Yesha
Senior Member
- Jan 28, 2026
- 166
- 91
Zimbabwe’s Government has launched a coordinated investigation into a surge in reported WhatsApp Business account takeovers, raising concerns about cybersecurity vulnerabilities, financial fraud and the safety of digital communications.
The investigation involves the Ministry of Information, Communication Technology, Postal and Courier Services, the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the Zimbabwe Republic Police’s Cyber Crime Division, the affected mobile network operator and Meta, the parent company of WhatsApp, Facebook and Instagram. Source: The Herald, 14 October 2026.
ICT Minister Tatenda Mavetera described the reported scale of the incidents as unprecedented, saying authorities were working to establish how the accounts were compromised and prevent further harm to individuals and businesses.
Investigators are examining several possible causes, including weaknesses or abuse involving short message service (SMS) verification processes, SMS termination partners known as aggregators, and the systems used by the affected platforms.
However, the authorities have not yet established the cause of the incidents or assigned responsibility to any particular service provider.
Mavetera said the Government was engaging Meta to support investigations, account protection and recovery efforts. The affected mobile network operator is also expected to issue a comprehensive statement outlining its findings and response measures.
Cybersecurity Risks Extend Beyond Lost Accounts
The reported incidents have renewed concerns about the security of mobile-based communication systems, particularly as WhatsApp has become an important tool for businesses to communicate with customers, promote products and receive payment-related enquiries.A compromised account can allow criminals to impersonate its legitimate owner, deceive contacts into sending money, distribute fraudulent links or exploit trusted business relationships. Where business accounts are connected to advertising services and payment arrangements, the potential consequences may extend to unauthorised advertising activity, financial losses and exposure of sensitive information.
Authorities are investigating whether accounts linked to Meta’s advertising services and associated payment arrangements have been exploited, and whether financial information has been exposed or unauthorised transactions have occurred. These possibilities remain under investigation and have not been established as confirmed outcomes across the reported cases.
The incidents also highlight the importance of securing the systems used to verify a person's identity. SMS verification codes can be targeted through social engineering, fraudulent SIM replacements or other forms of abuse. Investigators are examining whether SMS-related weaknesses or the systems involved played a role in the current incidents.
Cybersecurity specialists generally recommend using multiple layers of protection rather than relying on a single verification method. However, the specific technique or vulnerability responsible for Zimbabwe's reported account takeovers remains unconfirmed.
Econet Users Raise Concerns
The reports have prompted complaints from users, with many accounts of difficulties reportedly involving Econet subscribers. The pattern has increased public scrutiny of mobile network security and the handling of customer verification processes.Some users have welcomed the Government's decision to coordinate a response involving regulators, police and the technology company. Others have questioned the timing of the intervention, arguing that complaints had been circulating before the investigation was publicly announced.
The concerns come amid previous warnings about WhatsApp account takeovers and SIM-related fraud. On 12 October, The Herald reported that there was no verified national figure establishing the total number of affected users and explained that losing access to an account does not automatically prove that it has been hacked. Source: The Herald, 12 October 2026.
The scale of the current incidents, the precise number of affected customers and the extent of any financial losses remain unclear.
Government Urges Users to Strengthen Account Security
Mavetera has urged individuals and businesses to review their account access, linked devices, advertising activity and payment transactions for suspicious activity.Users have also been warned against sharing passwords, personal identification numbers (PINs) or verification codes, even with people claiming to represent a service provider.
Anyone who suspects that an account has been compromised should follow the platform's official recovery procedures, report the incident to the police and relevant mobile network operator, and contact their bank immediately if suspicious financial transactions are involved.
Businesses should also independently verify unusual requests for money through a separate communication channel and review who has access to company accounts, advertising tools and payment arrangements.
The investigation is expected to establish how the reported takeovers occurred, whether weaknesses in telecommunications or platform security contributed to the incidents, and what additional safeguards may be required.
The case has highlighted a broader cybersecurity challenge for Zimbabwe: protecting digital identities and financial activity as more people and businesses depend on mobile platforms for everyday communication and commerce.
