An overview of the scams rising fastest right now, from AI-crafted phishing to fake bank calls.
Home / Scam guides / Other
Digital banking fraud in South Africa jumped 86% in 2024. Here's a plain-language look at the scams hitting South Africans hardest right now, why they work, and how to check a message before you act.
Published 27 June 2026 · Last reviewed 27 June 2026
Digital banking fraud Up 86% in 2024, with losses rising 74% to R1.888 billion (SABRIC)
Where it happens Digital banking channels accounted for 65.3% of reported fraud incidents
The main weapon Social engineering, not hacking. Tricking you, not breaking the bank's systems
The shift AI now helps criminals write flawless phishing and clone voices
Scams in South Africa are not just becoming more common. They are becoming harder to spot. The tell-tale signs people were taught to watch for, bad grammar, clumsy design, obvious foreign numbers, are disappearing as criminals adopt better tools. Understanding what is actually trending right now, and why it works, is the first step to staying safe.
Here is a plain-language look at the scams hitting South Africans hardest at the moment, the numbers behind them, and what genuinely protects you.
There is an important nuance in the latest data. Overall banking-crime losses in South Africa actually fell in 2024, from R3.3 billion to R2.7 billion, as banks strengthened their systems. On the surface, that sounds like progress.
But dig into the detail and the picture changes. Digital banking fraud specifically surged. According to the South African Banking Risk Information Centre (SABRIC), digital banking fraud incidents rose 86% in 2024, and the associated losses rose 74% to a record R1.888 billion. Nearly 98,000 cases were reported, up from around 52,000 the year before.
What this tells us is that criminals have changed their approach. Rather than trying to break through a bank’s technical defences, they increasingly go around them, by targeting the customer directly. Digital banking channels accounted for 65.3% of all reported fraud incidents, and the Financial Sector Conduct Authority issued more than 100 public warnings in 2024 alone.
The most important insight in the SABRIC data is this: most of these incidents were not sophisticated hacks. They were the result of social engineering, which means tricking a person rather than breaking a system.
Criminals do not need to defeat your bank’s security if they can convince you to hand over your PIN, your one-time PIN, or your login details yourself. That is why the losses keep climbing even as banks improve their technology. The weakest point in the system is not the software. It is a human being under pressure, in a hurry, and caught off guard.
This reframes what protection actually means. No amount of bank security can help if you are persuaded to authorise a transaction or read out a code. Your own scepticism, in the moment a message arrives, is the real defence.
The specific scams circulating in South Africa share the same underlying structure, but each targets a different moment in your life.
Bank impersonation and fake fraud calls. A message or phone call claims there is a problem with your account, or a fraudulent transaction being reversed, and pressures you into confirming details or reading back a one-time PIN. This is the most damaging category because it targets account access directly. We break down a real example, including why your phone’s caller ID cannot be trusted to protect you, in our guide to fake bank fraud calls and SMS.
Fake courier delivery fees. A text says a parcel is being held until you pay a small customs or redelivery fee, with a link to a lookalike website. It rides on the online-shopping boom, where paying a small import fee feels routine. Our full breakdown of the fake courier delivery-fee SMS shows what the real messages look like and how to spot the fake link.
SARS and government impersonation. Messages claiming you owe SARS money, or are due a refund, exploit the authority of government institutions and the fear of non-compliance. These spike around tax season. Our guide to the SARS settlement and demand scam covers the seven red flags and the rules SARS never breaks.
AI-crafted phishing and deepfakes. This is the trend changing everything else. SABRIC has specifically flagged AI-generated phishing emails, cloned WhatsApp messages, and voice-cloned deepfakes as a rising threat. A phone call that sounds exactly like a family member in trouble, or a bank official, may be a fabricated recording. The old advice to look for spelling mistakes no longer holds when the message is machine-perfect.
Fake investment platforms and social media schemes. Promises of guaranteed returns, often promoted by social media personalities or through fake trading apps, continue to draw people in. South Africa has seen some of the largest such schemes in the world. The rule of thumb remains simple: a guaranteed return is a warning sign, not an opportunity.
For years, the standard advice was to watch for poor spelling, awkward phrasing, and suspicious-looking design. That advice is now dangerously out of date.
With AI tools widely available, criminals produce flawless text, perfectly cloned branding, and convincing fake websites at scale. The gap between a real institutional message and a fake one has narrowed to almost nothing on the surface. A message that looks professional is no longer a message you can trust.
This is the single most important shift for South Africans to absorb. You cannot judge a message by how legitimate it appears. You have to judge it by what it asks you to do, and whether that request makes sense coming from the institution it claims to represent.
The scams differ in their cover story, but the defences are remarkably consistent across all of them.
Many South Africans do not report scams. Some feel embarrassed at having been targeted, others assume nothing will come of it, and reporting rates have been falling. That silence has a cost: it leaves everyone else in the dark about which scams are circulating right now.
Every report contributes to a shared picture. When the same fake courier message or bank-impersonation call is reported by enough people, it becomes easier to warn the next person before they are caught. Reporting is not just about your own case. It is a small act that makes the whole community harder to scam.
Reading about scam patterns sharpens your instincts, but in the moment a suspicious message arrives, you do not have to make the call alone. Verifyd is a free tool built for exactly that moment. Paste the SMS, email or WhatsApp message in, or scan a QR code, and it checks the sender, the links, and the content against how real South African institutions actually communicate, then gives you a clear verdict with the reasoning spelled out.
The scams are getting more convincing. Your best protection is a calm second opinion before you click or pay. If a message claims to be from your bank, SARS, or a courier and something feels off, check it at verifyd.co.za before you act.
Sources: South African Banking Risk Information Centre (SABRIC) Annual Crime Statistics 2024; Financial Sector Conduct Authority; Global Anti-Scam Alliance, Global State of Scams 2024.
01 Are scams actually getting worse in South Africa? The picture is mixed, and the nuance matters. Overall banking-crime losses actually fell in 2024, from R3.3 billion to R2.7 billion, as banks improved their defences. But digital banking fraud specifically surged: incidents rose 86% and associated losses rose 74% to R1.888 billion (SABRIC Annual Crime Statistics 2024). So the criminals have shifted. Instead of attacking banks' systems, they increasingly target you directly through convincing messages and calls.
02 Why are AI-generated scams so dangerous? Because they remove the old warning signs. The classic advice was to watch for bad spelling and clumsy grammar. AI now writes flawless phishing emails, clones logos perfectly, and can even imitate a familiar voice on a phone call. SABRIC has flagged AI-generated WhatsApp messages and voice-cloned deepfakes as a growing threat. This is why judging a message by how polished it looks no longer works. What matters is what it asks you to do.
03 What is the single most useful habit against these scams? Never act on a link or a phone number that arrived in the suspicious message itself. If a message or call claims to be from your bank, SARS, or a courier, stop. Reach the institution through a channel you find independently: type their website address yourself, use the number on the back of your bank card, or open your banking app directly. Almost every scam on this page collapses the moment you refuse to use the contact details the scammer provided.
04 Why does reporting scams matter if I wasn't caught? Reporting near misses helps everyone. Many South Africans do not report scams out of embarrassment or a belief that nothing will happen, and reporting rates have been falling. But every report helps build a clearer picture of which scams are circulating, which protects the next person who receives the same message. When you report a scam in Verifyd, it feeds into detection that helps the whole community.
05 How do I check whether a specific message is a scam? That is exactly what Verifyd is built for. Paste the SMS, email or WhatsApp message in, or scan a QR code, and you get a clear verdict in seconds with plain-language reasoning for what was found. It is free, and you do not need an account. Reading about scam patterns builds your instincts; Verifyd checks the specific message in front of you right now.
##
Got a message like this? Check it first.
Paste the SMS, email or WhatsApp into Verifyd and get a clear
verdict in seconds, with plain-language reasoning for exactly
what we found.
Get the app More scam guides
Courier & delivery Fake courier delivery-fee SMS Banking Fake bank fraud calls & SMS