Personal safety isn't only about what happens on the street. For many South Africans, the crime most likely to cost them real money is fraud, and a lot of it is aimed at the phone in your pocket. Criminals impersonate banks, take over phone numbers, trick people into handing over one-time PINs, and run fake sales that never deliver. The good news is that most of these scams rely on the same few tricks, and once you recognise the pattern, they're much easier to spot. This guide explains how SIM-swap fraud works, the other scams to watch for, how to protect your accounts, and what to do the moment you suspect something is wrong.
What a SIM swap is, and why it matters
A SIM swap happens when a criminal gets your mobile number moved onto a SIM card they control. They may do it by impersonating you to your network, by using personal details they've collected about you, or occasionally with help from an insider. Once they control your number, they receive your calls and text messages, including the one-time PINs (OTPs) that banks and other services send to confirm a login or a payment. With your number and a few of your personal details, they can try to reset passwords and move money.
Warning signs
- Your phone suddenly loses signal ("No service" or "SOS only") for no obvious reason, especially if it lasts and nearby people have signal.
- You get messages from your network about a SIM change, porting or activation that you didn't ask for.
- You stop receiving calls and messages you'd normally get.
- You get bank notifications, password-reset emails or login alerts you didn't trigger.
Worth knowing: if your phone loses signal and you can't explain why, treat it as urgent rather than as a network glitch. Use another phone to contact your network and your bank straight away. The first hour matters.
If you think you've been SIM-swapped
- Call your network from another phone, using the official number from their website or your contract, and tell them you suspect a SIM swap. Ask them to restore your number to your SIM and to block the unauthorised one.
- Call your bank's fraud line immediately, using the number on your card, in your banking app or on their official website. Ask them to block cards and online banking and to check recent activity.
- Change your passwords, starting with your email, since it can be used to reset other accounts. Do this from a device you trust.
- Check your statements and accounts for transactions you don't recognise, and note them down.
- Report it to the police and get a case number, which your bank will usually need.
- Watch your accounts for the following weeks, including any that use your phone number for verification.
How to make a SIM swap harder
- Guard your personal details. Your ID number, date of birth, address and banking details are what criminals use to impersonate you. Don't share them on social media, and don't give them to callers who contacted you.
- Prefer app-based approvals over SMS codes where your bank offers them. If a criminal takes your number, an approval that lives in your banking app on your own device is harder for them to intercept.
- Add a password or PIN to your mobile account if your network offers one, so that changes need more than your name and ID number.
- Turn on notifications for every transaction and for logins, so you notice quickly.
- Set sensible limits on daily transfers and card use, and switch off features you don't use, such as international or online card use.
- Be careful what you throw away. Shred documents with your ID number, account details and addresses.
The other scams to know
Fake "bank fraud department" calls
A caller says they're from your bank and that your account is under attack. They sound professional and may even know some of your details. They then ask you to move your money to a "safe account", read out an OTP, install an app, or confirm your PIN. A bank will never ask you to do any of these. If you're unsure, hang up and call the number on the back of your card yourself.
Phishing messages and links
SMS messages and emails that claim to be from your bank, a courier, a government department or a prize promoter, with a link or attachment, are designed to steal your login details. Don't tap links in unexpected messages. Go to the website or app directly instead. Check the address for small misspellings, and remember that a message can look genuine and still be fake.
"Hi Mom, I have a new number"
A message, often on WhatsApp, claims to be from a child or relative with a new number and asks for urgent money. Always call the person on their old number, or ask a question only they could answer, before sending anything.
Fake sales and deposit scams
On online marketplaces, a "seller" asks for a deposit or full payment up front for an item that never arrives, or a "buyer" sends a fake proof of payment and asks you to release the goods. Don't release goods or send money until funds have cleared in your own account, meet in a busy public place for in-person sales, and be wary of anyone who rushes you.
Card skimming and ATM tricks
Cover the keypad when you enter your PIN, check the card slot for anything loose or unusual, and never accept help from strangers at an ATM. If a machine looks tampered with, don't use it, and tell the bank. See our guide to public spaces for more on ATM safety.
The red flags that appear in almost every scam
- Urgency. "Act now or lose your money." Real institutions give you time.
- Secrecy. "Don't tell anyone, including the bank." Genuine staff won't ask you to keep quiet.
- Requests for codes, PINs or passwords. No genuine organisation needs these from you.
- Unusual payment methods. Pressure to pay by transfer to a stranger, voucher or crypto.
- Too good to be true. Prizes you didn't enter for, deals far below market price, or "guaranteed" investment returns.
When you notice one of these, stop. Hang up, close the message, and contact the organisation through a number or app you already trust.
Everyday account hygiene
- Use a different, strong password for each important account, ideally with a password manager, and switch on two-step verification wherever it's offered.
- Keep your phone's software and your apps up to date, and install apps only from official stores.
- Avoid doing banking over public Wi-Fi.
- Lock your phone with a PIN or biometrics, and set up remote lock and erase now, so you can act quickly if it's ever stolen.
- Check your bank statements and credit report regularly.
Help the people around you
Scammers often target older relatives and young adults who are new to banking. Take a few minutes to talk through these warning signs with them, agree that nobody will send money after an unexpected message without calling the other person first, and make it normal to say "I got a weird message, can you check this?" without embarrassment. Fraud works best when people are too ashamed to ask for help, so it's worth making asking easy. Our family emergency plan is a good place to add a "money and scams" rule.
Frequently asked questions
Would my bank ever ask me for my PIN or an OTP?
No. A genuine bank will not ask you to share your PIN, password or a one-time PIN, and will not ask you to transfer money to a "safe account". If someone does, it's a scam.
My phone lost signal. Is that a SIM swap?
It might just be a network problem, but you can't tell from the phone alone. Check whether people around you have signal, and if you can't explain it, call your network and your bank from another phone to be safe.
What if I already gave someone my details?
Act quickly: call your bank on a number you trust, change your passwords, and report it to the police. Acting early often limits the damage, and there's no shame in it. These scams catch careful people too.
Official resources and further reading
These South African organisations are relevant to this topic, and their own sites have the most current information. This guide is general information, not professional security, legal or medical advice.
- South African Banking Risk Information Centre (SABRIC): fraud awareness and crime information from the banking industry.
- Southern African Fraud Prevention Service (SAFPS): fraud information and protective registration for victims of identity theft.
- South African Police Service: the official site of the national police service.