Amara Capital Academy | Anti-Fraud, Risk & Cybercrime Training, Nairobi

Amara Capital Academy · Nairobi

Fraud leaves a trail, we train the people who read it

Practitioner-led education in fraud examination, risk, governance and cybercrime, built for East African institutions and taught by people who have run the investigations.

Browse programmes

Corporate engagements

Most fraud training changes what people know, ours changes what they do

A five-phase engagement: diagnose the exposure, brief the executive, train the roles that carry the risk, rebuild the failed controls, then hand over a monitoring routine your own team runs.

Cybercrime & digital fraud

The fastest-growing fraud worldwide arrives as an email

Business email compromise, vendor bank-detail changes, deepfaked approvals and synthetic identities. We teach finance, audit and compliance teams to spot them without turning them into engineers.

25+Years in audit, investigation & cybersecurity
4Schools of study
14Programmes open for enrolment
5%Of revenue a typical organisation loses to fraud each year†
3Delivery modes: in person, live online, in house

Built for the sectors where the money moves

Programmes / 01

What we teach

Six programmes open now, each written for a specific seat in the organisation. Every one uses East African cases: the procurement file, the SACCO loan book, the vendor payment run, rather than imported material that never touches how fraud actually moves here.

01

Corporate · Flagship

Fraud Risk & Cybercrime Programme

Our deepest engagement. We map where your organisation is actually exposed, take the findings to the executive team, train the roles that carry the risk, redesign the controls that failed, and leave behind indicators your own people can monitor.

Duration
8 to 14 weeks
Format
On site plus workshops
Cohort
Whole organisation
Fee
Scoped per engagement

Commissioned byCEOs, CFOs, heads of internal audit, chief risk officers and audit committee chairs. Phase 1 can be bought on its own.

02

Certificate · Foundational

Fraud Examination Fundamentals

The grounding every anti-fraud professional needs: how occupational fraud schemes are built, where they surface in the records, how the fraud triangle plays out in practice, and what separates suspicion from evidence.

Duration
5 days, 40 hours
Format
In person or live online
Assessment
Case file plus written exam
Fee
From KSh 65,000

Built forInternal auditors, compliance officers, risk analysts, accountants and graduates entering the profession.

03

Certificate · Practitioner

Fraud Investigation & Investigative Interviewing

Running a case from allegation to report. Planning the investigation, sequencing the evidence, conducting admission-seeking interviews without contaminating them, and writing findings that survive an HR panel, a tribunal or a courtroom.

Duration
4 days, 32 hours
Format
In person, role-play heavy
Assessment
Live interview assessment
Fee
From KSh 78,000

Built forInvestigators, forensic auditors, HR investigators, security managers and in-house counsel.

04

Certificate · Cyber

Cyber Fraud, BEC & AI-Enabled Crime

The digital side of financial crime, taught for fraud people rather than engineers. Business email compromise, vendor impersonation, account takeover, mobile money fraud, synthetic identities, and what generative AI has changed about all of them.

Duration
3 days, 24 hours
Format
In person or live online
Assessment
Incident simulation
Fee
From KSh 58,000

Built forFinance and treasury teams, IT auditors, fraud analysts, operations risk and branch management.

05

Workshop · Risk & controls

Fraud Risk Assessment & Control Design

Building a fraud risk register that is actually used. Identifying schemes by process, scoring likelihood and impact honestly, mapping existing controls against them, and finding the gaps before an auditor or a fraudster does.

Duration
2 days, 16 hours
Format
Workshop, bring your register
Assessment
Completed draft register
Fee
From KSh 42,000

Built forRisk officers, internal audit teams, process owners and second-line compliance functions.

06

Executive · Board briefing

Executive & Board Masterclass Series

Half-day sessions for people who sign approvals rather than test them. Six titles covering board oversight duties, the AI threat landscape, control-failure post-mortems, and the first 48 hours of an investigation.

Duration
Half day per title
Format
Boardroom or retreat
Group
Up to 20 participants
Fee
From KSh 250,000 per session

Built forBoards, audit and risk committees, executive committees and senior management teams.

Curriculum / 02

Four schools, one discipline

Fraud, control failure and cybercrime are the same problem seen from three seats. Modules stack into pathways, so a short course you take this year counts toward a full qualification next year.

Fraud & Forensics

For the people who have to prove it. Detection, examination, evidence and reporting: the technical core of the profession.

  • Classify occupational fraud schemes and predict where each surfaces in the records
  • Design detection tests for payables, payroll, revenue and expenses
  • Plan and conduct an investigation without contaminating the evidence
  • Trace assets through accounts, entities and related parties
  • Write findings that hold up under legal and disciplinary scrutiny
Fraud Examination FundamentalsOpen
Fraud Investigation & Case ManagementOpen
Investigative InterviewingOpen
Procurement & Contract FraudOpen
Fraud Detection & Data AnalyticsOpen
Forensic Accounting2027
Financial Statement Fraud2027
Asset Tracing & Recovery2027
Evidence Management & Reporting2027

Risk, Governance & Compliance

For the people who have to prevent it. Where control design meets fraud prevention, and the bridge between our training and our advisory work.

  • Build a fraud risk register mapped to real processes, not generic categories
  • Test whether an existing control actually addresses the scheme it was built for
  • Run a speak-up channel that people trust enough to use
  • Brief a board on exposure in language that produces a decision
  • Align fraud risk work with ISO 31000 and COSO expectations
Fraud Risk AssessmentOpen
Internal Controls & Fraud PreventionOpen
Whistleblowing & Speak-Up SystemsOpen
Enterprise Risk Management2027
Governance, Risk & Compliance2027
Anti-Bribery & Corruption2027
Risk-Based Internal Auditing2027
Ethics & Integrity at Work2027

Cybercrime & Digital Fraud

Our differentiator: two decades of IT and cybersecurity practice, translated for auditors and investigators rather than engineers.

  • Recognise the payment-process weaknesses that BEC attacks are designed to exploit
  • Handle digital evidence so it remains admissible, from phones and laptops to logs and cloud
  • Investigate mobile money and card fraud across the transaction chain
  • Assess where generative AI raises your exposure to impersonation and identity fraud
  • Coordinate with IT and incident response without losing the fraud case
Cyber Fraud FundamentalsOpen
Business Email CompromiseOpen
AI, Fraud & CybercrimeOpen
Digital Evidence for InvestigatorsOpen
Cybercrime Investigation2027
Identity & Account Takeover Fraud2027
Online & Mobile Payment Fraud2027
Deepfakes & Synthetic Identity2027

Certification & Career Pathways

Structured routes rather than isolated courses. Each pathway stacks modules from the schools above into a completed Academy qualification, with a capstone case file assessed by faculty.

  • Fraud Risk Professional: 4 modules plus capstone, typically 9 months part time
  • Fraud Investigation Professional: 4 modules plus an assessed live interview
  • Cyber Fraud Professional: 4 modules plus incident simulation, opens 2027
  • GRC Professional: 4 modules plus a board briefing exercise, opens 2027
  • Credits carry for 36 months, so you can build a pathway one course at a time
Fraud Risk Professional pathwayOpen
Fraud Investigation Professional pathwayOpen
Cyber Fraud Professional pathway2027
GRC Professional pathway2027

Method / 03

We teach from the exception, not the textbook

Every module opens with a real report: a payables run, a loan book extract, a system log, and the question every fraud examiner is paid to answer. Which of these rows deserves a second look, and what do you do next without alerting the person responsible?

Teaching case 04 · Q3 payables extract2,481 records · 3 exceptions
PV-40128Ridgeway Supplies Ltd, routine stationery order418,000Cleared
PV-40129Third invoice from same vendor, same day, each just under approval limit497,500Split threshold
PV-40133Kilimo Logistics, contracted haulage96,200Cleared
PV-40141Vendor bank details changed by email two days before payment2,150,000Possible BEC
PV-40147Metro Facilities Services, monthly cleaning contract311,750Cleared
PV-40152Payee account number matches an active payroll record744,000Ghost vendor
PV-40158Ashbourne Insurance Brokers, renewal premium158,400Cleared

Illustrative extract. Corporate participants work on anonymised data from their own systems.

Corporate / 04

The five-phase engagement

Training alone changes what people know. This changes what happens on Monday. Phases can be commissioned together or one at a time, and the diagnostic stands alone if you only want to know where you are.

Phase 1

Diagnostic

We map fraud exposure across processes, systems, vendors and delegated authority, then rank it by loss potential.

2 to 3 weeks
Phase 2

Executive workshop

Findings taken to the leadership team, with decisions recorded against named owners and dates.

1 day
Phase 3

Role-based training

Separate sessions for finance, procurement, IT, branch and front line, using your own scenarios.

2 to 5 weeks
Phase 4

Control redesign

We rebuild the controls that failed the diagnostic and support you through putting them into operation.

3 to 4 weeks
Phase 5

Monitoring

Indicators, reporting lines and a review cycle, so exposure is tracked rather than rediscovered after a loss.

Handover plus review
Request a scoping call Typical full engagement: 8 to 14 weeks. Diagnostic-only engagements start at 2 weeks.

About / 05

Why this academy exists

Africa's fraud and cybercrime losses are growing faster than the number of professionals qualified to investigate them. Most training available locally is either generic compliance content or imported material that never touches how fraud actually moves through a Kenyan bank, SACCO or county government.

The people who help build a profession are the right people to teach it.

Our founder taught fraud examination in Nairobi between 2007 and 2009, in the years when the profession was first taking root in Kenya. Practice took over from teaching: audit, investigation, technology and risk. Amara Capital Academy brings that teaching back, with two decades of casework behind it.

Instruction is practitioner-led rather than delivered by career trainers. Every session is taught by someone who has run the investigations, sat in the audit committee, and rebuilt the controls afterwards, and every case used in class comes from this region. We are currently appointing associate faculty across fraud examination, investigation and law, and will publish them here as they are confirmed.

The Academy is one of five business lines under Amara Capital, alongside its entrepreneurship, investor readiness, sales and leadership programmes. That gives participants access to a wider professional network than a standalone training company can offer.

Our position on certification: the Academy awards its own certificates and pathways, and teaches the underlying discipline rather than one examination syllabus. Where a globally recognised credential exists, we will prepare candidates for it only once the relevant authorisation is formally in place, and we will state that plainly here when it is.

Founded byAmara Capital
Founder
Lucy Munga, CFE · CISA · CRISC · MBA
Teaching since
2007, relaunched under Amara Capital
Instruction
Practitioner-led, with associate faculty drawn from audit, investigation and law
Sectors
Banking · SACCOs · insurance · telecommunications · public sector · development organisations
Delivery
Nairobi, in house across East and Southern Africa, live online

Calendar / 06

Programmes and intakes

Cohorts are scheduled as they fill, so dates are set with the group rather than fixed a year ahead. Tell us which programme you want and roughly when suits you, and we will confirm dates within two working days. In-house delivery runs at any time of year, on your calendar and with your own data.

ProgrammeLengthModeFeeNext intake
Fraud Examination FundamentalsFoundational certificate 5 days, 40 hoursNairobi or live onlineKSh 65,000 Dates on request
Cyber Fraud, BEC & AI-Enabled CrimeCertificate 3 days, 24 hoursNairobi or live onlineKSh 58,000 Dates on request
Fraud Risk Assessment & Control DesignWorkshop 2 days, 16 hoursNairobi or live onlineKSh 42,000 Dates on request
Fraud Investigation & Investigative InterviewingPractitioner certificate 4 days, 32 hoursNairobi, in personKSh 78,000 Dates on request
Executive & Board Masterclass SeriesSix titles, choose one Half dayYour boardroom or retreatFrom KSh 250,000 By arrangement
Fraud & Cybercrime in East AfricaPublic webinar 90 minutesOnlineFree Monthly
Fees exclude VAT and are per participant unless stated. Group discounts from three participants. Dates are confirmed once a cohort forms, usually within four weeks of an enquiry. Certificates of completion issued for every programme; CPD recognition depends on your professional body.

Insights / 07

Case notes from the field

Short, technical write-ups of the schemes we are seeing in East African organisations. Written for practitioners, published free, and used as teaching material in our own classrooms. The first three are in preparation. Subscribe below and they reach you as they publish.

Cybercrime · 8 min read

The vendor bank-detail change that costs KSh 2 million

Business email compromise rarely breaks a system. It breaks a process, usually the one where a supplier's account number can be updated by email without a callback to a number you already hold.

In preparation
Procurement · 6 min read

Splitting the threshold: how approval limits invite fraud

Three invoices, same vendor, same day, each just under the limit that would have required a second signature. The control worked exactly as designed. That was the problem.

In preparation
SACCOs · 10 min read

Insider lending fraud and the loan book that never defaults

Why a portfolio with suspiciously few arrears deserves more scrutiny than one with many, and the four tests that separate a good credit officer from a manufactured one.

In preparation

Questions / 08

Before you enrol

The questions we are asked most often, answered directly. If yours is not here, ask us. We would rather tell you we are the wrong fit than take a booking that disappoints.

No. Amara Capital Academy is an independent training provider, and every certificate and pathway on this site is our own. Our founder holds the CFE credential and was part of the founding team that established the ACFE Kenya Chapter, but that is a personal credential and a chapter history, not an institutional affiliation. We do not currently offer preparation for externally awarded certifications, and we will say so plainly here if that ever changes.

Not for Fraud Examination Fundamentals or the cyber programmes. They assume no prior fraud training and start from first principles. The investigation and forensic accounting modules do assume you can read a set of financial records, and we will tell you honestly at enquiry stage if a different starting point suits you better.

Each programme carries an Amara Capital Academy certificate of completion, issued on passing the assessment. Completing four modules plus a capstone in one discipline earns the corresponding Academy pathway qualification, for example Fraud Risk Professional. Module credits are valid for 36 months, so a pathway can be built one course at a time.

Contact hours are stated for every programme and recorded on your certificate. Whether those hours are recognised depends on your professional body's own rules. ICPAK, IIA Kenya, ISACA and the Law Society each set their own criteria. We are happy to provide programme outlines and attendance records to support your submission.

Yes, and it is what we recommend for teams of eight or more. In-house delivery lets us build the case material from your own processes and anonymised data, which changes the quality of the training considerably. In-house programmes can be scheduled at any point in the year and delivered at your premises or online.

A written fraud risk profile: exposure mapped by process and system, ranked by loss potential, with the specific control weaknesses that create each exposure and a prioritised remediation sequence. It is scoped to be usable on its own. You are not obliged to commission the remaining phases, and plenty of clients start there to establish a baseline.

Fees are payable in full before the programme starts, and invoices are issued to organisations on request. Transfers to a later cohort are free up to seven days before the start date. Cancellations inside seven days are credited against a future programme rather than refunded. Group bookings of three or more attract a discount, so ask when you enquire.

Yes. Open cohorts run in Nairobi, but in-house and executive programmes are delivered across East and Southern Africa, and live-online delivery removes the travel question entirely. Regional pricing and travel costs are quoted at scoping stage.

Next intake

Take the first step

Whether that is a place in the next cohort, a diagnostic for your organisation, or a briefing for your board.

See programmes and fees

Contact / 09

Tell us what you are dealing with

We reply within two working days with a straight answer on whether we are the right fit, including when we are not.

Office
Nairobi, Kenya
Monday to Friday, 08:30 to 17:00 EAT
Delivery
Nairobi, in house across East and Southern Africa, live online

Sends to academy@amaracapital.academy. Your device opens its email app with the message prepared, so you can see exactly what is sent.

Privacy / 10

How we handle your information

We teach people to protect other people's data, so we are careful with yours. This notice explains what we collect, why, and what you can ask us to do about it.

Who we are

Amara Capital Academy, a division of Amara Capital, Nairobi, Kenya. We are the data controller for the information described here. Contact us at academy@amaracapital.academy or +254 718 685 580.

What we collect

Your name, email address, phone number, employer, job title and the details you choose to give us about your training needs. Nothing else, and no tracking beyond basic site analytics.

Why we collect it

To answer your enquiry, quote for training, register you on a programme and issue your certificate. We contact you about future programmes only if you have separately asked us to.

Who we share it with

Nobody, other than the service providers who host our forms and email, and only so far as they need it to run those services. We do not sell or rent your details, and we do not share them with other training providers.

How long we keep it

Enquiry records for two years from your last contact with us. Records of people who attend a programme for seven years, so that we can verify certificates and meet tax and audit obligations.

Your rights

Under the Data Protection Act 2019 you may ask to see the information we hold, correct it, have it deleted, or withdraw consent at any time. Write to academy@amaracapital.academy and we will respond within seven days.

Confidentiality of your data in training

Where a corporate client asks us to build case material from their own records, we work on anonymised extracts under a non-disclosure agreement, and no client data is ever used in another client's classroom.

Complaints

If you believe we have mishandled your information, tell us first so we can put it right. You may also complain to the Office of the Data Protection Commissioner.

Changes to this notice

We update this page when our practices change and show the date of the current version below. Material changes are notified to anyone on our mailing list.

Version 1. Last updated on publication. Draft pending legal review.

Case notes, intake dates and fraud alerts, monthly and without filler

By subscribing you consent to us emailing you about programmes, dates and case notes. We do not share your address, and every message carries an unsubscribe link.