Someone sends R80,000 to a platform they found through a WhatsApp group. The returns show up on screen. They invest more. Then they try to withdraw. The platform asks for a R12,000 "tax clearance fee" before it will release their funds. They pay it. Then there is another fee. Then the platform goes quiet. The money is gone.
That is not a rare case. The FSCA has issued over 200 warnings against unlicensed financial services providers since 2023. Most victims sent money because the platform looked legitimate, the promised returns seemed reasonable, and someone they trusted had already invested. That is exactly how the scam is designed to work.
Investment fraud is taking billions of rand from South Africans every year. It targets individuals. It also targets SME owners through "business investment opportunities" that promise early access to returns before a public listing or product launch.
If you are currently being approached by an investment opportunity, read the seven red flags below before you send a single rand.
Three types of investment scam active in South Africa right now
The classic investment scam has evolved. These three variants are the most common in South Africa today.
Pig butchering scams
The name comes from Chinese slang: "sha zhu pan." The attacker fattens the pig before the slaughter. They build a relationship over weeks or months before the investment comes up at all.
It starts with a wrong WhatsApp number, a new match on a dating platform, or a friendly LinkedIn connection. The attacker is warm, patient, and attentive. Once trust is established, they "happen to mention" a platform that has been working well for them. They show screenshots of returns. They offer to help you get set up.
You invest a small amount. It "grows." You invest more. Then you try to withdraw a meaningful sum and discover you cannot. Every additional fee you pay to unlock your funds goes directly to the attacker. The relationship was the method all along.
Fake cryptocurrency platforms
These are websites or apps that look like legitimate crypto exchanges. They have ticker symbols, live charts, deposit interfaces, and simulated portfolio values. Your investment shows growth on screen.
When you try to withdraw, the platform requires an additional "tax payment" or "compliance fee" before it will release the funds. The fee must be paid in crypto. It disappears. You are told there is another fee. Eventually the platform becomes unreachable.
The fake exchange was never processing real trades. The portfolio values were fabricated. The "growth" was designed to encourage you to deposit more.
WhatsApp investment groups
These operate through a recruiter in your network. That person may genuinely believe in the scheme, or they may be receiving a referral commission. Either way, the group shares testimonials, payout screenshots, and urgent limited-slot messaging.
Members are encouraged to recruit others. This is the structure of a Ponzi scheme. Early participants are paid from new money, not actual returns. The scheme collapses when recruitment slows down. The people left holding the position when it collapses lose everything.
The fact that someone you know is in the group does not make it safe. It may mean they were recruited earlier and have not yet tried to withdraw.
The 7 red flags to check before investing
You do not need to see all seven. One is enough to stop.
- Guaranteed returns. No legitimate investment guarantees returns. If a platform promises 10%, 15%, or 30% monthly returns with no risk, that is fraud. Markets do not work that way. The promise of guaranteed returns is the single most reliable indicator of an investment scam. It does not matter how professional the website looks. If they guarantee it, it is a lie.
- Not registered with the FSCA. Any entity offering investment products or financial services to South Africans must hold a valid licence from the Financial Sector Conduct Authority. If the company does not appear in the FSCA register, it is operating illegally. The FSCA also maintains a warning list of specific entities to avoid. Check both before you invest anything. Instructions for doing this are in the callout box below.
- You cannot withdraw your money. A legitimate platform allows you to withdraw your own funds. If withdrawal requires an additional fee, a waiting period that keeps extending, a "compliance approval," or suddenly becomes technically impossible, it is a scam. Test any platform with a small withdrawal before investing a meaningful amount. If anything blocks that withdrawal, walk away.
- Urgency and exclusivity. "Only 10 spots left." "This offer closes at midnight." "I can only share this with my closest contacts." Legitimate investment opportunities do not require snap decisions. Urgency is a manipulation tactic. It is designed to prevent you from doing due diligence. The faster someone pushes you toward a decision, the more suspicious you should be.
- No verifiable contact information. Is there a physical address you can find on Google Maps? Can you call a landline and reach a real person? Is the company registered with the Companies and Intellectual Property Commission (CIPC)? If the company exists only as a website and a WhatsApp number, that is a warning sign. Legitimate financial services companies have verifiable registrations, offices, and staff.
- Pressure to recruit others. If the returns depend on bringing in new participants, it is not an investment. It is a pyramid or Ponzi scheme. These are illegal in South Africa under the Banks Act. The fact that your friends and family are already in does not make it safe. It means the scheme recruited them earlier in the cycle. When recruitment slows, the people at the bottom lose their money.
- Requests for personal information to access your returns. Legitimate investment platforms do not ask for your banking login credentials. They do not ask for your ID number combined with your card details. They do not ask for access to your phone to "process a withdrawal." These are data harvesting tactics. Sharing that information gives the attacker the tools to empty your accounts directly.
How to verify a financial services provider with the FSCA
FSCA Verification: Two checks, five minutes
Go to fsca.co.za/Regulated-People-And-Entities and search the company by name or registration number. If they are licensed, you will see their authorisation category, registration number, and contact details.
Then check the warning list at fsca.co.za/Pages/Warnings-and-Alerts.aspx. If the company appears there, do not proceed and warn anyone you know who may be involved.
You can also call the FSCA contact centre on 0800 20 37 22. The call is free. It takes five minutes. That is worth it before you send R50,000 somewhere you cannot easily recover from.
How social media and WhatsApp drive victims to these platforms
Most investment scam victims in South Africa first heard about the opportunity through a trusted contact on WhatsApp, Facebook, Instagram, or TikTok. This is deliberate.
Attackers seed fake success stories through accounts that appear genuine. Sometimes those accounts belong to real people who have been compromised. Sometimes they are paid influencers who do not disclose that they are promoting an unlicensed platform. Sometimes the person who introduced you genuinely believes it is legitimate because they are still in the phase where fake returns are being shown to them.
If someone shares an investment opportunity with you on WhatsApp or social media, the verification steps above apply regardless of your relationship with them. The person sharing it may be a victim, not a scammer. Verifying the platform before you invest protects both of you.
What to do if you have already sent money
Act immediately. Every hour matters.
- Call your bank's fraud line and report the transfer. If the funds went to a South African bank account, a recall can sometimes be initiated if the money has not yet been moved. Ask specifically about a "recall request" or "fraudulent payment reversal." The sooner you call, the better the chances.
- Report it to the SAPS cybercrime unit. You can do this online at saps.gov.za or at your nearest police station. Get a case number. You will need it for every other report you make.
- Report to the Financial Intelligence Centre. The FIC tracks financial crime patterns and can assist with investigations involving crypto transactions. Report at fic.gov.za.
- Report to the FSCA. If you were approached by an unlicensed financial services provider, file a complaint directly with the FSCA. This helps them add the entity to the warning register and potentially protects others.
- Do not send any more money. Scammers will attempt to keep you engaged with promises of unlocking previous funds through new deposits. They may present new "fees," "taxes," or "compliance charges." Once you have identified a platform as fraudulent, cut contact entirely and do not respond to further messages.
Use these tools to check before you click or invest
Before engaging with any platform or link someone sends you, run it through Ubuntu Guard's ClickGuard tool. It checks the URL for known fraud indicators. You can also check an entity's business registration and trust signals using our Business Trust Check.
If you have already experienced fraud and need help with the investigation, contact our incident response team at ubuntuguard.co.za/services/incident-response.
The one action to take today
If someone has approached you about an investment opportunity, go to the FSCA website right now and check whether that company holds a valid licence. It takes five minutes. That check has saved South Africans tens of thousands of rand. It may save yours.
Go to fsca.co.za/Regulated-People-And-Entities and search the name before you respond to anyone.
Questions or concerns about an investment approach you have received? Contact us at [email protected].
Sources:
FSCA Warning Register: fsca.co.za/Pages/Warnings-and-Alerts.aspx (Updated: March 2026)
FSCA Regulated Entities Search: fsca.co.za/Regulated-People-And-Entities (Accessed: 2026)
South African Government FSCA Contact: gov.za (Accessed: 2026)
Protect yourself and your business from financial fraud
Investment fraud often starts with compromised email and spoofed business identities. Run a free Business Trust Check to see how exposed your business is right now.
Run a Free Business CheckQuestions? Contact us at [email protected]