← Back to Blog fraud prevention

Stop POP Fraud: Common Scams Hitting SA Merchants & How to Fight Back

July 13, 2026

The Rising Threat: Understanding Proof of Payment (POP) Fraud in South Africa

In the vibrant, fast-paced world of South African commerce, Electronic Funds Transfer (EFT) payments have become a cornerstone of transactions, especially for small businesses and online merchants. They're convenient, efficient, and generally secure. However, this convenience has unfortunately opened a new avenue for fraudsters: Proof of Payment (POP) fraud.

As a merchant or small business owner in South Africa, you've likely received countless POP screenshots. But how sure are you that every one of them is legitimate? The reality is that sophisticated criminals are constantly devising new ways to manipulate these documents, costing businesses significant losses and eroding trust. Understanding these schemes is the first step in protecting your hard-earned profits.

What Exactly is Proof of Payment?

A Proof of Payment (POP) is essentially a digital receipt or confirmation generated by a bank to show that funds have been transferred from one account to another. It typically includes details like the payer's name, the recipient's name, the amount, date, time, and a reference number. While essential for confirming transactions, the ease with which these digital documents can be altered makes them a prime target for fraudsters.

Why is POP Fraud So Prevalent in South Africa?

Several factors contribute to the high incidence of POP fraud in South Africa:

  • High Volume of EFTs: Many businesses, from spaza shops to online retailers, rely heavily on EFTs, providing ample opportunities for fraudsters.
  • Digital Literacy Gap: Not all merchants are equally tech-savvy, making it harder for some to spot subtle manipulations in digital documents.
  • Urgency and Trust: Fraudsters often create a sense of urgency, pressuring merchants to release goods or services before proper verification.
  • Lack of Standardisation: POP formats can differ significantly across banks like FNB, Absa, Capitec, Nedbank, Standard Bank, and TymeBank, making it harder to spot inconsistencies at a glance.
  • Sophisticated Tools: Image editing software is readily available, allowing criminals to create highly convincing fake POPs.

Common POP Fraud Schemes Targeting SA Merchants

Fraudsters are cunning and adaptable. Here are some of the most common POP fraud schemes you might encounter in South Africa:

1. The Doctored Screenshot

This is arguably the most common and insidious form of POP fraud. A fraudster will take a legitimate POP screenshot (or even create one from scratch) and then use image editing software to alter key details. They might change:

  • The Amount: Showing a higher amount than was actually transferred.
  • The Recipient: Changing your business name to theirs, or vice-versa, to confuse you.
  • The Date/Time: Making an old payment look recent.
  • The Reference: Changing the reference to match a specific order.

Example: A fraudster sends you a seemingly legitimate Capitec or FNB POP for R5,000, but in reality, they only transferred R500 or nothing at all. The screenshot looks authentic, with all the bank's branding and layout.

Red Flags:

  • Slight pixelation or blurriness around text or numbers.
  • Inconsistent fonts or font sizes within the document.
  • Dates/times that don't quite align with the transaction time.
  • Unusual spacing or alignment of text.

2. The Delayed Payment / Future-Dated POP

This scheme involves sending a POP that indicates a payment has been

Β© 2026 VeriPop. Alle regte voorbehou.
Trots gebou in Suid-Afrika