Capitec Warns South Africans of Escalating Financial Scams in 2025

Capitec warning

Capitec, South Africa's largest bank by customer numbers, has raised concerns about a surge in financial scams targeting South Africans in 2025. These fraudulent activities include authorised push payment (APP) fraud, Ponzi schemes, investment scams, advance fee scams, and courier scams.

With a customer base of 23 million as of the end of 2024, Capitec has developed a keen understanding of the tactics fraudsters use to deceive individuals. The bank's strong digital presence has played a key role in identifying these threats, as online banking fraud continues to escalate. According to its latest financial results, Capitec's active banking app users have grown by 21% year-over-year, reaching 12.4 million in 2025.

The Most Prevalent Scams in South Africa

Capitec has identified authorised push payment fraud as one of the most concerning scams affecting its customers. In these schemes, cybercriminals impersonate trusted institutions such as banks or service providers to deceive victims into authorising payments to fraudulent accounts. This method of financial deception has led to significant monetary losses for many South Africans.

Investment scams are also on the rise, with fraudsters luring victims by promising high returns with minimal risk. Often, these schemes collapse, leaving investors with substantial financial losses. Similarly, courier scams have become prevalent, where individuals pay deposits or full amounts for goods or services that never materialise.

Another growing threat is advance fee scams. In these cases, victims are tricked into paying upfront fees for loans, job offers, prizes, or inheritances that do not exist. A common variation of this scam involves fraudulent job offers circulating on platforms like WhatsApp and Telegram, where applicants are required to pay for training that never occurs.

Work-from-home (WFH) scams are another concerning trend. These scams often involve individuals being persuaded to make multiple payments under the pretense of investing or trading. One particularly notorious variation, known as "Pig Butchering," involves long-term deception, with scammers maintaining communication over extended periods to drain victims financially.

Cybersecurity and Fraud Prevention

As financial fraud becomes more sophisticated, businesses and individuals must take proactive steps to protect themselves. Capitec recently warned customers about scams involving fraudsters impersonating officials from the Independent Communications Authority of South Africa (ICASA) and the South African Police Service (SAPS). These scammers falsely claim that a victim’s identity has been linked to criminal activity, using pressure tactics to extract personal or banking information.

According to the South African Banking Risk Information Centre (SABRIC), incidents of banking and push payment fraud in South Africa have increased by 40% compared to the previous year. Phishing and social engineering remain primary tactics used by cybercriminals to exploit unsuspecting individuals.

To combat these growing cyber threats, businesses and financial institutions must invest in robust cybersecurity solutions. StormWarning! provides an advanced, automated cybersecurity auditing system that helps organisations detect vulnerabilities, assess risk, and implement stronger security measures. By leveraging automated audits and cybersecurity training, StormWarning! enables businesses to stay ahead of evolving cyber threats and safeguard customer data against fraudsters.

How to Minimise the Risk of Fraud

To reduce the risk of falling victim to scams, Capitec advises consumers to adopt the following precautions:

  • Be sceptical of offers that promise quick or high returns. If it sounds too good to be true, it likely is.

  • Avoid paying upfront fees for jobs, loans, or prizes. Reputable companies will never ask for such payments.

  • Thoroughly research investment opportunities and ensure they are provided by authorised financial service providers.

  • Exercise caution when purchasing items on online marketplaces. Always meet in person at a safe, public location for exchanges.

  • Do not click on links in unsolicited messages requesting personal or banking details.

  • Verify the authenticity of any call or message claiming to be from your bank. Use official contact numbers and check verified social media accounts.

As cyber threats continue to evolve, financial institutions and businesses must prioritise cybersecurity and fraud prevention. StormWarning! offers cutting-edge solutions to help organisations strengthen their security posture, mitigate risks, and protect their clients from financial fraud. By implementing comprehensive cybersecurity measures, South Africans can enhance their resilience against the growing wave of scams in 2025.


StormWarning! – Your Frontline Defense Against Cybercrime...   ... Probe. Prepare. Prevent. Protect. Prevail.    PROTECT YOUR BUSINESS NOW!

Related Articles

What is StormWarning! ?

 StormWarning! is a Cybersecurity consultancy. Our experienced team of cybersecurity experts provide cybersecurity assessments, cybersecurity training and cybersecurity solutions to organisations that have a high risk public profile. StormWarning! is your organisation's best defense against the ever growing cascade of innovative security threats raining down on all organisations with a public digital footprint.

What is Cybersecurity?

Cybersecurity is the practice of protecting critical systems and sensitive information from digital attacks. Also known as information technology (IT) security, cybersecurity measures are designed to combat threats against networked systems and applications, whether those threats originate from inside or outside of an organization. StormWarning! is constantly researching the latest cybersecurity threats and building innovative measures to prevent them.

 

NIST Audit & Targeted Cyber-Risk Training

StormWarning! offers comprehensive Cybersecurity Consulting, with a focus on its Automated Online Auditing Solutions, primarily the NIST CSF Readiness Audit. This audit is prioritized as its results directly inform the organization's needs for targeted cybersecurity training. By identifying specific gaps in risk management knowledge, they deliver precise education via Short Courses—like Cybersecurity Risk Management or Understanding Cybersecurity GRC—to ensure staff and leadership close deficiencies and maintain compliance.

Their full suite of services also includes robust Risk Management planning, development of essential Policies, impactful Cybersecurity Awareness Campaigns, and a security monitoring/incident response platform, StormFront. Additionally, we offer a resource library of Cybersecurity Books authored by our esteemed associate Dr. Zoran Mitrovic.