Concerns have emerged in Morocco over calls and messages claiming to be from National Social Security Fund employees, with the issue gaining attention on social media. Targets of these communications report callers seeking personal information, including banking details, birthdates, and other sensitive data.
Leila: A Moroccan Woman Targeted by a Scam Call
Leila, one of the Moroccan citizens targeted by these scam calls, told Misbar she received a call last week from someone claiming to be affiliated with the Moroccan National Social Security Fund. The caller told her she was eligible for a financial support payment of 2,500 Moroccan dirhams (about $250).
Although Leila immediately suspected it was a scam, she continued the conversation and asked the caller to clarify the requirements. He asked questions such as which city she was from. When Leila questioned why someone handling her file from the administration wouldn't know this detail, the caller responded that he was only responsible for disbursing funds “as authorized by the king” and did not have access to her full file.
When Leila became frustrated and tried to end the call, she said the caller began insulting her with obscene language before hanging up.
Leila explained that these scammers often reach out on various occasions, sometimes claiming to distribute financial support for events like Eid or using other pretexts. When asked if she had reported the caller, Leila said she decided not to file a complaint, having previously reported another scammer with no result.
Ahmed Was Targeted by a Series of Scam Calls
For Ahmed, who frequently receives these scam calls, his tactic is to leave them on hold while waiting to get the information they seek. He describes the callers as claiming to be from his bank, announcing he has won money, or saying an issue with the social support system needs immediate attention.
According to Ahmed, the callers typically ask for personal details such as full name, ID number, bank card information, and job details. “They seem to tailor their approach based on the profile of the person they are targeting. And if the person appears naive or unaware, the scammers often press for more sensitive information to achieve their goal,” Ahmed told Misbar.
Ahmed expressed uncertainty about how the scammers obtain people’s phone numbers. While he doubts they have access to a database, he suspects the callers might be dialing random numbers or modifying existing ones to target new victims.
Ahmed said these scam practices are widespread and commonplace. He believes addressing the issue requires a broader solution, including digitizing administrative services, promoting digital currencies over cash, and streamlining official communication and administrative procedures.
National Social Security Fund Takes Action
The Moroccan National Social Security Fund (CNSS) issued a statement in Arabic distancing itself from individuals contacting citizens while impersonating Fund representatives and requesting their banking details.
In the warning, the CNSS urged insured individuals to be cautious about sharing personal information with unreliable third parties, as it could lead to scams, fraud, and the misuse of their data for suspicious purposes.
The CNSS also made it clear that it will take legal action against anyone found to be involved in these fraudulent activities, stating that it will pursue all necessary legal measures.
The statement advised insured individuals to verify any information related to them by consulting the CNSS’s official website at www.CNSS.ma and its official social media pages.
Other Cases Related To Direct Social Support
Similarly, a notice issued by the National Defense Administration through the General Directorate of Information Systems Security, in French, identified a fraudulent website, "www.asd-ma.com," which falsely claims to be the official website for direct social support (https://www.asd.ma).
The Moroccan National Defense Administration warned that this fake website targets Moroccans seeking social support, using deceptive messages with malicious links designed to collect personal information for fraudulent purposes, including stealing funds related to the social support system.
The administration cautioned that the fraudulent site tricks victims into providing sensitive details such as their national ID number, banking information, and phone numbers, increasing the risk of further scams, including bank fraud and phishing attacks.
The notice urged citizens to be vigilant about suspicious links and avoid clicking on links received via SMS or email, especially from unknown or untrusted sources. It also recommended that citizens refrain from sharing their bank card numbers or security codes via SMS, as official authorities never request such details.
The National Defense Department advises individuals who have already entered their information on the fraudulent website to stop sharing sensitive data via messages or phone calls, block their bank card, contact their bank to request a new one, and regularly monitor their accounts for any suspicious activity if their bank card details have been disclosed.
Moroccan Laws and Measures Against Scams and Fraud
Ali Arjdal, a Moroccan researcher specializing in privacy and cybersecurity issues, believes that “the most serious aspect of the current situation is that scammers are using modern technology to target citizens, especially vulnerable communities, through phishing emails and calls related to the social security system.”
“The major issue is how these scammers have access to citizens' personal data, such as phone numbers or email addresses, which raises the possibility of data databases being leaked or hacked,” Ali said.
According to Law No. 09.08 on the Protection of Individuals against Automatic Processing of Personal Data, health-related data is categorized as sensitive data (Article 1, paragraph 3). This data includes health files and compensation for damages and diseases, making any breach a serious threat to individuals' security and safety.
Moroccan law criminalizes any communication or message containing scam content through digital or traditional media. These acts are considered among the most serious cybercrimes. Their danger stems from the fact that they target individuals, especially vulnerable groups, and exploit their ignorance or technical weakness to achieve illegal gains.
According to the expert, “Scam calls targeting Moroccans, especially regarding social security, are classified as cyber fraud crimes, which are severely punishable under the Moroccan penal code.”
Ali emphasizes that protecting citizens from these acts requires effective intervention on two levels:
Legislative level: Strengthening existing legal texts to ensure adequate deterrence of these crimes. According to the researcher, Moroccan law has established a strict legal framework to criminalize fraudulent communications, but the biggest challenge remains the effective implementation of these provisions.
Institutional level: The need to reinforce measures to protect databases and ensure they are not leaked or hacked.
For Ali, the most important question remains: How do we proactively address this phenomenon before it turns into a crisis that threatens citizens' trust in institutions?
Ali highlights that protecting personal data and privacy is a critical issue in Moroccan legislation, with both citizens and institutions needing to assume responsibility for tackling the risks of illegal content and phishing. To effectively address these challenges, the specialist advocates for an integrated strategy that combines public awareness, legal frameworks, and practical solutions.
According to the expert, several steps must be taken into account, including:
Raising societal awareness: Citizens must be well-informed about handling and protecting their personal information, as individual responsibility is crucial in tackling these challenges.
Legal and institutional mechanisms: Legal and digital tools must be in place to protect citizens from these threats. The Moroccan government has introduced various mechanisms, including:
- The “Iblagh” Digital Platform launched by the General Department of National Security to allow citizens to report illegal digital content quickly and securely.
- Online Complaints to the Public Prosecutor’s Office: The Public Prosecution has set up a digital platform at https://plaintes.pmp.ma/ where citizens can submit complaints online. This system ensures a smooth, secure process and allows citizens to track the progress of their complaints until they are referred to the relevant authorities.
- Recourse to Security and Judicial Authorities: Citizens can seek help from security and judicial authorities in cases of digital violations.
Collaboration between individuals and institutions: Addressing cybercrime and protecting privacy requires a collaborative effort. This partnership should focus on strengthening digital surveillance, supporting awareness campaigns, and establishing efficient reporting channels to enable rapid intervention.
Read More
Can Robocalls Mislead Voters in the U.S.?
Warning Over Online Misinformation Ahead of Spanish Election
