Surge in digital banking fraud prompts Standard Bank security warning
Standard Bank, South Africa’s largest bank by assets under management, is warning its clients about an increase in “spoofing” fraud cases, where scammers use AI-generated voice messages and emails to impersonate bank employees.
Spoofing is a tactic in which criminals disguise themselves as trusted organizations, such as banks, by manipulating caller IDs or email addresses to make them appear genuine.
These calls and emails are often difficult for clients to recognize as fraudulent, since they appear to come from legitimate Standard Bank contacts. Spoofing is often combined with phishing, when scammers call from a number that seems to be the bank’s official line.
Human factors and non-human agents
Fraudsters replicate the tone and structure of real banking conversations, often using standard security questions and disclaimers. To build trust, they may reference personal details such as birth dates, addresses, or account types. Once trust is gained, they pressure clients to act—claiming there is suspicious activity or unauthorized changes to profiles—and then push victims into transferring funds to “safe” accounts, scanning QR codes, clicking links, or sharing sensitive details such as OTPs, PINs, or voucher codes.
“AI’s rapid development has led to an alarming rise in spoofing methods,” acknowledged Atalee Khan, Head of Fraud Risk Management at Standard Bank.
According to Khan, AI now enables scammers to use voice cloning, deepfake videos, chatbots, and phishing emails that look and sound more realistic than ever.
South Africa’s National Financial Ombud (NFO) has also warned consumers, noting a 73% surge in digital banking fraud complaints, from 1,436 between January and May 2024 to 2,483 in the same period this year. One victim reportedly lost 500,000 rand.
Standard Bank urges customers to remember what not to do:
- Never transfer money to another account at a caller’s request.
- Never share login details, card expiration dates, CVVs, OTPs, or PINs.
- Never click links, download attachments, or scan QR codes in unsolicited messages.
“Stay calm, think critically, and remember what not to do and not to share,” Khan emphasized.
As we wrote, Foreign investors return to South African bonds
Latest South Africa News
-
Afghanistan
-
Albania
-
Algeria
-
Angola
-
Argentina
-
Armenia
-
Australia
-
Austria
-
Azerbaijan
-
Bahamas
-
Bahrain
-
Bangladesh
-
Belarus
-
Belgium
-
Bolivia
-
Botswana
-
Brazil
-
Brunei
-
Bulgaria
-
Cambodia
-
Cameroon
-
Canada
-
Chile
-
China
-
Colombia
-
Congo
-
Costa Rica
-
Cote d'Ivoire
-
Croatia
-
Cuba
-
Cyprus
-
Czechia
-
DR Congo
-
Denmark
-
Dominican Republic
-
Ecuador
-
Egypt
-
El Salvador
-
Estonia
-
Eswatini
-
Ethiopia
-
Finland
-
France
-
Georgia
-
Germany
-
Ghana
-
Greece
-
Haiti
-
Hong Kong
-
Hungary
-
India
-
Indonesia
-
Iran, Islamic republic
-
Iraq
-
Ireland
-
Israel
-
Italy
-
Jamaica
-
Japan
-
Jordan
-
Kazakhstan
-
Kenya
-
Korea
-
Kuwait
-
Kyrgyzstan
-
Laos
-
Latvia
-
Lebanon
-
Lesotho
-
Libya
-
Lithuania
-
Luxembourg
-
Madagascar
-
Malaysia
-
Malta
-
Mauritius
-
Mexico
-
Moldova
-
Mongolia
-
Montenegro
-
Morocco
-
Mozambique
-
Myanmar
-
Namibia
-
Nepal
-
Netherlands
-
New Zealand
-
Nigeria
-
North Macedonia
-
Norway
-
Oman
-
Pakistan
-
Palestine
-
Panama
-
Papua New Guinea
-
Paraguay
-
Peru
-
Philippines
-
Poland
-
Portugal
-
Puerto Rico
-
Qatar
-
Reunion
-
Romania
-
Rwanda
-
Saudi Arabia
-
Serbia
-
Singapore
-
Slovakia
-
Slovenia
-
Somalia
-
South Africa
-
Spain
-
Sri Lanka
-
Sweden
-
Switzerland
-
Syria
-
Taiwan
-
Tajikistan
-
Tanzania
-
Thailand
-
Trinidad and Tobago
-
Tunisia
-
Turkey
-
UAE
-
Uganda
-
Ukraine
-
United Kingdom
-
United States
-
Uruguay
-
Uzbekistan
-
Venezuela
-
Vietnam
-
Yemen
-
Zambia
-
Zimbabwe
- Forex
- Crypto
