Banking app fraud: how criminals empty accounts, and how to stop them
23 October 2026 · Omnitrace
Problem: banking apps make life easier for you, and for criminals. Agitate: fraudsters don't need to rob a branch. With your OTP, a SIM swap or five minutes of remote access to your phone, they can empty your savings and credit card before you notice. Solution: a few settings and habits make you a far harder target.
The four most common tricks
- OTP theft: a "bank official" asks you to read back the OTP "to reverse a fraudulent transaction". The OTP actually approves a new payment.
- SIM swap: criminals move your number to their SIM so your OTPs go to them. A sudden "No service" is the warning sign.
- Remote-access apps: you're told to install AnyDesk or a "security app" that lets them control your phone.
- Fake apps and links: lookalike banking apps or SMS links that capture your login.
Lock your account down today
- Set daily transfer and card limits as low as is practical.
- Turn on notifications for every transaction.
- Ask your network about SIM-swap protection and set a SIM PIN.
- Download banking apps only from the official app stores.
- Never install an app because a caller told you to.
If it happens to you
Phone your bank's fraud line immediately, ask your network to check for a SIM swap, then open a SAPS case and keep the number for your bank dispute. Our Scam Tracer service can help trace the accounts and numbers involved.
Remember: your bank will never ask for your OTP, PIN or password, or ask you to move money to a "safe account".
Running a business? Omnitrace helps you verify every client's identity before you sign, lend or hire. Request a service or call 065 375 6188.
This article is general information, not legal or financial advice.
Keep reading
- SARS refund SMS and email scams: "Your refund is ready" is the bait
- "This is SARS, you owe R38,000": fake SARS calls and debt threats
- eFiling hijacks and fake tax returns: when criminals file in your name
- Phishing in South Africa: how to spot a fake email, link or login page
- Fake SMSes and calls: when the "bank" is not your bank
- Crypto and investment scams: the promise of quick riches
- Online shopping, marketplace and courier scams in South Africa
- 7 habits that keep your personal information out of criminal hands
- Your ID number is gold to fraudsters. Here is how to guard it
- The most common South African scams and how to spot them
- Fake job offers and human trafficking in South Africa: the warning signs
- Inside the playbook: how scammers and cyber criminals target South Africans