Direct answer
Hang up and dial the number on the back of your card. That single habit defeats almost every bank impersonation, because the card is in your hand and cannot be altered by a message, a search result or a spoofed caller ID. No genuine bank will ever ask you for a one-time password, ask you to move your money to a safe account, or ask you to install an app so it can help you. Verified 18 August 2026.
Why caller ID and SMS threads prove nothing
Two technical facts do most of the damage here, and neither is widely understood.
- The number shown on an incoming call can be set by the caller. Seeing your bank’s real switchboard number on your screen is not evidence of anything. This is why the rule is to end the call and dial out yourself rather than to judge the number that called you.
- A fraudulent SMS can land inside the same thread as your bank’s genuine messages. Phones group messages by the sender name, so a spoofed sender name places the fake alongside real alerts you have trusted for years. Position in a thread is not provenance.
A caller also knowing your name, ID number, account number or recent transaction proves nothing. That information leaks through data breaches, statements and card machines, and supplying it is the opening move of the script rather than proof of identity.
The requests that identify the scam
- “Read me the OTP.” The one-time password authorises a transaction. Reading it out is the transaction. No bank needs it from you.
- “Move your money to a safe account.” Banks do not have safe holding accounts for customers, and they cannot ask you to transfer your own money to protect it. This request alone ends the conversation.
- “Install this app so we can assist.” Remote-access software hands over your device and your banking session.
- “Confirm your PIN or card CVV.” A bank never asks for these, in any channel.
- “Stay on the line while we sort this out.” Keeping you on the call prevents you dialling out to check, which is exactly why it is insisted on.
- “Ignore the SMS you are about to receive.” That message is your bank’s genuine warning about the transaction being authorised.
What to do while the call is happening
- End the call. You owe a cold caller nothing, and a genuine bank will not object to being called back.
- Wait a moment before redialling, or use a different phone. A call that has not fully disconnected can leave you speaking to the same person when you think you have dialled out.
- Dial the number printed on the back of your card, not one from your call history, a search result or the message.
- Ask them directly whether anyone from the bank has just contacted you and whether there is any activity on your account.
Official reporting channels
| Body | Contact | What it handles |
|---|---|---|
| Your bank | The number on the back of your card | Blocking the account, attempting a recall |
| South African Police Service | 10111, or any station | The criminal case and case number |
| SAFPS | 011 867 2234, [email protected] | Protective Registration, free, if ID details were exposed |
| SABRIC | 011 847 3000 | Banking industry risk body, not a consumer complaints desk |
| National Financial Ombud | Its own published channels | Unresolved bank disputes, after the bank’s process |
Speed is the only thing that decides whether a payment can be stopped, so the bank call comes before the police report, not after it.
What information to prepare
- The time of the call or message, and the number it appeared to come from.
- What you disclosed, precisely. Whether an OTP was read out changes what the bank does next.
- Any transactions you can see, with amounts, times and beneficiaries.
- Screenshots of the message thread, kept rather than deleted.
- Your account number, which the bank will ask for on the call you place.
What not to share
- One-time passwords, to anyone, for any stated reason.
- Your PIN, card CVV or banking login details.
- Remote access to your phone or computer.
- Confirmation of a transaction you did not initiate, however it is framed.
- A transfer of your own funds to any account on someone else’s instruction.
If the issue is not resolved
Lodge a written dispute with your bank rather than relying on the phone call, quoting your SAPS case number and setting out exactly what was disclosed and when. Keep every reference number. If the bank’s own process does not resolve it, the National Financial Ombud handles unresolved banking disputes once that process is exhausted, and will expect to see that the bank was given a fair opportunity first. Confirm eligibility before lodging. Where your identity documents were exposed, apply for Protective Registration through SAFPS, which is free. No route guarantees that money will be recovered, and outcomes depend heavily on how quickly the bank was told.
Related pages
- Fake Bank Call Scam South Africa: the call script in closer detail.
- Fake Bank Customer Care Numbers South Africa: checking a number before you dial it.
- Banking Scam Prevention South Africa: the preventive settings and habits.
- What Not To Share With Customer Care: the credentials no agent needs.
- Report A Scam South Africa: the reporting sequence in full.
Frequently asked questions
The number that called me was my bank’s real number. Was it genuine?
Not necessarily. The number displayed on an incoming call can be set by the caller, so a correct-looking number is not evidence. End the call and dial the number on the back of your card instead.
What should I do if I gave out an OTP?
Phone your bank immediately on the number on your card, say clearly that you disclosed a one-time password, and ask for the account to be secured and any pending transaction stopped. Then open a SAPS case and keep the case number for your written dispute.
What information should I prepare?
The time of the contact, the number it came from, precisely what you disclosed, any transactions with amounts and times, screenshots of the thread, and your account number for the call you place.
What should I do if I cannot get help?
Put the dispute in writing to the bank with your SAPS case number and keep the reference. If it remains unresolved after the bank’s own process, approach the National Financial Ombud, confirming first that your matter falls within its mandate.
Last verified 18 August 2026. Reporting routes confirmed on saps.gov.za, safps.org.za and sabric.co.za.