← All insights

Smishing & vishing

Fake SMSes and calls: when the "bank" is not your bank

23 October 2026 · Omnitrace

Older South African man in Cape Town looking suspiciously at a text message on his phone

Problem: your phone rings. The caller knows your name, your ID number and your bank. Agitate: they sound professional and say someone is stealing your money right now. You're scared, so you do what they say, and that is exactly how the money gets stolen. Solution: know the scripts, and hang up.

Common SMS scams (smishing)

  • "Your parcel is held at customs. Pay R25 here."
  • "Your bank card has been blocked. Click to verify."
  • "Unpaid traffic fine. Pay now to avoid a warrant."
  • "SARS: you are due a refund. Submit your banking details."

Common call scripts (vishing)

  • The fraud department: "Read me the OTP so we can reverse a payment."
  • The safe account: "Move your money to this safe account."
  • The police or SARS: "There is a warrant for your arrest unless you pay today."
  • The family emergency voice note, sometimes using a voice cloned with AI.

How to respond

  1. Hang up. A real bank won't mind.
  2. Call back on the number on your card, never a number the caller gave you.
  3. Never share an OTP, PIN or password on the phone.
  4. Agree on a family code word for real emergencies.
  5. Talk to older relatives about these scripts. They are targeted most.
Know this: criminals often have your details from data breaches. A caller knowing your ID number does not prove they are real.
Running a business? Omnitrace helps you verify every client's identity before you sign, lend or hire. Request a service or call 065 375 6188.

This article is general information, not legal or financial advice.

Keep reading

We use only essential cookies to run this site. Cookie Policy