The Most Common Phone Scams in South Africa Right Now

The caller knows your name, your ID number, and the last digits of your bank card. Or the text about your "held parcel" arrives the same week you actually ordered something online. Phone scams in South Africa have become disturbingly well-researched operations, with scripts, spoofed numbers, and personal data bought from earlier breaches. The good news: there are only a handful of scripts in heavy rotation. Learn them once and most scam attempts die in the first ten seconds.

Fake bank security calls (vishing)

The costliest script in circulation. A caller claiming to be from the fraud department of Standard Bank, FNB, Absa, Nedbank, or Capitec warns of suspicious activity on your account — a debit order you never authorised, a login from another province. The caller ID may even show your bank's real number, because spoofing is trivial.

Then comes the extraction: read back the one-time PIN (OTP) just sent to your phone, approve a login request, or move your money to a so-called safe account. Every one of these requests is proof of a scam — real banks never ask for OTPs, PINs, or self-transfers on an incoming call. Hang up and call the number on the back of your card. We cover this scam in full depth in our dedicated guide.

SIM-swap fraud

Uniquely damaging and depressingly common in South Africa. Criminals convince your carrier — or a corrupt insider — to port your number to a SIM card they control. Suddenly your phone loses signal, and every OTP meant for you goes to them instead. Within hours they can reset banking passwords and drain accounts.

Warning signs: your phone unexpectedly shows no service, you receive SMS notifications about a SIM change you never requested, or your banking app stops recognising your device. If this happens, contact your carrier (Vodacom, MTN, Cell C, or Telkom) immediately from another phone, then call your bank's fraud line. Ask your carrier about adding SIM-swap verification or a porting PIN to your account before anything happens.

Fake parcel-delivery SMS (smishing)

"Your package is held at the depot. Pay the R49 release fee here." The text names a courier you recognise — PostNet, RAM, Aramex, Courier Guy, Takealot, DHL — and includes a tracking link. The link opens a convincing fake page asking for card details or a small fee, which hands your credentials to criminals and sometimes subscribes you to premium SMS services.

Real couriers do not demand surprise fees through random text links. If you are expecting a parcel, track it in the retailer's or courier's official app, never through an SMS link. Our deep dive on delivery scams walks through the current variants.

Prize, lottery, and competition scams

"You have won R250,000 in the national consumer draw!" Sometimes it arrives by SMS, sometimes as an enthusiastic phone call. To release your winnings you must first pay "taxes," "legal fees," or "delivery insurance" — via EFT, airtime vouchers, or money transfer. Carriers including Vodacom have publicly warned customers about fake prize SMS messages abusing their brand names.

The rule is absolute: legitimate winnings never require the winner to pay anything first. Any prize that needs a payment to unlock is not a prize. The same applies to "you've been selected for a job abroad" messages that demand upfront visa or training fees.

Wangiri one-ring callbacks

Your phone rings once from an international number and stops. Curiosity does the rest: you call back, and the call connects to a premium-rate line that bills you at punishing per-minute rates while keeping you on hold with music and recorded messages. The name comes from Japanese slang for "one ring and cut."

Treat any single ring from an unknown international number as bait. Do not call back. Block the number, and consider asking your carrier about barring international and premium-rate calls if you never make them. Our wangiri guide explains the trap in detail.

Red flags that apply to every scam

• Urgency: act now or lose your money, your account, your prize.
• Secrecy: do not tell anyone, do not hang up, stay on the line.
• Authentication theft: any request for your OTP, PIN, password, or approval of a login you did not start.
• Move-your-money instructions: safe accounts, verification transfers, refunds that require you to pay first.
• Untraceable payment: airtime or data vouchers, gift cards, crypto, cash deposits to a stranger's account.
• Emotional pressure: fear, excitement, sympathy — the stronger the feeling, the slower you should go.

What to do if you already fell for one

It happens to sharp people every day; these scripts are professional products refined over thousands of calls. Speed is everything:

1. Call your bank's real fraud line immediately — the number on your card or in the app — and ask about freezing accounts, reversing payments, and reissuing cards.
2. Contact your carrier if a SIM swap may be involved, or if premium-rate charges appeared after a callback.
3. Change passwords from a safe device, starting with email and banking, and enable every second factor available.
4. Report to the police (SAPS) for significant losses — banks and insurers often require a case number.
5. Report the number to your carrier, to WASPA if SMS was involved, and to ICASA. Reports build the cases that shut operations down.
6. Watch for recovery scams: victims' details get passed around, and a "recovery agent" offering to get your money back for a fee is simply round two.

Prevention as a daily habit

Let unknown calls go to voicemail, never confirm personal details on an inbound call, and verify every scary message through an independent channel — the number on your card, the official app, the company's real website. Talk through the bank-call and SIM-swap scripts with older relatives, who are disproportionately targeted. And use a call-blocking app like NoCall to flag known scam numbers before you pick up. The scams change costumes every season, but the skeleton never changes: urgency, authority, secrecy, and a payment or PIN at the end. Break any one of those and the scam collapses.