A logo is easy to copy
A message can display a real lender’s name, a copied registration number and an official-looking image without being genuine. Verify the legal entity in the NCR register, then independently verify the channel sending the message. Registration alone cannot authenticate a particular caller.
Watch for pressure and unusual requests
A fee to “release”, “unlock” or guarantee a loan.- A request to pay a personal bank account, voucher or unfamiliar wallet.
- A request for a bank PIN, password or OTP.
- An instruction to install remote-access software.
- A sudden change of receiving bank details.
- A promise of approval without affordability checks.
Pause even when the message includes information that looks personal. Information from an old interaction can be copied or misused.
Inspect the destination
Check the full address rather than only the name shown on a link. Similar spelling, added words and shortened links can conceal an unrelated site. HTTPS encrypts a connection but does not establish that the business behind a page is genuine.
Open a trusted address yourself and use its verified contact. Do not reply to the suspicious message to ask whether it is authentic.
Protect identity documents
Send documents only through a confirmed, secure application process. Avoid placing ID copies or bank statements in public messages. A request for credentials is different from a request for evidence of income.
If you already responded
If money or banking access may be at risk, contact the bank immediately through its official channel. Save the messages, transaction references and recipient details. Report suspected crime to SAPS and tell the impersonated provider through an independently verified route.
Check our security page, the registration guide and the official NCR register.
Sources and further reading
Sources checked on 28 October 2026. This page explains general information; your agreement and applicable law govern your loan.