What Criminals Want From You

• Your ID number (very important to protect)
• Your banking details and passwords
• Your phone number and SIM card
• Your email and social media passwords
• Your date of birth and address
• Copies of your ID document or passport

Why Numbers Are Growing

More South Africans use online banking and smartphones. This creates more opportunities for criminals. They use new technology to make their scams look real.

Young adults aged 25-35 are hit hardest. They use digital services more than older people. But anyone can become a victim. Even people who don’t use smartphones can have their identity stolen.

1. Stealing Physical Documents

This is the old way but still happens. Criminals steal your ID book, bank cards, or documents. They go through rubbish bins looking for papers with your details.

Green ID books are 500% more vulnerable to fraud than smart ID cards. If you still use a green ID book, replace it immediately.

2. Data Breaches

Companies store your information on computers. Sometimes criminals hack these systems. They steal thousands of people’s details at once.

Your information might be sold on the dark web. You won’t know until someone uses it. This is why you must check your accounts regularly.

3. Social Media Harvesting

Be careful what you post online. Criminals look at your Facebook, Instagram, and TikTok. They collect information about you.

They find your birthday, where you work, your phone number, and family names. They use this to answer security questions or trick you later.

4. Insider Theft

Sometimes people who work at banks or companies steal customer information. They sell it to criminals. Or they use it themselves to commit fraud.

How SIM Swap Fraud Works

Step 1: Criminals Get Your Information
They find your ID number, phone number, and personal details. They might buy this information or trick you into giving it.

Step 2: They Visit Your Mobile Provider
They go to MTN, Vodacom, Cell C, or Telkom. They pretend to be you. They say they lost their SIM card and need a new one.

Step 3: They Get Your Number
The mobile provider gives them a new SIM with your number. Now their phone receives all your calls and messages.

Step 4: They Access Your Accounts
They get your bank OTP codes (one-time pins). They reset your passwords. They take money from your accounts.

Step 5: You Discover Too Late
You notice your phone has no signal. By the time you report it, the criminals have already stolen your money.

How to Protect Yourself from SIM Swap

• Set up a PIN with your mobile provider (MTN, Vodacom, Cell C, Telkom)
• Never share your ID number, date of birth, or address on phone calls
• Enable two-factor authentication on your banking app (not SMS codes)
• Register with SAFPS for protective registration
• If your phone loses signal, contact your provider immediately on 082135 (Vodacom), 083135 (MTN), 084135 (Cell C), or 081180 (Telkom)
• Don’t post personal details on social media
• Check your phone signal regularly during important transactions

What Are Deepfakes?

Deepfakes are fake videos or voice recordings that look and sound real. Criminals use AI technology to create them. They can make it look like you said something you never said.

They need only a few seconds of your voice from TikTok or Instagram. The AI learns how you talk. Then it creates new audio that sounds exactly like you.

Common Deepfake Scams in South Africa

1. The Family Emergency Scam
You get a call that sounds like your child or grandchild. They say they’re in trouble. They need money urgently. The voice sounds real, but it’s AI.

2. The Bank Official Scam
You get a video call from someone who looks like your bank manager. They ask for your PIN or account details. The face is fake.

3. The Investment Scam
Criminals make fake videos of famous people. The video shows them promoting an investment. People like the South African Reserve Bank Governor never said these things.

4. The Boss Scam
Your boss sends a voice message asking you to transfer money. The voice sounds right, but it’s a deepfake. Check before you send money.

How to Protect Yourself from Deepfakes

• Always verify urgent requests. Call the person back on a known number.
• Create a family code word. Use it to verify real emergencies.
• Never send money based only on a voice message or video call.
• Limit what you post on social media. Less content means criminals have less to copy.
• Be suspicious of urgent investment opportunities from “famous people”.
• Watch for unnatural face or voice qualities in videos.
• Check official sources before believing celebrity endorsements.

Email Phishing Scams

You get an email that looks like it’s from your bank. It says there’s a problem with your account. There’s a link to click on.

What happens: The link takes you to a fake website. It looks exactly like your bank’s site. You type in your username and password. The criminals now have your login details.

Red flags: Poor grammar, generic greetings like “Dear Customer”, urgent threats, suspicious sender email addresses.

SMS Phishing (Smishing)

You get an SMS that looks like it’s from your bank. It says your account is blocked. It tells you to call a number or click a link.

Common messages:

• “Your account will be closed if you don’t verify”
• “You’ve won money, click here to claim”
• “Suspicious activity detected on your account”
• “Your SASSA payment is delayed, update your details”
• “You have a parcel waiting, pay R50 to collect”

Truth: Real banks never ask for your PIN or password by SMS. They never ask you to verify your account by clicking links.

WhatsApp Scams

WhatsApp scams are very common in South Africa. Over 28.8 million South Africans use WhatsApp. This makes it attractive to criminals.

The verification code scam: Someone messages you pretending to be a friend. They say they accidentally sent their WhatsApp code to your number. They ask you to share it with them.

What really happens: That code is for your WhatsApp, not theirs. If you give it to them, they can take over your account.

Phone Call Scams (Vishing)

Criminals call you pretending to be from your bank, the police, or a government department. They sound professional. They might know some of your details.

Common scenarios:

• They say someone is trying to hack your account
• They offer to help you “secure” your account
• They ask for your PIN to “verify” your identity
• They say you need to move money to a “safe account”
• They threaten you with arrest or account closure

Financial Warning Signs

• Money missing from your bank account that you didn’t spend
• Bank statements showing purchases you didn’t make
• You get letters about loans or accounts you didn’t open
• Your credit score drops for no reason
• Debt collectors contact you about debt that’s not yours
• Banks refuse you credit because of accounts you don’t know about
• Your SASSA grant payment doesn’t arrive

Technology Warning Signs

• Your phone suddenly has no signal
• You can’t log into your email or social media accounts
• Your passwords stop working
• You get password reset emails you didn’t request
• Your contacts say you sent them strange messages
• You get notifications about logins from unknown devices
• Your banking app logs you out repeatedly

Official Document Warning Signs

• SARS says you owe tax when you already paid
• Home Affairs says your ID has been used somewhere else
• The police contact you about crimes you didn’t commit
• You get notices about court cases involving you
• Traffic fines for a car you don’t own
• Medical aid claims for treatments you didn’t get

1. Protect Your ID Document

• Replace your green ID book with a smart ID card immediately
• Keep your ID in a safe place at home
• Never give your ID to strangers
• Don’t leave copies of your ID lying around
• Only give certified copies when absolutely necessary
• Write “certified copy” on all ID copies you give out
• Report lost or stolen IDs to the police immediately

2. Secure Your Phone and SIM Card

• Set up a SIM swap PIN with your mobile provider
• Enable two-factor authentication on your banking app
• Use biometric login (fingerprint or face) instead of SMS codes
• Lock your phone with a strong password
• Enable remote wipe in case your phone is stolen
• Don’t save passwords on your phone
• Update your phone’s software regularly

3. Protect Your Banking Information

• Never share your PIN with anyone, not even family
• Cover the keypad when entering your PIN
• Use different passwords for different accounts
• Change your passwords every 3-6 months
• Don’t write down passwords
• Enable transaction notifications on your banking app
• Check your bank statements every month
• Report unauthorised transactions immediately

4. Be Careful on Social Media

• Don’t post your ID number, phone number, or address
• Don’t share your birthday publicly
• Limit who can see your posts (friends only, not public)
• Don’t accept friend requests from people you don’t know
• Be careful about posting photos of your ID or bank cards
• Don’t share information about your workplace or salary
• Think before you post anything personal

5. Protect Your Physical Mail

• Use a secure postbox or lockable mailbox
• Collect mail promptly
• Shred documents with personal information before throwing them away
• Report if your mail goes missing regularly
• Switch to electronic bank statements where possible

6. Register with Protective Services

• Register with SAFPS (Southern African Fraud Prevention Service) – it’s free
• This adds a warning to your credit profile
• Companies will be extra careful when verifying your identity
• Contact: 011 867 2234 or visit www.safps.org.za
• You can also register via the SAFPS mobile app

Step 1: Contact Your Bank Immediately

Call your bank right away:

• Standard Bank: 0800 020 600
• FNB: 087 575 9404
• ABSA: 0860 008 600
• Nedbank: 0860 555 111
• Capitec: 0860 102 043
• African Bank: 0861 223 757

Tell them:

• You think your identity has been stolen
• Ask them to freeze your accounts
• Ask them to block any unauthorised transactions
• Request new cards and PINs
• Change all your passwords

Step 2: Report to SAPS (Police)

Go to your nearest police station immediately. Report the identity theft. You need a case number for everything else.

What to bring:

• Your ID document
• Any evidence of fraud (bank statements, emails, SMS messages)
• Details of what happened

What they will do:

• Open a case docket
• Give you a case number (very important – write it down)
• Provide you with a case report
• Start an investigation

Step 3: Register with SAFPS

Contact the Southern African Fraud Prevention Service. This is free and very important.

How to register:

• Call: 011 867 2234
• Email: protection@safps.org.za
• Website: www.safps.org.za
• Or use the SAFPS mobile app

What you need:

• Your ID document (certified copy)
• Your SAPS case number
• Proof of address
• Details of the fraud

Step 4: Contact Credit Bureaus

Contact all credit bureaus. Ask them to flag your profile. This helps prevent more fraud.

South African credit bureaus:

• TransUnion: 0861 886 466
• Experian: 0861 105 665
• Compuscan: 0861 514 131
• XDS: 011 645 9000

Step 5: Contact Your Mobile Provider

If SIM swap fraud is involved, contact your mobile provider immediately:

• Vodacom: 082135
• MTN: 083135
• Cell C: 084135
• Telkom: 081180

Step 6: Report to Other Affected Services

If criminals used your identity for:

• Tax fraud: Contact SARS at 0800 00 7277
• SASSA fraud: Contact SASSA at 0800 60 10 11
• Medical aid fraud: Contact your medical aid immediately
• Store accounts: Contact the retailers directly
• Insurance fraud: Contact your insurance company

What the POPI Act Protects

Your personal information includes:

• Your name and surname
• Your ID number
• Your phone number and email
• Your address
• Your bank account details
• Your health information
• Your race, religion, and beliefs
• Your employment history
• Your criminal record

Your Rights Under POPI

• Right to know: Companies must tell you what information they collect about you
• Right to access: You can ask to see what information a company has about you
• Right to correction: You can ask them to fix wrong information
• Right to deletion: You can ask them to delete your information in some cases
• Right to object: You can say no to direct marketing
• Right to be notified: Companies must tell you if your information is stolen or leaked

Company Responsibilities

Companies that have your information must:

• Keep your information safe and secure
• Only use it for the reason they collected it
• Not share it without your permission
• Report data breaches within a reasonable time
• Have an Information Officer you can contact
• Follow your requests about your information

What Happens If Companies Break POPI?

Companies that don’t protect your information can face:

• Fines up to R10 million
• Criminal charges (up to 10 years in prison)
• They must pay you compensation
• Damage to their reputation

How to Complain About POPI Violations

If a company misuses your information, contact the Information Regulator:

• Phone: 010 023 5200
• Email: inforeg@justice.gov.za
• Website: www.justice.gov.za/inforeg
• Address: 33 Hoofd Street, Forum III Building, 3rd Floor, Braampark, Braamfontein, Johannesburg

Credit Bureau Contact Numbers

• TransUnion: 0861 886 466 / www.transunion.co.za
• Experian: 0861 105 665 / www.experian.co.za
• Compuscan: 0861 514 131 / www.compuscan.co.za
• XDS: 011 645 9000 / www.xds.co.za

Mobile Provider Fraud Lines

• Vodacom: 082135 / www.vodacom.co.za
• MTN: 083135 / www.mtn.co.za
• Cell C: 084135 / www.cellc.co.za
• Telkom Mobile: 081180 / www.telkom.co.za

What You Must Do Today

• Replace your green ID book with a smart ID card if you haven’t already
• Set up a SIM swap PIN with your mobile provider
• Enable two-factor authentication on your banking app
• Register with SAFPS for protective registration (it’s free)
• Save emergency numbers on your phone
• Check your bank statements this week

What You Must Do Every Month

• Check your bank statements for strange transactions
• Review your mobile phone bill
• Check your email for password reset requests you didn’t make
• Update your passwords every 3-6 months

What You Must Do Every Year

• Get your free credit report from all bureaus
• Check for accounts you didn’t open
• Verify your information with SARS
• Update your security questions

What You Must Never Do

• Never share your PIN with anyone, not even family
• Never click on links in SMS messages from unknown numbers
• Never give your ID number to strangers on the phone
• Never post personal information on social media
• Never send money to people you haven’t met in person
• Never trust urgent requests for money

⚠️ Remember These Key Facts

• Digital identity theft increased by over 1,000% in the past year
• SIM swap fraud cost South Africa R5.3 billion in 2024
• 60% of mobile banking fraud involves SIM swaps
• Deepfake scams rose 1,200% in one year
• Most victims are people aged 25-35
• The average loss per victim is R10,000
• Green ID books are 500% more vulnerable than smart IDs