Online Reporter
Nyore Madzianike
Senior Reporter
It began like a celebration.
ACROSS Zimbabwe, civil servants are smiling at their phones as alerts of long-awaited bonuses light up their screens, promising relief after a hard-working year.
But behind the glow of those messages, in the invisible alleys of the internet, another kind of alert might be pulsing — a trap set by ruthless cybercriminals who had perfected the art of digital deceit.
A notable example of such a con artist is Tranos Taurai Muzanenhamo.
He is just 27-years-old, but already a name whispered in police corridors.
On October 31, 2025, his luck ran out after detectives cornered him and two alleged partners — Rumbidzai Tsongora (24) and Bradwell Shangwa (25) — at a quiet lodge in Shurugwi.
Their supposed getaway car, a Toyota Mark X, was less a vehicle than a mobile command centre of crime.
Inside, fake national identity cards, multiple SIM cards, bank cards, several mobile phones and even a Starlink internet device — a symbol of how far Zimbabwe’s fraudsters have gone digital.
Police say their operation was simple, sinister and stunningly effective.
A text message pings onto a victim’s phone.
It looks genuine-a bank alert, a warning from a mobile service provider.
“Suspicious activity detected. Verify now to secure your account,” the message might read.
The message carries a neat link, convincing and urgent. The moment the victim clicks, the stage is set.
On the fake website, they enter their passwords, IDs, or one-time passwords (OTPs), believing they are protecting their money.
In truth, they have handed it straight to the predators.
Within minutes, the fraudsters contact the mobile network, posing as the victim, requesting a SIM replacement.
When the new SIM activates, the victim’s number dies — and their digital life is hijacked.
From there, the thieves take control: intercepting OTPs, draining mobile wallets, accessing bank accounts, even slipping into WhatsApp chats.
Using the victim’s profile, they message friends and family:
“I need help urgently, can you send something small?”
By the time suspicion rises, the money is gone.
Investigations link Muzanenhamo’s gang to 29 separate cases of cyber fraud across Harare, Bulawayo and other towns, with losses topping US$17 000 and ZiG30 665 912.30.
For weeks before his arrest, police had carried warnings of a nationwide manhunt, as digital victims came forward, stunned by how easily their confidence and cash had been stolen.
“Preliminary investigations reveal that the suspects allegedly obtained victims’ personal information through phishing schemes, data breaches and by accessing public records.
“Using these details, the suspects then impersonated victims to request SIM card replacements, thereby gaining control over victims’ mobile money platforms, bank accounts and WhatsApp profiles.
“This enabled the suspects to fraudulently transfer funds from victims’ accounts and ask for money from their contacts,” said Police Commissioner Paul Nyathi when Muzanenhamo’s gang was nabbed.
Now, as bonuses flow into accounts nationwide, experts warn that new scams are already in motion.
Phishing messages often spike during payout periods, when excitement dulls caution.
Each click, each link, could be the doorway to a financial nightmare.
Police have vowed to keep tightening the net, but vigilance remains the first line of defence.
The message from authorities is clear: no legitimate bank or service provider will ever ask for passwords, OTPs or personal information via unsolicited messages or links.
For the victims, the lesson came too late.
For others, the warning comes just in time.
As civil servants line up at ATMs and mobile agents, authorities warn that joy must walk hand in hand with caution because in the digital streets of Zimbabwe, not every message that promises security comes from a friend, some come from the shadows.
dyton mupawaenda