South Africa Identity Fraud Statistics: 2026 INTERPOL Update

The VerifyNow Fraud Brief | 1 September 2026

South Africa’s freshest public fraud picture arrived this morning. Stats SA’s 2025/26 victim survey estimates about 560,000 consumer-fraud incidents affecting roughly 325,000 people aged 16 and older. Around 39% of those affected reported some or all incidents to the police.

The same evidence set shows pressure across police records, digital banking, personal-data protection and public identity systems. Our updated State of Identity Fraud 2026 report now brings those measures together with INTERPOL’s latest Africa assessment.

The figures for your risk meeting

South African measure	Latest figure	What it covers
Stats SA consumer fraud	About 560,000 incidents affecting 325,000 people	National household survey for 2025/26. Around 39% reported some or all incidents to police.
SAPS commercial crime	36,797 cases, up 4.0%	Police-recorded fraud, attempted fraud, forgery and uttering from January through March 2026.
POPIA security compromises	2,693 notifications	Notifications submitted to the Information Regulator during 2025/26, followed by 800 from April through July 2026.
Digital-banking fraud	110,074 incidents	SABRIC member data for 2025, with R2.4067 billion in gross client claims, equal to about US$148.95 million.
Card false-application fraud	R23.9 million, or about US$1.48 million	SABRIC applications involving stolen, fabricated or synthetic identity information.
Smart IDs issued	4,002,964 cards, up 17%	Department of Home Affairs output for calendar 2025.
FSCA public warnings	140 warnings	Regulatory activity during 2025/26. About 20% involved impersonation of licensed institutions or providers.
FIC intelligence reports	4,196 reports, including 474 tagged as fraud	Financial Intelligence Centre output for 2024/25.

Each source measures a defined slice. Stats SA surveys people, while SAPS counts recorded commercial crimes. The Information Regulator records breach notifications from responsible parties. Banking figures come from SABRIC members, and regulatory counts describe warnings or investigations.

Today’s Stats SA release

Stats SA’s Governance, Public Safety and Justice Survey 2025/26 places consumer fraud among the crimes experienced by South Africans aged 16 and older. Its definition covers deception involving goods or services, including advance-fee schemes, 419 scams and online-shopping fraud.

The latest estimate moved from 811,000 incidents affecting 566,000 people in 2024/25 to about 560,000 incidents affecting 325,000 people in 2025/26. The share of affected people who reported some or all incidents to police rose from 34.9% to about 39%.

Survey estimates carry sampling uncertainty, and the category reaches beyond identity misuse. They give South Africa its newest national view of consumer fraud experienced by people.

SAPS recorded 36,797 commercial crimes in one quarter

The SAPS fourth-quarter release recorded 36,797 commercial crimes between January and March 2026. The same quarter in 2025 recorded 35,374, which gives a 4.0% annual increase.

The national count has risen across the five comparable January-to-March periods published by SAPS:

Quarter	Commercial crimes recorded
Jan to Mar 2022	25,431
Jan to Mar 2023	28,000
Jan to Mar 2024	33,793
Jan to Mar 2025	35,374
Jan to Mar 2026	36,797

Commercial crime includes fraud and attempted fraud alongside forgery and uttering. Police records depend on reporting and recording practices, which gives this series a different population from the Stats SA survey.

INTERPOL’s 2026 Africa update

INTERPOL’s African Cyberthreat Assessment Report 2026 received survey responses from 36 of 49 African member countries. The evidence covers cybercrime reported during 2025 and draws on member-country data, operational intelligence and named partner inputs.

The assessment found:

Online scams supplied 17% of reported cybercrime cases.
Identity theft and financial fraud accounted for 14%.
AI appeared in 55% of cases in some capacity.
Scam centres were present in 72% of responding countries.

INTERPOL placed cybercrime-related losses across Africa at **US $484 million, or about R7.82 billion**. Its 2024 comparison was US$ 192 million, equal to about R3.10 billion at the exchange rate used in this briefing.

Operation data shows the scale of coordinated enforcement. Operation Serengeti 2.0 involved 18 African countries and the United Kingdom from June through August 2025. Authorities arrested 1,209 people, identified nearly 88,000 victims, dismantled 11,432 malicious infrastructures and recovered US$97.4 million, or about R1.57 billion.

INTERPOL’s 2026 global financial-fraud assessment recorded a 54% rise in fraud-related Notices and Diffusions from 2024 to 2025. Its Financial Crime and Anti-Corruption Centre supported more than 1,500 cases involving US$1.1 billion in reported lost assets, or about R17.77 billion.

South African banking losses rose

The SABRIC Annual Crime Statistics Report 2025 recorded 110,074 digital-banking fraud incidents and R2,406,728,972 in gross client claims, equal to about US$148.95 million. Gross claims rose 29.2% from 2024.

The three-year member series shows the direction:

Year	Incidents	Gross client claims
2023	52,588	R1.086bn, about US$67.21m
2024	97,547	R1.863bn, about US$115.28m
2025	110,074	R2.407bn, about US$148.95m

SABRIC’s false-application category gives a direct identity signal. It covers applications that use stolen, fabricated or synthetic identity information. Combined gross losses reached R23.9 million, or about US$1.48 million, during 2025.

SABRIC is a banking-industry not-for-profit. Its figures represent participating members and gross claims within the report’s definitions.

Personal-data exposure kept climbing

South African organisations submitted 2,693 security-compromise notifications during 2025/26, according to the Department of Justice’s July 2026 update. A further 800 notifications arrived between April and 30 July 2026.

The Information Regulator’s audited 2024/25 report recorded 2,374 notifications, up 37% from 1,727 in 2023/24. One notification may cover many records or data subjects.

Compromised personal information can feed phishing, account recovery abuse, impersonation and fraudulent applications. POPIA section 22 notifications supply a view of exposure events and organisational reporting.

Home Affairs cases show how identities get manipulated

Home Affairs issued a record 4,002,964 Smart IDs during 2025, which was 17% above the 2024 total. The department describes the green ID book as fraud-prone and estimates that it is 500% more vulnerable to fraud than a Smart ID.

Case outcomes reveal specific methods. The DPCI Annual Report 2024/25 records the conviction of a Home Affairs official on 1,159 counts. The passport syndicate used South African identity numbers and biometrics with substituted names and photographs. The court imposed a combined 35-year sentence.

The SIU’s February 2026 investigation update describes passport schemes that used stolen fingerprints with substituted photographs. It also records DNA sample manipulation connected with residence applications.

These case findings provide method and enforcement evidence. National prevalence comes from broader statistical sources with their own categories.

Regulators are seeing impersonation

The FSCA issued 140 public warnings during 2025/26, and about 20% concerned impersonation of licensed institutions or providers. Its Regulatory Actions Report records 29 new regulatory-examination identity-fraud investigations, 58 finalised investigations, 19 debarments and eight police referrals.

The FIC Annual Report 2024/25 records 4,196 intelligence reports, including 474 tagged as fraud. The Centre issued 164 section 34 directives involving R157.5 million in suspected criminal proceeds, or about US$9.75 million.

Four changes for a South African verification workflow

Bind the person to the identity evidence at higher-risk points. South African ID verification, supported face comparison and liveness evidence can enter the journey according to the transaction risk.
Recheck identity during account recovery, payout-detail changes and unusual device events. A passed onboarding check becomes historical evidence as the account changes.
Protect the personal data used for verification. Restrict access, monitor exports, keep an incident plan and prepare the POPIA notification path before an event.
Record the decision trail. Keep the source, input, timestamp, result, fallback, reviewer action and final outcome for each control.

The VerifyNow services catalogue maps identity, biometric, document, bank-account, AML and trace checks to customer journeys. An enterprise team can request a workflow review for a defined onboarding or fraud event.

Currency and method note

US dollar conversions use the South African Reserve Bank current market rate of R16.1574 per US$1 on 31 August 2026. Rand equivalents are rounded to two decimal places for large values. Rand source amounts lead where the publisher reported in rand.

Survey estimates, police records, bank claims, regulator notifications and operational results use separate denominators. Each number in this briefing stays attached to its source category, period and geography.

Read the full report

The updated State of Identity Fraud 2026 contains the South African evidence table, INTERPOL’s Africa findings, international official reference points, control guidance and the full source ledger.