Introduction
You bought something online and never received it. Someone hacked your email and changed your password. You were promised a job but it was a scam. A fake store took your money. "What do I do? Where do I report this? Who will help me?" Online fraud in South Africa is growing, but knowing where and how to report it is crucial. This complete guide explains types of online fraud, where to report it, step-by-step reporting procedures, what evidence to gather, and what happens after you report.
What Is Online Fraud?
Key characteristics:
- It happens via internet (email, website, social media, WhatsApp, SMS)
- The perpetrator uses deception or false promises
- You lose money or personal information
- It's intentional and illegal
Common Types of Online Fraud in South Africa
Type 1: E-Commerce Fraud (Fake Stores)
What it is: Fake online store looks legitimate. You order and pay. Items never arrive. Store disappears.
Warning signs: New website, poor quality photos, too-good-to-be-true prices, no physical address, no contact phone number, payment only via transfer (no credit card option).
Example: You see a clothing site selling designer brands at 50% off. You pay R5,000. Goods never arrive. Website disappears. R5,000 gone.
Type 2: Phishing (Fake Bank Emails)
What it is: Email appears to be from your bank. It says "verify your account" and has a link. You click it, enter your details. Criminal steals your banking info.
Warning signs: Urgent language ("act now"), requests for passwords/PINs, poor grammar, generic greeting ("Dear Customer"), link doesn't match bank's real website.
Example: Email says "FNB: Click here to verify your account. This link expires in 24 hours." You click. Fake page asks for ID, password, PIN. You enter them. Criminal accesses your account and transfers money out.
Type 3: Job Scams (Fake Employment)
What it is: You see job posting online. Company offers you the job via email. They ask you to pay for "training" or "background check." You pay. No job exists.
Warning signs: Job offered immediately, no interview, too-good-to-be-true salary, requests for money upfront, communication only via email/WhatsApp (no phone calls).
Example: "Company" offers you R30,000/month work-from-home job. They email: "Pay R1,500 for training materials." You pay. No training ever comes. You've lost R1,500 and no job.
Type 4: Romance Scams
What it is: Person builds relationship with you online. After weeks/months, they have an "emergency" and ask for money. You send it. They disappear.
Warning signs: Extremely attractive photos, moved fast to professions of love, reluctant to video call, vague about personal details, stories change.
Example: "Person" on dating app chats with you for 2 months. They say they need R10,000 for an "emergency flight home." You send it. They disappear. You've lost R10,000 and your emotional investment.
Type 5: Advance-Fee Fraud (Money-Making Schemes)
What it is: Fake scheme promises to make you rich. They ask you to pay a fee to get started. You pay. No returns ever come.
Warning signs: Too-good-to-be-true returns, testimonials from people you don't know, pressure to pay quickly, vague about how money is made, unsolicited offers.
Example: "Double your money in 30 days! Invest R5,000 and earn R10,000 guaranteed." You pay R5,000. Nothing happens. Your money is gone.
Type 6: Lottery/Prize Scams
What it is: Email says you've won a lottery/prize you didn't enter. To claim it, you must pay "processing fees" or "taxes."
Warning signs: You didn't enter a lottery, requests for money to claim prize, urgent deadline, vague about prize details.
Example: "You've won R100,000 in the UK lottery! Pay R2,000 processing fee to claim." You never entered. You pay R2,000. Prize never comes. It was a scam.
Type 7: Account Takeover (Hacking)
What it is: Criminal hacks into your email, online banking, or social media. Locks you out. Uses account to commit fraud.
Warning signs: Can't log in, unfamiliar purchases, contacts receive messages from your account, account security settings changed.
Example: Your Gmail is hacked. Hacker changes password. You're locked out. Hacker resets your bank account password and transfers all your money to his account.
Where to Report Online Fraud in South Africa
AGENCY 1: Hawks (Directorate for Priority Crime Investigation)
What they handle: Large-scale online fraud, cybercrime, organized fraud
How to report: Submit complaint online at www.saps.gov.za or visit Hawks office
Contact: +27 (0)12 841 2000 (ask for Cybercrime Unit)
Website: www.saps.gov.za
Best for: Large fraud (R50,000+), identity theft, hacking
AGENCY 2: Cybercrime Unit at SAPS (SA Police Service)
What they handle: Online fraud, hacking, phishing, cybercrime
How to report: Visit local SAPS station or call 10177
Contact: General Line 0861 10 8000
Online Report: www.saps.gov.za (online reporting for some fraud)
Best for: General online fraud, cybercrime, hacking
AGENCY 3: National Consumer Commission (NCC)
What they handle: E-commerce fraud, fake stores, unfair business practices
How to report: Email ncc@thencc.org.za or call 0860 11 2525
Contact: +27 (0)11 202 4000
Website: www.thencc.org.za
Best for: Fake online stores, e-commerce fraud, unfair consumer practices
AGENCY 4: Ombudsman for Banking Services (OBS)
What they handle: Bank fraud, phishing attacks, unauthorized transactions
How to report: Email info@ombud.org.za or call 0861 80 0900
Contact: +27 (0)11 712 1800
Website: www.ombud.org.za
Best for: Banking fraud, account takeover, unauthorized transactions
AGENCY 5: POPIA Unit (Personal Information Commission)
What they handle: Illegal access to personal data, data breaches, privacy violations
How to report: Submit complaint via www.justice.gov.za
Contact: +27 (0)12 406 5370
Best for: Data theft, privacy violations, unauthorized data access
AGENCY 6: FTC International (For Fraud Involving US)
What they handle: Online fraud with US involvement
How to report: Report at www.reportfraud.ftc.gov
Website: www.ftc.gov
Best for: Fraud involving US-based scammers or companies
AGENCY 7: Your Bank's Fraud Department
What they handle: Unauthorized transactions, card fraud, account takeover
How to report: Call bank immediately (number on back of card)
Critical: Do this FIRST if bank fraud is involved
Best for: All banking-related fraud
AGENCY 8: Online Platform (Facebook, TikTok, WhatsApp)
What they handle: Fraud happening on their platform
How to report: Use platform's "Report" button on fraudulent post/account
Best for: Scams happening on social media, fake accounts
Step-by-Step Guide: How to Report Online Fraud
Step 1: Stop Communicating with Scammer (Immediately)
- Don't send any more money
- Don't give more personal information
- Don't respond to messages
- Save all communication (emails, messages, screenshots)
Step 2: Gather All Evidence (Day 1)
Collect and save:
- Screenshots: All messages, emails, website pages (take screenshots with date/time visible)
- Emails: Save all fraud-related emails (subject line, sender, content, date, links)
- Website info: Website URL, company name, address (if listed), phone number, domain registration date
- Financial records: Bank statements showing fraudulent transfers, proof of payment, receipt numbers
- Communication logs: Dates, times, names of people you spoke to
- Your ID copy: You'll need it for reports
- Bank transaction details: Account numbers used, amounts transferred, dates
Step 3: If Bank Fraud—Contact Your Bank IMMEDIATELY (Same Day)
Do this first if any banking is involved:
- Call your bank (number on back of card—not from email)
- Report unauthorized transactions
- Freeze/cancel affected cards
- Ask for fraud dispute form
- File written dispute (email or letter)
- Get reference number for your case
Step 4: Choose Your Reporting Agency (Day 1-2)
Report to appropriate agency based on fraud type:
- General online fraud: SAPS Cybercrime Unit
- E-commerce/fake store: National Consumer Commission (NCC)
- Banking fraud: Ombudsman for Banking Services + your bank
- Hacking/data theft: Hawks or SAPS + POPIA Unit
- Job scam/romance scam: SAPS Cybercrime Unit
- Social media fraud: Report to platform + SAPS
Step 5: File Police Report (Days 1-3)
Option A: In-Person (Recommended)
- Go to local SAPS station
- Ask for Cybercrime Unit or fraud desk
- Bring all evidence (screenshots, bank statements, ID copy)
- Provide detailed statement of what happened
- Give them all contact information (yours, scammer's, bank's)
- Get case number (CRITICAL—keep this)
- Ask for official police report (you'll need this for bank disputes)
Option B: Online Report (If Available)
- Visit www.saps.gov.za
- Look for "Online Crime Report" or "Cybercrime Reporting"
- Fill out form with all details
- Upload evidence (screenshots, statements)
- Submit and save confirmation
Step 6: Report to Specific Agency (Days 2-5)
For E-Commerce Fraud: Report to National Consumer Commission
- Email: ncc@thencc.org.za
- Include: Police report number, your ID copy, all evidence, proof of payment
- Subject: "Fraud Report - [Website Name]"
For Banking Fraud: Report to Ombudsman for Banking Services
- Website: www.ombud.org.za
- Or email: info@ombud.org.za
- Include: Police report, bank statement, your bank's reference number
For Hacking/Data Theft: Report to Hawks Cybercrime Unit
- Phone: +27 (0)12 841 2000
- Or visit Hawks office (check SAPS website for address)
- Include: Police report, evidence of hacking, list of compromised accounts
Step 7: Report to Online Platform (If Applicable) (Days 2-3)
If fraud happened on social media/marketplace:
- Facebook/Instagram: Click 3 dots on post → Report → Select fraud/scam
- WhatsApp: Long-press message → Report → Spam/Scam
- Marketplace (Facebook, OLX): Click report on listing → Fraud/Scam
- Email account used by scammer: Report abuse to Google/Microsoft
Step 8: Monitor Your Accounts (Ongoing)
- Check bank accounts daily for unauthorized transactions
- Monitor credit reports (order from TransUnion, Experian, Compuscan)
- Change passwords for all online accounts
- Enable two-factor authentication
- Watch for identity theft (covered in separate article)
Step 9: Follow Up (Ongoing)
- Contact reporting agencies after 1-2 weeks
- Ask for status update
- Provide any new evidence
- Document all communication
Step 10: Consider Recovery Options (Weeks 2+)
- Bank chargeback: If you paid by credit card, request chargeback
- Fund recovery: Some services help recover funds from scammers (usually cost-based)
- Legal action: Sue scammer (difficult if they're outside SA)
- Attorney consultation: For large fraud, consider legal help
Important Evidence to Save & How to Save It
CRITICAL: Save Everything Immediately
Emails: Don't delete. Save as PDF or screenshot (showing full header: sender, date, IP address if possible)
Messages/Chats: Screenshot entire conversation (including dates/times)
Websites: Screenshot entire page. Save URL. Use www.archive.org to save page copy if possible
Bank Statements: Print or PDF showing fraudulent transactions
Receipts: Screenshots or PDFs of payment confirmations
Photos: Save any photos used by scammer (often stolen from others)
Links: Save all URLs/links sent to you (don't click suspicious links—copy and save only)
Create folder: Make a folder on your computer/cloud with all evidence organized by date
Real-World Reporting Example: E-Commerce Fraud
Scenario: Lindiwe Buys from Fake Store
Day 1: Discovery of Fraud
Lindiwe finds online store (TechDeals.co.za) selling laptops 50% off. She pays R8,000 via EFT for a laptop. After 1 week, no tracking number. After 2 weeks, no delivery. Website no longer loads. Email to store address bounces.
Day 2: Gather Evidence
Lindiwe saves:
• Screenshots of website (product page, checkout, payment confirmation)
• Email confirmation of payment
• Bank statement showing R8,000 transfer
• Email correspondence with store (all bounced)
• Website domain registration info (found via www.whois.com)
• Screenshot of website being inaccessible
Day 2: Contact Bank
Lindiwe calls FNB (her bank). Reports fraudulent transaction. FNB opens dispute case. FNB number: FNB/2026/78901. Bank takes back the R8,000 temporarily pending investigation.
Day 3: File Police Report
Lindiwe goes to Johannesburg SAPS station. Reports e-commerce fraud to Cybercrime Unit. Provides all evidence. Gets police case number: SAPS/2026/JNB/12345. Police confirm this is a known scam website.
Day 5: Report to National Consumer Commission
Lindiwe emails NCC:
"Subject: Fraud Report - TechDeals.co.za
I am reporting e-commerce fraud from TechDeals.co.za where I paid R8,000 for a laptop that was never delivered. SAPS case: SAPS/2026/JNB/12345. [Attachments: police report, screenshots, bank statement, ID copy]"
NCC opens case: NCC/2026/567
Day 5: Report to FTC (If US-Based)
Lindiwe checks domain and discovers scammer is based in US. She reports to FTC at www.reportfraud.ftc.gov. Gets FTC reference number.
Day 7: Report Fraudulent Account
Lindiwe reports fake store's Facebook account to Facebook. Facebook removes the account within 48 hours.
Week 2: Follow-Up
Lindiwe contacts SAPS for update. Police say domain is being investigated. She contacts NCC for update. NCC says they're investigating the store's business registration.
Week 4: Bank Resolution
FNB completes its investigation. Confirms the transaction was fraudulent. Permanently reverses the R8,000 charge. Lindiwe's money is restored.
Result
✓ Fraud reported to SAPS
✓ Reported to NCC
✓ Reported to FTC
✓ Fake account removed from social media
✓ R8,000 refunded by bank after 4 weeks
✓ Investigation ongoing (scammer may face charges if caught)
What Happens After You Report?
SAPS/Hawks Investigation
- Timeline: 1-4 weeks initial review, 2-6 months investigation (if pursued)
- What they do: Track scammer's location, freeze accounts if possible, build case
- Outcome: Arrest warrant, prosecution (if scammer is caught), OR case closed if scammer outside jurisdiction
- You'll hear: Police contact you for additional info, or case closes
National Consumer Commission
- Timeline: 1-2 weeks initial review, 2-8 weeks investigation
- What they do: Contact the business, demand refund, investigate business practices
- Outcome: Refund issued, business sanctioned, OR complaint closed
- You'll hear: NCC updates you on progress via email
Bank/Ombudsman
- Timeline: 2-4 weeks investigation
- What they do: Verify fraudulent transaction, reverse charges, prevent future fraud
- Outcome: Money refunded, account secured, fraud alerts placed
- You'll hear: Bank contacts you with resolution
Your Rights When Reporting Fraud
- Right to be heard: Agencies must listen to your complaint
- Right to police report: You can demand a case number
- Right to confidentiality: Your personal info stays private
- Right to updates: Agencies must inform you of investigation progress
- Right to appeal: If you disagree with resolution, you can appeal
- Right to legal help: You can hire attorney to help with case
Bottom Line: Act Fast and Report Everywhere
Online fraud reporting in South Africa involves multiple agencies. The faster you report, the better your chances of recovery.
Key actions:
- Stop all communication with scammer
- Gather all evidence immediately
- Contact your bank FIRST (if banking fraud)
- File police report at SAPS
- Report to specialized agency (NCC, OBS, Hawks, etc.)
- Report to online platform (if applicable)
- Monitor your accounts
- Follow up on your cases
Remember: Recovery is possible. Many victims get their money back through bank disputes and agency investigations. Report immediately.