The South African fraud landscape is becoming increasingly risky as fraudsters and scammers look to target individuals with highly sophisticated scams in an environment where it is becoming increasingly difficult for lawmakers and authorities to bring these criminals to justice.
“International Fraud Awareness Week is held from 12 to 18 November, and it is important to remain actively aware about the risks fraud poses to us locally as well as globally. In particular, South Africans need to be aware how they are impacted by fraud and the urgency of implementing proactive prevention measures in their daily lives,” says Nazia Karrim, head of product development at the Southern African Fraud Prevention Service (SAFPS).
As the custodians of fraud in Southern Africa, and to mark International Fraud Awareness Week, the SAFPS collaborated with several industry professionals and drilled down into the specific issues that are challenging to many South Africans.
A sophisticated stepping stone into Africa
While South Africa is not the largest economy on the continent, it is one of the most diverse and very sophisticated compared to its continental peers.
Connectivity in South Africa is increasing, with statistics from Statistics South Africa showing that more than half the population has access to smart devices. Computers are prominent in South Africa and are essential tools for running businesses and are used extensively at home for private use.
Danny Myburgh, MD of Cyanre, points out that many people may not be aware that South Africa is a safe haven for cyber criminals who are using the country as a stepping stone into Africa. He adds that South Africa is one of the countries in the world with the highest rate of scams perpetrated on the rest of the world.
He points out that scammers are increasingly assuming the identities of high-level South African business professionals (CEOs, CFOs, and COOs) and are running scams.
“Because scammers ran scams from specific countries in the past, a business professional will be reluctant to do business with a business executive from that country. However, they will be open to doing business with a South African business executive because of our reputation,” says Myburgh, adding that scammers are aware of this and are taking advantage of it.
One of the biggest scams being run in South Africa, targeting businesses, is known as a business email compromise scam. Hackers will access the mailbox of a high-level manager within a company and then spend almost 200 days assessing how they can run a lucrative scam.
“Some instances involve a scammer changing the banking details of invoices or purchasing orders so that the money is filtered to them. Other scams involve accessing important information or client data and then holding it for ransom. Statistics from the US show that almost $300 million is lost to these types of scams every month globally,” says Myburgh.
Additionally, South Africans are easy targets when it comes to phishing scams. “It doesn’t take a lot for a scammer to send out 1000 phishing emails, and if they only get a 5% click-through rate, they will reap a high reward,” says Myburgh, who points out that authorities are fighting a losing battle against these criminals as there is significant anonymity associated with their crime. The victim pool is global rather than local, which is also a considerable problem.
“If you combine the Unemployment Crisis with the prevalence of technology and the low level of training needed to run these scams, one can see why they are so popular,” says Myburgh.
A complicated situation
In addition to cyber-crime being a major issue, banking fraud is also a significant risk many South Africans face.
Kevin Hogan, head of fraud risk at Investec, echoes Myburgh’s sentiments and points out that the techniques used to perpetrate fraud have not changed much over the years. The increased number of victims largely boils down to sophisticated phishing scams and bad password habits. “Consumers have more to do with themselves becoming victims than they care to admit,” says Hogan.
Hogan admits that it is more complex than careless consumers and that these scams are becoming highly sophisticated. He adds that it is becoming such a challenge that lawmakers have flagged this with banks and are even ruling against them in some cases.
“There is currently a law that is in the process of being passed in the UK which states that if a consumer makes a payment in good faith, and it turns out to be a scam, the bank receiving the payment and the bank authorising the payment will be jointly responsible for refunding the victim,” says Hogan.
A common thread in both Myburgh and Hogan’s engagements with the SAFPS is that South Africans have a greater role to play in them becoming victims than they care to admit. This may be because of poor password habits, but it may also be because they are unaware of the changing nature of these scams and how scammers can lull consumers into a false sense of security, which turns them into victims.
“Banks are unaware of how to prevent consumers from becoming victims of scams, and they are finding it hard to tackle the education component of fraud prevention because you are dealing with a diverse range of people with varying levels of education and who come from different LSM markets. It becomes extremely challenging,” says Hogan.
An important tool
Because of the increase in scams in South Africa, the SAFPS launched Yima, a platform offering online tools to combat these scams. Karrim points out that the Yima platform has proven very effective in the proactive fight against fraud.