The DRC has seen a dramatic surge in digital adoption, driven by expanding mobile networks, internet access, and mobile financial services.
By the end of 2025, mobile subscriptions reached nearly 74 million users, representing about 66% penetration, a massive rise from just 29.3 million in 2017. This growth has been fueled by increased smartphone use, improved telecom infrastructure, and wider adoption of digital payments.
But experts say the expansion is also exposing weak points in the country’s cybersecurity systems.
A major red flag came in January 2023 when international charity GiveDirectly reportedly lost about $1.2 million after criminals exploited SIM swap fraud.
SIM swapping allows attackers to take control of victims’ phone numbers, intercept one-time passwords, and gain access to mobile banking accounts and digital wallets.
Investigators also pointed to possible insider involvement, highlighting serious gaps in identity protection and internal security controls.
Cybersecurity officials in Kinshasa admit that the pace of digital transformation is outstripping the country’s ability to fully secure its systems.
According to the Internet Society, the DRC has an internet resilience score of 34%, placing it at a medium capacity level to withstand cyber disruptions.
Experts warn that as critical sectors such as banking, telecoms, mining, energy, healthcare, and government services become more digitized, they also become more exposed to cyberattacks, ransomware, and system sabotage.
- Mobile money fraud and banking scams
- Ransomware attacks on institutions
- AI-powered phishing schemes
- Disinformation and digital manipulation campaigns
- Infrastructure-focused cyber sabotage
To respond to the rising threats, the DRC government has introduced new cybersecurity measures aimed at strengthening national digital protection.
These include the adoption of the African Union Cybersecurity and Personal Data Protection Convention (2023) and the launch of a National Cybersecurity Strategy to improve resilience and institutional capacity.
The strategy also proposes the creation of:
- A National Cybersecurity Agency
- A Computer Emergency Response Team (CERT)
- A National Security Operations Centre for real-time threat monitoring
Telecom companies and international partners are also stepping up.
Orange has introduced cybersecurity solutions in the DRC, while organizations such as the World Bank and the French Development Agency (AFD) are supporting digital infrastructure and cyber resilience investments.
Experts say strong cybersecurity is now essential for economic growth, investor trust, and the long-term success of the country’s digital economy.
Secure systems are seen as key to expanding e-commerce, mobile banking, public digital services, and attracting foreign investment.
While the DRC has made progress in developing cybersecurity frameworks, challenges remain in enforcement, funding, and technical capacity.
Still, stakeholders remain hopeful that sustained reforms and global partnerships will help the country secure its fast-growing digital economy and reduce its vulnerability to cybercrime.
