The Cybercrime Unit of the Judicial Police Directorate (DPJ) has apprehended a suspected cybercriminal. Arrested on Thursday, May 21, 2026, the individual faces serious charges: illegal access to a computer system, fraud, digital identity theft, and data falsification.

The investigation was launched following several complaints, including one from a major local money transfer company.

The suspect's profile

The accused is not unknown in the sector. A former identification agent in the marketing department of another money transfer company, he had kept a compromising database: multiple photographs of clients' national identity cards.

The fraudster's two methods of operation

To empty his victims' accounts, the individual switched between two well-honed social engineering techniques:

1. Fake technical support (Phishing)

1. The approach: The suspect contacted customers by phone or via WhatsApp, posing as a security agent for the money transfer company.
2. The pretext: He claimed he had to fix a security vulnerability on their account.
3. The trap: He manipulated victims into obtaining their password under the guise of "verification tests", then seized the money.

2. Exploiting abandoned receipts

1. The collection: He retrieved money transfer receipts discarded by customers to extract their personal data.
2. The reset: On the application, he entered the victim's number and clicked on "forgotten password".
3. The theft: Once the reset code was received by the victim, he would urgently call her back (via method 1) to have the new code dictated to him, allowing him to drain the account.

How did he withdraw the money? To access the funds without getting caught, the suspect used an image editing application. He replaced the photos on the stolen identity cards with his own, then calmly presented himself at the withdrawal agencies.

Recommendations from the National Police

In response to this incident, the National Police felt it necessary to reiterate essential safety rules:

1. For users: A password is strictly confidential . No legitimate agent of any company will ever ask you for it. Do not share it under any circumstances.
2. For businesses: Money transfer companies are urged to urgently strengthen their security and customer account protection measures.

The DPJ calls on the public to be extra vigilant on a daily basis and to immediately report any suspicious behavior or calls.