Executive summary
Mozambique presents two distinct risk problems: a persistent insurgency in Cabo Delgado that displaces civilians and constrains humanitarian access, and a southern political risk environment where contested elections have produced sustained urban unrest.
The insurgency has adapted to sustained counter-insurgency pressure by dispersing into smaller cells, raiding for supply and pushing south and west into districts previously considered secure. Territorial statistics understate the operational problem.
For commercial operators, the primary exposure is not a direct attack on protected sites but the supply chain, workforce movement and community relations that sit outside the security perimeter.
Full report
Cabo Delgado: threat pattern
The standing template is a small-group raid on a village or transit point, with burning of structures, beheading or abduction of civilians, seizure of food and fuel, and withdrawal before a response can arrive. Attacks against hardened sites are rare; attacks against unprotected populations and moving targets are routine.
Displacement waves are the leading indicator of near-term district risk. Movement of populations along the coastal road towards Pemba typically precedes a period of heightened raid activity in the districts they leave.
Sources · [9] INGO ADVISORY analyst desk · [2] UCDP
Access and humanitarian operations
Access is granted district by district and frequently mediated by military authorities. Escort dependency creates its own risk profile: convoys are more visible, less flexible, and tie programme timing to force availability.
Organisations should hold written go/no-go criteria for northern movement, agree in advance what constitutes a suspension trigger, and rehearse relocation from field bases to Pemba rather than improvising during a raid.
Sources · [10] OpenSanctions · [3] UN OCHA / ReliefWeb
Southern political risk
Election cycles have produced protest, road blockades, port disruption and heavy-handed policing in Maputo and provincial capitals. The pattern is national in reach and short in cycle: days of disruption, followed by partial normalisation, followed by renewed flashpoints around judicial or political milestones.
Contingency planning should assume simultaneous loss of road transport, fuel availability and border crossing throughput for up to a week, with staff advised to hold safe-haven supplies rather than attempt movement.
Sources · [2] UCDP · [5] FEWS NET
Commercial and corridor exposure
The Nacala, Beira and Maputo corridors carry the country's freight and, with it, its operational risk: cargo theft, extortion at weighbridges and checkpoints, and administrative delay used as use. Contractual penalty exposure often exceeds security loss in value.
Contractor and labour-brokerage due diligence is the most frequently skipped control in the north, and the one most likely to produce reputational and safeguarding consequences.
Sources · [2] UCDP · [5] FEWS NET
Indicators and warnings
Escalation: raid activity in Ancuabe, Chiúre or Metuge districts; attacks within thirty kilometres of Pemba; suspension of coastal road movement; withdrawal or drawdown of partner forces; renewed nationwide protest following a judicial ruling.
De-escalation: sustained return of displaced populations to home districts with functioning markets; reopening of Mocímboa da Praia to commercial traffic; credible political settlement on election disputes; resumption of fisheries and trade activity along the northern coast.
Sources · [4] GDACS · [7] GDELT Project
Key findings
- Insurgent activity in Cabo Delgado is dispersed and mobile; the practical measure of threat is raid tempo and district spread, not held territory.
- Humanitarian access in Mocímboa da Praia, Macomia, Muidumbe and Quissanga districts remains conditional, revocable and dependent on military escort decisions taken at short notice.
- Post-election unrest in Maputo, Nampula and Beira has demonstrated the capacity for rapid, nationwide disruption of road transport, ports and border crossings.
- Extortion, cargo theft and document-based delay on the Nacala and Beira corridors are steady operational costs rather than isolated incidents.
- Community grievance around resettlement, employment and fisheries access in the north remains the most consistent structural driver of recruitment.
Analyst assessment
We assess with high confidence that insurgent activity in northern Cabo Delgado will continue through 2027 at a raid-and-disperse tempo, without a return to the 2021-style seizure of district capitals.
We assess with moderate confidence that gas-sector activity will proceed under a heavily securitised model, and that its security envelope will not extend meaningfully to surrounding communities or to inland supply routes.
Political unrest in the south is more likely to disrupt national logistics than northern insurgency is, and should be planned for with equal seriousness.
Related reports
Footnotes & sources
- [1] ACLED — Armed Conflict Location & Event Data — Africa event recordsL1 Conflict · reliability A
- [2] UCDP — Uppsala Conflict Data Program — organised violence datasetL1 Conflict · reliability A
- [3] UN OCHA / ReliefWeb — Situation reports, access snapshots and humanitarian updatesL2 Early warning · reliability A
- [4] GDACS — Global Disaster Alert and Coordination System alertsL2 Early warning · reliability B
- [5] FEWS NET — Food security outlooks and alertsL2 Early warning · reliability A
- [6] NASA FIRMS / Copernicus — Active fire detections and open satellite imagery for corroborationL3 GEOINT · reliability B
- [7] GDELT Project — Global media event and tone monitoringL5 Strategic · reliability C
- [8] Institute for Security Studies (ISS Africa) — Regional political and security analysisL5 Strategic · reliability B
- [9] INGO ADVISORY analyst desk — Practitioner interviews, field reporting and imagery verificationL6 Verification · reliability B
- [10] OpenSanctions — Sanctions, PEP and enforcement screening dataL5 Strategic · reliability A
Free operational toolkit
Act on this assessment
Six free operational tools for NGO and charity teams — no sign-up, nothing leaves your browser.
- Travel risk authorisationRisk-tiered approval form with control verification before movement is signed off.
- Vehicle & convoy check13-point pre-departure inspection with go / no-go clearance logic.
- Safeguarding / PSEA referralAnonymised referral log for PSEA and misconduct concerns.
- Cyber hygiene assessmentScored self-assessment producing a prioritised remediation workplan.
- Staff accountability roll callReal-time headcount and status tracking during an incident.
- Endurance calculatorContingency stock planning for water, food, fuel and cash.