South Africa's scam call centre syndicates: How organised crime is targeting bank customers

Updated April 17, 2026, 8:37 a.m. | By Stacey & J Sbu

South African scam call centres are run like corporations, using stolen data, insider threats, and social engineering to defraud ordinary people. Here is what you need to know.

South Africa's scam call centres are structured criminal operations embedded within a global Cybercrime-as-a-Service ecosystem, with recent police raids exposing their reach and sophistication.

These call centres do not cold call random numbers. Instead, they purchase data stolen during large-scale breaches by cybercrime syndicates, using it to target specific victims with precision.

The operations mirror legitimate corporations, reports My Broadband, with an upstream supply chain supplying stolen data, software engineers building the necessary tools, and the call centre itself acting as the closing team that converts stolen data into profit.

ALSO READ: SA households face June 2026 deadline for domestic worker earnings submissions

What tools do scam call centres use?

The tools supporting these operations include number-spoofing services that display trusted local numbers, as well as phishing kits designed to process payments and mimic legitimate websites.

What raids have taken place recently?

South Africa has seen at least two significant enforcement operations in recent months. In mid-April 2026, police raided an alleged scam call centre in Umhlanga, Durban, linked to banking scam campaigns. Authorities apprehended at least 21 people at the upscale property on 14 April 2026. The centre allegedly contacted victims claiming problems with their bank accounts, then persuaded them to transfer funds into accounts controlled by the syndicate.

Separately, the National Prosecuting Authority secured a provisional restraint order over assets linked to a global scam call centre syndicate allegedly operating in Bryanston, Johannesburg. The restrained assets are estimated at R43.9 million and include multiple high-value properties in Gauteng. The Johannesburg High Court granted the order in February 2026.

How are workers recruited into these syndicates?

Cybersecurity educator Boikokobetso Makhetloane warns these busts represent only a fraction of the problem. Many workers are recruited without being told the nature of the work, and are later bound by secrecy contracts and threats.

He adds that many operatives are trained by individuals with prior banking experience, describing this as an insider threat that makes these syndicates particularly dangerous.

ALSO READ: Study: Could ultraprocessed food be turning your muscles to fat?