DON'T FALL INTO THE WEB

A few weeks ago I ordered some goods on Shein. 

Payment and order confirmation were received via email, and all I had to do was wait for delivery. 

A few days before the order was scheduled to arrive, I received an email which stated that my parcel was being held at customs and that I needed to make a payment of R50 to get it released. 

There was a Fastway logo, a tracking ID, lots of other well-known logos, links to articles – the works! 

It looked completely legitimate – even to someone like me, who might know a little bit more about scams than the average person. 

But for a split second, I actually thought about clicking on the payment link and just paying. Why? Because I was busy – and just wanted to do what was necessary to get my order. Luckily, something told me to check the domain URL – and then I suspected something was up. 

I was so busy, that I didn’t even have the time to look into it, so I asked my husband to do it. He went to the Fastway site, typed in the parcel tracking number, and obviously it did not match anything on their system. 

He then called them and they confirmed that the email did not come from them. 

They don’t even do deliveries for Shein. (Fastway is not the only delivery company which is being impersonated in these scams).

Maar mense – it looked so real, I was a split second away from entering my card details to pay this “small customs fee” - and then probably having my bank account emptied. 

These fraudsters are not amateurs. 

These are professional con artists, part of highly sophisticated syndicates and probably situated in other countries, preying on ordinary people who simply cannot afford to lose money to these scams.

According to the 2024 crime statistics report by the South African Banking Risk Information Centre (SABRIC), digital banking fraud cases almost doubled in volume, rising from 31 612 in 2023 to 64 000 in 2024, while losses increased from R1 billion to over R1.4 billion.

SABRIC says that these incidents were the result of skelms cleverly tricking people into sharing personal details, rather than technical compromises of banks.

The Financial Sector Conduct Authority (FSCA) has also warned about a rise in scams through SMS, WhatsApp, Telegram, fake social media pages, and fraudulent banking applications.

FSCA also continues cautioning the public against criminals posing as FSCA staff to extort money, phishing (emails or links posing as banks or the South African Revenue Service), and influencers promising guaranteed returns.

Scammers exploit urgency, fear, and trust to trick people. Anyone can easily become a scam victim, regardless of their income or level of education.

Scammers rely on: 

Urgency: Creating panic to prevent clear thinking.

Trust: Messages appear legitimate, from banks, the South African Revenue Service (SARS), or friends.

Financial pressure: Tempting promises of “quick money.”

Technology tricks: Fake websites, cloned apps, and realistic emails.

AI misuse: Scammers use AI to create fake voices, flawless emails, and cloned sites, making scams harder to spot. 

Awareness of these tactics helps you to pause and think before reacting.

Scams take many forms, with some of the most common being phishing and OTP fraud, identity theft, investment schemes, and impersonation scams. 

Scammers send links via SMS, email, or WhatsApp that mimic your bank’s login page. 

Once clicked, you’re redirected to a fake site where entering your details allows scammers to capture your username, password, or One-Time PIN (OTP).

For example, an SMS may warn that your account will be blocked unless you log in, but the link is designed to steal your information.

Never click on SMS links to access your bank, and remember your bank will never ask for your OTP or password by phone, SMS, or email.

Shred old documents, and never share your ID unless you are 100 percent sure of the recipient. 

Once these scammers have a copy of your ID, they can open up accounts in your name – and you might only discover this when debt collectors start calling or your credit applications are declined.

Fraudsters often pose as trusted people, bank staff, officials, or even relatives to steal information or money. 

For example, you may get a WhatsApp or SMS from a relative urgently asking for money, but it could be a hacked or cloned account. 

If someone claims to be from your bank, hang up and go to the bank in person. 

If a “relative” asks for urgent money, confirm by calling them directly. 

I still cannot get over how legitimate this email and it’s instructions appeared, and this experience has just reinforced the need to be vigilant. 

Don’t click on links, and definitely don’t give your personal information or pins unless you are 100 percent sure of who is on the other end. 

No matter how busy your are – make the time to do the necessary checks. 

These skelms are smart - rather be safe, than sorry.