually pursued as cyber harassment, with unauthorised access, impersonation or interception where the facts fit | Criminal | As for cyber harassment |
| Defamation | A false statement published to others that damages your reputation | Defamation Act (Cap. 36), common law and Article 33(3) of the Constitution | Civil (criminal defamation was struck down in 2017) | Damages, injunction, retraction, takedown order; generally a 12-month filing limit |
Cyberbullying: a description, not a charge
Cyberbullying means repeated hurtful, threatening or humiliating conduct directed at a person through phones, messaging apps or social platforms. It is the word parents, schools, employers and the media use.
The Computer Misuse and Cybercrimes Act, 2018 does not create an offence called “cyberbullying”. The nearest offence is headed “cyber harassment”. Cyberbullying is therefore best treated as a bucket. What sits inside the bucket determines your legal options:
- Threats or persistent abusive messages sent to you: cyber harassment (section 27)
- False statements told to other people: defamation (civil)
- A fake profile using your name or photos: identity theft and impersonation (section 29)
- Intimate images shared without consent: the intimate-image offence (section 37) and claims for breach of privacy (Article 31) and dignity (Article 28)
- Your phone number, address or private messages circulated: a Data Protection Act, 2019 complaint to the ODPC
- Someone breaking into your account: unauthorised access (section 14)
Cyberbullying among schoolchildren and colleagues also has a non-legal track. Schools and employers can discipline under their own rules even where no prosecution follows. See our guide for parents and guardians for the school route.
Cyber harassment: the criminal offence in section 27
Cyber harassment is the offence in section 27 of the Computer Misuse and Cybercrimes Act, 2018: wilfully communicating with a person, directly or indirectly, in a way the sender knows or ought to know has one of three effects.
On the 2018 text, a person commits the offence if they wilfully communicate, directly or indirectly, with another person or anyone known to that person, and they know or ought to know that their conduct:
- is likely to cause apprehension or fear of violence, or damage or loss to property; or
- detrimentally affects that person; or
- is indecent or grossly offensive in nature and affects the person.
The 2018 text provides a penalty of a fine up to KES 20 million, imprisonment up to ten years, or both. It also provides for a court application for an order that a person charged refrain from the conduct. The 2025 amendments re-cut section 27, so confirm the current numbering and wording on Kenya Law before quoting a subsection in a filing.
The offence is built around communication to the person or to people they know. It therefore fits direct messages, repeated comments, group-chat abuse and threats better than a one-off public post making a false claim. The false-claim post is usually a defamation question.
Cyberstalking: a pattern, usually charged as harassment
Cyberstalking is a pattern of online conduct that tracks, monitors or pursues a person: repeated unwanted contact across accounts, watching their activity, following their location or secretly accessing their accounts.
We are not aware of a stand-alone offence named “cyberstalking” in the 2018 Act. In practice stalking behaviour is pursued through section 27, particularly the limb about fear of violence, and through whichever other offences the facts support:
- Unauthorised access (section 14) where the person logged into your email, phone or social accounts
- Identity theft and impersonation (section 29) where fake accounts are used to reach you or others
- Interception of electronic messages (section 31) where your messages are diverted or read
The evidence for stalking is about pattern: dates, volume, the accounts involved and the link between them. This is also where device examination matters. Covert monitoring software on a phone, or a hidden login on an account, leaves traces that a forensic examiner can document. The Federation of Women Lawyers in Kenya (FIDA-Kenya) has reported that intimate partners and acquaintances are the most frequently reported perpetrators of technology-facilitated gender-based violence, so the person behind the account is often someone you know.
Defamation: the civil claim for reputational harm
Defamation is the publication to at least one other person of a false statement that lowers your standing in the eyes of right-thinking people. In Kenya it is governed by the Defamation Act (Cap. 36), the common law and the constitutional duty in Article 33(3) to respect the rights and reputation of others.
A claimant generally has to show that the statement:
- is defamatory, meaning it would damage your reputation
- refers to you, directly or by clear implication
- was published to someone other than you, which can include a WhatsApp group or a public post
- is false, since truth is a defence, alongside honest opinion and privilege
Written and posted material is libel; spoken or audio material is slander. Online content is almost always libel. Criminal defamation no longer exists: the High Court declared section 194 of the Penal Code unconstitutional in Jacqueline Okuta & Another v Attorney General (2017). Remedies are civil: damages, interim and permanent injunctions, retraction or apology, and takedown orders. Awards can be substantial. See how much compensation you can claim, which discusses Nzibo v Nation Media Group [2024] KEHC 12720 (KLR) and other quantum anchors.
For content spread in messaging groups, read our guide on WhatsApp message defamation in Kenya.
Which label fits what is happening
| What is happening | Most likely label | Sensible first route |
|---|---|---|
| Someone sends you repeated threats or abusive messages | Cyber harassment (s.27) | Preserve evidence, report to the DCI, get an OB number |
| Someone publicly posts a false claim about you | Defamation | Advocate: demand letter or suit within 12 months; platform takedown; capture audience evidence |
| Someone tracks you or contacts you across new accounts | Cyberstalking pattern, charged as harassment; possibly unauthorised access | Timeline, device check, DCI report |
| A fake profile uses your name or photos | Identity theft and impersonation (s.29); possibly defamation | Platform report, DCI, forensic attribution of the account |
| Intimate images shared without consent | Intimate-image offence (s.37); privacy and dignity claims | DCI, platform removal tools, urgent court orders through an advocate |
| Humiliation in a school or class group chat | Cyberbullying (school discipline); harassment if the threshold is met | School and parents first; DCI where threats or images are involved |
| Your phone number or address is being circulated | Personal data misuse; harassment if accompanied by threats | ODPC complaint; DCI where there are threats |
For the reporting mechanics, hotlines and portals, use our guide to how to report cybercrime in Kenya.
One incident, several labels
The following is a hypothetical to show how the labels combine. A Nairobi restaurant owner finds that an anonymous account has (1) posted that she “steals from suppliers”, (2) sent her messages saying “we know where you live”, and (3) opened a profile using her photos to message her customers.
| Act | Label | Route |
|---|---|---|
| The “steals from suppliers” post | Defamation | Civil claim and takedown; evidence of reach and of falsity; 12-month clock running |
| The “we know where you live” messages | Cyber harassment (fear of violence limb) | DCI report; preserve original messages and account identifiers |
| The fake profile | Identity theft and impersonation; possibly defamation | Platform report; DCI; forensic work to link the account to a person |
All three acts may come from one person, yet each follows a different legal route with a different test and different evidence. That is why classifying the conduct early matters.
How the evidence differs
Harassment evidence is about the conduct and the recipient. Defamation evidence is about the audience and the falsity. A forensic capture plan should be built accordingly.
| Cyber harassment (criminal) | Defamation (civil) | |
|---|---|---|
| What must be shown | Wilful communication; the sender knew or ought to have known the effect; the effect fits a limb of section 27 | A defamatory, false statement about you, published to others, causing harm |
| Key evidence | Original messages with metadata, account identifiers, timeline showing pattern, threats in context | The post or message with URL, date and time; proof of who could see it; proof the claim is false; proof of loss |
| Useful witnesses | You as recipient; platform or telecom records obtained through court process | Third parties who saw it; customers or colleagues who reacted; the platform |
| Forensic work | Device examination, account attribution, extraction of chat history | Capture of the live page and comments, views and shares, archive of deleted content, attribution of the publisher |
For both routes, electronic records in Kenyan courts generally need a section 106B certificate under the Evidence Act, and casual screenshots are easy to challenge. See the evidence section of our reporting guide and our cyberbullying investigation service.
Where the law stands in 2026
- 2017: criminal defamation (Penal Code s.194) declared unconstitutional in Jacqueline Okuta. Defamation became purely civil.
- 2016: section 29 of the Kenya Information and Communications Act, an older “improper use of a telecommunication system” offence, was declared unconstitutional in Geoffrey Andare v Attorney General & 2 others. Older articles on online abuse often cite it.
- 15 October 2025: the Computer Misuse and Cybercrimes (Amendment) Act, 2025 was signed. The High Court suspended parts of section 27 a week later.
- 6 March 2026: the Court of Appeal struck down sections 22 and 23 (false information offences) but upheld section 27 as clear. The ODPP and Parliament have taken that decision to the Supreme Court.
- 2 July 2026: the High Court (Justice Nyaundi) declared section 27(1)(b) of the 2025 Amendment Act, the “likely to cause suicide” limb, and section 6(1)(ja), the website-blocking power, unconstitutional. Parliament said on 10 July 2026 that it would appeal.
6 steps to classify your case
- List every act separatelyWrite each post, message, fake account and leak as its own line with date, platform and account name. One incident often contains several legal acts.
- Ask who received itSent to you or someone you know points towards cyber harassment. Published to an audience points towards defamation.
- Test for a false statement of factIf the core harm is an untrue claim about you, the route is civil defamation and the 12-month clock matters. Insults and opinions are harder to sue on.
- Check for threats, stalking or monitoringFear of violence, repeated pursuit across accounts or signs of account access point to section 27 and related offences.
- Flag special categoriesIntimate images, a child, or personal data (ID, address, phone) each add their own offence or regulator, such as the DCI, Childline Kenya on 116 or the ODPC.
- Preserve first, then choose the routeCapture the evidence in a forensically sound way before the content is deleted, then decide with an advocate whether to report, sue, or do both.
Mistakes that cost victims their case
- Pleading or reporting “cyberbullying” as if it were a charge instead of naming the underlying conduct
- Letting the 12-month defamation window pass while waiting for the harassment to stop
- Relying on pre-2026 articles that treat the October 2025 amendments as settled law
- Filing screenshots with no section 106B certificate or forensic capture
- Replying, threatening or exposing the suspect, which can create counter-complaints
- Reporting a false public claim only to the police when the stronger remedy is a civil claim
How a forensic investigator helps you classify and prove your case
Ultimate Forensic Consultants (UFC) captures social media and messaging evidence in a court-ready form, including content that is live, deleted or set to disappear. We analyse accounts and devices, work to attribute anonymous accounts by lawful methods, and prepare section 106B-ready reports for advocates. We do not replace your advocate or the DCI; we make their case stronger. See our cyberbullying investigation service and Digital and Cyber Forensics page.
Frequently asked questions
What is the difference between cyberbullying and cyber harassment in Kenya?
Cyberbullying is an everyday description of repeated hurtful online conduct and is not a defined offence in the Computer Misuse and Cybercrimes Act, 2018. Cyber harassment is the criminal offence in section 27 of that Act, covering wilful communication that causes fear of violence, detrimentally affects a person, or is indecent or grossly offensive. Conduct described as cyberbullying may or may not meet that test.
Is cyberbullying illegal in Kenya?
There is no offence called cyberbullying, but the conduct is often unlawful under other labels: cyber harassment under section 27, impersonation, unauthorised access, sharing intimate images without consent, and civil wrongs such as defamation and breach of privacy.
Is cyberstalking a crime in Kenya?
The 2018 Act has no stand-alone offence of that name that we are aware of. Stalking-type conduct is usually pursued as cyber harassment under section 27, alongside offences such as unauthorised access or impersonation where the facts fit.
What is the difference between cyber harassment and defamation?
Cyber harassment is a crime about how and why someone communicates with you. Defamation is a civil claim about a false statement that damages your reputation in the eyes of others. Harassment is prosecuted by the State after a complaint; defamation is a lawsuit you bring, with damages and injunctions as remedies.
Can I report to the police and sue for the same post?
Yes. The criminal and civil routes are separate and can run in parallel, but they have different standards of proof, forums and deadlines. An advocate should sequence them, especially because defamation claims must generally be filed within 12 months.
How long do I have to sue for online defamation in Kenya?
Generally 12 months from publication. The proviso to section 4(2) of the Limitation of Actions Act sets a twelve-month limit for libel and slander, and the High Court has struck out a defamation claim filed years late. Take advice quickly.
Is criminal defamation still a crime in Kenya?
No. The High Court declared section 194 of the Penal Code unconstitutional in Jacqueline Okuta & Another v Attorney General (2017). Defamation is pursued through civil claims, though related conduct such as threats or impersonation can still be criminal.
Can I take action if the account is anonymous?
Yes, but you generally need to establish who is behind it before you can serve a claim or pursue a named suspect. Forensic and open-source analysis of the content, accounts and devices you hold can help, and some information can only be obtained through court process.
Is a screenshot enough evidence for harassment or defamation?
Not for a serious or contested matter. Electronic records generally need a section 106B certificate under the Evidence Act, and a forensic capture with URL, timestamps, hash values and chain of custody is far harder to challenge. For defamation, also capture who could see the post.
Is cyber harassment still an offence after the 2026 court rulings?
In substance, yes. The Court of Appeal declined to strike down section 27 in March 2026, and the High Court’s July 2026 ruling struck down the 2025 “likely to cause suicide” limb, section 27(1)(b), rather than the whole offence. Appeals are pending, so confirm the current position before relying on it.
Not sure which route fits your situation?
UFC is a PSRA-licensed and ODPC-registered forensic investigation firm serving advocates, banks, insurers, corporates and individuals across all 47 counties, from our Nairobi headquarters and Mombasa and Kisumu offices.
Instruct Us on Your Matter [email protected] +254 100 177 094Sources
- Computer Misuse and Cybercrimes Act, 2018 (No. 5 of 2018), section 27 (text of the Act as reproduced by ICT Policy Africa); consolidated version on Kenya Law
- Committee to Protect Journalists, Kenya court strikes down “fake news” sections of cyber law, upholds other problematic provisions, 6 March 2026
- Bloggers Association of Kenya, Court of Appeal judgment summary, 6 March 2026
- Nation, High Court strikes down state powers to block websites; Eastleigh Voice, Court strikes down state powers to block websites, 2 July 2026
- Digital Policy Alert, High Court declares s.6(1)(ja) and s.27(1)(b) unconstitutional, 2 July 2026
- Citizen Digital, Parliament to appeal High Court ruling, 10 July 2026; Parliament moves to Supreme Court on sections 22 and 23, 27 August 2026
- Okwata & 2 others v Odenyo & 2 others [2024] KEHC 16103 (KLR) (twelve-month limitation for libel and slander under the proviso to s.4(2), Limitation of Actions Act)
- ARTICLE 19, Kenya: Court strikes down criminal defamation laws (Jacqueline Okuta & Another v Attorney General, 2017)
- Columbia Global Freedom of Expression, Andare v Attorney General (section 29, Kenya Information and Communications Act)
- CM Advocates, Defamatory online publications and legal remedies under Kenyan law (injunctions and takedown orders)
- The Standard, Intimate partners emerge as the largest perpetrators of TFGBV, 29 January 2026 (FIDA-Kenya)
- Constitution of Kenya, 2010, Articles 28, 31 and 33(3); Defamation Act (Cap. 36); Evidence Act (Cap. 80), s.106B; Data Protection Act, 2019
Disclaimer: This article is general information for educational purposes and is not legal advice. Ultimate Forensic Consultants Ltd is a forensic investigation firm, not a law firm or a law enforcement agency. Legal positions were verified on 29 October 2026 and may change, particularly while appeals are pending; confirm with an advocate before acting. Last updated 29 October 2026.