SIM Swaps Drive Majority of Telecom Fraud in South Africa
South Africa is losing an estimated $320.5 million (R5.3 billion) annually to telecom fraud, with a staggering 60% attributed to SIM swap attacks. This alarming figure was revealed by former Vodacom Chief Risk Officer Johan Van Graan during a recent interview.
The Growing Threat of SIM Swap Fraud
The actual financial losses occur when fraudsters leverage compromised phone numbers to access online banking platforms, social media accounts, and other digital assets where victims have previously shared credentials. As Van Graan explained, “The actual fraud is by accessing the internet banking where they have previously phished this PIN (personal identification number) and password of a customer.” These attacks often involve sophisticated tactics like phishing emails or SMS messages that trick users into revealing sensitive information.
Identity Theft as a Major Driver
SIM swap fraud enables identity theft, which accounts for 63% of all digital financial crime in Africa – costing an estimated $4 billion annually. The continent’s relatively weak cybersecurity infrastructure makes it easier for fraudsters to exploit vulnerabilities and take control of personal information.
Loopholes in Current Systems
Several factors contribute to the prevalence of SIM swap fraud in South Africa:
- Careless users: Many individuals expose their PINs and passwords through insecure practices.
- Inadequate verification processes: The current RICA Act doesn’t require robust identity verification during SIM swaps.
- Low global ranking: South Africa’s customer registration process ranks among the bottom five worldwide.
As highlighted in a previous Technext story, obtaining someone’s personal information and registering a replacement SIM card is alarmingly easy with minimal oversight.
A Technological Solution
To combat this growing threat, Van Graan suggested implementing facial recognition technology for SIM registration. This would allow networks to validate identities during SIM swap requests, preventing fraudulent transfers and adding an extra layer of security.