Mobile banking is used to perform balance checks, account transactions, payments, credit applications, and other banking transactions via a mobile device. Until recently, mobile banking was most often done via SMS or the mobile web. In west African countries, these applications are preferred before all others of the same kind due to their proximity and ease of use. However, in recent years, several end-users have fallen victim of attacks aiming at misappropriating their money. In this scenario of attacks, the end-user is the most affected. Unfortunately, there is a crucial lack of information regarding the tricks used by attackers on them, users, not allowing the victims to protect themselves. In this paper, we propose a comprehensive study on Orange Money attacks in the Burkina Faso context. We analyze the different Facebook forums to identify recurring attack methods from the user’s point of view. In the end, we propose the bests practices that users should follow.

Mobile banking, Orange Money, Cybersecurity, Social engineering