Mozambique’s Council of Ministers have approved Decree No. 48/2025, introduced a new Regulation for Telecommunications Traffic Control and repealed the 2023 framework.
The update responds to the fast-evolving digital landscape and the growing threat of telecom-enabled crime, including cyberattacks and AI-driven fraud, with the aim of strengthening national security, protecting public and financial services, and safeguarding state sovereignty.
The regulation expands the powers of the National Communications Institute of Mozambique (INCM), allowing it to deploy traffic-monitoring systems within operators’ networks. Licensed operators must provide detailed communications data, such as Call Detail Records (CDR) and Internet Protocol Detail Records (IPDR), for security monitoring and revenue assurance to ensure accurate billing and taxation.
Operators are also required to identify and act against fraudulent traffic, conduct annual network audits, and report or suspend verified suspicious activity within two hours. While INCM may order service interruptions for security reasons, any suspension exceeding 48 hours must receive judicial approval.
Operators will contribute to regulatory costs, capped at 1% of annual gross revenue. Non-compliance carries fines of 500 to 3,500 minimum public-sector salaries, with penalties doubled if negligence leads to state revenue losses.
Read More: Togo and Mozambique Forge Strategic Cybersecurity Partnership
