{"id":849880,"date":"2026-02-08T07:00:00","date_gmt":"2026-02-08T05:00:00","guid":{"rendered":"https:\/\/businesstech.co.za\/news\/?p=849880"},"modified":"2026-02-06T18:40:11","modified_gmt":"2026-02-06T16:40:11","slug":"new-warning-to-south-africans-using-banking-apps-on-their-phones","status":"publish","type":"post","link":"https:\/\/businesstech.co.za\/news\/banking\/849880\/new-warning-to-south-africans-using-banking-apps-on-their-phones\/","title":{"rendered":"New warning to South Africans using banking apps on their phones"},"content":{"rendered":"\n

South Africans are being warned about a fast-growing and highly dangerous form of digital fraud that is increasingly targeting people through their smartphones.<\/p>\n\n\n\n

Known as RAT attacks, these scams are particularly effective because many victims have never heard of them and don\u2019t realise what is happening until it is too late.<\/p>\n\n\n\n

RAT stands for Remote Access Trojan, a type of malicious software that allows criminals to remotely control a person\u2019s phone or computer.<\/p>\n\n\n\n

RAT attacks give fraudsters direct access to a victim\u2019s device, enabling them to operate banking apps in real time while the customer is still using the phone.<\/p>\n\n\n\n

Bonolo Sebolai, Head of Fraud at TymeBank, said that these scams are among the most sophisticated currently affecting South African consumers.<\/p>\n\n\n\n

\u201cRAT scams are particularly dangerous and extremely sophisticated because they are designed to use the device at the same time as the customer without any clear signs of a device takeover.\u201d <\/p>\n\n\n\n

He explained that criminals don\u2019t steal your login details; they take control of your device.<\/p>\n\n\n\n

In South Africa, RAT scams usually begin with a phone call or message claiming to be from a bank\u2019s fraud department, a mobile network provider, a courier company, an online retailer, or even a government department.<\/p>\n\n\n\n

Victims are told there is an urgent problem with their account, device, or a pending delivery. They are then instructed to click a link or install an app, often sent via WhatsApp or SMS, which supposedly resolves the issue.<\/p>\n\n\n\n

Once that software is installed, the scammer can see everything happening on the screen. This includes PINs and passwords as they are entered, one-time passwords sent by the bank, and even live banking transactions.<\/p>\n\n\n\n

\u201cTo the bank, it can look like the customer is making the transaction themselves because the criminal is actually using the customer\u2019s own device,\u201d said Sebolai.<\/p>\n\n\n\n

Spike is digital banking fraud<\/h2>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

Fraudsters rely on panic and pressure to succeed. Common tactics include warnings that an account is about to be blocked or that a service cannot be completed unless immediate action is taken.<\/p>\n\n\n\n

\u201cThese scams thrive on pressure and authority. If you\u2019re being rushed to act immediately, that\u2019s one of your biggest red flags,\u201d Sebolai warned.<\/p>\n\n\n\n

Other warning signs include being asked to install software to \u201cfix\u201d a problem, being told to stay on the line while logging in, or being instructed to approve transactions to supposedly reverse fraud. <\/p>\n\n\n\n

A critical rule remains that banks will never ask customers to install remote access software or share PINs or OTPs.<\/p>\n\n\n\n

Due to growing fraud concerns, banks are being forced to strengthen their security systems. Sebolai says modern banking security now goes beyond passwords. <\/p>\n\n\n\n

\u201cIn 2026, bank-grade security means monitoring behaviour in real time, not just checking passwords.\u201d <\/p>\n\n\n\n

At TymeBank, this includes real-time fraud detection, behavioural monitoring to spot signs of remote device control, and risk-based security that adapts to each situation. Consumers are also urged to take basic precautions. <\/p>\n\n\n\n

Sebolai advised people to only download apps from official app stores, to hang up and contact their bank directly if something feels wrong, and to act immediately if they suspect their device has been compromised. <\/p>\n\n\n\n

The warning comes as the National Financial Ombud Scheme (NFO) reported<\/a> a sharp rise in digital banking fraud complaints last year.<\/p>\n\n\n\n

Cases increased by 73%, from 1,436 between January and May 2024 to 2,483 during the same period this year. <\/p>\n\n\n\n

The NFO has also highlighted growing risks linked to virtual banking cards, after one victim lost R500,000.<\/p>\n\n\n\n

Nerosha Maseti, Lead Ombud for Banking and Credit at the NFO, said while virtual cards offer undeniable convenience, they are not immune to fraud.<\/p>\n\n\n\n

In most cases, she explained that virtual cards are compromised only after criminals gain unauthorised access to a customer\u2019s banking app through phishing, smishing, or vishing.<\/p>\n\n\n\n

\u201cFraudsters can create virtual cards and then use the virtual card credentials to perform transactions once gaining access to a customer\u2019s digital banking profile after customers have shared OTPs or approved authentication prompts,\u201d she said. <\/p>\n","protected":false},"excerpt":{"rendered":"

South Africans are being warned about a fast-growing and highly dangerous form of digital fraud that is increasingly targeting people through their smartphones.<\/p>\n","protected":false},"author":92,"featured_media":849890,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[961],"tags":[1334,853,24677,13455],"class_list":["post-849880","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-banking","tag-fraud","tag-south-africa","tag-the-national-financial-ombud-scheme-nfo","tag-tymebank"],"_links":{"self":[{"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/posts\/849880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/users\/92"}],"replies":[{"embeddable":true,"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/comments?post=849880"}],"version-history":[{"count":2,"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/posts\/849880\/revisions"}],"predecessor-version":[{"id":849894,"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/posts\/849880\/revisions\/849894"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/media\/849890"}],"wp:attachment":[{"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/media?parent=849880"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/categories?post=849880"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/businesstech.co.za\/news\/wp-json\/wp\/v2\/tags?post=849880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}