Close Menu
TechCentralTechCentral

    Subscribe to the newsletter

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    Facebook X (Twitter) YouTube LinkedIn
    WhatsApp Facebook X (Twitter) LinkedIn YouTube
    TechCentralTechCentral
    • News
      Court bid could open the door to Starlink without new law

      Court bid could open the door to Starlink in South Africa

      11 November 2026
      Telkom wants Icasa's BEE rules eased for everyone, Starlink included

      Telkom wants Icasa’s BEE rules eased for everyone, Starlink included

      11 November 2026
      TCS | Pick n Pay fights back in online grocery wars - Vince Viviers

      TCS | Pick n Pay fights back in online grocery wars

      11 November 2026
      Malatsi briefed as power outage hits the SABC

      Malatsi briefed as power outage hits the SABC

      11 November 2026
      Mohammed Raiyan Sharif, left, and Mitchell Cox

      Wits uncovers a hidden effect in everyday optical fibre

      11 November 2026
    • World
      John Ternus faces first big test as Apple CEO - John Ternus

      John Ternus faces first big test as Apple CEO

      2 November 2026
      Alleged Israeli spy company heavily targeted Starlink users

      How online ads were used to hunt Starlink users

      28 October 2026
      Anthropic's IPO stands alone

      Anthropic’s IPO stands alone

      23 October 2026
      PHP flaws trigger global scramble as hackers pounce

      PHP flaws trigger global scramble as hackers pounce

      22 October 2026
      OpenAI turns the tables on Apple in trade secrets fight

      OpenAI turns the tables on Apple in trade secrets fight

      15 October 2026
    • In-depth
      Ducking hell: inside Apple's hidden list of words the iPhone won't suggest

      Ducking hell: inside Apple’s hidden list of words the iPhone won’t suggest

      6 November 2026
      Why investors are souring on Netflix

      Why investors are souring on Netflix

      22 October 2026

      10 days that changed the course of AI

      21 September 2026
      Meta to the AI industry: slow down without us - Mark Zuckerberg

      Meta to the AI industry: slow down without us

      16 September 2026
      Google DeepMind CEO Demis Hassabis. Image: John Sears

      The plan to stop AI from breaking the world

      16 July 2026
    • TCS
      TCS | Nomvuyiso Batyi on the battle over Sim registration - Nomvuyiso Batyi

      TCS | Nomvuyiso Batyi on the battle over Sim registration

      9 November 2026
      TCS+ | Old Mutual's Celiwe Ross on leading people through AI - Old Mutual

      TCS+ | Old Mutual’s Celiwe Ross on leading people through AI

      6 November 2026
      TCS+ | How the Apple ecosystem drives productivity for SMEs - Sudesh Pillay iStore and Kevin McLennan

      TCS+ | How the Apple ecosystem drives productivity for SMEs

      6 November 2026
      TCS+ | Vox on AI, data rules and omnichannel communication for SMEs

      TCS+ | Vox on AI, data rules and omnichannel communication for SMEs

      26 October 2026
      TCS | The Cape Town firm quietly connecting Eskom, Pep and 6 000 ATMs - Réan van Niekerk, Metacom

      TCS | The Cape Town firm quietly connecting Eskom, Pep and 6 000 ATMs

      23 October 2026
    • Opinion
      Icasa's Sim rules need a privacy backstop - Lloyd Matthew and Heinz Vollmer

      Icasa’s Sim rules need a privacy backstop

      5 November 2026
      AI's boardroom honeymoon is over - Gary Stocks

      AI’s boardroom honeymoon is over

      22 October 2026
      Before South Africa licenses Starlink, it should look at Ukraine - Duncan McLeod

      Before South Africa licenses Starlink, it should look at Ukraine

      21 October 2026
      Nonkqubela Thathakahle Jordan-Dyani

      Why cybersecurity is now a national security issue for South Africa

      15 October 2026
      When a machine can choose, who does it become? Fanie van Rooyen

      When a machine can choose, who does it become?

      9 October 2026
    • Company News
      • 1Stream
      • Africa Data Centres
      • AfriGIS
      • Altron Digital Business
      • Altron Document Solutions
      • Altron Group
      • Arctic Wolf
      • Ascent Technology
      • AvertITD
      • BBD
      • Braintree
      • CallMiner
      • CambriLearn
      • CM.com
      • Contactable
      • CYBER1 Solutions
      • Digicloud Africa
      • Digimune
      • Domains.co.za
      • ESET
      • Euphoria Telecom
      • HOSTAFRICA
      • Incredible Business
      • iONLINE
      • IQbusiness
      • Iris Network Systems
      • Kaspersky
      • LSD Open
      • Mitel
      • NEC XON
      • Netstar
      • Network Platforms
      • Next DLP
      • Ovations
      • Paracon
      • Paratus
      • Publishared
      • Q-KON
      • SevenC
      • SkyWire
      • Solid8 Technologies
      • Telit Cinterion
      • Telviva
      • Tenable
      • Vertiv
      • Videri Digital
      • Vodacom Business
      • Vox
      • Wipro
      • Workday
      • XLink
    • Sections
      • AI and machine learning
      • Banking
      • Broadcasting and media
      • Cloud services
      • Contact centres and CX
      • Cryptocurrencies
      • Education and skills
      • Electronics and hardware
      • Energy and sustainability
      • Enterprise software
      • Fintech and payments
      • HealthTech
      • Information security
      • Internet and connectivity
      • Internet of things
      • Investment
      • IT services
      • Lifestyle
      • Policy and regulation
      • Public sector
      • Retail and e-commerce
      • Satellite communications
      • Science
      • SMEs and start-ups
      • Social media
      • Talent and leadership
      • Telecoms
      • Watts & Wheels
    • Events
    • Advertise
    TechCentralTechCentral
    Home » Sections » Banking » Cyber crooks cashing in as ATM attacks decline

    Cyber crooks cashing in as ATM attacks decline

    Powerful digital tools and decreased physical risk have led to a decrease in robberies, while hacking surges.
    By Nkosinathi Ndlovu1 September 2025
    Twitter LinkedIn Facebook WhatsApp Email Telegram Copy Link
    Get breaking news on WhatsApp

    Cyber crooks cashing in as ATM attacks declineThe rate of banking sector-related contact crimes such as branch-before-deposit and ATM-after-withdrawal robberies are in sharp decline as criminals find higher rates of success through digital means to defraud people.

    According to the South African Banking Risk Information Centre’s (Sabric’s) Annual Crime Statistics 2024 report, robberies dropped 35% year on year in 2024, with associated losses by the banking sector declining by 64% compared to 2023.

    “The notable decline in related robbery incidents is largely due to a collaborative project between the banking industry and the South African Police Service, aimed at sharing information on identified suspects and alerting authorities when these individuals entered bank branches, enabling the identification of potential cash-withdrawal victims,” the report said.

    Digital crimes surged 86% year on year with associated losses rising by 74% to R1.9-billion

    Despite the drop in contact crimes, the banking sector sees their occurrence as a risk, especially since customers who are robbed tend to lose trust in the system.

    According to Sabric, clients making ATM deposits are most vulnerable to attacks at the machines in the first six days of the month when grant payments are collected.

    Criminals also take advantage of ignorance and superstition, with tactics such as smearing “muti” on victims to extort money from them and using the “money bomb” tactic, where a wad of cash is dropped next to the victim to trick them into forking out more money.

    ATM bombings dropped by 18%, with cash losses declining by 44%. Despite the positive trend, ATM bombings are still over 85% successful, meaning criminals can still access cash even though dye-stain technology is used to protect it.

    Prime targets

    Two-thirds of ATM bombings were reported in Gauteng, followed by Limpopo at 9%. The southern parts of Gauteng were most affected, with Johannesburg accounting for 45% and Ekurhuleni 38% of all attacks. Petrol stations with more than one ATM in the forecourt were the prime targets, and in some instances the store and drop safe inside were also targeted.

    In contrast, digital crimes surged 86% over the same period with associated losses rising by 74% to R1.9-billion. Added to this is a steep rise in application fraud, especially through vehicle asset finance, which recorded a 50% year-on-year increase in incidents and a 71% year-on-year increase in potential losses, which totalled R23-billion.

    Sabric said the modus operandi of vehicle cloning and illegal changes of vehicle ownership continue to challenge the banking sector and other stakeholders. A cloned vehicle is stolen or hijacked and then illegally registered using the details of a legitimate vehicle on government’s eNatis system.

    Read: AI-led digital banking fraud is surging in South Africa

    They are often rapidly transferred between three or four owners over a short period to create a fake ownership history and obscure the vehicle’s origins.

    “The use of AI-generated documents and deepfakes further complicates detection. Fraudsters are increasingly submitting forged payslips, altered bank statements, and even impersonating applicants through AI-generated video and audio during remote verification,” said the report.

    These new-age forging techniques also contributed to a rise in unsecured credit fraud, with reported incidents rising 58% year on year and corresponding potential losses up 62%. Both vehicle finance and unsecured credit fraud are worsened by organised syndicates who use sophisticated technology and cross-border reach to take advantage of gaps in law enforcement co-ordination across jurisdictions and weak recovery networks.

    “Sabric acknowledges that these trends represent not only technological but also behavioural challenges, with social engineering attacks exploiting human error as a primary vulnerability. Multi-factor authentication, biometric verification and increased public awareness remain key deterrents,” it said.  – © 2025 NewsCentral Media

    Get breaking news from TechCentral on WhatsApp. Sign up here.

    Don’t miss:

    The South African bank racing ahead of its peers in IT spending growth

    Add TechCentral as a preferred source on GoogleFollow TechCentral on Google NewsGet breaking news on WhatsApp


    Sabric
    WhatsApp YouTube
    Share. Facebook Twitter LinkedIn WhatsApp Telegram Email Copy Link
    Previous ArticleTech loopholes fuel vehicle theft surge in South Africa
    Next Article Cell C listing plan gains momentum

    Related Posts

    SA start-up wants to put a padlock on your phone calls

    SA start-up wants to put a padlock on your phone calls

    19 October 2026
    Capitec is setting traps for scammers' mule accounts - Andrew Baker

    Capitec is setting traps for scammers’ mule accounts

    12 October 2026
    cybercrime

    South Africa’s fraud problem is persuasion, not hacking

    18 August 2026
    Company News
    Coen Jonker receives the Lifetime Achievement Award at the inaugural SA FinTech Awards in 2025, presented by Darren Franks, CEO of Finasa

    Finasa’s SA FinTech Awards: banks and fintechs, building together

    11 November 2026
    The hidden risks of fragmented IT and unenforced SLAs - ITC Systems Durban

    The hidden risks of fragmented IT and unenforced SLAs

    10 November 2026
    Why AI-powered customer experience will decide South Africa's festive retail winners - CM.com

    Why AI-powered customer experience will decide South Africa’s festive retail winners

    10 November 2026
    Opinion
    Icasa's Sim rules need a privacy backstop - Lloyd Matthew and Heinz Vollmer

    Icasa’s Sim rules need a privacy backstop

    5 November 2026
    AI's boardroom honeymoon is over - Gary Stocks

    AI’s boardroom honeymoon is over

    22 October 2026
    Before South Africa licenses Starlink, it should look at Ukraine - Duncan McLeod

    Before South Africa licenses Starlink, it should look at Ukraine

    21 October 2026

    Subscribe to Updates

    Get the best South African technology news and analysis delivered to your e-mail inbox every morning.

    Latest Posts
    Court bid could open the door to Starlink without new law

    Court bid could open the door to Starlink in South Africa

    11 November 2026
    Telkom wants Icasa's BEE rules eased for everyone, Starlink included

    Telkom wants Icasa’s BEE rules eased for everyone, Starlink included

    11 November 2026
    TCS | Pick n Pay fights back in online grocery wars - Vince Viviers

    TCS | Pick n Pay fights back in online grocery wars

    11 November 2026
    Malatsi briefed as power outage hits the SABC

    Malatsi briefed as power outage hits the SABC

    11 November 2026
    © 2009 - 2026 NewsCentral Media
    Built and maintained by Chronon
    • Cookie policy (ZA)
    • TechCentral – privacy and Popia

    Type above and press Enter to search. Press Esc to cancel.

    Manage consent

    TechCentral uses cookies to enhance its offerings. Consenting to these technologies allows us to serve you better. Not consenting or withdrawing consent may adversely affect certain features and functions of the website.

    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    • Manage options
    • Manage services
    • Manage {vendor_count} vendors
    • Read more about these purposes
    View preferences
    • {title}
    • {title}
    • {title}
    🇿🇦 Sign up to the TechCentral newsletter