Got hacked or scammed in South Africa? Here's who to call.
Cybercrime in South Africa is massively under-reported — most victims don't know where to turn. This free guide covers exactly who to contact, what to say, and what your rights are under POPIA.
Always freeNo account neededUpdated March 2026Covers POPIA rights
⚠️ If money was just stolen from your bank account
Call your bank's fraud hotline right now — the number is on the back of your card. Banks can sometimes freeze or reverse transactions if contacted within minutes. Tell them: "Unauthorized transaction — please freeze my account immediately."
🚔 Who To Report Cybercrime To in South Africa
South Africa has multiple agencies handling different types of cybercrime. Report to all that apply — it takes 15 minutes and builds the strongest case.
🚔 SAPS — Police
10111
All cybercrime. Report at your nearest station or online. Always get a case number.
Gather your evidence first — screenshots of the fraud, email headers, transaction records, chat logs, URLs, and any account details involved. The more you have, the stronger your case.
2
Go to your nearest SAPS station and ask to open a cybercrime case. Say: "I want to report a cybercrime — online fraud / hacking / data breach." Request a case number before you leave.
3
Alternatively, report online at saps.gov.za. You'll receive a reference number by email.
4
If banking fraud is involved: call your bank's fraud line immediately (on the back of your card), then file a report with SABRIC at 011 847 3122.
5
For data breaches involving your personal information: lodge a complaint with the Information Regulator at inforegulator.org.za — the company that lost your data may be in violation of POPIA.
⚖️ Your Rights Under POPIA
The Protection of Personal Information Act (POPIA) gives South Africans strong rights when their data is breached. Most people don't know these exist.
POPIA — Your Data Rights
If your personal data is breached, the responsible organisation must notify you as soon as reasonably possible — this is a legal obligation, not optional
You have the right to know exactly what data was exposed and what steps are being taken
You can request correction or deletion of your personal information held by any organisation
You can lodge a complaint with the Information Regulator if an organisation fails to notify you or protect your data
Organisations that violate POPIA face fines up to R10 million and possible imprisonment — these are real consequences
🏥 For Hospitals, NGOs and Schools
South Africa has thousands of NGOs, hospitals, and schools that handle sensitive data with no dedicated IT or security team. If your organisation has been attacked, Teradef provides free incident response guidance — calm, expert, plain language.
Free Cyber First Aid for Your Organisation
AI-powered emergency guidance for organisations under attack — ransomware, data breach, phishing. Free, 24/7, no account needed. Built for organisations with no security team.
Enable two-factor authentication on your email and banking apps — this stops most account takeovers
Use unique passwords for every account — especially your online banking
Never click links in SMS messages claiming to be your bank — go directly to the bank's app
Check your credit report annually at transunion.co.za for fraudulent accounts opened in your name
Freeze your ITC/credit record if you suspect identity theft — it's free and reversible
❓ Frequently Asked Questions
How do I report cybercrime to SAPS?+
Report at your nearest SAPS station or online at saps.gov.za. Call 10111 for emergencies. Always get a case number — you'll need it for insurance claims, bank disputes, and any follow-up action. Bring screenshots, transaction records, and any other evidence you have.
What is the SAPS WhatsApp number?+
The SAPS Crime Stop anonymous tip-off line via WhatsApp is 082 786 3873. This is for anonymous tips. For emergencies call 10111. For cybercrime cases, visit your nearest station to open a formal case and receive a case number.
What are my rights under POPIA if my data was breached?+
Under POPIA, the organisation that lost your data must notify you as soon as reasonably possible. You have the right to know what was exposed, request correction or deletion of your data, and lodge a formal complaint with the Information Regulator at inforegulator.org.za if they fail to do so.
Where do I report online banking fraud in South Africa?+
Report immediately to: (1) Your bank's fraud hotline (on the back of your card), (2) SABRIC at 011 847 3122 or sabric.co.za, (3) SAPS at 10111 or your nearest station. Act fast — banks can sometimes reverse transactions if contacted within minutes of the fraud occurring.
What counts as cybercrime in South Africa?
The Cybercrimes Act 19 of 2020 defines cybercrime broadly to include: unauthorised access to computer systems, cyber fraud and extortion, distribution of malicious software, online harassment and cyberbullying, sharing of intimate images without consent, and attacks on critical information infrastructure. If someone hacked your accounts, stole your banking credentials, locked your files with ransomware, or impersonated you online — these are all reportable cybercrimes under South African law.
How long does a cybercrime report take to process?
SAPS cybercrime investigations vary widely. Simple online fraud reports may be acknowledged within days, but complex cases — especially those involving cross-border cybercrime syndicates — can take months to years. The Directorate for Priority Crime Investigation (Hawks) handles the most serious cases. For banking fraud, your bank's fraud team often acts faster than police — report to both simultaneously.
The SAPS cybercrime unit can be reached at cybercrime@saps.gov.za. For urgent cases involving financial loss, also contact your bank immediately — most South African banks have 24/7 fraud lines and can freeze transactions faster than any legal process.
Common scams targeting South Africans in 2026
▸WhatsApp OTP hijacking: You receive a message asking to forward a 6-digit code "accidentally sent to you." This gives attackers full access to your WhatsApp and your contacts.
▸Vishing (voice phishing): A caller claims to be from your bank's fraud department and convinces you to share your card details or approve a transaction to "stop fraud."
▸Job scams: Fake job offers requiring an "admin fee" or your bank account details. Increasingly targeting recent graduates on LinkedIn and Facebook.
▸SIM swap fraud: Attackers convince your mobile network to issue a new SIM with your number, then intercept your banking OTPs. Report immediately to your network provider and bank.
▸Romance scams: Long-term online relationships that end with a request for money, gift cards, or cryptocurrency. Reported losses in South Africa reached R3 billion in 2024.
If you have experienced any of these — use Teradef's free Cyber First Aid tool above or report directly to the SAPS Cybercrime Unit and the South African Banking Risk Information Centre (SABRIC) at sabric.co.za.