How to Report Cybercrime and Online Fraud in Morocco (2026)
Scammed or hacked in Morocco? Who to call (police 19), how to report online fraud on the DGSN E-Blagh platform and to maCERT, and how to try to get your money back.
Morocco has its own police force, cybercrime law and data-protection regulator, so if you are scammed or hacked here, you report to Moroccan authorities, not to any foreign agency. Whether the fraud hit your bank account, a mobile wallet or a social media login, this guide shows you exactly who to contact, how to preserve evidence, and how to try to get your money back. Act fast: the sooner you tell your bank, the better your odds.
Primary sources: DGSN (National Police) · DGSN E-Blagh online reporting · maCERT / DGSSI · Bank Al-Maghrib
On this page
First: stop the loss
- Contact your bank or card issuer immediately. If you sent money or shared card details, call the number on your card or statement, report the fraud, and ask the bank to stop or recall the payment and freeze the account. For card payments, ask about a chargeback. Our chargeback guide explains how.
- Stop all contact with the scammer. Never send more money to "release" or "verify" funds, and never install remote-access software a caller asks for. That is the scam. Block the number, email and account.
- Secure your accounts by changing passwords, signing out other devices and turning on two-step verification. If you clicked a link, see what to do after clicking a phishing link.
- Keep evidence: screenshots of messages, payment references, phone numbers, account details and the URL of any fake site.
Who to report to
- Emergency or a crime in progress: call 19 (Police Secours). In rural areas the Gendarmerie Royale is reportedly reachable on 177, and 112 is sometimes mentioned as a mobile emergency number, though neither appears confirmed on DGSN's own channels, so 19 is the number to rely on.
- Online fraud, hacking or sextortion: report through DGSN E-Blagh at e-blagh.ma, the national police's dedicated digital-crime platform.
- A cyberattack or security vulnerability: report to maCERT, run by the DGSSI (Direction Générale de la Sécurité des Systèmes d'Information), at [email protected] or through dgssi.gov.ma.
- Banking or financial-services complaints: contact your bank first, then escalate an unresolved complaint to Bank Al-Maghrib, the central bank, via bkam.ma.
Reporting does not by itself return your money, but it creates an official record and feeds national intelligence on fraud patterns. Report even if you lost nothing, because the information still helps stop the next victim.
Getting your money back
Morocco uses the Moroccan dirham (MAD). How you paid decides your options, and speed is everything.
| How you paid | What to do |
|---|---|
| Bank transfer | Call your bank within minutes to try to stop or recall the payment. Ask about its fraud policy and file a written complaint if it refuses to help. |
| Debit or credit card | Ask your card issuer for a chargeback and dispute the transaction in writing. Card payments carry the strongest protection. |
| Cash deposit, e-wallet or crypto | Rarely recoverable. Report to the platform and E-Blagh at once, and beware "recovery agents" who contact you afterward, that is usually a second scam. |
Moroccan banks are not bound by an automatic reimbursement guarantee for authorised transfers. Report the fraud, file a formal claim with your bank, and escalate a refused claim to Bank Al-Maghrib if the bank's own complaints process does not resolve it.
Scams that hit Morocco
Moroccan authorities and E-Blagh data have flagged repeated patterns:
- Fake investment platforms that use AI-generated video or audio to impersonate Bank Al-Maghrib or its governor, promising guaranteed returns.
- BTMOB, an Android banking trojan flagged by DGSSI, which spreads through fake apps and steals banking credentials once installed.
- Digital fraud and sextortion reported through E-Blagh, including blackmail over intimate images or videos, and impersonation of officials or family members to extract payments.
See how the underlying messaging trick works in our explainer on how phishing works and how to stop it.
The law and your data
Computer offences in Morocco, including unauthorised access to a computer system, are covered under Law No. 07-03 of 2003, which added articles 607-3 through 607-11 to the Penal Code. This is separate from Law 05-20 of 2020, which governs critical-infrastructure cybersecurity rather than individual fraud. Personal data is protected under Law No. 09-08 of 2009, enforced by the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel). There is currently no mandatory data-breach notification duty in force under Moroccan law; a 72-hour notification requirement has been proposed as a reform but has not yet been enacted, so do not expect an automatic breach notice from a company that mishandled your data today.
FAQ
Can I report a Morocco-based scam to my home country's fraud agency instead?
You can also inform your own country's authorities, especially if you are a foreign resident or tourist, but the crime happened under Moroccan jurisdiction. Report to DGSN E-Blagh and, for cyberattacks, to maCERT, so Moroccan investigators can act.
My email or social media account was hacked. Who do I tell?
Secure the account first: change the password, sign out other devices and turn on two-step verification. Report the incident through E-Blagh, and to maCERT if it involves a broader system compromise, or to Police Secours if money or identity documents were affected.
I only received a suspicious message and lost nothing. Should I still report it?
Yes. Reporting scam calls, texts and fake sites through E-Blagh helps DGSN track offenders and warn others, even when no money changed hands. Keep a screenshot before you block the sender.
Sources: DGSN (National Police) · DGSN E-Blagh · maCERT / DGSSI · Bank Al-Maghrib
If you have been targeted, you are not alone. See our country-by-country cybercrime help hub for step-by-step reporting and recovery guides.