South Africa is in the grip of a sophisticated fraud crisis, with impersonation scams targeting bank customers and even municipal residents. Nedbank and Standard Bank have issued fresh warnings after detecting a surge in criminals posing as officials, manipulating caller IDs, and tricking people into handing over sensitive information.
The New Face of Banking Fraud
Nedbank revealed that fraudsters are now brazenly pretending to be its fraud department. In these cases, victims receive calls from numbers registered as “Nedbank Investigations.” The scammers warn of a suspicious debit order or large transaction and then pressure customers into surrendering their login details, approving fraudulent messages, or sharing one-time pins (OTPs).
The trap is simple but devastating: once scammers gain access, they drain accounts. Nedbank has reiterated that its staff will never ask customers to change their Nedbank ID, share OTPs, or disclose login credentials.
Standard Bank has raised the stakes further, warning that artificial intelligence is now being deployed in these scams. Criminals are using AI-generated voices and emails that closely mimic bank employees—right down to their professional tone, disclaimers, and standard security questions. They even reference personal details such as birth dates and addresses to appear credible.
When panic sets in, victims are manipulated into transferring funds to so-called “safe accounts,” scanning QR codes, or revealing sensitive banking details.
Beyond Banks: A City Hall Warning
It’s not only banks in the firing line. The City of Cape Town has confirmed a rise in impersonation scams involving fake municipal officials. One recent incident in the Helderberg area saw a resident targeted via WhatsApp and phone calls, claiming that their electricity would be disconnected due to arrears. The fraudsters demanded immediate payment into a private account via e-Wallet.
Xanthea Limberg, Mayoral Committee Member for Energy, condemned the scheme and reminded residents that the city never uses WhatsApp or personal bank accounts for payments. “All payments must be made through official city channels,” she said, urging families to warn the elderly—who are frequent targets of such scams.
Why Spoofing Works
At the core of this crime wave is spoofing: technology that allows criminals to disguise their caller ID or email address to look like it originates from a legitimate source. In a country already battling high levels of fraud and corruption, spoofing makes it nearly impossible for unsuspecting victims to tell real from fake.
Cybercrime experts warn that South Africa is particularly vulnerable because of low digital literacy in some communities, combined with economic desperation that criminals exploit.
How to Protect Yourself
Banks and municipalities stress the following golden rules:
Never share your banking passwords, PINs, or OTPs. Legitimate officials will never ask for them.
Read approval messages carefully before accepting them.
Do not transfer money to “safe accounts.” No bank or city authority will request this.
Verify calls independently. Hang up and call your bank or municipality directly using official numbers.
Spread awareness. Warn elderly relatives and friends, who are often prime targets.
A Growing National Crisis
This surge in impersonation fraud highlights the growing challenge of cyber-enabled crime in South Africa. What began as basic phishing emails has evolved into highly convincing scams powered by AI, caller ID manipulation, and social engineering.
For now, vigilance remains the best defence. As the saying goes: in a country where scammers sound more professional than the professionals, trust nothing and verify everything.