Several Moroccan banks have issued warnings about phishing attempts recently circulating on social media, as well as through fraudulent messages and phone calls. One scam, in particular, masquerades as a Moroccan bank and invites users to participate in a survey with the promise of winning 2,000 dirhams. The scam tricks users into providing their login credentials under the pretext of completing the survey. The attackers then secretly add a new beneficiary and prepare a fraudulent transfer, denounced Moroccan cybersecurity consultant Mohamed Cherifi, who shared the warning on X (formerly Twitter). To finalize the scam, victims are asked to provide a One-Time Password (OTP), allowing the fraudsters to complete unauthorized actions, such as money transfers. BMCI, whose visual identity was exploited in this phishing scheme, responded with an alert on its social media channels earlier in July: «The visual currently circulating is fraudulent. BMCI does not offer any bonus via surveys». «Never share your banking information and remain vigilant. Do not click on suspicious links. In case of doubt, call 28 28 or contact your advisor», warned the bank. Without directly referencing this specific scam, Bank of Africa issued a similar warning in multiple posts, using the hashtag #منجاوبش («I don't respond»). The bank urged users to: – Never respond to messages asking for personal information (card number, codes, etc.); – Never click on suspicious links in emails; – Never confirm personal details over the phone, even if the caller seems legitimate. «We will never ask you for personal information via phone, message, or email», the bank emphasized. Banque Populaire echoed the same warning on its Facebook page earlier this month, stressing that «fraudsters may impersonate your bank or other institutions to request your personal information», and adding, «never share your login credentials, password, bank card details, or any sensitive data with anyone». Crédit Agricole du Maroc also warned of a different type of fraud, in which scammers call clients pretending to be bank advisors. In a Facebook post published in July, the bank cautioned customers never to share their banking credentials or card details, and never to transfer money based on a stranger's request. It advised clients to call 6464 in case of any suspicion. CIH Bank took to social media with a brief poll, asking followers whether they would click on a suspicious link received via message. The example shared involved a foreign phone number claiming the message was the final step to confirm an online order. The user was urged to click on a link to complete their personal information and finalize the delivery, a classic phishing tactic.
