EcoCash X Account Compromised as User Demands Return of Alleged Missing Funds

HARARE — EcoCash’s official X account was compromised on Wednesday by an individual demanding the return of $35 allegedly lost through the mobile money platform, leading to more than two hours of unauthorized posts before the company regained control of the account.

During the incident, the individual altered the account’s profile image and display name while posting messages accusing EcoCash of failing to return funds that they claimed had gone missing. The posts also included offensive content and messages directed at customers interacting with the account.

In one of the messages published during the breach, the individual claimed to have taken control of the account to demonstrate what they described as weaknesses in the platform’s security systems. The person also alleged that EcoCash had refused to return the disputed funds.

The compromised account attracted significant attention from users who noticed unusual activity on the page. Several customers tagged the account seeking clarification about the situation as the unauthorized posts continued to appear.

Some users publicly questioned whether the account had been taken over, while others expressed concern about the nature of the content being shared from a verified corporate account. The individual controlling the account responded to some users with insulting remarks.

The person also appeared to comment on EcoCash’s efforts to recover access to the account. In additional posts, the individual suggested that the company had attempted multiple times to regain control while insisting on the return of the alleged missing funds.

There was no independent verification available regarding the claim that $35 had been lost through the platform. Customer complaints relating to missing funds or transaction disputes are not uncommon on social media platforms, where companies often provide customer support and assistance.

The incident also drew attention from competitors. EcoCash’s rival, OneMoney, used the opportunity to share a security advisory reminding customers not to disclose personal identification numbers and to avoid using predictable passwords or PIN combinations.

In its social media post, OneMoney combined the security advice with a light-hearted comment referencing password security. The post quickly gained attention as users continued discussing the EcoCash account incident online.

By Wednesday evening, EcoCash had regained control of the account and unauthorized posts were no longer visible. However, neither EcoCash nor its parent company, Econet, had issued a public statement nearly 20 hours after access to the account was restored.

The incident has renewed discussion about cybersecurity, social media account protection and digital security practices among Zimbabwean companies. It also highlights the growing importance of securing corporate social media accounts, which increasingly serve as customer service channels and key communication platforms.