Bank OTP and SIM Swap Scams in South Africa: How to Protect Your Account
Digital banking fraud is one of the fastest-growing crimes in South Africa, according to SABRIC. Fraudsters call pretending to be from the fraud department of Capitec, FNB, Absa, Standard Bank or Nedbank, warn you about a 'suspicious transaction' and ask you to read out an OTP or approve an in-app notification to 'cancel' it — which actually authorises the theft. In SIM swap fraud, criminals take over your cellphone number at Vodacom, MTN, Cell C or Telkom so that your bank's OTPs go to them. Fake SMS with links to cloned banking sites complete the picture.
Real Scam Message Examples
These are real examples of messages used in this type of scam. If you receive something similar, do not click any links.
Example 1
“Capitec: A purchase of R8,499.00 at Takealot was declined on your account. If this was not you, please call our fraud department on 0870XXXXXXX immediately.”
Example 2
“FNB: Your online banking has been suspended due to suspicious login activity. Reactivate within 24 hours to avoid permanent closure: fnb-secure-reactivate.co”
Example 3
“(Phone call) 'Good day, I'm calling from Standard Bank fraud. We've stopped a R12,000 transfer from your account. To reverse it, I'm sending you an OTP — please read it to me so I can cancel the transaction.'”
Warning Signs of a Bank OTP or SIM Swap Scam
- ⚠A caller from your 'bank's fraud department' asks you to read out an OTP, PIN or password, or to approve a notification in your banking app
- ⚠You're told to move money to a 'safe account' to protect it from fraud
- ⚠Your phone suddenly shows 'No Service' or 'SOS only' for no reason — a possible SIM swap in progress
- ⚠SMS says your card is blocked or a large purchase was made and asks you to click a link or call a number
- ⚠The caller asks you to install AnyDesk, TeamViewer or another remote-access app 'to secure your account'
How Does This Scam Work?
- 1Scammers collect your personal details from data leaks, phishing SMS or social media
- 2They call posing as your bank's fraud team, often spoofing a real-looking number and using your name and ID number
- 3They create panic about a fraudulent transaction and ask you to 'confirm' or 'cancel' it
- 4You read out an OTP or approve an in-app prompt — which actually adds a new beneficiary, device or payment
- 5In SIM swap cases, they redirect your number so OTPs go to them and empty your account while your phone has no signal
Legitimate vs Scam: How to Tell the Difference
| Aspect | ✓ Legitimate | ✗ Scam |
|---|---|---|
| OTPs and approvals | Your bank will never ask you to share an OTP or approve an app notification to 'reverse' fraud | 'Read me the OTP so I can cancel the transaction' |
| Safe accounts | Banks never ask you to move money to another account to protect it | 'Transfer your balance to this safe account while we investigate' |
| Calling back | You can hang up and call the number on the back of your card | Pressures you to stay on the line and not hang up |
| Remote access | Banks don't need remote access to your phone or computer | Asks you to install AnyDesk or TeamViewer |
What Should You Do?
- ✓Hang up and call your bank on the number printed on your card or in the official app — never on a number supplied by the caller
- ✓If your phone loses signal unexpectedly, contact your cellphone network immediately to check for a SIM swap, then alert your bank
- ✓Ask your bank to block cards and online banking if you shared any OTP, PIN or password, and change your credentials
- ✓Open a case with SAPS and report anonymous tips to Crime Stop on 08600 10111; see SABRIC (sabric.co.za) for guidance, and consider protective registration with the Southern African Fraud Prevention Service
- ✓Paste the suspicious message into ScamCheck for an instant verdict
Free Tool
Received a suspicious message?
Paste it into ScamCheck and get an instant AI verdict — free, no signup needed.
Check it now — it's free →Frequently Asked Questions
Will my bank ever phone me and ask for an OTP?
No. South African banks consistently state that they will never ask you to share an OTP, PIN, password or to approve an app notification over the phone. An OTP is only ever for a transaction you started yourself.
What is a SIM swap scam?
Criminals trick or bribe their way into porting your cellphone number to a new SIM. Your bank's OTPs then go to them. Sudden loss of signal is the main warning sign; contact your network and bank immediately.
How can I protect myself from SIM swap fraud?
Use your bank's app-based authentication rather than SMS where possible, keep your ID number and personal details private, and ask your network about SIM swap notifications or extra security on your account.
Will the bank refund money lost to an OTP scam?
It depends on the circumstances and your bank's terms. If you shared an OTP or approved the transaction, refunds are often refused, which is why prevention matters. Report immediately — speed improves the chance of recovering funds.
Where do I report banking fraud in South Africa?
Report to your bank's fraud line first, then open a case at your nearest SAPS station. SABRIC provides guidance on banking crime, and you can register with SAFPS for protection if your identity was compromised.
Related Scam Guides
More Scams in South Africa
phishing in Other Countries
Explore more scam guides
View all guides by category and country →