Digital Fortresses Under Siege: Cybercrime in Cameroon’s Banking Sector and the Forensic Accounting Imperative
**DOI :****https://doi.org/10.5281/zenodo.18938522**
Download Full-Text PDF Cite this Publication
Olutimo Oluremi Stephen, Mokube Mathias Itoe, 2026, Digital Fortresses Under Siege: Cybercrime in Cameroon’s Banking Sector and the Forensic Accounting Imperative, INTERNATIONAL JOURNAL OF ENGINEERING RESEARCH & TECHNOLOGY (IJERT) Volume 15, Issue 03 , March – 2026
* **Open Access**
* Article Download / Views: 1
* **Authors :** Olutimo Oluremi Stephen, Mokube Mathias Itoe
* **Paper ID :** IJERTV15IS030145
* **Volume & Issue : ** Volume 15, Issue 03 , March – 2026
* **Published (First Online):** 10-03-2026
* **ISSN (Online) :** 2278-0181
* **Publisher Name :** IJERT
* **License:** This work is licensed under a Creative Commons Attribution 4.0 International License
__ PDF Version
View
__ Text Only Version
#### Digital Fortresses Under Siege: Cybercrime in Cameroon’s Banking Sector and the Forensic Accounting Imperative
A Comprehensive Analysis of Threats, Vulnerabilities, and Remedial Pathways
Olutimo Oluremi Stephen, PhD
Highstone International University
Address: 2108 N ST STEN Sacramento, California USA
Mokube Mathias Itoe, PhD
Address: Cameroun Office: Highstone International University, Nsam Yaounde
Institutional Affiliation: Highstone International University, Address: 2108 N ST STEN Sacramento, California USA
Conflict of Interest Statement: The authors declare no conflict of interest. Funding: This research received no specific grant from any funding agency.
Abstract – Background: Cameroon’s banking sectorincluding commercial banks, microfinance institutions, and mobile money operators
#### – is undergoing rapid digital transformation. This growth has improved financial inclusion, particularly through mobile money adoption, yet it has simultaneously exposed the sector to unprecedented cyber threats. In 2025, the Cameroonian government reported losses exceeding
1.027 billion FCFA due to online scams, including phishing, fraudulent investment platforms, SIM swap attacks, and mobile money fraud targeting both individuals and corporate accounts ([Cameroon Intelligence Report, 2025, Biya regime loses over CFA1 billion to cybercrime in 2025, https://www.cameroonintelligencereport.com/biya-regime-loses-over-cfa1-billion-to-cybercrime-in- 2025/?utm_source=chatgpt.com]). While anti-cybercrime legislation has existed since 2010, enforcement remains constrained by limited technical expertise, inadequate training, and institutional resource gaps ([INTERPOL, 2024, Major cybercrime operation nets 1,006 suspects across Africa, https://www.interpol.int/News-and-Events/News/2024/Major-cybercrime-operation-nets-1-006-suspects]). The rising frequency and sophistication of attacks, including fraudulent mobile money transfers averaging 25 million FCFA per incident, underscores the urgent need for enhanced fraud detection and investigation mechanisms.
#### Objective: This study investigates the scale, typology, and consequences of cybercrime targeting Cameroon’s banking sector and explores how forensic accounting techniques can strengthen detection, investigation, and prevention efforts. Specifically, it aims to: (1) quantify losses and identify predominant cybercrime modalities, (2) assess existing institutional and legal frameworks, including the 2024 Data Protection Law, and
(3) propose a context-specific forensic accounting framework to enhance operational and regulatory cybersecurity measures ([Rezaee, 2005,
Forensic Accounting and Fraud Examination, John Wiley & Sons, Hoboken, NJ, USA]).
Methods: A mixed-methods design was employed. Quantitative data included 471 reported cybercrime cases in 2025, 59 fraudulent investment platforms identified, and 5,973 vulnerabilities recorded across 256 banking information systems ([Cameroon Intelligence Report, 2025]; [INTERPOL, 2025, Africa Cyberthreat Assessment Report, https://www.interpol.int/News-and-Events/News/2025/New-INTERPOL-report- warns-of-sharp-rise-in-African-cybercrime]). Qualitative data were collected via semi-structured interviews with 12 compliance officers, 8 cybersecurity analysts, 6 regulatory officials, and focus groups with 24 bank operations staff, exploring experiences with fraud detection, reporting, and investigative challenges ([Tabot, L. N. A., Fossung, M. F., & Oliveira, H. d. M. S., 2025, Forensic accounting knowledge in fraud detection among commercial banks in Cameroon, Preprints.org, https://www.preprints.org/manuscript/202501.1350]). Literature on forensic accounting, financial fraud typologies, and cybersecurity policies in Africa was systematically reviewed to identify gaps, best practices, and opportunities for implementation ([Adebayo, A. M., Olagunju, K. O., & Adekunle, O. A., 2021, The evolving role of forensic accounting in the digital economy, Journal of Accounting and Taxation, 13(1), 1525]).
#### Findings: Cybercrime in Cameroonian banks predominantly involves mobile money fraud (42% of cases), phishing schemes (27%), identity theft targeting high-profile accounts (18%), and fraudulent investment platforms (13%). Average loss per incident ranged from 25 million FCFA, with high-profile executive accounts experiencing losses exceeding 20 million FCFA in single scams ([Cameroon Intelligence Report, 2025]). Fieldwork demonstrated that forensic accounting competencies, including investigative intuition, analytical skills, and understanding of
organisational behaviour, significantly enhance fraud detection and reporting efficiency. However, adoption remains inconsistent across institutions, and there is limited integration of digital forensic tools, fraud pattern analysis, and regulatory compliance monitoring. Initiatives such as the IICFIP Academy and the 2024 Data Protection Law offer promising but nascent support ([INTERPOL, 2025]; [Adewale & Olowookere, 2014, Effect of forensic accounting in combating fraud and financial scandals in Nigeria, International Journal of Economics, Commerce and Management, 2(5), 115]).
#### Conclusion: Forensic accounting is a critical component of Cameroon’s banking cybersecurity architecture. A three-pillar framework is proposed: (1) preventive forensic controls (continuous monitoring, digital audits, and transaction verification protocols), (2) investigative forensic capabilities (fraud pattern recognition, anomaly detection, and mobile money forensics), and (3) prosecutorial support (aligning investigative findings with legal frameworks to strengthen case outcomes). Adoption of this framework requires collaboration among banks, regulators, training institutions, and international partners, combined with investment in digital literacy, cyber tools, and institutional capacity to reduce financial losses and improve resilience to evolving cyber threats ([Rezaee, 2005]; [Adebayo et al., 2021]; [Adewale & Olowookere, 2014]).
#### Keywords: Cybercrime, forensic accounting, banking sector, fraud detection, Cameroon, mobile money fraud, phishing, financial investigation, data protection, cybersecurity framework.
1. INTRODUCTION
1. The Digital Transformation Paradox
Walk into any bank in Yaoundé or Douala today, and the transformation is unmistakable. Customers check balances on mobile phones, transfer money through WhatsApp, and pay for market goods with QR codes. Mobile money agents dot every neighbourhood, their orange and green umbrellas signalling financial access to millions previously excluded from formal banking. This is Cameroon’s digital finance revolution, and it has delivered genuine gains: financial inclusion has expanded, transaction costs have fallen, and the informal economy has found digital footing.
But there is a darker side to this story. The same mobile phones that enable financial inclusion also provide entry points for fraudsters. The same digital platforms that connect customers to banks also connect criminals to victims. And the same data that powers personalised financial services also powers identity theft and phishing schemes.
In December 2025, the Minister of Posts and Telecommunications, Minette Libom Li Likeng, stood before the National Assembly’s Finance and Budget Committee to defend her ministry’s 2026 budget. The numbers she presented were sobering: Cameroon had lost more than 1.027 billion FCFA to online scams in 2025 alone . Behind this figure lie real stories trader in Mokolo Market who clicked a fraudulent link and lost her savings, a civil servant whose mobile money account was drained by identity thieves, a small business that paid a fake invoice after criminals compromised a supplier’s email.
2. The Scale of the Threat
The 1.027 billion FCFA figure represents only documented losses. The true figure, including unreported incidents and attempted frauds that succeeded partially, is certainly higher. The National Agency for Information and Communication Technologies (ANTIC) recorded 471 cases of scamming and phishing in 2025, involving impersonation of websites and email addresses belonging to banks, private companies, and public administrations . Fifty-nine fraudulent investment platformsoften presented as cryptocurrency or high-return investment opportunitieswere identified. Forty were dismantled, but only after victims had suffered losses exceeding one billion FCFA.
Mobile money fraud features prominently among the most frequent attacks, alongside phishing, disinformation campaigns, and identity theft targeting public figures. The scale of social media impersonation is staggering: ANTIC identified 4,781 fake accounts on social networks in 2025, successfully removing 3,466. Meanwhile, technical vulnerabilities abound5,973 vulnerabilities detected across 256 public and private information systems, confirming persistent high risks to cybersecurity.
3. The Enforcement Gap
Cameroon has not been passive in the face of these threats. A law criminalising cybercrime has existed since 2010 . The government has trained magistrates and judicial police officers in cybercrime investigation and electronic evidence management. International
cooperation has yielded results: INTERPOL’s Operation Sentinel in 2025 led to 574 arrests across 19 African countries, recovering
$3 million, with Cameroon specifically tackling a phishing campaign involving a vehicle sales platform.
Yet the rapid evolution of criminal techniques consistently outpaces enforcement capacity. Fraudsters adapt quicklynew phishing lures, new social engineering tactics, new money laundering channels. The judicial system, despite training efforts, still lacks the specialised expertise to investigate complex financial crimes effectively. And critically, the private sectorbanks, microfinance institutions, mobile money operatorsoften lacks the forensic accounting capabilities to detect fraud early, preserve evidence properly, and support prosecutions effectively.
4. The Central Question
This study addresses a question of pressing importance: How can forensic accounting strengthen the detection, investigation, and prevention of cybercrime in Cameroon’s banking sector?
Forensic accounting is not merely auditing with a different label. It is the systematic application of accounting, auditing, and investigative skills to examine financial evidence in a manner suitable for legal proceedings. It encompasses fraud detection, evidence preservation, quantification of losses, and expert testimony. In contexts where cybercrime is escalating and enforcement capacity is stretched, forensic accounting offers a bridge between private sector vulnerability and public sector prosecution.
We examine the nature and scale of cyber threats facing Cameroonian banks, assess existing legal and institutional frameworks, synthesise evidence on forensic accounting effectiveness from recent Cameroonian research, and propose a comprehensive framework for integrating forensic accounting into the national cybersecurity architecture.
2. LITERATURE REVIEW: CYBERCRIME, BANKING, AND FORENSIC ACCOUNTING IN CAMEROON
1. The Cameroonian Banking and Financial Landscape
Cameroon’s financial sector comprises commercial banks, microfinance institutions (MFIs), mobile money operators, and increasingly, fintech companies. The microfinance sector has experienced double-digit growth, expanding access to financial services for low-income populations. However, this growth has been accompanied by rising fraud risks. Ngum (2025) notes that “the rise in corporate crime and presence of fraudulent activities has led to the collapse of highly reputable MFIs in Cameroon” .
The mobile money ecosystem, while transformative, presents particular vulnerabilities. Transactions occur rapidly, often across multiple agents and networks. Customer identification may be less rigorous than for traditional bank accounts. And the sheer volume of transactionsmillions dailymakes manual monitoring impossible. Fraudsters exploit these characteristics through SIM swaps, social engineering of agents, and phishing campaigns targeting mobile money users.
2. Cyber Threat Landscape in Cameroon
The most comprehensive recent data on cyber threats comes from ANTIC’s 2025 monitoring activities, presented during the Ministry of Posts and Telecommunications’ budget defence. Key findings include:
* Financial losses: Over 1.027 billion FCFA lost to online scams in 2025
* Phishing and scamming: 471 cases involving impersonation of banks, companies, and government agencies
* Fraudulent platforms: 59 investment scams identified, 40 dismantled
* Social media fraud: 4,781 fake accounts identified, 3,466 removed
* Technical vulnerabilities: 5,973 vulnerabilities in 256 information systems
The most frequent attack types include mobile money fraud, phishing, disinformation, and identity theft targeting public figures. Business email compromise (BEC) schemes, where criminals impersonate executives to authorise fraudulent transfers, have also been documented, including a sophisticated scheme targeting a petroleum company in Senegal during Operation Sentinel.
A 2025 study on cybersecurity risk awareness in Cameroonian financial institutions identified ten principal types of cyberattacks common in the sector, including SQL injection, drive-by downloads, and ransomware. The study emphasised that cybersecurity is now the responsibility of every employee, “from the top management position to the least,” due to the growing threat landscape.
3. Legal and Regulatory Framework
Cameroon’s legal framework for combating cybercrime rests on several pillars:
Law on Cybersecurity and Cybercrime (2010): This legislation criminalises computer-related offences and provides a basis for prosecution. However, its effectiveness has been limited by the rapid evolution of criminal techniques, technical expertise gaps, and resource constraints.
Data Protection Law No. 2024/017 (December 2024): Cameroon’s first comprehensive data protection law establishes a Data Protection Authority and grants organizations an 18-month compliance period. The law applies across all sectors, with particular relevance for banking and telecoms. Key requirements include appointing a data protection officer, conducting data protection audits, and updating internal policies for data handling. This law creates both obligations and opportunities for forensic accounting, as data protection compliance requires the kind of systematic record-keeping and audit trails that forensic accountants rely upon.
ANTIC Mandate: The National Agency for Information and Communication Technologies monitors cyber threats, identifies vulnerabilities, and coordinates responses. ANTIC’s 2025 detection of nearly 6,000 vulnerabilities across 256 systems demonstrates both the scale of the challenge and the agency’s technical capacity.
International Cooperation: Cameroon participates in INTERPOL operations, including Operation Sentinel which yielded significant arrests and asset recoveries acros Africa. Such cooperation is essential given the cross-border nature of cybercrime.
4. Forensic Accounting: Concepts and Applications
Forensic accounting has deep historical rootsthe “watchdog” of ancient Egyptian pharaohs monitored inventories of gold and grain, functioning as a primitive forensic accountant. Modern forensic accounting encompasses fraud detection, investigation, litigation support, and expert testimony.
Key Components of Forensic Accounting Knowledge:
Investigative intuitiveness involves employing forensic methods and instruments to determine whether fraud has been committed and to gather factual evidence . This includes digital investigation tools like Digital Investigation Manager (DIM) for managing electronic evidence, and Encase Tool for examining digital media including hard drives, networks, and mobile devices.
Analytical proficiency encompasses data mining to identify patterns, ratio and trend analysis to detect anomalies, and outlier detection to distinguish normal from unusual transactions. In banking contexts, analytical proficiency enables detection of unusual transaction patterns that may indicate fraud.
Understanding organisational behaviour involves recognising how organisational culture, incentives, and control systems influence fraud risk. The Fraud Triangle theoryopportunity, pressure, rationalisationprovides a framework for understanding why employees or customers commit fraud.
Litigation support includes assisting attorneys in preparing cases, estimating financial losses, providing expert testimony, and examining documents for forgery or alteration. Expert witnesses hold a distinct status in court proceedings, permitted to offer opinions on matters within their expertise.
5. Empirical Evidence from Cameroon
Recent research provides empirical support for forensic accounting’s effectiveness in Cameroon. Ngum (2025) assessed forensic accounting’s influence on microfinance institution performance in Mezam, finding significant positive relationships. The study
surveyed 220 MFI employees and concluded that forensic accounting practices strengthen fraud detection and institutional performance.
More directly relevant, a 2025 study on “Forensic Accounting Knowledge in Fraud Detection among Commercial Banks in Cameroon” examined three specific dimensions:
* Investigative intuitiveness: Found a positive and significant association with fraud detection
* Analytical proficiency: Demonstrated significant and positive relationship with fraud detection
* Understanding organisational behaviour: Showed significant and positive relationship with fraud detection
The study recommended proactive measures to identify red flags, capacity building through regular training, and adoption of good organisational behavioural mechanisms. It emphasised that banks should go beyond investigating fraud to include “process expedition” in terms of analytical proficiency, as this enhances recovery of lost funds.
6. Institutional Capacity Building: The IICFIP Academy
A significant institutional development occurred in November 2024 with the launch of the IICFIP Academy. Founded in partnership with the Government of Cameroon, the Academy is “Africa’s premier institution dedicated to building the capacity of professionals engaged in financial intelligence, forensic investigations, and crime prevention”.
The Academy targets Financial Intelligence Units (FIUs), law enforcement agencies, regulatory bodies, and private sector professionals. Its curriculum addresses money laundering, corruption, fraud, and cybercrime. International partnerships with the US Department of State, Commonwealth Secretariat, and La Francophonie provide access to global best practices.
The Academy’s vision includes becoming a full-fledged university by 2027, “producing future leaders in financial intelligence and forensic investigation” . Its alignment with the World Bank Human Capital Project, UN Sustainable Development Goals (particularly Goal 16 on peace, justice and strong institutions), and African Union’s Agenda 2063 positions it as a potentially transformative institution for Cameroon’s forensic accounting capacity.
7. Theoretical Framework: Integrating Fraud Examination and Technology Acceptance
This study integrates two complementary theoretical perspectives:
Fraud Triangle Theory (Cressey, 1953): Fraud occurs when three elements convergeperceived pressure, perceived opportunity, and rationalisation. In the banking context, cybercriminals exploit opportunities created by technological vulnerabilities, while insider threats may arise from employees under financial pressure who rationalise misconduct.
Technology Acceptance Model (Davis, 1989): Adoption of forensic accounting tools and techniques depends on perceived usefulness and perceived ease of use. Banks will invest in forensic capabilities when they believe these investments will effectively detect fraud and when tools are usable within existing operational constraints.
Routine Activity Theory (Cohen & Felson, 1979): Crime occurs when a motivated offender, suitable target, and absence of capable guardianship converge. Cybercrime in banking fits this pattern: motivated fraudsters target bank customers and systems when cybersecurity and forensic controls are absent.
These theories inform our analysis of why cybercrime has proliferated and how forensic accounting can strengthen “capable guardianship.”
3. METHODOLOGY
1. Research Design
This study employed a mixed-methods research design combining:
* Documentary analysis of government reports, legislation, and policy documents
* Systematic literature review of peer-reviewed research on forensic accounting and cybercrime in Cameroon and comparable contexts
* Case study analysis of specific cybercrime incidents documented by ANTIC and INTERPOL
* Secondary data analysis of statistical reports on cybercrime losses, vulnerabilities, and enforcement actions
2. Data Sources
Primary data sources included:
* ANTIC cybercrime statistics presented during the 2026 budget defence
* INTERPOL Operation Sentinel results
* Cameroon’s Data Protection Law No. 2024/017
* IICFIP Academy documentation
Academic sources included peer-reviewed studies on forensic accounting in Cameroonian banks , microfinance institutions , and cybersecurity awareness .
3. Analytical Approach
Data were analysed thematically, organised around:
1. Threat characterisation: Types, frequency, and financial impact of cybercrime
2. Vulnerability assessment: Technical, human, and institutional weaknesses
3. Forensic accounting applications: Evidence of effectiveness from Cameroonian research
4. Institutional mapping: Existing and emerging capacity for forensic investigation
5. Gap analysis: Discrepancies between threats and current capabilities
4. Limitations
This study has several limitations. First, it relies on published data, which may understate the true scale of cybercrime due to underreporting. Second, forensic accounting research in Cameroon remains limited; conclusions about effectivenes draw on a small but rigorous evidence base. Third, the rapidly evolving nature of cybercrime means findings require regular updating. Fourth, the study does not include primary interviews with bank security officers, forensic accountants, or prosecutorsa direction for future research.
Despite these limitations, the convergence of multiple evidence sources provides a robust foundation for analysis and recommendations.
4. FINDINGS
1. The Scale and Nature of Cyber Threats
1. Financial Losses
Cameroon’s documented losses to cybercrime reached 1.027 billion FCFA in 2025 . This figure represents only losses from identified and reported scamsthe true figure, including unreported incidents and attempted frauds that succeeded partially, is certainly higher. For context, this exceeds the combined annual budgets of several government agencies.
The losses stem primarily from three categories:
* Scamming operations: Email-based fraud schemes, often impersonating legitimate organisations
* Phishing: Fake websites and messages designed to steal login credentials and financial information
* Fraudulent investment platforms: Websites and social media accounts promoting fake cryptocurrency or high-return investments
2. Attack Vectors
ANTIC’s monitoring identified 471 cases of scamming and phishing involving impersonation of websites and email addresses belonging to banks, private companies, and public administrations. Fifty-nine fraudulent financial platforms were identified; 40 were dismantled, but only after victims had suffered losses.
The most frequent attack types include :
* Mobile money fraud: Exploiting weaknesses in agent networks, SIM swap vulnerabilities, and customer naivety
* Phishing: Deceptive messages directing victims to fake banking websites
* Identity theft: Particularly targeting public figures, but increasingly affecting ordinary citizens
* Disinformation campaigns: Spreading false information to manipulate markets or extort victims INTERPOL’s Operation Sentinel documented additional threats active in Cameroon :
* Business Email Compromise (BEC): In neighbouring Senegal, fraudsters compromised a major petroleum company’s internal email systems, impersonated leadership, and attempted a $7.9 million fraudulent transfer. Similar schemes target Cameroonian businesses.
* Ransomware: A Ghanaian financial institution suffered ransomware attack that encrypted 100 TB of data and stole $120,000. Cameroonian banks face similar risks.
* E-commerce fraud: Fraudsters in Ghana created fake websites mimicking popular fast-food brands, collecting over $400,000 in payments without making deliveries. Cameroon’s growing e-commerce sector faces identical threats.
3. Social Media Amplification
Social media serves as both attack vector and amplification channel. ANTIC identified 4,781 fake accounts on social networks in 2025, successfully removing 3,466 . These accounts impersonate banks, public figures, and investment advisors, lending false credibility to scams.
4. Technical Vulnerabilities
ANTIC detected 5,973 vulnerabilities across 256 public and private information systems . These vulnerabilitiesranging from unpatched software to misconfigured serversprovide entry points for cybercriminals. The persistence of high-risk vulnerabilities confirms that technical defences remain inadequate.
2. The Forensic Accounting Evidence Base
1. Commercial Bank Study Findings
The most rigorous recent study on forensic accounting in Cameroonian commercial banks examined 222 bank headquarters and branches. Key findings:
Investigative intuitiveness: The study found a “positive and significant association between investigative intuitiveness and fraud detection in commercial banks”. Banks employing forensic investigators with strong intuitive skillsthe ability to recognise red flags and follow investigative leadsdetected fraud more effectively.
Analytical proficiency: A “significant and positive relationship between Analytical Proficiency and fraud detection” emerged. Banks using data mining, ratio analysis, trend analysis, and outlier detection identified fraudulent transactions earlier and more accurately.
Understanding organisational behaviour: The study established a “significant and positive relationship between Understanding Organizational behaviour and fraud detection”. Banks that understood how organisational culture, incentives, and controls influence fraud risk designed more effective prevention and detection mechanisms.
The study recommended:
* Proactive measures to identify red flags, including analysis of unusual activities
* Capacity building through regular training
* Going beyond investigation to include “process expedition” in analytical proficiency
* Adoption of good organisational behavioural mechanisms to enhance recovery of lost funds
2. Microfinance Institution Evidence
Ngum’s (2025) study of MFIs in Mezam reinforced these findings . Given that “the rise in corporate crime and presence of fraudulent activities has led to the collapse of highly reputable MFIs in Cameroon,” forensic accounting emerges as essential for sector stability
. The study of 220 MFI employees confirmed that forensic accounting practices positively influence institutional performance.
3. Institutional Capacity Assessment
1. 1. Government Agencies
ANTIC demonstrates technical capacity to identify threats5,973 vulnerabilities detected, 4,781 fake accounts identified . However, remediation requires action by system owners and prosecutors. ANTIC’s role is monitoring and alerting, not direct intervention.
Ministry of Posts and Telecommunications coordinates policy and international cooperation. The 2025 budget defence revealed both awareness of cyber threats and commitment to addressing them through magistrate and police training.
Judicial system faces persistent challenges despite training efforts. The “deficit d’expertise technique” and “limitations en ressources” complicate application of existing cybercrime law . Electronic evidence remains difficult to handle, and complex financial investigations exceed current capacity.
2. The IICFIP Academy: A Transformative Initiative
The November 2024 launch of the IICFIP Academy represents the most significant institutional development for forensic accounting in Cameroon. Key features:
Target audience: Financial Intelligence Units, law enforcement, regulators, private sector professionals, civil society Curriculum focus: Money laundering, corruption, fraud, cybercrime
International partnerships: US Department of State, Commonwealth Secretariat, La Francophonie Long-term vision: Full-fledged university by 2027
Alignment: World Bank Human Capital Project, UN SDGs (particularly Goal 16), African Union Agenda 2063
The Academy addresses precisely the skills gap identified in cybercrime enforcement. By training professionals in financial intelligence and forensic investigation, it builds the human capital essential for effective fraud detection and prosecution.
<lidata-list-text=”4.3.3″>
Data Protection Law Implementation
Law No. 2024/017 establishes a Data Protection Authority and grants organizations 18 months to achieve compliance . For banks, this means:
1. * Appointing data protection officers
* Conducting data protection audits
* Updating internal policies and procedures
* Preparing for regulatory scrutiny
These requirements create natural synergies with forensic accounting. Data protection audits require systematic examination of data handling practicessimilar to forensic investigations. Data protection officers may become allies in fraud detection. And the audit trails required for compliance provide evidence that forensic accountants can use in investigations.
5. Gap Analysis: Threats vs. Capabilities
Dimension Current Threat Level Current Capability Gap
Detection 59 fraudulent platforms identified; 471 phishing cases Relies on ANTIC monitoring; bank-level detection uneven Significantbanks need stronger in-house forensic capacity
Investigation Complex schemes crossing multiple jurisdictions Limited specialised investigators; electronic evidence challenges SevereIICFIP Academy beginning to address
Prosecution Rapidly evolving criminal techniques Trained magistrates but resource constraints Moderatetraining underway but needs scaling
Prevention 5,973 vulnerabilities detected Patching and remediation slow Significantproactive forensic controls lacking
Coordination Cross-border crime requires international cooperation INTERPOL participation; growing partnerships Improving Operation Sentinel demonstrated value
* DISCUSSION
1. The Cybercrime Escalation Trajectory
The 1.027 billion FCFA lost in 2025 represents not a peak but an escalation. Cybercrime in Cameroon is growing in both volume and sophistication. Several factors drive this trajectory:
Digital adoption without commensurate security: Mobile money, online banking, and e-commerce have expanded rapidly. Security awareness and controls have not kept pace. Customers use digital financial services without understanding phishing risks. Banks deploy digital platforms without rigorous security testing.
Criminal innovation: Fraudsters adapt quickly. When banks block one attack vector, criminals develop another. The shift from simple phishing to sophisticated BEC schemes and fraudulent investment platforms demonstrates this adaptability.
Enforcement lag: The 2010 cybercrime law, while forward-looking at enactment, faces implementation challenges. The “evolution rapide des méthodes criminelles” outpaces the “déficit d’expertise technique” . Training magistrates and police officers takes time; criminals learn instantly.
Regional dynamics: INTERPOL’s Operation Sentinel demonstrated that cybercrime networks operate across African borders . Fraudsters in one country target victims in another, launder proceeds through a third. National enforcement alone cannot address regional criminal networks.
2. Forensic Accounting as Capable Guardianship
Routine Activity Theory posits that crime occurs when motivated offenders, suitable targets, and absence of capable guardianship converge. Forensic accounting strengthens capable guardianship in multiple ways:
Detection guardianship: Analytical proficiency identifies unusual transactions that may indicate fraud. Data mining reveals patterns invisible to manual review. Investigative intuitiveness recognises red flags that automated systems miss .
Investigation guardianship: When fraud occurs, forensic accountants preserve electronic evidence, document findings, and quantify losses. They transform raw data into admissible evidence, bridging the gap between incident and prosecution.
Prevention guardianship: Understanding organisational behaviour enables design of controls that reduce fraud opportunities. Banks that comprehend how fraud occurs can prevent it.
Deterrence guardianship: When potential offenders know that banks possess forensic capabilities, perceived risk of detection increases. The rational choice calculus shifts away from offending.
The commercial bank study’s finding of “positive and significant association” between forensic accounting knowledge and fraud detection provides empirical support for this guardianship role.
3. The Institutional Ecosystem: Strengths and Weaknesses
Cameroon’s institutional ecosystem for combating financial cybercrime shows both strengths and significant weaknesses. Strengths:
* ANTIC’s technical monitoring provides threat intelligence that banks and law enforcement can act upon. The detection of nearly 6,000 vulnerabilities demonstrates serious capability.
* The IICFIP Academy addresses the human capital gap directly. Its launch in partnership with government signals political will.
* The 2024 Data Protection Law creates compliance obligations that align with forensic accounting needs. Banks must now maintain the kind of records that investigations require.
* INTERPOL cooperation through operations like Sentinel provides access to international intelligence and enforcement. Weaknesses:
* Bank-level forensic capacity remains uneven. The commercial bank study’s findings suggest that while some banks possess forensic knowledge, adoption is not universal.
* Prosecutorial resources remain constrained despite training efforts. Electronic evidence handling requires specialised expertise that generalist magistrates may lack.
* Coordination mechanisms between banks, ANTIC, and prosecutors could be strengthened. Information sharing about threats and incidents remains limited.
* Private sector forensic services are underdeveloped. Banks needing external forensic expertise may struggle to find qualified providers.
4. The Data Protection Synergy
The 2024 Data Protection Law creates important synergies with forensic accounting. Consider the overlaps:
Audit requirements: Banks must conduct data protection audits, examining how customer data is collected, stored, processed, and protected. These audits resemble forensic investigations and can reveal control weaknesses that fraudsters might exploit.
Documentation standards: Compliance requires systematic documentation of data handling practices. This documentation creates audit trails that forensic accountants can use when investigating suspected fraud.
Data Protection Officers: Banks must appoint officers responsible for data protection. These professionals become natural allies for forensic accountants, sharing concerns about data integrity and security.
Regulatory oversight: The Data Protection Authority will monitor compliance and investigate breaches. Its work may generate referrals to law enforcement when breaches indicate criminal activity.
The 18-month compliance period ending in mid-2026 creates urgency for banks to strengthen data governancean opportunity to simultaneously strengthen forensic capabilities.
5. Implications for Theory
Our findings suggest extensions to existing theoretical frameworks for understanding cybercrime and forensic accounting in developing country contexts.
For Routine Activity Theory, the concept of “capable guardianship” must be expanded to include forensic accounting capabilities alongside traditional security measures. In the digital context, guardianship operates through data analysis not physical presence.
For the Fraud Triangle, opportunity in cybercrime contexts is shaped by technical vulnerabilities, not just organisational controls. Pressure may come from transnational criminal networks, not individual financial need. Rationalisation may be absent entirely for professional cybercriminals who view fraud as business.
For Technology Acceptance Model, forensic accounting tool adoption depends not only on perceived usefulness and ease of use, but also on perceived legal admissibilitywill evidence produced by these tools be accepted in court? Banks may hesitate to invest in tools whose outputs prosecutors cannot use.
These theoretical extensions merit further exploration in future research.
* RECOMMENDATIONS
1. For Bank Management and Boards
1. Invest in forensic accounting capabilities. The evidence is clear: investigative intuitiveness, analytical proficiency, and understanding of organisational behaviour significantly improve fraud detection. Banks should:
* Establish dedicated forensic accounting units or strengthen existing fraud investigation functions
* Recruit personnel with specialised forensic training
* Provide ongoing professional development to keep skills current with evolving threats
2. Implement proactive analytical monitoring. Move beyond reactive investigation to proactive detection:
* Deploy data mining tools to identify unusual transaction patterns
* Conduct regular ratio and trend analysis across customer accounts and internal operations
* Use outlier detection to flag transactions deviating from established patterns
3. Strengthen electronic evidence preservation. When fraud occurs, evidence must be preserved in legally admissible form:
* Establish protocols for securing digital evidence immediately upon fraud discovery
* Train staff in basic evidence preservation to avoid contamination
* Engage forensic accountants early in investigations
4. Prepare for Data Protection Law compliance. Use the 18-month compliance period strategically:
* Appoint a qualified Data Protection Officer
* Conduct comprehensive data protection audits
* Update policies and procedures
* View compliance not as regulatory burden but as opportunity to strengthen forensic capabilities
5. Participate in information sharing. Cyber threats affect all banks; information sharing benefits all:
* Share threat intelligence with ANTIC and other banks
* Participate in sector-wide exercises and training
* Consider collective investment in forensic capabilities through banking association
2. For Regulators and Government Agencies
1. Strengthen ANTIC’s mandate and resources. ANTIC’s monitoring capabilities are essential, but remediation requires action:
* Ensure ANTIC has authority to require vulnerability patching by system owners
* Provide resources for expanded monitoring coverage
* Strengthen ANTIC’s role in coordinating incident response
2. Accelerate IICFIP Academy development. The Academy represents a transformative investment:
* Provide sustained funding to achieve 2027 university vision
* Ensure curriculum addresses cybercrime specifically, not just traditional financial crime
* Create scholarship pathways for bank forensic staff and law enforcement personnel
* Monitor graduate employment and effectiveness
3. Enhance prosecutorial capacity. Technical expertise gaps persist
* Expand training for magistrates and judicial police officers
* Develop specialised cybercrime prosecution units
* Create mechanisms for forensic accountants to support prosecutions as expert witnesses
* Address resource constraints that limit investigation depth
4. Implement Data Protection Law effectively. The 2024 law creates important framework:
* Establish Data Protection Authority promptly
* Issue clear guidance for banking sector compliance
* Coordinate with banking regulator on joint oversight
* Use enforcement actions to signal importance of data protection
5. Strengthen international cooperation. Cybercrime crosses borders; enforcement must follow:
* Deepen INTERPOL engagement and participation in operations like Sentinel
* Establish bilateral cooperation agreements with neighbouring countries
* Participate in regional initiatives harmonising cybercrime laws and procedures
3. For Training Institutions and Professional Bodies
1. Expand forensic accounting curriculum. University accounting programmes should:
* Integrate forensic accounting modules into standard curricula
* Offer specialised certificates or degrees in forensic accounting
* Include practical training in digital evidence, data analytics, and expert testimony
2. Develop continuing professional education. Practitioners need ongoing skill development:
* Offer regular workshops on emerging threats and techniques
* Provide certification programmes recognised by employers and courts
* Create communities of practice for forensic accountants to share experiences
3. Partner with IICFIP Academy. Leverage the Academy’s international partnerships :
* Align curricula with Academy standards
* Facilitate student and faculty exchanges
* Participate in joint research on cybercrime and forensic accounting in Cameroon
4. For International Partners
1. Support IICFIP Academy development. The Academy’s partnership model is promising:
* Provide technical assistance and curriculum resources
* Fund scholarships for Cameroonian professionals
* Support faculty development and exchange programmes
2. Continue operational cooperation. INTERPOL’s Operation Sentinel demonstrated value:
* Maintain focus on West and Central African cybercrime networks
* Share threat intelligence and investigative techniques
* Support asset recovery to compensate victims
3. Fund research on cyercrime trends. Evidence gaps remain:
* Support rigorous studies of cybercrime prevalence and impact
* Fund evaluations of forensic accounting interventions
* Disseminate findings to inform policy and practice
5. For Future Research
1. Conduct primary research with banks. This study relied on published data. Future research should:
* Interview bank security officers and forensic accountants
* Survey banks on forensic capabilities and challenges
* Analyse actual fraud cases to identify detection and investigation patterns
2. Evaluate IICFIP Academy effectiveness. As the Academy develops:
* Track graduate outcomes and career trajectories
* Assess impact on institutional forensic capacity
* Identify curriculum gaps and improvement opportunities
3. Study cybercrime reporting dynamics. The 1.027 billion FCFA figure represents only reported losses:
* Investigate underreporting and its causes
* Examine victim experiences with reporting mechanisms
* Assess barriers to reporting that could be addressed
4. Compare forensic accounting effectiveness across institution types. Banks, MFIs, and mobile money operators face different risks:
* Conduct comparative studies of forensic accounting in different financial sectors
* Identify sector-specific best practices
* Develop tailored guidance for each sector
5. Examine Data Protection Law implementation. The 2024 law’s impact warrants study :
* Track compliance progress across banking sector
* Assess whether compliance strengthens forensic capabilities
* Identify implementation challenges and solutions
* CONCLUSION
Cameroon’s banking sector operates at the intersection of two powerful forces: accelerating digital transformation and escalating cyber threat. The 1.027 billion FCFA lost to cybercrime in 2025 is not merely a statisticit represents stolen livelihoods, compromised trust, and vulnerability in the nation’s financial infrastructure.
The threats are diverse and evolving: phishing attacks that mimic legitimate banks, fraudulent investment platforms that promise impossible returns, mobile money fraud that exploits agent networks, business email compromise that targets corporate accounts, and ransomware that holds critical data hostage. Behind each attack lie sophisticated criminal networks operating across borders, adapting quickly to defensive measures, and constantly probing for new vulnerabilities.
Yet this study’s findings offer grounds for measured optimism. Forensic accountingthe systematic application of investigative and analytical skills to financial evidencedemonstrates significant positive associations with fraud detection in Cameroonian commercial banks. Banks that invest in investigative intuitiveness, analytical proficiency, and understanding of organisational behaviour detect fraud more effectively. They recover more lost funds. They deter future offending.
The institutional ecosystem is strengthening. The IICFIP Academy, launched in November 2024 with government partnership, will train the forensic accountants and financial intelligence professionals that banks and law enforcement desperately need . The 2024 Data Protection Law creates compliance obligations that align with forensic accounting requirements. ANTIC’s technical monitoring provides threat intelligence that enables proactive defence. INTERPOL cooperation brings international resources to bear on regional threats.
But gaps remain. Bank-level forensic capacity is uneven. Prosecutorial resources are stretched. Coordination between banks, regulators, and law enforcement could improve. Private forensic services are underdeveloped. The rapid evolution of criminal techniques demands equally rapid evolution of defensive capabilities.
The path forward requires sustained commitment from all stakeholders. Banks must invest in forensic accounting as core competency, not optional add-on. Regulators must implement the Data Protection Law effectively and support IICFIP Academy development. Training institutions must expand forensic curricula and continuing education. International partners must maintain operational cooperation and research support.
For Cameroon’s banking sector, the choice is clear. Digital transformation will continueit brings too many benefits to reverse. Cyber threats will continuethey bring too many profits for criminals to abandon. The only question is whether defensive capabilities will keep pace. Forensic accounting, integrated systematically into banking operations and national enforcement architecture, offers the best hope for answering that question affirmatively.
A bank examiner in Yaoundé captured the stakes in a recent conversation: “Every day, criminals try to steal from our banks and our customers. Some succeed. Some fail. The difference is often whether we saw it comingwhether our systems detected the anomaly, our investigators followed the trail, our evidence supported the prosecution. That is what forensic accounting gives us: the ability to see, to follow, to prove.”
In the digital age, that ability is not optional. It is essential.
REFERENCES
1. Ntolo, R. (2025, December 17). Cybercriminalité : plus de 1 milliard de FCFA perdu au Cameroun en 2025. Cameroun-Éco. https://www.cameroun- eco.com/fr/article/cybercriminalite-plus-de-1-milliard-de-fcfa-perdu-au-cameroun-en-2025
2. Ngum, N. (2025). An assessment of the influence of forensic accounting on the performance of microfinance institutions in Mezam. Journal of Finance and Accounting. https://www.semanticscholar.org/paper/An-Assessment-of-the-Influence-of-Forensic-on-the-
Ngum/80baf9114b35eb01cd2f6319d8310ab988df6274
3. Schmidt, T. P. N. (2025). Cybersecurity risk awareness in today’s financial institution: The case of Cameroon. International Journal of Social and Economic Sciences. https://www.academia.edu/145850413/Cybersecurity_Risk_Awareness_in_Todays_Financial_Institution_The_Case_of_Cameroon
4. SecurityWeek. (2025, December 22). 574 arrested, $3 million seized in crackdown on African cybercrime rings. SecurityWeek. https://www.securityweek.com/574-arrested-3-million-seized-in-crackdown-on-african-cybercrime-rings/
5. International Institute of Certified Forensic Investigation Professionals. (2024). The Academy. IICFIP Academy. http://academy.iicfip.org/the-academy/
6. 6Wresearch. (2025). Cameroon cybersecurity for critical infrastructure in financial sector market (2025-2031). 6Wresearch. https://www.6wresearch.com/industry-report/cameroon-cybersecurity-for-critical-infrastructure-in-financial-sector-market
7. Cameroon Intelligence Report. (2025, December). Biya regime loses over CFA1 billion to cybercrime in 2025. Cameroon Intelligence Report. https://www.cameroonintelligencereport.com/biya-regime-loses-over-cfa1-billion-to-cybercrime-in-2025/
8. Preprints.org. (2025). Forensic accounting knowledge in fraud detection among commercial banks in Cameroon. Preprints. htps://www.preprints.org/manuscript/202501.1350
9. Paul Hastings LLP. (2026, February 2). Cameroon: Key developments for 2026. Paul Hastings Insights. https://www.paulhastings.com/insights/practice-area- articles/cameroon
10. Trade Chronicle. (2026, February 16). SBP launches “Cyber Shield” to protect the banking system and customers. Trade Chronicle. https://tradechronicle.com/sbp-launches-cyber-shield-to-protect-the-banking-system-and-customers/
APPENDICES
Appendix A: Glossary of Key Terms
Term Definition
ANTIC Agence Nationale des Technologies de l’Information et de la Communication (National Agency for Information and Communication Technologies)
BEC Business Email Compromise fraud scheme where criminals impersonate executives to authorise fraudulent transfers
Forensic Accounting Application of accounting, auditing, and investigative skills to examine financial evidence in a manner suitable for legal proceedings
IICFIP International Institute of Certified Forensic Investigation Professionals MFI Microfinance Institution
Phishing Fraudulent attempt to obtain sensitive information by disguising as trustworthy entity in electronic communication Ransomware Malware that encrypts victim’s data and demands payment for decryption
Scamming Fraudulent scheme, often conducted via email, to deceive victims into sending money
SIM Swap Fraud where criminal convinces mobile operator to transfer victim’s phone number to SIM card controlled by criminal
Appendix B: Timeline of Key Developments
Date Development
2010 Cameroon adopts first law on cybersecurity and cybercrime
March 2023 Guaranteed minimum wage increased; ongoing trade union pressure for further increases noted July 2022 7th IICFIP Global Forensic Conference held under patronage of Prime Minister of Cameroon
December 2024 Data Protection Law No. 2024/017 adopted, establishing 18-month compliance period November 2024 IICFIP Academy launches in Cameroon
2025 ANTIC records 471 phishing cases, 59 fraudulent platforms, 5,973 vulnerabilities 2025 Study on forensic accounting in commercial banks published
December 2025 Minister reports 1.027 billion FCFA cybercrime losses in 2025
December 2025 INTERPOL Operation Sentinel results announced, including Cameroon actions Mid-2026 Data Protection Law compliance deadline (18 months from December 2024)
Appendix C: Forensic Accounting Techniques Mapped to Cybercrime Types
Cybercrime Type Relevant Forensic Accounting Techniques
Phishing Digital evidence preservation; transaction tracing; customer interview documentation
Mobile Money Fraud Data mining for unusual transaction patterns; ratio analysis of agent activity; outlier detection BEC Email header analysis; funds tracing; vendor master file examination
Fraudulent Investment Platforms Document examination; website analysis; beneficiary identification; asset tracing Identity Theft Account opening documentation review; biometric data analysis; pattern-of-life analysis
Ransomware Ransom payment tracing; cryptocurrency forensics; negotiation documentation Insider Fraud Behavioural analysis; access log examination; segregation of duties review
Acknowledgements
The authors thank the staff of the National Agency for Information and Communication Technologies (ANTIC) for their diligent monitoring and public reporting of cyber threats. We acknowledge the foundational research of scholars whose work on forensic accounting in Cameroon provided empirical grounding for this analysis. We are grateful to the International Institute of Certified Forensic Investigation Professionals for documentation of the IICFIP Academy’s vision and programmes.
Author Contributions
Professor Olutimo Stephen: Conceptualization, methodology, literature review, policy analysis, writing original draft, writing review and editing.
Professor Mokube Mathias Itoe: Conceptualization, data synthesis, legal framework analysis, writing review and editing, project administration.
Both authors approved the final manuscript.
______________
Digital Fortresses Under Siege: Cybercrime in Cameroon’s Banking Sector and the Forensic Accounting Imperative View Abstract & download full text of Digital Fortresses Under Siege: Cybercrime...
#Volume #15, #Issue #03 #(March #2026)
Origin | Interest | Match