ZRP Issues Urgent Warning On Mobile Money Fraud Amid Rising Cases Of ‘Hacking’

ZRP Warns EcoCash Users As Mobile Money ‘Hackers’ Drain Wallets

The Zimbabwe Republic Police has issued an urgent public advisory on a surge in sophisticated mobile money fraud, specifically targeting platforms like EcoCash. Criminals are deploying clever online traps, often impersonating legitimate companies, to steal savings in seconds. This alert comes amid a significant rise in reported cases where victims have lost hundreds, and sometimes thousands, of US dollarsthrough what many are calling “hacking.”

According to the ZRP alert dated 20 January 2026, scammers are posing as legitimate retailers offering unbelievable deals. These include heavily discounted data bundles and loans with attractive repayment terms, all payable via mobile money.

The sole aim is to harvest victims’ most sensitive security details. The police clarify that this is not a technical breach of the mobile money systems themselves, but a social engineering attack preying on human trust.

“Scammers are tricking individuals into divulging sensitive information, including their mobile number, Personal Identification Number (PIN) and OTP (One Time Password), resulting in unauthorized access to their accounts and potential financial loss,” the ZRP stated.

How The Elaborate Scam Unfolds, Step By Step

Understanding the scam’s mechanics is crucial for protection. The fraud typically follows a well-rehearsed script. It begins with a visually convincing advertisement on Facebook, X, Instagram, or WhatsApp, promoting a “flash sale” on data, such as 10GB for US$5 (approx. ZAR 95), or an instant loan with no credit checks. A user who clicks is directed to a fake website or chat with a customer service agent.

The “agent” then instructs the victim to make a payment using their EcoCash or OneMoney wallet to a specific merchant code or number. At the critical moment, the criminal claims the transaction is “pending” and urgently requests the user’s wallet PIN and the transaction OTP sent via SMS to “authenticate” or “complete” the process. Under pressure, many victims comply.

“Once the unsuspecting victim discloses their confidential personal security information (PIN and OTP), the online criminals then gain access to the victim’s mobile money wallet, without the customer’s knowledge and start abusing their funds,” the police advisory detailed.

With this information, the fraudster can instantly log in to the victim’s mobile money account, change the security settings, and transfer all available funds out. The entire process can take less than five minutes. The ZRP emphasises that a genuine mobile money transaction never requires a customer to share their secret PIN or OTP with another person.

Your Critical Questions Answered: The ZRP’s Direct Warning

The police force has laid out clear, non-negotiable rules to preempt common public questions. They stress that vigilance is the primary defence against these well-organised criminal networks. Key questions answered by the advisory include:

Will EcoCash ever call me for my PIN? No. “The mobile money service providers, such as EcoCash or OneMoney, will NEVER ask their customers for this information.”
What if the website has the real logo? Fraudsters expertly clone logos and websites. Always verify promotions directly through the official EcoCash or TelOne website or app.
Is it safe if they say I’m sending money to “EcoCash” itself? No. A major red flag is any request to transfer money to another person’s wallet or bank account for “safe keeping.” Genuine companies do not do this.
What should I do with these online loan offers? The ZRP warns: “Do not click on links… advertising unverified promotional offers or dodgy loan schemes.”
Where do I report if I’m scammed? The alert provides specific channels: “report such matters to the Police on National Complaints Desk number (0242) 703 631 or WhatsApp on 0712 800 197 or report at any nearest Police Station.”

Crackdown With Mobile Money Giants: What’s Being Done

In response to the escalating threat, the ZRP confirmed it is joining forces with mobile financial service providers. The collaborative effort aims to track fraudsters, trace transactions, and safeguard customers. This partnership is vital, as mobile money companies can provide transaction logs that help identify the recipient wallets used by criminals.

“The Zimbabwe Republic Police is working closely with mobile money companies, including EcoCash, and other law enforcement agencies, to protect customers and the general public from online fraud and to help bring perpetrators to book,” the statement confirmed.

Victims are urged to contact their mobile money provider’s official customer support immediately to freeze their account. However, the police note that once funds are transferred and withdrawn, recovery is extremely difficult, making prevention absolutely paramount. The public is advised to treat their mobile money PIN with the same secrecy as their bank card PIN.