KRA Warns Kenyans after Official X Account Is Hacked and Renamed “StandsX”
admin 
The Kenya Revenue Authority (KRA) has issued a public alert following the hacking of its official X (formerly Twitter) account, @KRACare, which was illegally renamed “StandsX.” In a statement shared on Friday, October 31, 2025, the authority urged Kenyans to remain cautious and avoid interacting with any posts, messages, or requests coming from the compromised account.
What has KRA said about the hacked account?
KRA confirmed that any communication from the hacked handle is fraudulent and warned users not to share personal details or send money to anyone claiming to represent the agency through that account. “The official @KRACare X (formerly Twitter) account has been hacked and its handle changed to ‘StandsX’. Members of the public are strongly warned not to engage, share personal information, or send money to any messages or posts from this account, as they are fraudulent,” KRA stated.
The tax authority further explained that it is working closely with X’s technical team to recover the compromised account and restore it to full functionality. “The Kenya Revenue Authority (KRA) has launched urgent efforts in collaboration with X to retrieve and secure the official account. Official updates will be shared through verified KRA communication channels. You can still reach us on Facebook https://facebook.com/KRACare, or via WhatsApp 0711099999. Thank you,” the statement added.
KRA assured Kenyans that its services remain unaffected by the breach and that verified communication will continue through its official platforms.
Why are government accounts being targeted by hackers?
The KRA hack follows a growing trend of cybercrime targeting government and corporate accounts in Kenya. In February 2025, the Directorate of Criminal Investigations (DCI) also fell victim to a similar cyber-attack when hackers briefly took control of its Facebook and X pages. During the incident, the attackers posted misleading content before the agency regained access to its platforms.
“For some moments this evening, we experienced a cyber-attack on the DCI digital platforms (X and Facebook) but have since regained full control. A scrupulous interrogation into the criminal activity has been activated to bring to book the perpetrators,” the DCI said in a statement at the time.
The repeated breaches highlight an ongoing challenge in securing digital government communication channels as cybercriminals increasingly target high-profile accounts to spread misinformation or exploit public trust. KRA’s latest warning reinforces the need for users to rely only on verified communication channels when interacting with official agencies online.
By Lucky Anyanje
