SASSA Refund Scams – In June 2025, a massive cyber fraud campaign has rocked South Africa, with over 200,000 citizens targeted by fake SASSA “refund” scams. These phishing attacks are exploiting desperate grant beneficiaries by sending SMS messages, emails, and social media posts that falsely promise a refund or bonus payment from the South African Social Security Agency (SASSA). The scams direct users to click malicious links or share their ID numbers, bank account details, or OTPs, often under the pretense of processing a “refund” or urgent account verification. Once victims comply, fraudsters gain unauthorized access to their banking apps or SASSA accounts—draining funds or rerouting payments. This widespread fraud is particularly alarming because it comes amid SASSA’s efforts to roll out grant payments to millions of low-income households. With social grants like the R350 SRD grant being a lifeline for millions, cybercriminals have capitalized on this vulnerability. To safeguard the public, authorities including SASSA, the Department of Social Development, and cybersecurity watchdogs have issued strong warnings and are urging the public to verify any SASSA communication via official channels only. Below is a full breakdown of the threat, the methods used by scammers, and the steps you need to take to protect yourself and your grants.
What Are These Fake SASSA Refund Scams?
These scams trick individuals into believing they’re eligible for extra SASSA payments or refunds.
- Messages often promise “R350 Refund Approved” or “Double Grant Bonus Pending”
- Links lead to fake portals mimicking SASSA’s website
- Victims are asked to enter ID numbers, bank details, and OTPs
- Some scams request a small payment to “unlock” a refund
- After clicking, malware may be installed or account access stolen
- Scammers reroute SASSA payments or drain linked bank accounts
Key Phrases Used in SASSA Refund Scams Messages
These are the most common bait lines being used to trick people:
- “SASSA Refund Approved – Click to Claim”
- “R350 Bonus Payment Available – Last Day to Register”
- “Update Your Banking Info to Receive July Grant”
- “Refund Pending – Confirm Your Identity”
- “R1,050 Owed by SASSA – Verify to Collect”
- “Unpaid Balance Detected – Take Action Today”
- “SASSA Verification Required to Avoid Suspension”
How Are Victims Being Targeted?
The scammers are using a multi-channel approach to target people across various platforms.
| Platform Used | Method of Attack | Typical Content | Target Group |
|---|---|---|---|
| SMS/Text Messages | Fake refund notifications | “SASSA Bonus Ready – Click to Confirm” | SRD Grant Recipients |
| WhatsApp Groups | Group posts & forwards | “Check your SASSA refund now!” | Older Citizens |
| Fake pages and inbox DMs | “SASSA R1050 payout form” | Youth & Low-income | |
| Phishing with SASSA logo | “Verify grant info” | Urban Grant Holders | |
| Google Ads | Fake ads on grant keywords | “Official SASSA Refund Portal” | Internet Users |
| Telegram Channels | Fraudulent refund bots | “Auto-check your SASSA eligibility” | SRD Applicants |
| Community Forums | Fake help posts | “I got my SASSA double refund!” | Rural Users |
How Scammers Are Stealing Information
Here’s a breakdown of the typical scam sequence:
- Victim receives message via SMS, WhatsApp, or email
- Message claims urgent SASSA refund or payment pending
- Link redirects to fake portal with SASSA branding
- Victim enters ID number, bank info, or OTP
- Scammer captures details and gains control of the account
- SASSA payment is diverted or bank funds are stolen
Official Warning from Authorities
South African authorities have issued multiple warnings and are actively working to stop the fraud network.
- SASSA urges the public to avoid clicking any suspicious links
- Department of Social Development has flagged over 1,200 fake domains
- Cybersecurity teams have reported over 200,000 individual attack attempts in June alone
- Victims are advised to report incidents to the Cybercrime Unit
- Law enforcement is tracking organized crime rings behind the operation
- Postbank has implemented stricter fraud detection on SASSA-linked accounts
What SASSA Says About These Scams
SASSA emphasized:
- They never send clickable payment links via SMS or email
- They do not request OTPs or PINs for refunds
- All communication is via the official SASSA website or verified hotline
- Any refund or backdated payment is automatically processed—no application needed
What to Do If You Receive a Scam Message
If you receive a suspicious message, do not click or respond. Instead, follow these steps:
- Screenshot the message for record
- Do not enter any personal details
- Report the scam to the Cybercrime Unit via cybercrime.org.za
- Verify your SASSA status only via the official site: sassa.gov.za
- Call SASSA at 0800 60 10 11 to confirm any payment notices
- Change banking passwords and enable OTP security immediately
Who Is Most at Risk?
These scams are mainly targeting vulnerable grant recipients who rely heavily on the R350 or child support grants.
| High-Risk Group | Reason for Vulnerability |
|---|---|
| Elderly Beneficiaries | Less tech-savvy, more trusting |
| Rural Residents | Fewer official updates, rely on word-of-mouth |
| SRD Grant Recipients | Often expecting payment updates |
| Unemployed Youth | High desperation, easier to exploit |
| Social Media Users | Exposed to fake pages and forwarded links |
| People Using Old Phones | Less secure apps, outdated browser warnings |
Tools Scammers Are Using to Trick You
Scammers are getting more sophisticated by the day. Here’s a breakdown of the tools and tricks being deployed.
Fake Websites That Look Like the Real Deal
Scam sites are built to mirror the official SASSA website, complete with logos, fonts, and even fake “helpline chats.”
- Fake URL examples: sassa-pay-claim[dot]org, gov-sassa-refund[dot]com
- Sites often use HTTPS lock icons to appear secure
- Some have fake news articles embedded to boost trust
Auto-Reply Bots on WhatsApp & Facebook
These bots answer your questions like a real SASSA agent would.
- Auto-respond with “Yes, your refund is pending”
- Ask you to “confirm identity” with sensitive info
- Create a false sense of urgency and legitimacy
Real vs Fake: How to Spot a SASSA Scam Instantly
Below is a comparison table to help you differentiate between real SASSA communication and fake scam messages:
| Feature | Official SASSA | Scam Alert Message |
|---|---|---|
| Source | @gov.za official domain | Gmail/Yahoo/Facebook pages |
| Payment Method | Direct to bank or card | Clickable link to confirm/claim |
| Language | Formal, no urgency tone | Urgent tone with words like “final” |
| Info Required | Never asks for PIN/OTP | Always asks for ID/OTP/PIN |
| Refund Process | Automatic, no application | Requires forms or payment to unlock |
| Platform Used | Website or call center | SMS, WhatsApp, social media DMs |
FAQs of SASSA Refund Scams
Q1. Will SASSA ever send a payment link by SMS or email?
No. SASSA does not send clickable payment links via SMS or email.
Q2. What should I do if I accidentally shared my ID or OTP?
Immediately call your bank to freeze transactions, change passwords, and contact the Cybercrime Unit.
Q3. How can I check if my SASSA payment is real?
Visit www.sassa.gov.za or call 0800 60 10 11 for verified updates.
Q4. Are there any refunds or bonus payouts currently being offered?
No, there are no public announcements of SASSA issuing mass refunds or bonuses.
Q5. Where can I report a scammer?
Visit cybercrime.org.za or report it to your nearest police station under cyberfraud.