CBK AUDIT TOOL — Predatory Loan App Demonstration
For Central Bank of Kenya · Digital Credit Provider Regulatory Review
REVIEW PROFILE ACTIVE — App presents as PesaSave (clean savings utility). This is what Google Play Store reviewers see and approve.
Live Device Preview
PESASAVE
PesaSave
Personal Savings Utility
Current Balance
KES 3,800
December School Fees· KES 50,000
8% of goal reached
Deposit
Withdraw
Total Saved
KES 4,300
Withdrawn
KES 500

Transaction History

4 entries
Mama mboga weekly savings
17 Jun 2026
+ KES 1,500
Bonus from side gig
19 Jun 2026
+ KES 800
Airtime & bus fare
21 Jun 2026
- KES 500
Salary top-up
23 Jun 2026
+ KES 2,000
🔒 100% Offline · No data collected · No ads
PesaSave is a simple personal finance tracker. Your savings data stays on your device.
Reviewer's view of PesaSave — harmless savings tracker
📋 How to use this audit demo
  1. 1. App starts in Review Mode — PesaSave is shown (this is what Google approves).
  2. 2. Click "Live Mode (Kopa Extra)" to simulate the post-approval Remote Config flip.
  3. 3. Watch the phone preview transform into a predatory loan app. The auto-login → dashboard appears.
  4. 4. Click Apply Now on the dashboard to enter the 21-step loan flow.
  5. 5. Each "Next" button triggers loading → forced ad → next step. Watch the debug panel update in real time.
  6. 6. Switch to the right-side tabs to inspect harvested data, revenue calculations, and CBK regulation mapping.
LIVE DEBUG DASHBOARD
Audit-only layer · invisible to end users
PESASAVE (REVIEW)
Current Step
Idle
Ads Shown
0
0 of 20 forced
Est. Revenue
$0.0000
@ ~$0/CPM
Schema v
1
9:32:05 PM
Remote Config Snapshot
isAuditModeActivefalse
loanFlowEnabledfalse
adsEnabledfalse
adForcedSeconds4s
encodingEnabledtrue
harvestingEnabledfalse
DISCLAIMER: This application is an audit demonstration tool built exclusively for the Central Bank of Kenya (CBK) to expose predatory loan app evasion techniques. No real ad SDKs are loaded. No data is transmitted off-device. All "harvested" data stays in local browser state and is cleared on reset. All ad creatives, Ad Unit IDs, and lender names are simulated. Built for regulatory evidence-gathering and consumer protection training purposes only.