The rise of digital banking services facilitates financial transactions, but it also brings with it new forms of fraud. A recent case handled by the Platform for Combating Cybercrime (PLCC) is a striking example.

MCBM, a customer of a bank and temporarily out of the country, received a message prompting him to update his banking app. Believing the notification to be legitimate, he entered the requested information. Moments later, he lost access to his account.

Without his knowledge, two fraudulent transfers of 5 million and 7 million FCFA were made, causing a total loss of 12 million FCFA .

A fraud based on SIM card hacking

The investigation revealed a well-established modus operandi. The cybercriminals fraudulently deactivated the victim's SIM card .

By retrieving the phone number associated with the bank account — notably used for WhatsApp — they were able to receive the one-time verification (OTP) codes necessary to:

-Activation of the banking application

-transaction confirmation

Several suspects arrested

Having taken up the case, the PLCC, the technical center of the National Agency for Information Systems Security (ANSSI), conducted investigations which made it possible to identify several people involved.

Among them are AWGT and AGHT, two brothers , while another suspect is actively being sought.

The suspects have admitted to the acts and will be brought before the judicial authorities. The investigations are continuing to dismantle the entire network.

Offenses severely punished by law

The suspects are being prosecuted for:

-fraudulent SIM card change

-fraudulent use of personal identification information

-bank account fraud involving 12,000,000 FCFA

In accordance with Law No. 2013-451 of June 19, 2013, relating to the fight against cybercrime and UEMOA Regulation No. 15 on payment systems, these acts are punishable by:

-1 to 3 years imprisonment

-100,000 to 2,500,000 FCFA fine

A reminder to be vigilant

This case highlights the risks associated with phishing and SIM swapping , two techniques increasingly used by cybercriminals.

Authorities remind users that banks never request sensitive information via an unsecured message or link and urge users to systematically verify the authenticity of communications before any manipulation.