Major Cybersecurity Threats in Africa: Why Your Phone Is the New Frontline.

Major Cybersecurity Threats in Africa: Why Your Phone Is the New Frontline.

Introduction

If you want to understand cybersecurity in Africa, don’t start with computers. Start with the phone in your pocket. Across the continent, the phone has quietly become the bank, the wallet, the ID card and the marketplace. Sub-Saharan Africa now has more than a billion registered mobile money accounts moving over a trillion dollars a year, and in Kenya alone, over eight in ten adults use mobile money as their primary financial tool. No bank branch required. No credit history needed. Just a SIM card and a network signal. This is one of the great financial inclusion stories of the last twenty years. It is also, unfortunately, why Africa has become one of the most targeted regions in the world for cyber-enabled fraud. According to INTERPOL’s African Cyberthreat Assessment Report 2026, reported cybercrime losses across the continent more than doubled in a single year, from about $192 million in 2024 to $484 million in 2025, with the number of identified victims climbing from 35,000 to 87,000. This article looks at the major threats behind those numbers, with an emphasis on the one that touches the most ordinary people: mobile money fraud, and the SIM swap attacks that drive it. Why Mobile Money Is Ground Zero Here’s the uncomfortable statistic: roughly three-quarters of all mobile money transactions on Earth happen in Africa. That concentration of financial activity on a single, phone-number-based system is exactly what makes it such an attractive target. INTERPOL’s 2025 survey of African member countries found something striking: mobile money fraud was named the most prevalent scam type by 97 percent of countries surveyed. Not phishing. Not ransomware. Mobile money fraud, ahead of everything else.

1. SIM Swap Fraud This is the threat that best explains why mobile-first banking is a double-edged sword. Here’s how it typically works. A fraudster first gathers pieces of a victim’s personal information, often through phishing messages, leaked data, or social engineering. Armed with just enough detail to sound convincing, they contact the victim’s mobile network operator and claim to have lost their SIM card or phone. If the telecom’s identity checks are weak, the fraudster is issued a replacement SIM carrying the victim’s phone number. From that moment, the fraudster receives the victim’s calls, texts, and one-time passwords. Mobile money accounts, bank apps, and two-factor authentication codes are now theirs to intercept. The real owner usually finds out only when their phone suddenly loses signal. The scale of this in 2025 was significant. In Kenya, SIM swap fraud surged 327 percent in a single year, with more than 123,000 fraudulent SIM cards issued and an estimated $3.8 million drained from mobile wallets. In South Africa, telecom-linked fraud, most of it tied to SIM swaps, is estimated to cost the country over R5.3 billion a year, with nearly 60 percent of mobile banking fraud cases linked to this method. In Nigeria, banks recorded a 300 percent rise in SIM swap-related fraud cases between 2022 and 2024. Across the continent as a whole, SIM swapping is estimated to account for roughly 43 percent of all mobile money fraud, part of a wider mobile money fraud economy researchers estimate drains around $4 billion a year from the system. Some of this is enabled from the inside. Investigations in Nigeria have identified organised syndicates working with corrupt telecom staff, who process fraudulent swaps for a cut of what gets stolen. A single insider might be paid a modest bribe to approve a swap that unlocks a mobile wallet worth far more. Countries are starting to respond. Kenya’s Computer Misuse and Cybercrimes Amendment Bill specifically targets SIM swap fraud, and Safaricom’s new identity verification platform, which runs automated checks before approving a swap, reportedly cut fraudulent swaps by 65 percent. Tanzania recorded a reduction in swap attempts after tightening SIM registration rules. Progress is possible, but it is playing catch-up with the crime.
2. Phishing and Social Engineering SIM swaps rarely happen in isolation. They’re usually the second step after phishing, which remains the most common way criminals gather the personal details they need in the first place. A message arrives claiming to be from a bank, a telecom provider, or a delivery service, warning that an account will be suspended unless the recipient "verifies" their details immediately. The link leads to a fake page built to look identical to the real one. Once a password, card number, or one-time code is entered, the attacker has what they need. What makes phishing dangerous is that it targets human trust and urgency, not software flaws. No firewall stops someone from voluntarily typing their password into a convincing fake page.
3. Fraudulent Lending Apps A threat that has grown quickly in West and Central Africa involves fake fintech loan apps. These apps promise instant microloans with no paperwork, but during sign-up they request broad access to a phone’s contacts, photos, and messages. Once that access is granted, victims who fall behind on repayment, or who never actually receive the loan, are harassed and sometimes blackmailed using the personal data and contacts the app collected.
4. Business Email Compromise While individuals lose money one SIM swap or one phishing message at a time, businesses tend to lose it in far larger single events through Business Email Compromise, or BEC. In a BEC attack, criminals compromise or convincingly impersonate the email account of an executive or supplier, then instruct an employee to urgently transfer funds to a new account. Because the request appears to come from someone trusted, employees often comply before anyone questions it. INTERPOL documented a case in Senegal where fraudsters infiltrated internal email systems, impersonated executives, and authorised a fraudulent transfer of $7.9 million. Authorities managed to freeze the destination accounts before the funds were withdrawn, but not every case ends that well.
5. Ransomware Ransomware locks or encrypts an organisation’s files, with attackers demanding payment before restoring access, or increasingly, before they leak stolen data publicly. It has hit African institutions directly. Trend Micro recorded tens of thousands of ransomware detections across Egypt, South Africa, Nigeria, and Kenya in 2024 alone. South Africa’s Department of Defence was reportedly targeted by the Snatch ransomware group, with around 1.6 terabytes of data affected. Government agencies in Kenya and Nigeria have reported similar incidents. Because ransomware can shut down hospitals, government offices, and infrastructure operators, its damage extends well past the ransom figure itself.
6. Digital Sextortion Criminals obtain, or increasingly fabricate using AI, sexually explicit images and then threaten to release them unless the victim pays or complies with further demands. INTERPOL found that a majority of African member countries surveyed had seen a rise in sextortion reports, and that generative AI has made it easier for criminals to manufacture convincing fake material rather than needing genuine images at all. This is a threat with no direct financial trigger required. The damage is psychological and reputational, and it can happen to anyone.
7. AI-Powered Deception Generative AI has quietly upgraded every threat on this list. INTERPOL’s assessment found artificial intelligence involved in over half of reported cybercrime cases in 2025. Criminals now use AI to write flawless phishing messages in local languages and dialects, clone voices well enough to fool a family member on a phone call, and generate fake images or documents for extortion or fraud. The old advice, that bad grammar or a strange phone number is a warning sign, is losing its usefulness. Why Africa Specifically None of this is really about Africa lacking technical sophistication. It’s about a mismatch in speed. Digital adoption, especially mobile money, has outpaced the growth of security infrastructure, identity verification systems, and cybersecurity staffing needed to protect it. Weak or inconsistent Know Your Customer processes at telecom operators leave the door open for SIM swaps. Cybercrime also crosses borders easily. A fraudster can sit in one country, rent server infrastructure in a second, and target victims in a third, which makes enforcement genuinely difficult without cross-border cooperation. That cooperation is starting to show results. INTERPOL’s Operation Serengeti 2.0, run across 18 African countries and the UK in 2025, led to 1,209 arrests, the recovery of roughly $97.4 million, and the takedown of over 11,000 pieces of malicious infrastructure tied to scams, BEC, and ransomware. What Actually Reduces the Risk For individuals: treat your SIM card like a physical key to your bank account, because that’s effectively what it is now. Set up a PIN with your telecom provider for any SIM-related changes, be suspicious of unexpected loss-of-signal, and never share OTPs or PINs over a call, even one that seems to come from your bank or provider. Use different passwords across accounts and turn on multi-factor authentication wherever it doesn’t rely solely on SMS. For businesses: verify any unusual payment request through a second channel before moving money, keep tested backups against ransomware, and train staff regularly, since most of these attacks succeed by exploiting a person, not a system. For telecoms and governments: real-time biometric verification for SIM swaps, like the systems being piloted in Kenya, is one of the highest-leverage fixes available, because it targets the single step that so many other frauds depend on.

Conclusion Africa’s cybersecurity story isn’t a side plot to its digital growth story, it’s the same story. The billion mobile money accounts that brought banking to people who never had it are the same billion accounts fraudsters are now trying to break into. Every threat covered here, from SIM swaps to AI-generated deepfake calls, succeeds by exploiting either weak verification or human trust. The fix isn’t to slow down Africa’s digital transformation. It’s to make sure security keeps pace with it, one verified SIM swap, one trained employee, and one skeptical response to an urgent message at a time.

Sources: INTERPOL African Cyberthreat Assessment Report 2026; Business Daily Africa; TechTrends Africa; Technext24; African News Agency; Dawan Africa