Skip to content
Scammers.com
ImpersonationReviewed

Kenya Institute of Special Education flags fake Facebook group selling January 2027 intake admissions

The Kenya Institute of Special Education (KISE) warned on X on 12 November 2026 that a fraudulent Facebook group is impersonating the institute and circulating fake course and admission advertisements. The two adverts…

First reported
Reports
1

Source: x.com · published

KISE warning image: a fake January 2027 intake advert stamped SCAM, with unofficial call and WhatsApp numbers.
Image: Kenya Institute of Special Education

What happened

The Kenya Institute of Special Education (KISE) warned on X on 12 November 2026 that a fraudulent Facebook group is impersonating the institute and circulating fake course and admission advertisements. The two adverts KISE stamped "SCAM" promote a "January 2027 Intake - Early Application Open" for special-needs education diplomas and certificate courses, with a 30 November 2026 deadline, and give the contact numbers 0733897045 for calls and 0101930121 for WhatsApp. These numbers differ from the contact numbers on KISE's official website. The adverts also copy KISE's name, crest, Kasarani location, web address and email, which are the institute's real details being misused. KISE says the posts are not associated with it, that its official Facebook page carries a blue verification tick, and that applicants should verify admission details only through its official channels.

How the scam works

Impersonation schemes borrow a trusted name — a school, a police force, a bank, a well-known person or a regulator-registered firm — so that a message, a website or a phone number looks official. The real organisation is not involved and will not ask you to pay, log in or send money through a surprise link or an unlisted number. Look up the official contact details yourself and call or write there. If you have already paid or given personal information, contact your bank and report the incident to the police or your national cyber-crime service.

If a message, a page or a caller creates urgency about money, a login or a legal threat, pause and check the claim through a contact method you already trust. Keep screenshots, reference numbers and the exact addresses or phone numbers you were given, and tell your bank early if money has already left the account. Official brands and authorised firms named in a lure are not involved unless a primary source says otherwise.

Source

Source: https://x.com/KISE_OFFICIAL/status/2120850846267097456 (@KISE_OFFICIAL, Nov 12, 2026, 7:06 AM ET)

Red flags

  • Adverts that copy a school's crest and official email but give unofficial phone numbers for admissions.
  • A message, page, group or phone number that uses a trusted organisation's or person's name, logo or contact details.
  • A request to pay, log in, or send money or personal information through an unofficial number or link.
  • Contact details that do not match the ones on the organisation's official website.
  • Urgency about an admission, a refund, a fine, an investigation or a limited offer.

If you were targeted

  1. 1Do not pay or log in through a link or number from the unexpected message.
  2. 2Look up the official website or phone number yourself and contact the organisation there.
  3. 3If you have already paid or shared information, contact your bank and report it to the police or your national cyber-crime service.
  4. 4Report the fake page, group or number to the platform and to the real organisation.

MalwareTips: clothing store hervalife.com in scam network, 4 VirusTotal flags

MalwareTips published an investigation today rating hervalife.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…

  • hervalife.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: 31-day-old stampsusps.com sells cut-price postage stamps; scam-network store with VirusTotal flags

MalwareTips published an investigation today rating stampsusps.com a high-risk store that belongs to a scam network of near-identical shops sharing templates, product photos and return policies and reopening under new…

  • stampsusps.com
  • Part of a scam network of near-identical dropshipping stores (MalwareTips)
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report

MalwareTips: 16-day-old bertund.shop copycat store rated Dangerous (18/100), 4 VirusTotal flags

MalwareTips published an investigation today calling bertund.shop a fake store built on a copied catalog. It says the site's catalog listings, photos and branding are taken from real brands and stores, none of which o…

  • bertund.shop
  • Copycat store; catalog, photos and branding copied from real brands (MalwareTips); runs on staticassethub.com
  • MalwareTips fake or copycat store cluster (12 Nov 2026)
Reported Nov 12, 20261 report
OtherReviewed

Special CBI court remands alleged Mahadev betting-app 'kingpin' Saurabh Chandrakar to judicial custody until 19 November

The Indian Express reported on 12 November 2026 that a special CBI court that day remanded Saurabh Chandrakar, the alleged kingpin of the Mahadev betting app case, to seven days of judicial custody, until 19 November.…

  • Saurabh Chandrakar; Mahadev betting app; special CBI court, Raipur
  • India Enforcement Directorate / CBI financial-crime cases (12 Nov 2026)
Reported Nov 12, 20261 report
OtherReviewed

Ohio AG: 17 indicted over alleged schemes to take $228,000 from OCSEA union's education-benefit trust

Ohio Attorney General Andy Wilson announced on 12 November 2026 that a Delaware County grand jury indicted 17 members of the Ohio Civil Service Employee Association (OCSEA) for allegedly stealing or trying to steal $2…

  • OCSEA Union Education Trust; Warrensville Developmental Center; Delaware County, Ohio
  • Embezzlement and diversion-of-funds cases (12 Nov 2026)
Reported Nov 12, 20261 report
PhishingReviewed

Fake Meta 'Page Appeal' site on chronos-reprieve-658a.s2506015.workers.dev steals Facebook logins and 2FA codes

Website scanning service ScanMalware posted on X on 12 November 2026 that chronos-reprieve-658a.s2506015[.]workers[.]dev is a confirmed scam. Its scan report describes a phishing kit imitating Meta's Privacy Center an…

  • chronos-reprieve-658a.s2506015.workers.dev
  • Path /analysis_center/; Cloudflare workers.dev subdomain; exfiltration via Telegram bot
  • Phishing kit exfiltrating to a Telegram bot (12 Nov 2026)
Reported Nov 12, 20261 report