TLDR: The South African Banking Risk Information Centre (SABRIC) has issued a critical warning regarding a significant increase in AI-powered fraud schemes. Criminals are leveraging advanced AI technologies, including deepfake videos, voice cloning, and AI-powered chatbots, to impersonate bank officials, create fraudulent investment apps, and manipulate social media. These sophisticated scams are deceiving even vigilant individuals, leading to substantial financial losses for South Africans and eroding trust in digital banking. Financial institutions are urged to enhance their fraud prevention strategies to combat this evolving threat.
The South African financial sector is facing an escalating threat from artificial intelligence (AI)-powered fraud, as highlighted by a recent warning from the South African Banking Risk Information Centre (SABRIC). Despite potential shifts in overall financial crime statistics, the sophistication and prevalence of AI-driven scams are rapidly reshaping the fraud landscape, exposing new vulnerabilities within financial systems and eroding public trust in digital communication.
Criminals are now employing advanced AI tools to create highly convincing fake images, videos, and audio, commonly known as ‘deepfakes’. These deepfakes are used to impersonate real individuals, including bank officials, with alarming accuracy. SABRIC CEO Nischal Mewalall emphasized the severity of the situation, stating, ‘AI-driven scams are now so advanced that even the most vigilant person can be fooled. Criminals can fake voices, emails, and even entire apps. The only way to stay safe is to verify before you trust.’
Fraudsters are orchestrating elaborate schemes, such as sending WhatsApp messages that appear to originate from legitimate banks, complete with correct logos and professional wording, offering lucrative investment deals. These messages often include convincing links to download fake investment applications. Beyond fake apps, scammers are also impersonating bank officials on social media, posting fraudulent reviews and endorsements, and generating fake news articles to ensnare victims.
The financial repercussions for victims have been severe. In one instance, an individual was misled into investing over R6 million in a scam falsely presented as trading on the Johannesburg Stock Exchange (JSE). This elaborate fraud involved individuals posing as bank employees, utilizing a fake app and manipulated digital communication channels to gain the victim’s trust. Another case saw an individual lose over R100,000 to a fraudulent broker who operated a professional-looking website and employed social engineering tactics to deceive the victim into making substantial financial investments.
The rise of deepfake-driven cybercrime has prompted SABRIC to specifically highlight the use of deepfakes and voice cloning to promote fake investment schemes and fabricate endorsements from well-known public figures. This not only compromises the integrity of the financial sector but also erodes customer confidence in digital interactions.
Furthermore, AI is being used by fraudsters to bypass existing security measures, such as automated onboarding systems and Know Your Customer (KYC) checks, enabling them to create accounts and access services under false identities. Business email compromise (BEC) attacks are also evolving, with attackers incorporating deepfake audio and video of senior executives into phishing attempts to coerce employees into releasing funds or disclosing sensitive information. AI’s ability to analyze and replicate communication styles based on publicly available information makes social engineering attacks even more authentic. In some extreme cases, AI generates entirely synthetic identities by combining real and fabricated data, which can then be used for credit applications, money laundering, or large-scale financial fraud.
Many legacy fraud detection tools are ill-equipped to detect fake audio or video, making these deepfake scams particularly challenging to identify. In response, financial institutions are urged to urgently evolve their fraud prevention strategies to stay ahead of these sophisticated threats. Regulators expect financial institutions to keep pace with the latest cybercrime trends, as failure to detect deepfake-based fraud can lead to compliance failures, significant fines, and legal action.
SABRIC advises the public to exercise extreme caution: be wary of offers promising ‘guaranteed’ financial returns, never download apps from unverified links (always use official app stores), and verify any claims by calling official bank numbers directly. Banks will never ask for PINs, OTPs, or banking passwords. The organization also stresses the importance of reporting any suspicious activity immediately to banks and law enforcement.
Also Read:
- Organizations Grapple with Deepfake Threats: Less Than a Third Prepared for AI-Driven Attacks
- BCX Spearheads South Africa’s AI Transformation with Strategic Initiatives and AI-as-a-Service
This pervasive threat affects all South Africans, draining life savings and undermining trust in digital banking. Increased public awareness and vigilance are crucial in mitigating the success of these evolving AI-powered fraud schemes.
