CABS Fraud Case Puts Zimbabwe’s Cybersecurity and Youth Skills Under the Spotlight

Buhlebenkosi Dube

A US$1.1 million alleged cyber fraud at CABS has placed the security of Zimbabwe’s banking systems under scrutiny while raising a wider question: how prepared is the country to develop and responsibly harness the technology skills of its young people?

A 24-year-old Midlands State University final-year Computer Science student, Sabelo Malunga, appeared before the Harare Magistrates’ Court facing a hacking charge after the State alleged that he compromised CABS’ computer systems and facilitated fraudulent transactions worth US$1,136,179.

According to the prosecution, Malunga had access to the bank’s systems while working as an Information Technology intern between November 2025 and February 23, 2026. The State alleges that on January 23 he downloaded SUPREMO, a remote-access application, onto a CABS-issued laptop without authorisation and concealed it among system files.

Prosecutors further allege that he continued to gain unauthorised access to the bank’s systems after his internship had ended, using malware to circumvent internal controls and facilitate fraudulent ZIPIT and VISA transactions.

The alleged breach reportedly came to light in March after VISA flagged two suspicious international ATM transactions involving CABS-issued cards. The bank subsequently engaged digital forensics specialists as investigations into the alleged breach continued.

Malunga has not been convicted and the allegations have not been tested at trial. He was remanded in custody pending a bail hearing.

The details of the case have nevertheless brought into sharper focus the risks facing financial institutions as banking becomes increasingly digital.

For banks, cybersecurity is no longer simply an information-technology issue. Protecting financial systems requires specialised knowledge, constant monitoring and robust internal controls. It also requires institutions to understand where vulnerabilities may exist ad ensure that legitimate access granted to employees, contractors and interns cannot easily become a route into critical systems.

The broader challenge of developing Zimbabwe’s digital skills has been recognised by the World Bank. World Bank Country Manager for Zimbabwe Mukami Kariuki said: “Digital economies are energized when there is a sizeable population with basic digital skills and a critical mass of tech-savvy skilled personnel and advanced specialists that help to adapt and diffuse digital technologies across different sectors.”

Kariuki added that “Zimbabwe requires focused effort on developing a digitally competent workforce and digitally literate citizens” to benefit from digital transformation.

The challenge, however, is not simply to produce more people with technology skills. It is also to ensure that those skills are developed, channelled and applied responsibly.

More recently, the Government has moved to expand digital-skills development. In May this year, the Ministry of Skills Audit and Development signed a five-year agreement with Liquid Intelligent Technologies to establish a Software Developer Skills Development Hub. The programme is intended to provide practical training in areas including artificial intelligence, cloud computing, cybersecurity and data science.

The ministry has also partnered with other organisations on cybersecurity and digital-skills programmes, including a 2025 cybersecurity training initiative targeting students and underserved communities.

The issue of connecting university training with industry needs is also receiving attention within Zimbabwe’s higher-education sector.

At the Harare Institute of Technology, industry stakeholders recently engaged the university over graduate competencies, industrial attachment programmes, emerging specialisations and opportunities to strengthen university-industry collaboration in research, innovation and work-integrated learning.

HIT has separately held discussions with industry stakeholders around developing programmes in areas such as data protection and cybersecurity, with the institution noting the growing need for specialised expertise in these fields.

These initiatives point to an important national conversation, Zimbabwe needs a workforce capable of not only using digital technologies, but also developing, managing and securing them. Yet the existence of these programmes does not, by itself establish that Zimbabwe is losing young technology talent or that young graduates lack opportunities. Those questions require evidence.

How many technology graduates are finding employment in their fields? How many cybersecurity positions are available locally? Are university curricula keeping pace with changes in industry? And are internships and university-industry partnerships providing students with sufficient practical experience?

The CABS case brings those questions into sharper focus because the allegations involve a university student who had gained legitimate access to a banking environment through an internship.

There is no basis at this stage to describe the accused as a technology genius or to portray the alleged fraud as evidence of exceptional technical ability. The precise skills involved, how they were acquired and what actually happened must be established through investigation and the courts. Nor should alleged criminal conduct be romanticised as “misused talent”.

Fraud remains fraud, and alleged unauthorised access to financial systems carries consequences for institutions and potentially their customers.

The more constructive question is what Zimbabwe can do on the other side of the equation: strengthen cybersecurity while ensuring that young people studying technology have clear, lawful pathways into employment, innovation and entrepreneurship.

Government programmes, university-industry partnerships, internships, practical cybersecurity training and technology hubs may form part of that response. But their effectiveness will ultimately need to be measured by outcomes including whether students acquire relevant skills and whether those skills translate into legitimate opportunities.

Zimbabwe’s Minister of Skills Audit and Development, Dr Jenfan Muswere stated in May 2026
“This MOU moves us from vision to implementation. It connects policy, infrastructure, training and industry into one ecosystem that prepares our young people not only for jobs, but for innovation and entrepreneurship”

For the banking sector, meanwhile, the case is a reminder that cybersecurity cannot be separated from human access and institutional controls. Digital systems may be sophisticated, but the people who use, administer and monitor them remain a critical part of the security chain.

The CABS case will ultimately be decided in court.The wider issue, however, extends beyond one accused student or one financial institution.

As Zimbabwe pushes further into a digital economy, the country faces the twin challenge of protecting its increasingly digital systems while developing the people capable of building and securing them.

That is the conversation the case has brought into sharp focus without prejudging the outcome of the court proceedings.