A sophisticated scam operation uncovered in Umhlanga earlier this year used fear, urgency and insider knowledge to trick victims into transferring money directly into criminal-controlled accounts, according to Acting Police Minister Firoz Cachalia.
The revelations emerged after Cachalia responded to parliamentary questions regarding a major law enforcement raid conducted in April 2026. Authorities believe the operation was part of an organised financial crime network that targeted unsuspecting South Africans through fraudulent phone calls posing as legitimate banking communications.
According to investigators, victims were contacted by individuals claiming to represent their banks and were falsely warned about suspicious transactions on their accounts. The callers then persuaded victims to move their money to so-called “safe” accounts in order to prevent financial losses.
In reality, those accounts were controlled by money mules working for the syndicate.
Once funds were transferred, the money was rapidly withdrawn or moved through multiple accounts, making recovery and tracing significantly more difficult.
Intelligence-Led Raid Uncovers Extensive Fraud Operation
Law enforcement agencies launched a coordinated operation on 14 April 2026 after receiving intelligence that a property in Umhlanga was being used as a large-scale banking fraud centre.
The operation involved Crime Intelligence, the eThekwini Cluster Detectives, the Tactical Response Team, the Local Criminal Record Centre and cybercrime investigators.
Police arrested 23 suspects during the raid, including 13 women and 10 men aged between 18 and 44.
Investigators seized laptops, mobile phones, SIM cards, tablets, hard drives and numerous documents believed to contain operational records and transaction details linked to the alleged fraud scheme.
Authorities said the evidence is undergoing forensic examination as part of an ongoing investigation aimed at identifying additional suspects and determining whether the syndicate has links to wider national or international criminal networks.
The Umhlanga raid followed another high-profile operation in January 2026 in Bryanston, Johannesburg. During that investigation, authorities seized assets worth nearly R44 million and arrested several individuals allegedly connected to a global investment scam network.
Experts Warn Scam Centres Often Operate Like Legitimate Businesses
Cybersecurity educator Boikokobetso Makhetloane believes recent arrests represent only a small portion of a much larger problem.
He explained that many scam call centres operate in a highly organised manner, often resembling legitimate corporate businesses. According to Makhetloane, recruits are frequently unaware of the true nature of the work when they apply for positions.
Job advertisements often appear legitimate, and employees may only discover the nature of the operation after undergoing training. In some cases, workers are required to sign strict confidentiality agreements and are discouraged from discussing their activities with family or friends.
Makhetloane said recruits are taught psychological manipulation techniques, sales tactics and methods for gaining the trust of potential victims.
One of the most concerning aspects, he noted, is the role of former employees from targeted organisations. Individuals with previous experience in banks or financial institutions may possess valuable insider knowledge that can help criminal groups create more convincing scams.
This insider information can be used to train new recruits, refine fraud strategies and increase the likelihood of deceiving victims.
As cyber-enabled financial crime continues to evolve in South Africa, authorities say public awareness remains one of the most effective tools for preventing fraud. Investigations into the Umhlanga operation remain ongoing.
Source: South African Police Service (SAPS), Parliament of South Africa