Nocma cyber fraud and executive detentions

The National Oil Company of Malawi (Nocma) lost approximately US$403,605 to a cyber fraud scheme involving the impersonation of Mozhandling Limited, a Mozambican firm managing fuel shipments at the Port of Nacala. The fraud occurred in April 2026 after criminals intercepted electronic communications and sent forged banking instructions, claiming the supplier had opened a new account with Bank of America. The deception was discovered two weeks later when the legitimate supplier contacted Nocma regarding an unpaid invoice.

Following the incident, Nocma acknowledged that internal control weaknesses during the implementation of a Government-to-Government fuel procurement model contributed to the loss. While the Malawi Police Service launched an investigation, Nocma CEO Emmanuel Matapa stated the company would not issue a second payment to the Mozambican firm, arguing that the responsibility for the compromised email and fraudulent instructions lies with the supplier.

As the situation developed, two high-ranking Nocma executives, Deputy Executive Director Miklas Reuben and Senior Operations Manager Thokozani Sesani, were detained. The company is currently reviewing its digital security protocols and financial verification systems.