Online scams are fraudulent schemes that use email, social media, messaging apps or fraudulent websites to trick people into handing over money, personal information or account access. They range from simple phishing emails to long-running romance and investment frauds.
In South Africa online scams are among the fastest-growing forms of crime, but the same tactics are used worldwide. Understanding how they work — and what to do when one happens — can limit the damage and, in some cases, support recovery or a criminal or civil case.
Common Types of Online Scams
Scammers constantly adapt, but most online fraud falls into a few recognised categories:
- Phishing — fake emails, SMSes or websites designed to steal passwords, banking details or identity information.
- Romance scams — fraudsters build online relationships, then invent emergencies or investments to extract money.
- Investment and cryptocurrency scams — fraudulent platforms promising high, guaranteed returns.
- Advance-fee (419) scams — a promised large payout in return for upfront “fees” or “taxes”.
- Business email compromise — criminals impersonate a supplier or executive to redirect payments.
- Online shopping fraud — goods paid for but never delivered, or deposits taken for non-existent items.
- Impersonation and tech-support scams — scammers pose as banks, government agencies or support staff to gain access to devices.
- Account takeover and SIM-swap fraud — hijacked email, social media or cellphone accounts used to steal funds or identities.
Warning Signs of an Online Scam
While each scam is different, most share common red flags:
- Unsolicited contact from a stranger, or messages from a “friend” whose account may be compromised.
- Pressure to act quickly, keep the matter secret, or pay immediately.
- Requests for payment by gift card, cryptocurrency, EFT to a new account, or money transfer.
- Requests for one-time PINs, passwords or remote access to your computer.
- Offers that sound too good to be true — guaranteed returns, inheritances, prizes or lottery winnings.
- Poor spelling, generic greetings, or addresses and domains that do not match the real organisation.
What to Do If You Have Been Scammed
Immediate first steps
Acting quickly matters. Practical first steps include:
- Stop all contact with the scammer and do not send further money.
- Preserve evidence before it disappears: screenshot profiles, chats, emails and payment confirmations.
- Contact your bank immediately — payments can sometimes be frozen or recalled.
- Change passwords on affected accounts and enable two-factor authentication.
- Report the matter to the South African Police Service (SAPS), and where relevant to the platform, the Southern African Fraud Prevention Service (SAFPS) and your bank's fraud line.
- If personal information was exposed, watch for identity theft and monitor accounts for unusual activity.
Under POPIA, organisations that suffer a compromise of personal information may have notification obligations, so businesses should seek legal advice promptly.
How a professional investigation can help
A private investigator or digital forensics practitioner can establish what happened, identify those involved and preserve evidence for use in disciplinary, civil or criminal proceedings. This may involve tracing funds, identifying the people behind fake profiles and websites, interviewing witnesses, and preparing affidavits and reports for attorneys or SAPS.
What the Digital Evidence May Reveal
Every scam leaves a digital trail. A forensic examination may look at:
- Email headers and metadata tracing the true origin of messages.
- Device images from computers and cellphones, including deleted messages.
- Chat logs, call records and contact lists from messaging applications.
- Bank statements and transaction records to follow the money.
- Domain registration, website and hosting records of fraudulent platforms.
- Social media activity, login records and linked accounts.
Using forensic tools and proper chain-of-custody procedures, an examiner can document this evidence so it remains admissible in court. Outcomes vary: recovery depends on how quickly the victim acts, where the funds went, and whether the perpetrators can be identified.
Protecting Yourself Going Forward
Most online scams succeed by exploiting urgency, trust or curiosity. Slow down, verify independently using official contact details, keep software updated, use strong unique passwords with two-factor authentication, and treat any request for money or personal information with suspicion — even from someone you appear to know.
If you or your client has fallen victim to an online scam, early action and properly preserved evidence can make a meaningful difference. Learn more in our Knowledge Centre.