Zimbabwe Investigates WhatsApp Account Takeovers As Cybercrime Reports Spread Across Countries
Zimbabwe is investigating reports of WhatsApp Business account takeovers amid a growing number of cybercrime complaints in different parts of the world, raising concerns about the safety of a messaging platform used for personal communication and business transactions.
The investigation comes as authorities and telecommunications operators in several countries warn of criminals exploiting WhatsApp through account hijacking, fraudulent SIM cards, stolen verification codes and malicious software.
However, the incidents reported internationally involve different methods, with no confirmed evidence linking them to a single coordinated attack.
Also Read: WhatsApp Users In Zimbabwe Raise Alarm Over Account Hijackings
Government Investigates WhatsApp Security Concerns
According to The Herald, ICT, Postal and Courier Services Minister Tatenda Mavetera said the Government was working with Meta, the affected mobile network operator and the Zimbabwe Republic Police (ZRP) Cyber Crime Division to establish what happened in the reported local incidents.
Investigators are examining platform systems, SMS termination partners, advertising accounts and payment arrangements to determine how the alleged breaches occurred and whether users’ financial information was exposed.
The findings are expected to help establish where responsibility lies and the extent of any security compromise.
There are currently no verified national figures showing how many Zimbabwean WhatsApp users have been affected.
Econet And Police Warn Of Account Hijacking
The investigation follows warnings from Econet Wireless and the ZRP about fraudsters taking over WhatsApp accounts and using compromised profiles to target unsuspecting contacts.
According to the warnings, criminals can impersonate account holders and approach their friends, relatives or business associates with requests for money, often presenting the situation as urgent.
The ZRP has also raised concerns about fraudulently obtained SIM cards being used to gain control of WhatsApp accounts.
Econet has encouraged customers to activate two-step verification and passkeys, keep track of devices linked to their accounts and avoid sharing verification codes with anyone.
Users have also been urged to treat unexpected requests for financial assistance with caution, even when the messages appear to come from people they know.
Malaysia Regulator Demands Answers From Meta
Zimbabwe is not the only country grappling with WhatsApp security complaints.
In Malaysia, the Communications and Multimedia Commission (MCMC) opened an investigation in September after users reported hacked accounts, suspensions and instances in which they could no longer access their profiles.
Malaysian news agency Bernama reported that the regulator had received 92 complaints by September 30.
The commission sought a comprehensive explanation from Meta, WhatsApp’s parent company, while referring affected cases to the company to help establish the causes of the reported problems.
The complaints highlight the challenges authorities face when investigating incidents involving a global messaging service and determining whether different users experienced the same underlying problem.
Cayman Islands Police Warn About Stolen Verification Codes
In the Cayman Islands, the Royal Cayman Islands Police Service issued a public warning on October 1 about criminals using stolen WhatsApp verification codes to take over accounts.
The six-digit codes are used during the account registration process. If criminals obtain them, they may be able to register an account on another device and impersonate its legitimate owner.
Once in control of a profile, fraudsters can contact people in the victim’s address book and ask them to send money.
Police urged residents not to disclose their verification codes, including to anyone claiming to be a friend, relative or representative of WhatsApp.
Investigations into the reported incidents were continuing.
Cybersecurity Researchers Uncover Malware Campaign
A separate investigation by international cybersecurity company Kaspersky has revealed another way criminals are exploiting WhatsApp.
Research published by its Global Research and Analysis Team on June 22, 2026, identified a malware campaign affecting users across 11 countries and territories.
The affected locations included Brazil, India, Singapore, the United Kingdom, Mexico, Spain, Taiwan, Australia, Russia, Vietnam and Malaysia. Malaysia recorded the highest number of observed victims in the campaign, according to the research.
Unlike account takeovers involving stolen verification codes, this operation relied on malicious files distributed through WhatsApp Desktop and WhatsApp Web.
The attackers used VBScript files disguised as legitimate documents to trick recipients into running them on Windows computers.
Executing the files could allow additional malicious software, including remote monitoring and management tools, to be installed. Such tools can provide unauthorised access to compromised computers.
Cybersecurity news outlet BleepingComputer also reported on the findings, while Malaysia’s Computer Emergency Response Team issued an advisory about the campaign.
The post Zimbabwe Investigates WhatsApp Account Takeovers As Cybercrime Reports Spread Across Countries appeared first on iHarare News.
