Cybercriminals are becoming increasingly sophisticated, using emails, phone calls, and SMSes to trick people into giving up sensitive personal and financial information. In South Africa, both phishing (fraudulent emails or messages) and vishing (voice phishing via phone calls) are on the rise. Here's how you can protect yourself:
1. Know Who You're Talking To
Never assume a call, email, or SMS is legitimate just because it appears to come from your bank or a government agency. The South African Police Service (SAPS) and legitimate banks will never contact you directly to report a crime or request your personal details.
2. Don’t Share Sensitive Information
Legitimate institutions will never ask for your PIN, OTP (one-time password), banking passwords, or card details via phone or email. If someone asks for this, it’s a scam.
3. Check the Source
Before clicking on links in emails or SMSes, check the sender's address or number carefully. Scammers often use email addresses or phone numbers that look very similar to legitimate ones, with slight alterations.
4. Look Out for Urgency or Threats
Phishing and vishing scammers often create a false sense of urgency - claiming your account will be frozen, or a criminal case has been opened. These are scare tactics designed to get you to act impulsively.
5. Use Official Contact Channels
If you're unsure whether a call or message is real, hang up or ignore the message and call the organisation back using their official customer service number - found on their website or your bank card.
6. Avoid Public Wi-Fi for Sensitive Transactions
Do not access banking apps or enter passwords when connected to public Wi-Fi. Hackers can intercept this information easily.
7. Keep Your Devices Secure
Install and regularly update antivirus software and apps from trusted sources only. Phishing can also come through malware disguised as legitimate apps or documents.
8. Enable Two-Factor Authentication (2FA)
Use 2FA for all online services that support it, especially for banking, email, and social media accounts. This adds a second layer of security, even if your password is compromised.
9. Be Skeptical of Unsolicited Job Offers, Competitions, or Refunds
Scammers often lure victims by pretending they’ve won something or are due a refund. If it sounds too good to be true, it probably is.
10. Report and Educate
Report suspicious activity to your bank and the South African Fraud Prevention Service (SAFPS). Also, talk to friends and family - especially older relatives - about common scam tactics.
Staying informed and cautious is your best defence. Trust your instincts - if something feels off, it probably is.
Sources: SAPS | OBSA