← Back to Blog fraud prevention

Stop POP Fraud: Common Scams Facing SA Merchants

July 21, 2026

Protect Your Business: Unmasking Common Proof of Payment (POP) Fraud Schemes in South Africa

In South Africa's vibrant economy, Electronic Funds Transfer (EFT) remains a cornerstone of daily transactions for merchants and small business owners. It's convenient, widely accessible, and generally reliable. However, this reliance has unfortunately opened a gateway for fraudsters exploiting the system through fraudulent Proof of Payment (POP) screenshots.

As a merchant, accepting a POP as confirmation of payment can feel like a necessary step to keep business moving. But what if that POP is fake? In a country where payment fraud is a significant concern, understanding and identifying these schemes is crucial for safeguarding your hard-earned revenue. VeriPop is here to help you navigate these challenges and protect your business.

What Exactly is Proof of Payment (POP) Fraud?

POP fraud occurs when a scammer provides a falsified or misleading document to convince a merchant that a payment has been made, when in fact, it hasn't, or it's not a legitimate, cleared payment. This often involves doctored screenshots of banking apps or online banking portals, fake SMS notifications, or even legitimate POPs that are later reversed. The goal is always the same: to obtain goods or services without actual payment.

Prevalent POP Fraud Schemes Targeting South African Merchants

Fraudsters are constantly evolving their tactics, but several common schemes consistently plague South African businesses. Recognizing these is your first line of defence.

1. The Doctored Screenshot

This is perhaps the most common and insidious form of POP fraud. Scammers expertly alter legitimate or fabricated screenshots of online banking apps or web portals to show a successful payment. They often target merchants who are busy or less tech-savvy.

  • How it works: A fraudster uses basic photo editing tools (even standard phone gallery editors) to change key details on a screenshot. This could be the payment amount, the beneficiary's name, the date of the transaction, or even the bank's logo. They might send a screenshot that looks like it's from Capitec, FNB, Absa, Nedbank, Standard Bank, or TymeBank, but crucial details are subtly wrong.
  • Red flags to look for:
    • Inconsistent fonts or alignment: Text that's slightly off-centre, different sizes, or uses an unusual font compared to genuine bank screenshots.
    • Poor image quality: Pixelated areas, blurry text around altered numbers, or a low-resolution image overall.
    • Missing details: A genuine POP usually includes the full date and time, a unique transaction reference number, the sender's name, the beneficiary's name and account number, and the amount. Be wary if any of these are absent or look incomplete.
    • Unusual background: Sometimes, the background or surrounding elements of the screenshot might not match the actual banking app interface.
    • Generic references: Look out for vague transaction references instead of specific ones related to your invoice or order.

2. Delayed Payment Confirmation (Future-Dated or Pending Payments)

This scheme exploits the processing times between different banks or the merchant's urgency to complete a transaction.

  • How it works: A fraudster makes a payment that is either future-dated (scheduled for a later time) or initiated from an account with insufficient funds, or a payment that is still 'pending' and can be cancelled. They then send a POP for this transaction. The merchant, seeing a POP, releases goods or services, only to find days later that the payment never cleared or was reversed. While banks like FNB, Absa, Standard Bank, Nedbank, Capitec, and TymeBank offer instant EFTs, not all transactions are instant, especially between different financial institutions.
  • Red flags to look for:
    • 'Processing' or 'Pending' status: If the POP explicitly states the payment is 'processing', 'pending', or 'future-dated', do not release goods until you have direct confirmation from your bank that funds have cleared.
    • Unusual urgency: Fraudsters often create a sense of urgency, pressuring you to release items immediately before the payment 'expires' or 'stops processing'.
Β© 2026 VeriPop. Alle regte voorbehou.
Trots gebou in Suid-Afrika