Close Menu
TechCentralTechCentral

    Subscribe to the newsletter

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    Facebook X (Twitter) YouTube LinkedIn
    WhatsApp Facebook X (Twitter) LinkedIn YouTube
    TechCentralTechCentral
    • News
      Eskom waives rooftop solar fees, but the registration fight isn't over

      Eskom waives rooftop solar fees, but the registration fight isn’t over

      1 October 2026
      South Africa's digital ID is here - but you can't have it yet - Leon Schreiber

      South Africa’s digital ID is here – but you can’t have it yet

      1 October 2026
      Absa is moving cash out of its branches

      Absa is moving cash out of its branches

      1 October 2026
      Home affairs pulls the plug on the green ID book - Leon Schreiber

      Home affairs pulls the plug on the green ID book

      1 October 2026
      How Cell C shaped Blu Label's executive pay - Brett Levy Mark Levy

      How Cell C shaped Blu Label’s executive pay

      1 October 2026
    • World
      BMW restructuring plan bets on AI and new models

      BMW restructuring plan bets on AI and new models

      1 October 2026
      OpenAI's rogue agent problem keeps getting bigger - Sam Altman

      OpenAI’s rogue agent problem keeps getting bigger

      28 September 2026
      The new battle over the desktop

      The new battle over the desktop

      23 September 2026
      AMD is now worth a trillion dollars - Lisa Su

      AMD is now worth a trillion dollars

      22 September 2026
      Anthropic weighs new model launch to blunt OpenAI's Astra surge - Anthropic CEO Dario Amodei and OpenAI CEO Sam Altman

      Anthropic weighs new model launch to blunt OpenAI’s Astra surge

      21 September 2026
    • In-depth

      10 days that changed the course of AI

      21 September 2026
      Meta to the AI industry: slow down without us - Mark Zuckerberg

      Meta to the AI industry: slow down without us

      16 September 2026
      Google DeepMind CEO Demis Hassabis. Image: John Sears

      The plan to stop AI from breaking the world

      16 July 2026
      The internet has a Strait of Hormuz problem

      The internet has a Strait of Hormuz problem

      15 July 2026
      AI boom sparks rally, frenzy and fear

      AI boom sparks rally, frenzy and fear

      11 June 2026
    • TCS
      TCS | Dominic White and Adam Ely on AI agents going rogue

      TCS | Dominic White and Adam Ely on AI agents going rogue

      29 September 2026
      TCS | Octotel's Trevor van Zyl on the fibre merger question

      TCS | Octotel’s Trevor van Zyl on the MetroFibre merger question

      16 September 2026
      Meet the CIO | Shoprite's Chris Shortt on what a supermarket becomes

      Meet the CIO | Shoprite’s Chris Shortt on what a supermarket becomes

      9 September 2026
      Rubicon's EV charging network is profitable - and growing fast - Watts & Wheels

      W&W | Rubicon’s EV charging network is profitable – and growing fast

      8 September 2026
      Winstone Jordaan on building a national EV charging network

      Winstone Jordaan on building a national EV charging network

      2 September 2026
    • Opinion
      South Africa's next energy crisis is in the accounts department - Craig Holmes

      South Africa’s next energy crisis is in the accounts department

      29 September 2026
      The steam engine lesson AI doomsayers keep missing - Sam Clarke

      The steam engine lesson AI doomsayers keep missing

      28 September 2026
      Regulating AI: apply the laws we have first - Dirk de Vos

      Regulating AI: apply the laws we have first

      21 September 2026
      What Revolut can and cannot take from South Africa's banks - Pambos Soteriades

      What Revolut can and cannot take from South Africa’s banks

      15 September 2026
      The end is nigh, and the shares go on sale in October - Duncan McLeod

      The end is nigh, and the shares go on sale in October

      14 September 2026
    • Company Hubs
      • 1Stream
      • Africa Data Centres
      • AfriGIS
      • Altron Digital Business
      • Altron Document Solutions
      • Altron Group
      • Arctic Wolf
      • Ascent Technology
      • AvertITD
      • BBD
      • Braintree
      • CallMiner
      • CambriLearn
      • CM.com
      • Contactable
      • CYBER1 Solutions
      • Digicloud Africa
      • Digimune
      • Domains.co.za
      • ESET
      • Euphoria Telecom
      • HOSTAFRICA
      • Incredible Business
      • iONLINE
      • IQbusiness
      • Iris Network Systems
      • Kaspersky
      • LSD Open
      • Mitel
      • NEC XON
      • Netstar
      • Network Platforms
      • Next DLP
      • Ovations
      • Paracon
      • Paratus
      • Publishared
      • Q-KON
      • SevenC
      • SkyWire
      • Solid8 Technologies
      • Telit Cinterion
      • Telviva
      • Tenable
      • Vertiv
      • Videri Digital
      • Vodacom Business
      • Vox
      • Wipro
      • Workday
      • XLink
    • Sections
      • AI and machine learning
      • Banking
      • Broadcasting and Media
      • Cloud services
      • Contact centres and CX
      • Cryptocurrencies
      • Education and skills
      • Electronics and hardware
      • Energy and sustainability
      • Enterprise software
      • Financial services
      • HealthTech
      • Information security
      • Internet and connectivity
      • Internet of Things
      • Investment
      • IT services
      • Lifestyle
      • Policy and regulation
      • Public sector
      • Retail and e-commerce
      • Satellite communications
      • Science
      • SMEs and start-ups
      • Social media
      • Talent and leadership
      • Telecoms
      • Watts & Wheels
    • Events
    • Advertise
    TechCentralTechCentral
    Home » Sections » Banking » Cyber crooks cashing in as ATM attacks decline

    Cyber crooks cashing in as ATM attacks decline

    Powerful digital tools and decreased physical risk have led to a decrease in robberies, while hacking surges.
    By Nkosinathi Ndlovu1 September 2025
    Twitter LinkedIn Facebook WhatsApp Email Telegram Copy Link
    Get breaking news on WhatsApp

    Cyber crooks cashing in as ATM attacks declineThe rate of banking sector-related contact crimes such as branch-before-deposit and ATM-after-withdrawal robberies are in sharp decline as criminals find higher rates of success through digital means to defraud people.

    According to the South African Banking Risk Information Centre’s (Sabric’s) Annual Crime Statistics 2024 report, robberies dropped 35% year on year in 2024, with associated losses by the banking sector declining by 64% compared to 2023.

    “The notable decline in related robbery incidents is largely due to a collaborative project between the banking industry and the South African Police Service, aimed at sharing information on identified suspects and alerting authorities when these individuals entered bank branches, enabling the identification of potential cash-withdrawal victims,” the report said.

    Digital crimes surged 86% year on year with associated losses rising by 74% to R1.9-billion

    Despite the drop in contact crimes, the banking sector sees their occurrence as a risk, especially since customers who are robbed tend to lose trust in the system.

    According to Sabric, clients making ATM deposits are most vulnerable to attacks at the machines in the first six days of the month when grant payments are collected.

    Criminals also take advantage of ignorance and superstition, with tactics such as smearing “muti” on victims to extort money from them and using the “money bomb” tactic, where a wad of cash is dropped next to the victim to trick them into forking out more money.

    ATM bombings dropped by 18%, with cash losses declining by 44%. Despite the positive trend, ATM bombings are still over 85% successful, meaning criminals can still access cash even though dye-stain technology is used to protect it.

    Prime targets

    Two-thirds of ATM bombings were reported in Gauteng, followed by Limpopo at 9%. The southern parts of Gauteng were most affected, with Johannesburg accounting for 45% and Ekurhuleni 38% of all attacks. Petrol stations with more than one ATM in the forecourt were the prime targets, and in some instances the store and drop safe inside were also targeted.

    In contrast, digital crimes surged 86% over the same period with associated losses rising by 74% to R1.9-billion. Added to this is a steep rise in application fraud, especially through vehicle asset finance, which recorded a 50% year-on-year increase in incidents and a 71% year-on-year increase in potential losses, which totalled R23-billion.

    Sabric said the modus operandi of vehicle cloning and illegal changes of vehicle ownership continue to challenge the banking sector and other stakeholders. A cloned vehicle is stolen or hijacked and then illegally registered using the details of a legitimate vehicle on government’s eNatis system.

    Read: AI-led digital banking fraud is surging in South Africa

    They are often rapidly transferred between three or four owners over a short period to create a fake ownership history and obscure the vehicle’s origins.

    “The use of AI-generated documents and deepfakes further complicates detection. Fraudsters are increasingly submitting forged payslips, altered bank statements, and even impersonating applicants through AI-generated video and audio during remote verification,” said the report.

    These new-age forging techniques also contributed to a rise in unsecured credit fraud, with reported incidents rising 58% year on year and corresponding potential losses up 62%. Both vehicle finance and unsecured credit fraud are worsened by organised syndicates who use sophisticated technology and cross-border reach to take advantage of gaps in law enforcement co-ordination across jurisdictions and weak recovery networks.

    “Sabric acknowledges that these trends represent not only technological but also behavioural challenges, with social engineering attacks exploiting human error as a primary vulnerability. Multi-factor authentication, biometric verification and increased public awareness remain key deterrents,” it said.  – © 2025 NewsCentral Media

    Get breaking news from TechCentral on WhatsApp. Sign up here.

    Don’t miss:

    The South African bank racing ahead of its peers in IT spending growth

    Add TechCentral as a preferred source on GoogleFollow TechCentral on Google NewsGet breaking news on WhatsApp


    Sabric
    WhatsApp YouTube
    Share. Facebook Twitter LinkedIn WhatsApp Telegram Email Copy Link
    Previous ArticleTech loopholes fuel vehicle theft surge in South Africa
    Next Article Cell C listing plan gains momentum

    Related Posts

    South Africa's fraud problem is persuasion, not hacking

    South Africa’s fraud problem is persuasion, not hacking

    18 August 2026
    Bank robberies, ATM bombings collapse as criminals go digital

    Bank robberies, ATM bombings collapse as criminals go digital

    14 August 2026
    AI fraud is outrunning South African banking defences

    AI fraud is outrunning South African banking defences

    14 August 2026
    Company News
    What Smollan learnt moving 9 000 users to Google Workspace - Digicloud Africa

    What Smollan learnt moving 9 000 users to Google Workspace

    1 October 2026
    Dell Technologies Forum 2026: what to expect in Johannesburg

    Dell Technologies Forum 2026: what to expect in Johannesburg

    1 October 2026
    B2B buyers pick a winner long before the pitch - Publishared, Michelle Losco

    B2B buyers pick a winner long before the pitch

    1 October 2026
    Opinion
    South Africa's next energy crisis is in the accounts department - Craig Holmes

    South Africa’s next energy crisis is in the accounts department

    29 September 2026
    The steam engine lesson AI doomsayers keep missing - Sam Clarke

    The steam engine lesson AI doomsayers keep missing

    28 September 2026
    Regulating AI: apply the laws we have first - Dirk de Vos

    Regulating AI: apply the laws we have first

    21 September 2026

    Subscribe to Updates

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    Latest Posts
    What Smollan learnt moving 9 000 users to Google Workspace - Digicloud Africa

    What Smollan learnt moving 9 000 users to Google Workspace

    1 October 2026
    Eskom waives rooftop solar fees, but the registration fight isn't over

    Eskom waives rooftop solar fees, but the registration fight isn’t over

    1 October 2026
    Dell Technologies Forum 2026: what to expect in Johannesburg

    Dell Technologies Forum 2026: what to expect in Johannesburg

    1 October 2026
    South Africa's digital ID is here - but you can't have it yet - Leon Schreiber

    South Africa’s digital ID is here – but you can’t have it yet

    1 October 2026
    © 2009 - 2026 NewsCentral Media
    Built and maintained by Chronon
    • Cookie policy (ZA)
    • TechCentral – privacy and Popia

    Type above and press Enter to search. Press Esc to cancel.

    Manage consent

    TechCentral uses cookies to enhance its offerings. Consenting to these technologies allows us to serve you better. Not consenting or withdrawing consent may adversely affect certain features and functions of the website.

    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    • Manage options
    • Manage services
    • Manage {vendor_count} vendors
    • Read more about these purposes
    View preferences
    • {title}
    • {title}
    • {title}
    🇿🇦 Sign up to the TechCentral newsletter