South Africans using banking applications on their smartphones are being advised to exercise increased caution when approving payment requests, amidst a surge in app-based fraud. The warning comes as financial institutions report significant losses to such illicit activities. An estimated 81% of these institutions believe they lose more than $5 million, approximately R82 million, to fraud annually, noting the substantial financial drain on the sector. This advisory specifically targets users of banking apps on their smartphones, urging them to be extra vigilant when confronted with payment requests.
Shifting Tactics in Digital Fraud
Fraudsters are increasingly manipulating customers into authorising transactions themselves, marking a significant shift from traditional attempts to directly hack bank accounts. The focus has moved decisively to tricking individuals into approving payments, rather than attempting to breach the sophisticated security systems implemented by banks. This evolution in criminal methodology shows the adaptive nature of digital fraud.
Jonathan Frost stated, "The security around bank accounts is generally so good now that the only way you can get the money out of the account is to effectively manipulate the customer into sending it on your behalf." This indicates a strategic pivot by criminals, leveraging the strong security measures implemented by financial institutions by co-opting the account holder themselves. This approach circumvents direct technological barriers, making the human element the primary target for exploitation.
The rapid growth of digital banking and instant payment systems has made financial transactions faster and more convenient for users. However, this increased speed has also inadvertently created more opportunities for scammers. They exploit the quick pace of these systems to pressure victims into approving transactions rapidly, often before individuals have sufficient time to critically assess the request or identify it as fraudulent. This technique capitalizes on the efficiency of modern banking to facilitate illicit transfers, turning convenience into a potential vulnerability. Criminals are also increasingly using artificial intelligence (AI) to develop more sophisticated and convincing scam tactics. This technological advancement allows them to craft highly personalized and believable fraudulent communications, making it harder for individuals to identify fraudulent attempts and increasing the likelihood of successful manipulation.
Escalating Fraud Statistics
South African banking leaders report a significant escalation in fraud attempts, with 85% indicating an increase against their institutions. This widespread trend is further reflected in public complaints, according to data released by the National Financial Ombud Scheme (NFO). The NFO recorded a substantial 73% jump in digital banking fraud complaints, rising from 1,436 between January and May 2024 to 2,483 during the same period in 2025. This surge in reported incidents shows the growing challenge faced by both financial entities and their customers, indicating a widespread and worsening problem.
The financial impact on individuals can be substantial and devastating. One reported incident noted the severity of these schemes, involving a victim who lost R500,000 due to fraud specifically targeting virtual banking cards. Such cases illustrate the sophistication of current fraud schemes and the inherent vulnerability of digital financial tools when exploited by cunning criminals. The increasing volume of complaints and the severity of individual losses point to an urgent need for enhanced security measures and greater user awareness within the rapidly evolving digital banking ecosystem. These statistics collectively paint a clear picture of a financial landscape under increasing threat from organized and technologically advanced fraudulent activities.
Expert and Bank Warnings
Around 79% of financial institutions in South Africa report that fraud losses are increasing, a trend that mirrors the rise in attempted scams. Banks warn that fraudsters are capable of creating virtual cards and subsequently using these credentials to conduct transactions once they gain access to a customer’s digital banking profile. This access is often obtained after customers inadvertently share One-Time Pins (OTPs) or approve authentication prompts under false pretences, unknowingly granting criminals the keys to their accounts. Fraudsters can create virtual cards and then use these virtual card credentials to perform transactions once they gain access to a customer’s digital banking profile. This method bypasses physical card security and directly exploits digital access.
Experts caution that criminals can exploit a stolen phone or bank card within minutes if victims do not take immediate action to block accounts or cards. This rapid exploitation shows the time-sensitive nature of responding to such incidents, emphasizing the critical importance of swift action to mitigate potential losses. Financial sector observations indicate that criminals are increasingly leveraging artificial intelligence to develop more sophisticated and convincing scam tactics, making it harder for individuals to identify fraudulent attempts. This technological arms race between financial institutions and criminals demands continuous vigilance and adaptation from both banks and their customers to safeguard digital assets.
