Rising Digital Fraud in Moroccan Banks Raises Questions About Liability and Customer Compensation

The Moroccan banking system is facing an escalating wave of digital fraud and cyberattacks targeting customers’ accounts, prompting renewed debate over the responsibility of financial institutions to safeguard citizens’ deposits and compensate victims of cybercrime.

In a parliamentary question addressed to the Minister of Economy and Finance, MP Aicha El Kout, representing the Justice and Development Party group, warned of what she described as a “dangerous evolution in digital fraud techniques.” She referred to recent alerts issued by Bank Al-Maghrib concerning social engineering schemes and malicious links designed to steal sensitive banking data.

Parliamentary Concerns Over Escalating Cyber Threats

According to the MP, Moroccan authorities have dismantled networks specialized in hacking telecommunications systems and impersonating banking institutions. These criminal groups allegedly use spoofed calls, phishing emails, and fraudulent SMS messages to trick customers into revealing confidential information, including card details and one-time authentication codes.

El Kout also highlighted reports indicating that Moroccan bank card data has appeared on the so-called “dark web,” an encrypted part of the internet often associated with illicit transactions. Cybersecurity experts regularly warn that once data is leaked into underground marketplaces, it can be resold multiple times, increasing the scale of potential damage.

Banks’ Responsibility to Protect Deposits

The MP emphasized that while many attacks begin with social engineering tactics targeting customers, breaches often expose weaknesses in banks’ information systems and internal cybersecurity defenses. In her view, financial institutions bear primary responsibility for securing deposits, as they are entrusted with the custody and management of citizens’ funds.

This argument echoes broader international standards on operational resilience and consumer protection. Organizations such as the Bank for International Settlements and regulatory authorities worldwide increasingly stress the importance of robust cybersecurity frameworks, real-time fraud detection systems, and customer reimbursement mechanisms in cases of unauthorized transactions.

Victims Demand Faster and Transparent Compensation

Victims of digital fraud are reportedly calling for banks to assume both legal and ethical responsibility by activating swift and transparent compensation procedures. In many cases, customers claim that they are left navigating lengthy internal investigations while significant sums remain blocked or unrecovered.

The debate centers on the principle that banks, as custodians of deposits, must implement adequate preventive measures. These include multi-factor authentication, transaction monitoring powered by artificial intelligence, continuous vulnerability assessments, and enhanced staff training to detect emerging threats.

Call for Urgent Government Measures

In her parliamentary question, El Kout urged the Minister to clarify the urgent measures the government intends to adopt to compel banks to strengthen their cyber defense systems. She also requested details on the legal procedures and regulatory mechanisms that would guarantee compensation for citizens whose accounts have been compromised.

The issue raises broader questions about regulatory oversight and the evolving nature of financial crime in an increasingly digital banking environment. As online banking services expand and mobile payments become more widespread, experts warn that cybercriminal networks are also becoming more sophisticated and transnational.

Observers note that reinforcing cooperation between banks, telecom operators, law enforcement, and cybersecurity agencies will be critical to containing the threat. Ultimately, restoring public confidence may depend not only on technical upgrades, but also on clear accountability rules and consumer-centered compensation frameworks.