How Scammers Are Evolving – and How to Stay a Step Ahead

Cybercrime on the Rise: How Scammers Are Evolving – and How to Stay a Step Ahead

From the borders of South Africa to across the globe, cybercriminals are exploiting every corner of the internet, targeting inboxes, businesses, and home users alike. Between 2023 and 2025, phishing and fraud cases surged to unprecedented levels, with South Africa ranking among the top phishing targets worldwide.

Digital banking fraud in South Africa jumped 45% in 2023, costing consumers and businesses more than R3.3 billion. Globally, online crime losses reached over $13.7 billion in 2024, illustrating that no one is immune.

The Scammer’s Toolkit: New Tricks, Old Targets

Phishing and Business Email Compromise

Phishing remains the most common cybercrime. Fake emails or texts now mimic legitimate brands convincingly, tricking even the most cautious users. Business Email Compromise (BEC) scams are equally dangerous, as criminals intercept invoices or impersonate executives to trick finance teams into transferring funds.

AI Scams and Deepfakes

AI technology has created more sophisticated scams. In early 2024, fraudsters cloned a finance officer’s voice and face in a live video call, tricking an employee into transferring millions. Experts warn such deepfake scams will become mainstream within the next two years.

“Phishing in South Africa is accelerating well beyond global trends… education is our best defence.”
— Tony Anscombe, Chief Security Evangelist at ESET

The Human Factor

Most scams succeed because of human error or trust. Whether it’s a hurried click, a missed verification, or a sense of urgency created by a scammer, awareness is crucial to prevention.

Protecting Yourself and Your Business

For Individuals

• Enable Multi-Factor Authentication (MFA) on all accounts.
• Think before clicking on links or attachments.
• Keep software and devices updated.
• Use strong, unique passwords.
• Monitor financial statements for suspicious activity.

For Businesses

• Train employees regularly to recognize phishing and BEC attempts.
• Secure email systems with SPF, DKIM, and DMARC protocols.
• Verify payment requests via multiple channels.
• Implement access controls for sensitive systems.
• Establish an incident response and recovery plan.

Awareness as the New Antivirus

The next generation of scams will blend technology and psychology. AI-driven scams will appear authentic and bypass traditional defenses. Awareness, vigilance, and employee education are now the most effective “antivirus” measures for both home users and businesses.