Zimbabwe reports surge in AI-powered cybercrime and mobile money fraud

What happened

Zimbabwe is experiencing a surge in AI-powered cybercrime, with cybercriminals deploying deepfake voice cloning, automated phishing, and adaptive malware against individuals, businesses, and public systems.

Mobile money fraud exceeds $30 million annually, and phishing and social engineering attacks have risen by over 40% in recent years. Fraudsters use generative AI to craft personalised phishing messages at scale and develop malware that evolves in real time to evade detection.

Reported impact

Zimbabwe's digital economy expansion—with internet penetration surpassing 80% and mobile money platforms processing billions of dollars annually—has created vulnerabilities to sophisticated attacks.

The impact extends beyond financial losses. Victims include pensioners tricked by cloned voices and small businesses losing critical data. The erosion of trust in digital systems threatens Zimbabwe's digital transformation.

Index analysis

Globally, cybercrime is projected to cost more than $10 trillion annually, while Africa loses over $4 billion each year. Zimbabwe's rapid digital expansion and widespread adoption of digital financial services have opened the door to more sophisticated AI-driven attacks.

Governance controls

Zimbabwe is rolling out a national security operations center (85% complete) to centralize threat monitoring and a national incident response team to coordinate responses to cyberattacks.

A national cybersecurity strategy has been finalized and awaits cabinet approval. The government plans to launch the Zimbabwe AI Cyber Shield program within the next year, which will include a centralized AI-based fraud detection platform, training for 10,000 cybersecurity professionals, and a legal framework to guide ethical AI use. Authorities are also working to tighten legal frameworks to criminalize misuse of AI technologies, including deepfakes and identity fraud.

Classification

Organizations

Zimbabwe Government (regulator), Zimbabwe Information and Communication Technology Ministry (regulator)

Category

Fraud, scams and manipulation

Industry

Digital security

Country

Zimbabwe

Harm status

Actual harm

Intent

Intentional

Timing

Unknown

Harm types

Economic or property, Public interest

Harmed

General public, Business, Consumers

Failure modes

Voice clone

AI systems

Deepfake voice cloning, Generative AI for phishing, Adaptive malware, Zimbabwe AI Cyber Shield

Sources and evidence