Zimbabwe probes unprecedented wave of WhatsApp account takeovers
The government is investigating a wave of reported account takeovers affecting WhatsApp Business and other Meta platforms.
Information Communication Technology, Postal and Courier Services Minister Tatenda Mavetera said the matter is being handled through a coordinated response bringing together the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ) and the Cyber Crime Division of the Zimbabwe Republic Police.
“Government is deeply concerned about the reported account takeovers affecting WhatsApp Business and other Meta platforms. The scale of the reported attack is unprecedented and requires a coordinated response to protect our citizens and businesses,” Mavetera said.
Mavetera said the Ministry is coordinating engagement with the mobile network operator concerned and with Meta, which owns WhatsApp, Facebook and Instagram.
“The matter is being thoroughly investigated through POTRAZ. The Ministry is coordinating engagement with the concerned mobile network operator and the Zimbabwe Republic Police through their Cyber Crime Division is also working so that we are able to engage the relevant parties, which are Meta,” she said. She said the MNO will issue a comprehensive statement on its findings and response measures.
She said investigations are examining all relevant angles, including the potential role of SMS termination partners, commonly known as aggregators, and the systems of the platforms concerned.
“This remains a line of inquiry, and evidence must establish responsibility. POTRAZ is also engaging Meta. Meta’s participation is essential to investigating activity on its platform and supporting account protection and recovery,” Mavetera said.
A particular concern, she said, is that criminals may be seeking to exploit compromised accounts linked to Meta advertising services and associated payment arrangements.
“Investigators are determining whether financial information has been exposed or unauthorised transactions have occurred,” she said.
Mavetera urged citizens and businesses to urgently review their account access, linked devices, advertising activity and payment transactions.
“We really want to urge our citizens and businesses to review account access, linked devices, advertising activity and payment transactions. They should not share their passwords, their PINs or verification codes. They need to independently verify requests for money,” she said.
She advised those who detect suspicious activity to contact their banks immediately to block payments and to use the platforms’ official account recovery processes.
“If you detect suspicious activity, we are encouraging all our citizens to contact their banks and also make sure that their payment is not approved immediately, but they also need to use the platform’s official recovery processes,” she said.
Mavetera also urged the public to report criminal activity through trusted channels, including the police and the responsible MNOs, to expedite response.
She said Government has been assured that the MNO concerned is putting in place a 24/7 response mechanism for affected citizens.
“As Government, our immediate priority is to contain further harm, support affected users and establish the facts,” she said. “We will communicate any verified information that becomes available to us.” *_-Pindula_*
