Kenyan detectives have discovered that about Sh2.3 billion that was used to fund the Dusit D2 terror attack was transferred from a bank in Cape Town, South Africa.
The January 15 attack left 21 people dead and many others wounded.
A team comprising officers from the Criminal Intelligence Unit (CIU), Anti-Terror Police Unit (ATPU), Directorate of Criminal Investigations (DCI) and Directorate of Public Prosecutions (DPP) are currently in South Africa for the probe.
This follows revelations that the money, sent on diverse dates, was used to set up operations across the country, all with the intention of making the single attack a success.
Those targeted by the detectives include a Kenyan living in Cape Town and another in Pretoria, who the detectives have linked to the sending of the money.
The officers now want to know why they sent the money before possibly prosecuting them.
The person in Pretoria is reportedly said to be a refugee, a sleeper cell, and a major financier of he Somali-based terror group.
The officers are also seeking to lift the lid on the tricks being used by the terrorists to move money across borders, reports the Standard.
The officers have since established that some of the money was used to facilitate the hit-men's movement across the target location, upkeep, and possibly bribe authorities when necessary.
They have also held meetings with their South African counterparts over the same, as Kenyan authorities seek to prevent such attacks in the future.