⚠️ Critical Facts

• Digital banking fraud increased by 86% in 2024
• South Africans lost over R1.9 billion to banking scams in 2024
• 65% of all fraud happens through banking apps
• AI-powered scams are harder to detect in 2025
• Only 65% of victims report scams to authorities

The Banking Scam Crisis in South Africa

Banking scams in South Africa reached crisis levels in 2024. Criminals stole R1.9 billion from South Africans. This is money stolen from people’s bank accounts.

The problem is getting worse. Digital banking fraud increased by 86% from 2023 to 2024. That means cases almost doubled in just one year.

Why This Matters to You

Anyone with a bank account can become a victim. Criminals target everyone: rich, poor, young, old, educated and uneducated people.

The scams are getting more clever. Criminals now use artificial intelligence to make fake voices and messages. They can copy your bank’s logo perfectly. They sound exactly like bank staff.

Current Statistics (2024 Data)

Fraud Type	Amount Lost
Digital banking fraud	R1.9 billion
Banking app fraud	R1.2 billion
SIM swap fraud	R5.3 billion
Digital fraud incidents	98,000 cases

Common Types of Banking Scams in South Africa

1. Phishing Scams (Fake Messages)

You receive an SMS or email that looks like it comes from your bank. The message says there is a problem with your account. It asks you to click a link and enter your details.

The truth: The link goes to a fake website. When you enter your username and password, criminals steal them.

2. Vishing Scams (Fake Phone Calls)

Someone phones you and says they are from your bank’s fraud department. They say someone tried to use your card. They ask for your OTP (one-time PIN) or banking details.

The truth: Real banks never phone you and ask for PINs or passwords. The caller is a criminal.

3. Fake Investment Scams

Someone contacts you with an “amazing investment opportunity”. They promise huge returns. They say you must act fast. They may show fake proof of other people making money.

The truth: Mirror Trading International stole R8 billion from South Africans. One person lost R6 million through a fake investment app in 2024.

4. Fake Bank Apps

Someone sends you a link to download a banking app. They say it’s from your bank. The app looks real with proper logos and colours.

The truth: The app is fake. It steals all your banking details. Some fake apps even appeared in official app stores.

5. QR Code Scams (Quishing)

You see a QR code on a poster, in an email, or on social media. It promises a prize, discount or payment. When you scan it, you are taken to a fake payment page.

The truth: The QR code installs malware on your phone or steals your card details.

6. WhatsApp Account Takeover

You get an SMS with a WhatsApp verification code. Then someone messages you on WhatsApp asking for that code. They pretend to be a friend or family member.

The truth: If you give them the code, they steal your WhatsApp account. Then they use your account to scam your contacts.

🤖 NEW: AI-Powered Scams (2025 Threat)

Criminals now use artificial intelligence to make scams more believable. These are the most dangerous scams because they are almost impossible to spot.

1. Deepfake Voice Calls

Criminals use AI to copy someone’s voice perfectly. They phone you sounding exactly like your bank manager, family member or friend. They ask for money or banking details.

Real example: A mother received a call from someone who sounded exactly like her son. “He” said he was in trouble and needed R50,000 immediately. It was a deepfake scam.

2. Perfect Fake Emails

AI writes emails with no spelling mistakes or grammar errors. The emails look exactly like real bank communications. They use proper language and official-sounding terms.

3. Cloned WhatsApp Messages

Criminals use AI to copy your bank’s WhatsApp messages perfectly. The fake messages have correct logos, colours and layouts. They look identical to real bank messages.

4. Deepfake Video Calls

The newest threat: criminals can now make video calls using someone else’s face and voice. You could be on a video call with someone who looks and sounds like your bank manager, but it’s all fake.

How to Protect Yourself from AI Scams

• If someone phones asking for money, hang up. Phone them back on a number you know is real.
• Never make urgent payments based on phone calls or messages.
• Create a secret code word with family members. Use it to verify real emergencies.
• If something feels wrong, it probably is. Trust your instincts.

⚠️ SIM Swap Fraud: The R5 Billion Threat

SIM swap fraud cost South Africans R5.3 billion in 2024. This makes it one of the most expensive types of banking fraud.

How SIM Swap Fraud Works

Step 1: Criminals get your personal information through phishing, data breaches or buying it on the dark web.

Step 2: They go to your mobile network provider (MTN, Vodacom, Cell C or Telkom). They pretend to be you. They say their SIM card is lost or damaged.

Step 3: The mobile company gives them a new SIM card with your phone number on it.

Step 4: Your phone suddenly stops working. All your calls and messages now go to the criminal’s phone.

Step 5: The criminal receives your bank OTPs (one-time passwords). They can now access your bank accounts and steal your money.

Warning Signs of a SIM Swap

Warning Sign	What to Do
Your phone suddenly has no signal	Phone your network immediately from another phone
You get an SMS about a SIM swap	Contact your network on 082 135 (Vodacom) or 084 135 (MTN)
You cannot make calls or send messages	Check if a SIM swap happened. Don’t assume it’s network problems
Someone phones saying to ignore a SIM swap SMS	This is a scam! Contact your network immediately

How to Prevent SIM Swap Fraud

• Never share your ID number, address or personal details with anyone
• Don’t save passwords or PINs on your phone
• Use strong passwords that are different for each account
• Enable SIM PIN protection if your network offers it
• Register with the South African Fraud Prevention Service (SAFPS)
• Use authentication apps like Google Authenticator instead of SMS OTPs
• Password-protect your phone and set it to lock after 1 minute

How to Recognise a Banking Scam

Learn these warning signs. If you see any of them, you are dealing with a scam:

Red Flags in Messages and Emails

• The message creates panic: “Your account will be closed!”
• They demand immediate action: “Respond within 1 hour!”
• The message asks for personal information
• There are spelling or grammar mistakes (though AI scams now fix these)
• The sender’s email address looks wrong
• There are strange links in the message
• The message threatens consequences if you don’t act

Red Flags in Phone Calls

• The caller asks for your PIN, password or OTP
• They want you to share your screen or download an app
• They tell you not to contact your bank directly
• They become aggressive or threatening when questioned
• The call has poor quality, static or background noise
• They refuse to give you a reference number
• They say you must transfer money to a “safe account”

Red Flags in Offers and Investments

• Promises of guaranteed high returns
• Pressure to invest quickly before the “opportunity closes”
• No clear information about the investment
• Request for payment via vouchers, cryptocurrency or unusual methods
• The company is not registered with the FSCA
• You cannot find proper reviews or information online

✅ How to Protect Yourself from Banking Scams

Essential Protection Steps

1. Protect Your Personal Information

• Never share your ID number, PIN, password or OTP with anyone
• Don’t post personal information on social media
• Shred documents with your personal details before throwing them away
• Be careful what information you share online

2. Secure Your Phone

• Use a strong password or fingerprint lock
• Set your phone to lock after 1 minute of inactivity
• Don’t save passwords or banking details on your phone
• Enable “Find My Phone” features to wipe your phone if stolen
• Update your phone’s software regularly

3. Be Careful with Banking Apps

• Only download banking apps from official app stores (Google Play, Apple App Store)
• Never download apps from links in SMS, WhatsApp or email
• Check that the app is published by your actual bank
• Enable two-factor authentication on your banking app
• Log out of your banking app when you finish using it

4. Safe Internet and Wi-Fi Use

• Never do internet banking on public Wi-Fi
• Use mobile data when accessing your bank account in public
• Check that websites start with “https://” (the ‘s’ means secure)
• Don’t click on links in emails or messages from unknown senders

5. Create Strong Passwords

• Use different passwords for different accounts
• Make passwords long (at least 12 characters)
• Mix uppercase, lowercase, numbers and symbols
• Don’t use your birthday, ID number or simple words
• Change your passwords every 6 months

Bank-Specific Safety Features

Bank	Safety Feature
Capitec	Contact Lock (uses your contacts as a fingerprint), Call Verification (shows if a call is really from Capitec), Bad Beneficiary warnings
ABSA	App verification instead of SMS (protects from SIM swap)
Standard Bank	UCount fraud alerts, biometric login
FNB	Secure messaging, transaction notifications

What to Do If You’ve Been Scammed

Act immediately. The faster you act, the more likely you are to recover your money or prevent further losses.

Immediate Actions (Within Minutes)

Step 1: Contact Your Bank Immediately

• Phone your bank’s fraud hotline (available 24/7)
• Tell them you have been scammed
• Ask them to freeze your account immediately
• Cancel any unauthorised transactions
• Get a reference number for your report

Step 2: If It’s a SIM Swap

• Contact your mobile network on 082 135 (Vodacom) or 084 135 (MTN)
• Report the unauthorised SIM swap immediately
• Ask them to block the fraudulent SIM card
• Request a new SIM card from an official store (bring your ID)

Step 3: Secure Your Accounts

• Change all your passwords immediately
• Enable two-factor authentication on all accounts
• Check all your bank accounts for unauthorised transactions
• Check your credit card statements
• Monitor your accounts daily for the next month

Actions Within 24 Hours

Step 4: Gather Evidence

• Take screenshots of all messages, emails and calls
• Write down phone numbers that contacted you
• Save any links or websites involved
• Note the times and dates of all interactions
• Keep copies of bank statements showing fraudulent transactions

Step 5: Check Your Credit Profile

• Get a free credit report from Experian, TransUnion or Compuscan
• Check for accounts you didn’t open
• Look for credit applications you didn’t make
• Dispute any fraudulent entries immediately

How to Report Banking Scams

Reporting scams is crucial. Even if you didn’t lose money, your report helps authorities track criminals and warn others.

Where to Report

1. Report to Your Bank

Always report to your bank first, even if no money was lost. Banks have fraud departments that need to know about these attempts.

2. Report to SAPS (South African Police Service)

• Go to your nearest police station
• Bring all evidence (screenshots, bank statements, reference numbers)
• Ask to open a case of fraud
• Request that the case be referred to the Cybercrime Division
• Get a case number (CAS number) and detective’s details
• Follow up regularly on your case

3. Report to SABRIC

SABRIC (South African Banking Risk Information Centre) tracks banking fraud across South Africa.

• Website: www.sabric.co.za
• Report all banking-related fraud
• Your report helps identify fraud patterns

4. Report to SAFPS (Southern African Fraud Prevention Service)

SAFPS runs Yima, a platform specifically for reporting scams.

• Website: www.yima.org.za
• Phone: 083 123 7226 (Yima Hotline)
• Main office: 011 867 2234
• Report any type of scam or fraud
• Use the website to scan suspicious websites

5. Report to National Financial Ombud (NFO)

If your bank doesn’t resolve your complaint properly, contact the NFO. Their service is free.

• Phone: 0860 800 900
• Email: info@nfosa.co.za
• Website: www.nfosa.co.za
• The NFO replaced the Banking Ombudsman in 2024

6. Report to FSCA (Financial Sector Conduct Authority)

Report investment scams, fake financial advisors, or unregistered financial companies.

• Phone: 0800 110 443 (toll-free)
• Phone: 012 428 8000 (main switchboard)
• Email: info@fsca.co.za
• Fraud hotline: 0800 20 3722
• Email fraud tips to: fsca@whistleblowing.co.za
• Website: www.fsca.co.za

Complete Contact Directory

Organisation	Contact Details
SABRIC Banking fraud reporting	www.sabric.co.za
SAFPS (Yima) Scam reporting platform	083 123 7226 www.yima.org.za 011 867 2234
National Financial Ombud Banking complaints	0860 800 900 info@nfosa.co.za www.nfosa.co.za
FSCA Investment & financial scams	0800 110 443 info@fsca.co.za Fraud: 0800 20 3722 www.fsca.co.za
SAPS Criminal investigations	Visit nearest police station www.cybersecurityhub.gov.za
National Consumer Commission Consumer protection	0860 003 600 012 428 7000 www.thencc.gov.za
Credit Ombud Credit bureau complaints	0861 662 837 SMS “help” to 44786 ombud@creditombud.org.za

Why Reporting Matters

Only 65% of scam victims report what happened. Many people feel embarrassed or think nothing will be done. But reporting is important because:

• It helps police track criminal patterns and syndicates
• Your report might connect to other cases and help catch criminals
• Banks use reports to improve their security systems
• Authorities issue warnings to protect others from the same scam
• You may be able to recover your money if you report quickly
• Your report contributes to national crime statistics

🛡️ Our Final Protection Advice

⚠️ Remember: Banks Will NEVER:

• Phone you and ask for your PIN, password or OTP
• Send you a link via SMS or WhatsApp to access your account
• Ask you to move money to a “safe account”
• Request remote access to your phone or computer
• Ask you to download an app from a link they send you
• Threaten to close your account if you don’t act immediately
• Conduct investigations via WhatsApp or video calls

✅ Banks WILL:

• Send you transaction notifications through official channels
• Ask you to visit a branch for certain services
• Communicate through their official app or secure banking platform
• Give you time to verify suspicious activity
• Provide reference numbers for all communications
• Have official phone numbers listed on their website