How to Report Phishing SMS in South Africa
Protect yourself from scam text messages
Last updated: December 2025
Quick Facts
- 57% of South Africans were targeted by scams in 2024
- 41% received phishing SMS messages
- R1.4 billion lost to digital banking fraud in 2024
- Report suspicious SMS within minutes to protect yourself
Table of Contents
What is Phishing SMS?
Phishing SMS is also called “smishing”. It happens when criminals send fake text messages.
These messages pretend to be from your bank. They want to steal your money and information.
In 2025, smishing scams increased by 356% in South Africa. Criminals use AI to make messages look real.
- You receive an SMS that looks like it comes from your bank
- The message says there is a problem with your account
- You are told to click a link urgently
- The link takes you to a fake website
- You enter your banking details on the fake site
- Criminals now have access to your account
⚠️ Warning Signs of Phishing SMS
Learn to recognise fake messages. These are common warning signs:
Urgent Language
The message says “Act now” or “Your account will be blocked”. Real banks never create panic.
Suspicious Links
Any SMS with a link is suspicious. Banks never send links in SMS messages.
Request for Personal Information
The message asks for your PIN, password, or OTP. Banks never ask for these details.
Unusual Sender Number
The SMS comes from a mobile number, not from your bank’s official number.
Too Good to Be True
You won money or a prize you didn’t enter for. This is always a scam.
Report Phishing SMS to Your Bank
Step 1: Do Not Click Any Links
Do not click on any links in the SMS. Do not reply to the message.
Step 2: Take a Screenshot
Take a photo of the message. Include the sender’s number and the date.
Step 3: Report to Your Bank Immediately
Contact your bank using their official fraud hotline. Here are the numbers:
| Bank | Phone Number | Email Address |
|---|---|---|
| Standard Bank | 0800 222 050 | phishing@standardbank.co.za |
| FNB | 087 575 9444 | Contact via app or branch |
| ABSA | 0860 111 123 | fraud@absa.co.za |
| Capitec | 0860 10 20 43 | phishing@capitecbank.co.za |
| Nedbank | 0800 110 929 | phishing@nedbank.co.za |
| African Bank | 0860 222 006 | Visit branch or app |
Step 4: Forward the SMS
Send the SMS to your bank’s phishing email address. Include the sender’s number.
Step 5: Delete the Message
After reporting, delete the phishing SMS from your phone. This prevents accidental clicks.
✅ Report to South African Authorities
After reporting to your bank, also report to these authorities:
1. South African Police Service (SAPS)
Why report to SAPS? They investigate cybercrime and can arrest criminals.
Emergency: Call 10111
Crime Stop (anonymous): 08600 10111
Local police station: Visit in person with screenshots
2. SABRIC (South African Banking Risk Information Centre)
Why report to SABRIC? They track banking fraud patterns across South Africa.
Website: www.sabric.co.za
What they do: Share information with all banks to stop criminals.
3. WASPA (Wireless Application Service Provider Association)
When to report: For SMS spam that is not about banking.
Website: www.waspa.org.za/report-spam
Note: WASPA offices close 15 December 2025 and reopen 5 January 2026.
4. Special Cases
SARS phishing scams: Email [email protected] or call 0800 00 2870
SASSA grant scams: Report to your nearest SASSA office
Identity theft: Call SAFPS on 011 867 2234
🚨 Take These Steps Immediately
If you clicked on a phishing link or shared information:
1. Call Your Bank Immediately
Use the fraud numbers above. They are available 24 hours a day. Ask them to block your account and card temporarily.
2. Change All Passwords
Change your online banking password. Change passwords for any accounts that use the same password. Use strong passwords with numbers and symbols.
3. Check Your Bank Statements
Look for any transactions you did not make. Report them immediately. Check all your accounts, not just one.
4. Enable Two-Factor Authentication
Add extra security to your banking app. Use your fingerprint or face recognition if available.
5. Check for Identity Theft
Contact credit bureaus like TransUnion or Experian. Check if someone opened accounts in your name.
⚠️ Common Phishing Scams in 2025
Be aware of these common scams targeting South Africans:
WhatsApp Verification Code Scam
How it works: You receive an SMS with a WhatsApp code. Then someone contacts you asking for the code.
What happens: They take over your WhatsApp account and scam your contacts.
Bank Account Blocked SMS
How it works: SMS says your account is blocked. You must click a link to unlock it.
What happens: The link takes you to a fake banking website that steals your details.
SASSA Grant Scams
How it works: SMS says you must pay money to receive your SASSA grant.
What happens: You pay but never receive your grant. SASSA never charges fees.
SARS Tax Refund Scam
How it works: SMS says you are owed a tax refund. Click a link to claim it.
What happens: The link installs malware or steals your information. SARS never sends refund links.
Parcel Delivery Scam
How it works: SMS says a parcel is waiting. Pay a small fee to receive it.
What happens: You pay but receive no parcel. They steal your card details.
Fake Investment Opportunities
How it works: SMS promises high returns. Invest now or miss out.
What happens: You lose all your money. These are usually Ponzi schemes.
✅ How to Prevent Phishing SMS Scams
Protect yourself with these simple rules:
Never Click Links in SMS Messages
If you receive an SMS with a link, do not click it. Open your banking app directly instead. South African banks never send links via SMS.
Never Share Your PIN or OTP
Your bank will never ask for your PIN, password, or OTP. Not by SMS, phone, or email. Never share these with anyone.
Verify Before You Act
If you receive a suspicious SMS, call your bank directly. Use the number on your bank card, not the number in the SMS.
Enable Banking App Notifications
Turn on notifications for all transactions. You will know immediately if someone accesses your account.
Be Suspicious of Urgent Messages
Criminals create panic to make you act quickly. Take time to think. Real problems can wait five minutes.
Update Your Phone Regularly
Install software updates when available. Updates fix security problems that criminals can exploit.
Protect Your SIM Card
SIM swap fraud is common in South Africa. Contact your mobile provider if you suddenly lose signal. Set up SIM swap alerts with your provider.
Your Consumer Rights
You have legal protection under South African law:
Protection of Personal Information Act (POPI)
Your personal information must be kept safe. Report data breaches to the Information Regulator.
Consumer Protection Act
You have the right to safe products and services. Banks must protect your money.
Financial Sector Conduct Authority (FSCA)
FSCA protects financial consumers. They investigate complaints against banks and financial companies.
Contact FSCA: 0800 110 443 or visit www.fsca.co.za
Banking Ombudsman
If your bank does not help you, contact the Ombudsman. This is a free service.
Contact Banking Ombudsman: 0860 800 900 or visit www.obssa.co.za
⚠️ Why Reporting Matters
The problem is bigger than you think:
| 57% of South Africans | Targeted by scams in 2024 |
| 76% of victims | Lost money to scams |
| R1.4 billion | Lost to digital banking fraud in 2024 |
| 65.3% of fraud | Happens through digital banking |
| 1 in 3 victims | Never report the scam |
When you report: You help stop criminals. Banks share information about scams. Your report protects other people. Police can investigate and arrest criminals.
Quick Reference: Who to Contact
| Organisation | When to Contact | Contact Details |
|---|---|---|
| Your Bank | First contact for all banking scams | Use fraud numbers above |
| SAPS | Report all crimes | 10111 or 08600 10111 |
| SABRIC | Banking fraud information | www.sabric.co.za |
| FSCA | Financial consumer protection | 0800 110 443 |
| Banking Ombudsman | Bank not helping you | 0860 800 900 |
| SAFPS | Identity theft | 011 867 2234 |
Our Final Recommendations
Phishing SMS scams are increasing in South Africa. Criminals use AI to make fake messages look real.
Never click links in SMS messages from your bank. Real banks never send links via SMS. If you receive a suspicious message, report it immediately.
Save your bank’s fraud number in your phone today. The faster you report, the better protected you are.
Remember: Your bank will NEVER ask for your PIN, password, or OTP by SMS, call, or email. Anyone asking for this information is a criminal.
Stay safe by being suspicious. It is better to verify than to lose your money.
Disclaimer: This information is provided for educational purposes and was last updated in December 2025. Financial regulations, fees, and requirements may change. Always verify current information with official sources before making financial decisions. Phishing techniques evolve quickly, so stay informed about new scams.
For complaints or disputes, contact the Financial Sector Conduct Authority (FSCA) at 0800 110 443 or visit www.fsca.co.za