Direct answer
Most banking fraud advice is about spotting an attack while it happens, which is the hardest possible moment to think clearly. The settings you change today do more than any judgment you make under pressure. Lower your transfer limits, turn on notifications for every transaction, move day-to-day money away from savings, and save your bank’s number from the back of your card. None of it requires you to correctly identify a fraudster. Verified 18 August 2026.
Settings that limit the damage
- Lower your daily transfer and payment limits to what you actually use. Raising a limit temporarily takes a minute; a high standing limit is what turns an incident into a disaster.
- Turn on notifications for every transaction, not just large ones. Fraud often starts with a small test payment, and that is the cheapest early warning you will get.
- Keep everyday money separate from savings, and do not link accounts you rarely use to your daily banking profile.
- Use in-app approval where your bank offers it, rather than SMS codes alone. App approval is tied to your device rather than to your phone number, which is what a SIM swap targets.
- Set card controls for online, international and contactless use, and switch off what you do not need.
- Save the number from the back of your card into your phone now, so you never search for it in an emergency.
The limit setting is the one that matters most. Nearly every serious loss involves an amount the account holder would never normally move in a day.
Habits that close the common routes
- Never act inside the channel that contacted you. End the call, leave the message, and reach your bank on the card number instead.
- Read your statements monthly, including the small entries. Test transactions are deliberately unremarkable.
- Confirm banking details by voice before any first payment to a new beneficiary, using a number you sourced yourself.
- Treat a sudden loss of mobile signal as an alarm. If your phone goes dead and stays dead while others have service, call your bank and your network from another phone.
- Keep your banking app and phone updated, and use a screen lock.
The rules that never change
Three requests identify fraud regardless of who appears to be asking, and none of them requires you to assess the rest of the story.
- Nobody legitimate asks for your one-time password. It authorises a transaction, so disclosing it is the transaction.
- No bank asks you to move money to a safe account. Banks do not hold customer money in protective accounts.
- No bank needs remote access to your device. An app installed to let someone assist you hands over your banking session.
If something has already happened
- Phone your bank on the number on your card immediately. A recall only works while the funds remain in the receiving account, so this is measured in hours, not days.
- Say precisely what was disclosed. Whether an OTP was given changes what the bank can do.
- Open a SAPS case on 10111 or at a station and keep the case number.
- Lodge the dispute in writing with the bank, quoting the case number, rather than relying on the call.
- Apply for Protective Registration through SAFPS on 011 867 2234 if identity documents were exposed. It is free.
Official contact routes
| Body | Contact | What it handles |
|---|---|---|
| Your bank | The number on the back of your card | Blocking accounts, attempting a recall |
| SAPS | 10111, or any station | The criminal case and case number |
| SAFPS | 011 867 2234, [email protected] | Protective Registration, free |
| National Financial Ombud | 0860 800 900, [email protected] | Unresolved bank disputes, after the bank’s process |
| SABRIC | 011 847 3000 | Banking industry risk body, not a consumer complaints desk |
What to prepare
- Your account number and the card used.
- The date and time of the contact and of each disputed transaction.
- The beneficiary details money was sent to.
- Screenshots or the original message, kept rather than deleted.
- A written account of what you disclosed, made while it is fresh.
What not to share
- One-time passwords, PINs, card CVV numbers and banking login details.
- Remote access to your phone or computer.
- Confirmation of a transaction you did not start.
- Photographs of your card, front or back, in any message.
If the issue is not resolved
Keep every reference number and put each escalation in writing. If the bank’s own process is exhausted without resolution, the National Financial Ombud handles unresolved banking and credit disputes, subject to jurisdiction, and will expect evidence that the bank was given a fair opportunity first. Confirm eligibility before lodging. Outcomes depend heavily on how quickly the bank was notified, and no route guarantees that money will be returned.
Related contact pages
- Fake Bank SMS And Call Scams South Africa: spotting the contact itself.
- Fake Telecom Customer Care Number: SIM swap, which targets your one-time passwords.
- Change Of Banking Details Scam: payments diverted on genuine invoices.
- Protective Registration South Africa: the free SAFPS filing.
- Report A Scam South Africa: the reporting sequence in full.
Frequently asked questions
What is the single most effective thing I can do?
Lower your daily transfer limit to what you actually use, and raise it temporarily when you need to. It caps the loss without requiring you to identify a fraudster correctly under pressure.
Are SMS one-time passwords safe?
They are tied to your phone number, which is what a SIM swap takes over. Where your bank offers in-app approval linked to your device, that is the stronger option, and it removes the code a caller could talk you into reading out.
What information should I prepare?
Your account number and the card used, the times of the contact and each disputed transaction, the beneficiary details, screenshots or the original message, and a written account of what you disclosed.
What should I do if I cannot get help?
Escalate in writing with your SAPS case number and keep every reference, then approach the National Financial Ombud on 0860 800 900 once the bank’s own process is exhausted and you have confirmed the matter falls within its mandate.
Last verified 18 August 2026. Routes confirmed on saps.gov.za, safps.org.za, nfosa.co.za and sabric.co.za.