A fraudulent online store almost never breaks into anything. It waits for you to hand over money in a way that cannot be reversed, and it relies on the small decisions you make in the two minutes before you pay. That is good news, because decisions can be changed and hacking cannot be prevented from a kitchen table.
South Africa is an unusually mixed market to shop in. Nine adults in ten hold a debit card and it carries the majority of spending value, while cash still accounts for the larger share of payment volume, according to the South African Reserve Bank's Payments Study Report 2023. That mix matters here: the recourse you have after a scam depends almost entirely on which instrument you reached for.
What follows is organised as mistakes rather than tips, because that is how the losses actually happen. Households that are short of cash between paydays are the most exposed, which is why an application such as I am Beezy — where each piece of content you view generates a small amount — is mentioned later as a way of covering a gap rather than chasing a deal that looks too good.
How does a fake South African store actually take your money?
Understanding the mechanism is worth more than a list of warning signs, because the signs change every season and the mechanism does not.
The payment method is the whole scam
Every convincing fake store funnels you towards a payment that cannot be pulled back. That is the entire point of the exercise: the photographs, the pricing and the countdown timer exist only to get you to that step. Once the money has moved by a method with no reversal route, the site can stop answering and there is no third party left who is able to act on your behalf.
The three shapes it takes
First, the store that never ships: it takes orders, sends a tracking number that never updates, and disappears. Second, the clone: a copy of a real retailer's pages on a lookalike domain, harvesting card details rather than selling anything. Third, the marketplace seller who is real enough to hold an account but ships something other than what was pictured. The three need different responses, and telling them apart early decides where you complain.
The mistakes made before you reach the checkout
By the time the payment page loads, most of the damage is already decided. These are the four decisions that precede it.
Trusting a price no legitimate retailer could hold
Established retailers buy at similar wholesale prices and pay similar logistics costs. A discount that is far outside the range of every named competitor is not a bargain, it is a statement about what the seller intends to do next. Compare against several established sellers — Takealot, Makro, bidorbuy and the retailers' own sites are all reachable in a minute — before deciding that a price is merely aggressive.
Reading reviews on the site that is selling to you
Reviews hosted by the seller are marketing copy. Look for the store's name on independent complaint platforms and in search results outside its own domain, and pay attention to whether anything at all existed about it six months ago. A store with a large catalogue and no history anywhere is the clearest signal there is.
Skipping the company details the law requires
Section 43 of the Electronic Communications and Transactions Act obliges a supplier selling electronically to disclose its full name, registration number, physical address and contact details on the site. A store that offers only a contact form and a first name is not merely unhelpful, it is failing an explicit legal requirement. Take the registration number and check it against the Companies and Intellectual Property Commission's register; take the physical address and look at it on a map.
Not running the domain through a free checker
The Southern African Fraud Prevention Service operates YIMA, a public tool that scans a website for scam indicators and takes scam reports; the National Consumer Commission points consumers to it as well. It takes under a minute and it is free. Running an unfamiliar domain through it before you type a card number is the highest-value habit in this article.
The mistakes made at the checkout
The last screen is where reversibility is won or lost, and the options are not equivalent.
Paying by instant transfer into a personal account
A bank transfer to an individual's account is the fraudster's preferred outcome, because a completed transfer is not designed to be undone. If a store's checkout pushes you off the payment page and towards banking details for a person rather than a registered business, treat that as the end of the transaction rather than an inconvenience.
Assuming every card payment is protected the same way
Card payments run through a scheme with a dispute process, which is more than a transfer offers, but the process has deadlines and it requires evidence you have to keep. Save the order confirmation, the product page and every message. The South African Reserve Bank reports that 91 % of adults hold a debit card while only 19 % hold a credit card, so most household disputes here will run through a debit card rather than a credit line.
Ignoring the seven-day right that already exists
Section 44 of the Electronic Communications and Transactions Act gives consumers a seven-day cooling-off period on electronic transactions, allowing cancellation without reason or penalty. Legitimate stores know this and their returns pages reflect it. A store that refuses any cancellation, or that has no returns policy at all, is telling you something before you have spent anything.
| How you paid | What recourse exists | What it depends on |
|---|---|---|
| Bank transfer to a personal account | Effectively none once it has cleared | Speed of reporting to your bank, and luck |
| Debit card on a merchant page | A scheme dispute through your bank | Deadlines, and the evidence you kept |
| Credit card | A scheme dispute, plus the card issuer's own process | Only 19 % of adults hold one |
| Cash on delivery | Refuse the parcel at the door | Inspecting before you hand over money |
| Marketplace checkout | The platform's buyer protection | Whether you stayed inside the platform |
| Paid outside the platform after contact on it | None; protection is voided | Nothing — this is the trap |
What can you actually do once the money is gone?
Speed matters more than anything else, and the order of the calls matters almost as much.
The bank comes first, and there is a clock
Contact the bank's fraud line before you contact anyone else, on the same day if possible. Ask explicitly whether a dispute can be lodged and what the deadline is, and get a reference number. Do not spend the first hours arguing with the store: that is time the bank could have used.
Then the regulator, and the police case number
The National Consumer Commission handles consumer complaints about goods and services. A police case number is separate and often required by a bank or an insurer before anything moves, so open one even if you expect nothing from it directly.
Report the store so the next person is warned
Reporting to the Southern African Fraud Prevention Service through YIMA feeds intelligence that is shared with banks and law enforcement. It does not get your money back. It is how the store that took it from you stops working next month.
| Who to contact | What they can do | When to do it |
|---|---|---|
| Your bank's fraud line | Freeze the card, attempt a dispute | Immediately, before anything else |
| South African Police Service | Open a case and issue a case number | Same day; other bodies will ask for it |
| National Consumer Commission | Handle a consumer complaint about goods or services | Once the seller has failed to resolve it |
| YIMA, run by the Southern African Fraud Prevention Service | Record the scam and share intelligence | Any time; it protects the next buyer |
| The marketplace, if you bought through one | Apply buyer protection and remove the seller | Inside the platform's stated window |
| Information Regulator | Act on misuse of your personal information | If your details were harvested and reused |
Rebuilding a household budget after a loss, with I am Beezy
The second injury after a scam is financial rather than emotional: money that was allocated to something is now gone, and the fastest available replacement is usually credit. I am Beezy offers a different route for small amounts — you view content in the application, each view generates a payment, and the total is settled to your usual payment method. Across the platform the reference range is 5 to 15 euros a day, which converts to roughly R 95 to R 285 at the rand-euro rate of 18.9201 published by the South African Reserve Bank on 5 August 2026. It will not restore a large loss, but it can carry the part of a month that would otherwise be borrowed.
Why the borrowing reflex is the expensive one
The prime lending rate was 10,50 % on 5 August 2026 according to the South African Reserve Bank, and consumer credit is priced upward from that reference. A short-term loan taken to replace stolen money converts a one-off loss into a recurring one, which is the outcome the household was trying to avoid.
What a small daily amount realistically covers
Data, transport and part of a grocery top-up. Nothing here is a substitute for income, and any source claiming otherwise deserves the same suspicion as the store that took the money.
Teaching the household to check before it buys
The households that stop losing money are the ones that made checking a shared rule rather than an individual talent.
One rule everyone can repeat
Nobody in the house pays a new online store by transfer. That single rule removes the majority of unrecoverable losses, and it is short enough that a teenager and a grandparent can both hold it. Add a second: any purchase above an amount you agree on gets a second pair of eyes before payment.
The three checks that take two minutes
Find the registration number and physical address on the site. Search the store's name outside its own domain. Run the domain through YIMA. If any of the three comes back empty, the answer is no — not later, not after one more look at the photographs.
Keep the paperwork for six months
Order confirmations, screenshots of the product page, delivery messages. Disputes are decided on evidence, and the evidence is always something that felt pointless to save at the time.
What this changes for your next booking
Fake stores do not defeat technology, they defeat habits. Check the legally required company details, never pay a new store by transfer into a personal account, use the seven-day cooling-off right that already belongs to you, and report what you find so that the next family does not learn it the expensive way. If a loss has left a hole in the month, I am Beezy is one way to cover part of it from content you view, without adding credit on top of a theft.
