🇲🇦
MOROCCO
Interpol flagged
FRAUD TYPES
Phishing, identity fraud, call center scams
KEY FACTS
5% of MENA cyberattacks. Part of North Africa fraud ecosystem. Operation Ramz participant.
REPORT FRAUD IN MOROCCO2▸
2 agencies you can contact. Tap one for how to reach it and what to have ready.
DGSDGSSI General Directorate of Information Systems Security▸
NATIONAL · CYBER / CRYPTO
BNPBNPJ National Brigade of Judicial Police▸
NATIONAL · CYBER / CRYPTO
BORN HERE▸
Nobody in our case files was born in Morocco yet.
OPERATED HERE1▸
Physically based or working in Morocco — lived, ran an office, met victims or was stationed here, per the record. Hacking a target here does not count.
Morocco
WHAT THEY DID HERE, AND WHEN
27 Oct–early Nov 2009Flies to Morocco as the scheme collapses; returns within about a week.SOURCE: Forbes; NBC News
OUR CASES BY CATEGORY▸
Share of the 1 case tied to Morocco (born or operated here)
FRAUD METHODS TIED HERE2▸
From the Global Fraud Encyclopedia and the cases above. Tap a method for its page.
#4 Ponzi Schemeused in our cases ▸#7 Money Launderingused in our cases ▸KNOWN FOR▸
THE PICTURE▸
Morocco-based groups are tied to two well-documented types of online fraud. The first is webcam sextortion aimed at foreigners, concentrated around the town of Oued Zem (Morocco World News, 2019). The second is corporate gift-card theft: Microsoft and the FBI say the Morocco-based group Storm-0539 ('Atlas Lion') has stolen up to $100,000 a day from some retailers (Microsoft, 2024). INTERPOL, Group-IB and Moroccan police arrested the phishing and carding-kit seller 'Dr Hex' in 2021 (Operation Lyrebird). Morocco also took part in the MENA-wide Operation Ramz, which led to 201 arrests across 13 countries (INTERPOL, 2026). Morocco left the FATF grey list in February 2023.
TOP FRAUDSTERS FROM HERE▸
No individual case from here is documented well enough to publish yet.
FRAUD BY CATEGORY▸
No official body here publishes a breakdown of fraud by type, so we show none rather than guess.
KEY NUMBERS▸
Up to $100,000/day Stolen from some targeted retailers by Storm-0539 (Microsoft Cyber Signals, May 2024)
30% Rise in Storm-0539 intrusion activity, Mar–May 2024 (Microsoft, May 2024)
134 Websites attacked by 'Dr Hex', 2009–2018 (INTERPOL, Jul 2021)
500+ Victims of one El Jadida sextortion suspect tried in 2019 (Morocco World News, Jun 2019)
WHO FIGHTS IT▸
DGSN (national police) cybercrime units; Penal Code provisions on extortion and computer crime.
INTERPOL cooperation: Operation Lyrebird (arrest of 'Dr Hex', Jul 2021), Operation Ramz (Oct 2025 – Feb 2026), Operation First Light 2026.
Bank Al-Maghrib tracks card and cheque fraud and tightened payment-security oversight in 2024; ANRF is the financial intelligence unit.
SOURCES▸
Microsoft Cyber Signals Issue 7, May 2024
The Record, May 2024
INTERPOL, 2021
INTERPOL, 2026
Morocco World News, 2019 and 2026
Bank Al-Maghrib, 2024
Case lists and figures compiled September 2026 from court records, regulators and major press; statuses change. Series reports above are fact-checked case files.