Strengthening Tanzania’s Legal Framework against Phishing ATTACKS: Lessons from Nigeria

Phishing has emerged as one of the most pervasive cyber threats in Tanzania, threatening financial systems, digital trust, and personal privacy. Despite multiple legislative interventions, Tanzania’s legal framework remains fragmented and lacks explicit recognition of phishing, creating challenges in prevention, investigation, and prosecution. This article critically examines the adequacy of Tanzania’s cybercrime legislation, focusing on the Cybercrimes Act, the Electronic and Postal Communications Act (EPOCA), and the Personal Data Protection Act. It contrasts these frameworks with Nigeria’s more comprehensive approach under the Cybercrimes (Prohibition, Prevention, etc.) Act, 2015 (as amended in 2024) and related statutes. Guided by regulatory enforcement theory, the article demonstrates how Nigeria’s clarity, institutional coordination, and international engagement offer practical lessons for Tanzania. The study employs a doctrinal and comparative legal analysis, examining statutory and institutional frameworks in Tanzania and Nigeria to identify best practices. The article concludes with recommendations on legislative reforms, institutional strengthening, cross-border cooperation, and public awareness initiatives to strengthen Tanzania’s resilience against phishing