Based on reports and surveys released during 2025 by various South African institutions (including financial service providers, fraud prevention agencies, and regulatory bodies), the number one general fraud scam in South Africa is not a single specific tactic, but rather a category of related scams known as Social Engineering Fraud or Impersonation Scams, often culminating in Authorized Push Payment (APP) Fraud.
These scams are the most destructive because they exploit human trust and leverage new technology to circumvent traditional bank security measures.
The Number One Scams: Social Engineering & APP Fraud
This broad category includes the following specific tactics, which were the most reported and financially devastating in 2025:
1. Bank/Official Impersonation Scams (Vishing & Smishing)
- The Tactic: Scammers impersonate a trusted entity—most commonly a bank fraud investigator, a government agency (like SARS or ICASA), or a cell network loyalty program. They create a sense of extreme urgency or panic (e.g., “Your account has been compromised” or “Your loyalty points are expiring”).
- The Goal: To trick the victim into volunteering their sensitive data (PINs, card details, or, most critically, a One-Time Password/OTP) or authorizing a payment (APP Fraud).
2. Investment and Crypto Scams
- The Tactic: Fraudsters, often using deepfake videos of local celebrities (like Adrian Gore) or fake investment firms, promise high-yield returns in a short period (e.g., 100% in 24 hours).
- The Fraud: The victim is lured into sending money to a fraudulent platform or crypto exchange, which they believe is an investment, but is simply the transfer of money directly to the criminal.
3. Package/Delivery and Loyalty Programme Scams
- The Tactic: Scammers capitalize on the popularity of e-commerce and cellphone network rewards. They send an SMS or email claiming a package is stuck, or loyalty points are about to expire.
- The Fraud: The victim is prompted to click a link, which leads to a convincing fake website designed to harvest credit card details and OTPs under the pretense of paying a small “delivery fee” or “redemption fee.”
Why this is the “Number One” Threat
Surveys consistently highlight that these “trust-based” scams are the most successful because:
- AI and Deepfakes: The use of Generative AI has made phishing emails, phone calls (vishing), and fake investment videos far more convincing.
- Authorized Push Payment (APP) Fraud: This is the most damaging outcome. The victim is manipulated into authorizing the final payment themselves, which makes it extremely difficult for banks to reverse, as the transaction is technically legitimate in the banking system.