The digital landscape in Zimbabwe, driven by the rapid growth of mobile money and online banking, has made it particularly vulnerable to cyber-enabled fraud.
While large-scale Business Email Compromise (BEC) and even Ransomware schemes are financially damaging to institutions, the Number One General Fraud Scam affecting the highest volume of individual citizens and causing high aggregated losses in 2025 was:
Mobile Money and Social Engineering Fraud
This category of fraud is most prevalent because it targets the widely adopted mobile payment platforms (such as EcoCash, OneMoney, etc.) which are essential for daily transactions in Zimbabwe’s economy.
Key Tactics Within This Scam:
Vishing and Smishing (Impersonation): Fraudsters impersonate mobile network operators, bank officials, or even government agencies (e.g., advising a person has qualified for an input scheme). They create panic or urgency to trick the user into:
- Revealing their Mobile Money PINs, passwords, or One-Time Passwords (OTPs).
- Approving a transaction that the fraudster has initiated.
WhatsApp Account Hacking and Identity Theft:
This scam involves criminals hacking and taking control of a victim’s WhatsApp account (often using a SIM swap or tricking the user into sending an authorization code).
The fraudster then uses the stolen identity to send messages to the victim’s friends and family in group chats, offering lucrative foreign currency exchange rates or asking for “urgent help” with a money transfer. Victims transfer local currency to the criminal’s mobile wallet, expecting foreign currency in return, and the criminal vanishes.
Sim Swap Fraud: As digital financial services rely heavily on SMS for authentication, criminals use fraudulent means to obtain a replacement SIM card for the victim’s number. Once they have control of the number, they can easily access and empty mobile money wallets and intercept banking OTPs.
The prevalence of these scams is directly tied to the exponential increase in digital transactions in Zimbabwe, making the weakest link—the human user—the primary target for criminal exploitation.