Skip to main content

South Africa (ZA)

South Africa combines English-friendly professional life, major finance and tech hubs, relatively affordable private healthcare and housing, world-class nature, wine regions and a complex but vibrant post-apartheid society.

Capital: Pretoria
Region: Africa
Language: Zulu
Currency: ZAR (R)
Cost of living: Very affordable (index 32)
Emergency: 112

Scam Warnings

Common scams targeting expats in South Africa.

South Africa has one of the world's highest rates of SIM-swap fraud — accounting for nearly 60% of mobile banking breaches — and the telecommunications industry lost an estimated R5.3 billion to SIM-swap and related identity fraud in 2024 alone. Scams combine sophisticated social engineering, impersonation of SARS, banks, SAPS, Home Affairs, and couriers, with physical threats including express kidnapping. South Africa is NOT in SEPA; EU consumer-protection reversal rights do not apply. Report financial fraud to your bank first, then SAPS (10111). SAFPS (safps.org.za) provides identity-fraud protection listings. FIC (fic.gov.za) handles money-laundering and financial-crime intelligence.

SIM swap fraud — phone number hijacked to drain bank accounts

critical

Criminals obtain enough personal information (often from data leaks or social engineering) to convince a mobile operator (MTN, Vodacom, Cell C, Telkom) to port or duplicate your SIM. They then intercept all bank OTP codes and approve transactions, emptying accounts before the victim realises. Nearly 60% of mobile banking fraud in South Africa is SIM-swap related. South Africa deployed the Scam Signal platform in October 2025 — a collaboration between banks and operators — to detect fraudulent SIM swaps in real time.

How to spot it
  • - Your phone suddenly loses all signal (no calls, no data, no SMS) unexpectedly
  • - You receive an unexpected "SIM swap completed" SMS from your operator
  • - Bank login alerts or transaction notifications arrive when you did not initiate anything
  • - You can no longer receive OTPs for banking
  • - Social engineering call fishing for personal details (ID number, banking passwords) preceding the swap
What to do: Call your mobile operator immediately from another phone to reverse the SIM swap. Simultaneously call your bank's fraud line to freeze all accounts. File a report with SAPS (10111). Register with SAFPS (safps.org.za) as an impersonation victim. Enable SIM-swap alerts with your operator and a voice-callback PIN for SIM changes.

Vishing — "bank fraud department" phone scam

critical

Caller claims to be from your bank's fraud team, warns of a suspicious transaction, and asks you to "verify" by approving a transaction on your banking app, sharing an OTP, or installing AnyDesk/TeamViewer remote access. The caller may know your partial ID number, last 4 card digits, or recent transaction amounts from purchased data.

How to spot it
  • - Urgent pressure: "act now or your account is compromised"
  • - Asked to approve a transaction to "reverse" or "cancel" fraudulent activity
  • - Remote-access app download request (AnyDesk, TeamViewer, QuickSupport)
  • - Caller knows partial personal details but cannot verify your full banking password
  • - Call arrives from an unusual number or spoofs your bank's number
What to do: Hang up immediately — no bank will ever ask for an OTP or remote access. Call your bank's fraud line directly using the number on the back of your card or on the official website. Freeze cards via the app. Report to SAPS 10111.

Rental fraud in Cape Town, Johannesburg and Durban

critical

South Africa's severe housing shortage makes rental fraud extremely prevalent. Fake listings use stolen photos to advertise attractive properties at below-market prices. Scammers impersonate estate agents, demand deposits before viewings, and disappear. Particularly targets newly arrived expats and foreign students who cannot easily do in-person checks.

How to spot it
  • - Landlord or agent claims to be overseas and cannot show the property in person
  • - Deposit or holding fee requested before a signed lease or viewing
  • - Price significantly below comparable properties in that area
  • - Listing photos appear on other sites (reverse-image search)
  • - Agent cannot provide PPRA (Property Practitioners Regulatory Authority) registration number
  • - Only communicates via WhatsApp with constant pressure
What to do: Verify the agent's PPRA registration at theppra.org.za. Always view the property in person. Never pay before a signed lease and proof of ownership or agent mandate. If defrauded, report to SAPS 10111 and to the NCC (thencc.org.za).

SARS refund / tax debt phishing

critical

Fake SARS emails or SMS messages claim you are owed a refund or owe urgent tax debt, linking to convincing phishing pages that capture eFiling credentials and card details. Threats of immediate arrest or asset seizure are used to panic victims.

How to spot it
  • - Link in message is not sarsefiling.co.za
  • - SARS never sends refund links by SMS or contacts you from a personal mobile number
  • - Threats of immediate arrest — SARS uses formal legal processes, not same-day threats
  • - Requests card details or banking credentials
  • - Sender email domain does not match sars.gov.za
What to do: Log in to eFiling directly at sarsefiling.co.za only. Forward phishing emails to phishing@sars.gov.za. Do not click links. Report to SAPS 10111.

Debit order fraud / unauthorised debit orders

critical

One of South Africa's most common banking frauds: your bank account details are used to load fraudulent debit orders by fake "subscription" services or criminal networks. Often discovered only after multiple monthly deductions. Particularly affects accounts where EFT details have been exposed online or in data breaches.

How to spot it
  • - Unexplained debit orders appearing on your statement from companies you do not recognise
  • - Multiple small deductions (R99–R299) from unfamiliar service names
  • - Bank statement shows a debit order you never authorised
  • - Victim has recently shared banking details online or via phishing
What to do: Monitor your bank statement monthly. Use your bank's DebiCheck system (mandatory for new debit orders from 2025) — only authorised mandates are processed. Dispute unauthorised debit orders through your bank's fraud team immediately (reversal is possible within 40 days under NPS rules). Report to SAPS 10111 and NCC (thencc.org.za).

Advance-fee / "419" fraud and lottery scams

critical

South Africa is both a major origin and target country for advance-fee fraud. Victims are told they have won a lottery, inherited wealth, or can share a large fund — but must pay upfront "fees," "taxes," or "legal costs" to release the money. Losses escalate as victims are convinced to pay increasingly large sums.

How to spot it
  • - Unexpected notification of a lottery win, inheritance, or business opportunity you did not enter
  • - Request for upfront "processing fee," "customs clearance," or "legal tax"
  • - Pressure not to tell family or attorneys
  • - Contact escalates in urgency and fee amounts
  • - Requests wire transfer, gift cards, or cryptocurrency
What to do: No legitimate prize or inheritance requires upfront payment. Cease contact immediately. Report to SAPS 10111 and preserve all communications.

Ponzi and investment scheme fraud

critical

South Africa has a high rate of Ponzi and pyramid scheme fraud. The NPA's Asset Forfeiture Unit reported multiple cases in 2025, including fake "ant farm" and "livestock investment" schemes. Schemes often target communities via social media, church networks, and WhatsApp groups, with early investors paid out from new recruits' funds to build credibility.

How to spot it
  • - Guaranteed monthly returns of 10–40% — no legitimate regulated investment offers this
  • - Referral bonuses for recruiting new investors
  • - Investment "platform" is not licenced by the FSCA (Financial Sector Conduct Authority)
  • - Cannot independently verify where funds are invested
  • - Withdrawal requests are delayed or met with excuses
What to do: Verify any investment platform with the FSCA at fsca.co.za. Report suspected Ponzi schemes to the FSCA and to SAPS. Report to FIC (fic.gov.za) for money-laundering concerns.

ATM card skimming and "helpful stranger" distraction

critical

Skimming devices fitted to ATM card slots clone your card; a hidden camera captures your PIN. Separately, strangers offer to "help" at ATMs, distracting you to observe your PIN or swap your card. Both result in card credentials being used to drain accounts.

How to spot it
  • - ATM card slot feels loose, bulkier than usual, or has an extra attachment
  • - A stranger approaches to offer help, even if friendly
  • - Shoulder surfing — someone standing unusually close
  • - Card is retained by the machine unexpectedly
  • - ATM is standalone in a poorly lit or unmanned location
What to do: Use ATMs inside bank branches only. Shield the keypad when entering your PIN. Never accept help from strangers at ATMs. If your card is retained: call your bank immediately from a safe location — do not leave the ATM until you have called. Report card fraud to your bank and SAPS 10111.

Home Affairs / visa fixer scam

critical

Agents claim to have "internal contacts" at Home Affairs (DHA) who can guarantee visa approvals, speed up permit processing, or bypass official queues for cash payments (R5,000–R50,000+). Many are complete fraudsters; some are corrupt insiders. Victims lose money and may have fraudulent applications submitted in their name.

How to spot it
  • - Guarantees a specific visa outcome — no legitimate practitioner can guarantee this
  • - Requests original passports to be held for extended periods
  • - Cash-only and no written mandate or receipt
  • - Offers to submit false information on your behalf
  • - Cannot show accreditation with the Immigration Practitioners Association of South Africa (IPASA)
What to do: Use only accredited immigration practitioners (IPASA members) or attorneys. Apply directly through VFS Global (for applicable visas) or DHA. Report scams to SAPS 10111 and DHA's hotline.

Fake proof of payment (POP) in marketplace transactions

warning

A buyer sends a WhatsApp screenshot of a fake bank transfer confirmation. The seller hands over goods before checking their account. By the time the fraud is discovered, the buyer has disappeared. Common on Facebook Marketplace, Gumtree, and peer-to-peer deals.

How to spot it
  • - Payment not reflected in your banking app after the screenshot is shown
  • - Screenshot shows an odd time or incorrect reference
  • - Buyer creates urgency to take the goods before payment clears
  • - Email confirmation of payment comes from a non-bank domain
What to do: Release goods ONLY after funds are confirmed in your banking app — never based on a screenshot. For high-value items, wait for the payment to clear (allow 30 minutes for EFT). Report fake POP fraud to SAPS 10111.

Reporting

Where to report: Police emergencies: 10111 (SAPS). Cybercrime tips: SAPS cybercrime unit — saps.gov.za. Financial fraud: your bank's fraud line immediately, then SAPS 10111. SAFPS (Southern African Fraud Prevention Service) for identity-fraud listings: safps.org.za. FIC (Financial Intelligence Centre) for money-laundering and financial crime intelligence: fic.gov.za. FSCA for investment fraud: fsca.co.za. NCC (National Consumer Commission) for consumer disputes: thencc.org.za.

Consumer helpline: SAPS: 10111 (emergency) | Ambulance: 10177 | Universal emergency: 112. SAFPS: safps.org.za. FIC: fic.gov.za. NCC: thencc.org.za or thencc.gov.za. FSCA (investment fraud): 0800 110 443 | fsca.co.za. SARS phishing: phishing@sars.gov.za.