More than 31,000 Moroccan bank cards have been leaked on the dark web, exposing users to fraud risks. Discover the warning signs and the steps to take if you suspect your card has been hacked.
The massive leak of Moroccan bank card data on the dark web, recently revealed by the startup Cypherleak, has raised widespread concern. With more than 31,220 compromised cards, including 5,523 still valid, the risk of fraud is very real.
But how can users know whether their card is part of the exposed data? What warning signs should they look out for?
The massive leak of Moroccan bank card data on the dark web, recently revealed by the startup Cypherleak, has raised widespread concern. With more than 31,220 compromised cards, including 5,523 still valid, the risk of fraud is very real.
But how can users know whether their card is part of the exposed data? What warning signs should they look out for?
Warning signs to detect a data leak
Contacted by Médias24, Me Nasser Benwahoud, attorney at the Casablanca Bar and managing partner at NB Law Firm, explains that “some banking applications can quickly detect a leak by sending alerts in case of suspicious usage and displaying recent logins.” He also advises monitoring classic signs of banking fraud:
- Unknown transactions, even for small amounts. Fraudsters sometimes test small payments before making larger purchases.
- Unusual notifications sent by your bank.
- A payment refusal without any apparent reason, even though your account has sufficient funds.
- Fraudulent calls or emails impersonating your bank and requesting personal information.
Dark web banking surveillance
Financial institutions are not powerless against this risk. Specialized monitoring services allow banks to track the dark web and detect compromised cards in order to take preventive action. Some banks act proactively and directly protect their customers.
“When I was paying with my bank card, I was surprised to see a message appear on the payment terminal stating that my card was ‘hacked’. When I contacted my bank, I learned that this measure had been taken to block access to my card, whose data had been leaked. This anomaly was detected thanks to their monitoring system,” said a customer of a Moroccan bank to Médias24.
Other banks directly contact affected customers to advise them to block and replace their cards.
However, not all banks react in the same way. As Mohamed Amine Belarbi, founder of Cypherleak, explained to Médias24 in a previous article: “Some banks are more proactive than others in monitoring leaked card data and information, thanks to various international monitoring tools and coordination with international organizations that support banks in detecting and combating fraud.”
In other cases, it is the customer themselves who notices suspicious activity on their bank account, particularly unknown transactions.
A customer from another bank shares their experience: “I received a notification on my banking app stating that my online payment limit was insufficient to complete a transaction. However, I was not making any payment, and no debit was planned on my account.”
“By checking my bank activity, I discovered that a failed debit attempt had occurred. Just before that, a payment of 18 MAD had been made. I then realized that someone had first tested my card with a small amount before attempting a larger transaction. Fortunately, my tourist payment limit prevented transactions above 500 MAD, which meant the fraudster attempted a payment exceeding that threshold.”
“I immediately emptied my account and contacted my bank, which advised me to block my card and file a claim. A few days later, I was reimbursed for the 18 MAD and received a new bank card.”
What to do if you suspect a leak of your card data?
Whether stolen or hacked, your bank card can be subject to fraud in various forms. In such situations, responsiveness is crucial to limit potential damage.
If you notice suspicious activity on your bank account, Me Nasser Benwahoud recommends taking the following steps as quickly as possible:
A request to block your bank card affected by fraud. Most Moroccan banks offer a card-blocking service via their mobile banking app or through a 24/7 hotline. The blocking procedure immediately stops all card payments. It should also be noted that this procedure is irreversible, even if you later find your card. You will therefore need to request a new one. This blocking request, made online or by phone, should also be confirmed in writing to your bank (ideally by registered letter with acknowledgment of receipt or hand delivery against receipt).
A declaration of loss, theft, or fraud to the police authorities. Once this declaration is made, the authorities will issue a report, which you should keep, as it is usually required by your bank (and may also be used in case of legal disputes).
Faced with the growing threat of banking data leaks, it is essential to adopt good cybersecurity practices and safe habits to prevent them, and to react quickly in case of any doubt.
