Phishing in South Africa: how to spot a fake email, link or login page
23 October 2026 · Omnitrace
Problem: one email that looks exactly like it came from your bank, SARS, a courier or Microsoft. Agitate: you click, type your password, and within minutes your accounts are opened, your email is used to fool your contacts, and your money moves. In a business, one click can let criminals change supplier bank details or lock every file with ransomware. Solution: learn to pause and check. Phishing only works when you rush.
What phishing looks like
- Email phishing: "Your account is suspended", "Unpaid invoice attached", "SARS refund pending".
- Fake login pages: a copy of your bank, Office 365 or Gmail on a slightly wrong web address.
- QR code phishing: a QR code on a poster, parking meter or letter that opens a fake payment page.
- Business email compromise: your "supplier" or "CEO" asks you to pay a new bank account urgently.
Warning signs
- Urgency or threats: "within 24 hours", "account will be closed".
- A sender address that doesn't match the company.
- Links that show a different address when you hover or press and hold.
- Requests for your password, PIN, OTP or card number.
- Unexpected attachments, or files asking you to "enable content".
- Generic greetings like "Dear customer", and spelling mistakes.
Clicked a phishing link?
- Change the password from a different, safe device.
- Phone your bank's fraud line (on the back of your card) and block your cards if you entered banking details.
- Log out of all sessions and turn on two-step verification.
- Open a case at SAPS if money was taken.
Rule of thumb: if a message makes you panic, it's designed to. Stop, then check through an official channel.
Running a business? Omnitrace helps you verify every client's identity before you sign, lend or hire. Request a service or call 065 375 6188.
This article is general information, not legal or financial advice.
Keep reading
- SARS refund SMS and email scams: "Your refund is ready" is the bait
- "This is SARS, you owe R38,000": fake SARS calls and debt threats
- eFiling hijacks and fake tax returns: when criminals file in your name
- Banking app fraud: how criminals empty accounts, and how to stop them
- Fake SMSes and calls: when the "bank" is not your bank
- Crypto and investment scams: the promise of quick riches
- Online shopping, marketplace and courier scams in South Africa
- 7 habits that keep your personal information out of criminal hands
- Your ID number is gold to fraudsters. Here is how to guard it
- The most common South African scams and how to spot them
- Fake job offers and human trafficking in South Africa: the warning signs
- Inside the playbook: how scammers and cyber criminals target South Africans