An email address is easier to fake than a telephone number and easier to get wrong. A single changed character in a domain produces an address that looks right, arrives nowhere useful, and in the worst case reaches somebody impersonating the organisation.
ContactDetails.co.za is an independent directory. This page covers how to find a genuine organisational email address, and the specific fraud that email contact enables.
Finding an address that works
- Take it from the organisation’s own contact page, reached by typing the domain rather than following a link.
- Prefer a role address to a personal one. Addresses like info@, support@, claims@ or complaints@ are monitored by a team and survive staff changes; an individual’s address does neither.
- Check the domain against the organisation’s real one. A support address on a free webmail domain, for a company that has its own domain, is a warning rather than a convenience.
- Look for a department-specific address. Large organisations publish separate addresses for claims, accounts, complaints and media, and using the right one is the difference between days and weeks.
- Expect obfuscation. Many sites deliberately scramble addresses against automated harvesting, so the literal text you can copy may not be the real address. Use the contact form in that case.
Business email compromise: the expensive one
This is the fraud that costs South African businesses and property buyers the most, and it works entirely through email. An attacker gains access to, or convincingly imitates, a legitimate mailbox, then sends an invoice or banking detail change that looks exactly like the real thing.
- Verify every change of banking details by telephone, on a number you already had, before paying. Not the number in the email.
- Treat any bank detail change as suspicious by default, however plausible the explanation. Legitimate businesses rarely change accounts mid-transaction; fraudsters always claim they have.
- Check the sender address character by character, not the display name. The display name is trivially faked and is what people actually read.
- Confirm large payments by a second channel that the attacker does not control, and agree that habit with your suppliers in advance.
- If money has gone, phone your bank immediately. A recent transfer can sometimes be recalled within hours, and that window closes fast.
Free escalation routes
| Route | Contact |
|---|---|
| Consumer Goods and Services Ombud | 0860 000 272 |
| National Financial Ombud, banking, credit and insurance | 0860 800 900 |
| Motor Industry Ombudsman of South Africa | 010 590 8378 |
| National Credit Regulator | 0860 627 627 |
| National Consumer Commission | 012 065 1940 |
| Council for Medical Schemes | 086 112 3267 |
| ICASA consumer complaints | [email protected] |
| Public Protector | 0800 11 20 40 |
Questions people actually ask
Is a Gmail address a warning sign?
For a large company with its own domain, yes. For a sole trader or a very small business it is normal and not by itself a concern. What matters more is whether the business is registered, whether the bank account is in the registered name, and whether it can be reached another way.
The organisation only has a contact form. Can I trust it?
Generally yes, and forms are frequently answered faster than a general inbox because they route by category. Save a copy of what you submit, because a form usually leaves you no sent record of your own.
I emailed a complaint and got no reply.
Follow up on the same thread rather than starting a new one, so the history stays together, and then escalate. An ombud will ask for the correspondence, and a single thread showing what you asked and when is far stronger than several separate messages.
Writing a complaint email that actually gets actioned
The difference between a complaint that moves and one that sits in a queue is usually structure, not tone. An agent reading a hundred messages needs to see immediately what happened, what you want and what the reference is.
- Put the reference number in the subject line, along with three or four words describing the matter. That is what makes a message findable later.
- State the outcome you want in the first two sentences, before the history. A refund, a repair, a correction and an apology are different remedies.
- Give the facts in date order, briefly, with amounts. Attach the invoice, the statement or the photographs rather than describing them.
- Say what you have already been told and by whom, because that is what an ombud will ask for if it goes further.
- Keep it on one thread. Replying to the same message preserves the history; starting a new one loses it and frequently restarts the queue.
POPIA: your rights over the address itself
Your email address is personal information under the Protection of Personal Information Act, and that Act gives you rights over how organisations use it, not merely over what they store.
- You may demand that direct marketing stop, and the demand must be honoured. Under the Consumer Protection Act that cannot be charged for.
- Consent for marketing must be obtained, not assumed, and pre-ticked boxes are not consent.
- You may ask what personal information an organisation holds about you, and request correction of anything wrong.
- Every organisation must have an information officer, and many publish that address specifically for these requests.
- Complaints go to the Information Regulator, which enforces POPIA and can act against an organisation that ignores you.
Regulator and ombud routes on this page were verified against their own official contact pages on 24 August 2026.