“FNB has warned that older South Africans, particularly people aged over 55 and 60, are increasingly being targeted by sophisticated banking fraudsters who exploit personal information, impersonate bank employees and pressure victims into authorising transactions. The bank says the response must combine stronger fraud-detection technology with customer education, independent verification of suspicious communications and practical safeguards for vulnerable customers.”
Sophisticated Scams Put Customer Security Under Pressure
South Africa’s banking sector is facing continuing challenges from criminals who use increasingly convincing methods to steal money and obtain confidential financial information. A warning from First National Bank (FNB) has highlighted the risks facing older customers, particularly those who have accumulated savings and assets over many years. The warning underlines the importance of stronger fraud prevention, improved digital awareness and cooperation between banks, customers and families.
According to a report published by BusinessTech on 13 October 2026, Christopher Boxall, FNB’s head of Card Transact, said older South Africans were increasingly being targeted because criminals could exploit both their financial resources and their trust in people who appear to hold authority. The report identifies people over 55, especially those over 60, as groups receiving particular attention from fraudsters. Boxall also indicated that the problem was affecting the broader banking industry rather than one institution alone.
The warning comes as digital banking becomes a routine part of everyday financial life. Mobile applications, online payments and electronic transfers offer convenience, but they also create opportunities for criminals to manipulate customers into revealing information or approving transactions themselves.
How Criminals Make Banking Scams More Convincing
Banking fraud has developed beyond poorly written messages and obviously suspicious websites. Criminals increasingly use personal information to construct believable stories that make their approaches appear legitimate.
Information obtained through data breaches, publicly available sources and other channels can help fraudsters build profiles of potential victims. A criminal may know a customer’s name, bank, telephone number or other details before making contact. By presenting this information confidently, the fraudster can create the impression of having access to an official banking system.
The next step is often a request for sensitive information. Victims may be asked to disclose card numbers, expiry dates, security codes, usernames or passwords. In other cases, criminals attempt to persuade customers to approve payments or authenticate transactions under the false belief that they are protecting their accounts.
This manipulation is particularly dangerous because the victim may believe the transaction is legitimate. Instead of breaking directly into a bank’s systems, the criminal persuades the account holder to provide the access or authorisation needed to move money.
The distinction matters. Customers may assume that a transaction is safe because it appears inside their banking application or because they initiated an action themselves. However, an apparently familiar process can still be part of a scam if the person directing it is dishonest.
Impersonation and Artificial Intelligence Increase the Threat
One of the tactics highlighted in the FNB warning involves criminals pretending to represent a bank’s fraud department. They may contact a customer claiming that unusual activity has been detected and that immediate action is necessary to protect the account.
The message creates fear and urgency. A customer who believes money is about to disappear may respond without checking the caller’s identity. The supposed bank employee can then request information, direct the victim to approve a transaction or encourage other actions that benefit the criminal.
Artificial intelligence is adding another dimension to these schemes. As the BusinessTech report explains, criminals can use technology to generate convincing communications at scale and create profiles, photographs or caller-identification details that make fraudulent approaches appear authentic.
Fake caller profiles, realistic messages and references to banking procedures can make verification more difficult. A professional tone, a familiar logo or a telephone display that resembles a bank’s contact details should therefore not be treated as conclusive proof of legitimacy.
Customers need to assess the request itself. A message that demands immediate payment, asks for confidential credentials or discourages independent verification deserves particular caution, even when it appears to come from a familiar institution.
Why Older Customers May Face Particular Risks
Older customers are not inherently less capable of managing their finances or using technology. However, individual circumstances can create vulnerabilities that fraudsters deliberately exploit.
Some older people hold substantial savings accumulated through employment, property ownership, pensions or long-term investments. Criminals may consider these accounts attractive targets because a successful fraud could produce a significant financial gain.
At the same time, some customers may be unfamiliar with newer digital security processes. They might not know which information a bank legitimately requires, how payment authorisations work or how to distinguish an authentic notification from a fraudulent one.
Trust can also be manipulated. A person who believes they are speaking to a bank official, police officer or other authority figure may feel obliged to cooperate. Fraudsters exploit this response by presenting themselves as knowledgeable professionals who are attempting to solve an urgent problem.
These risks differ from person to person. Age alone does not determine whether someone is vulnerable, and younger customers are also exposed to digital fraud. Nevertheless, targeted education can help address specific risks affecting customers who may be unfamiliar with current criminal techniques.
Banks Must Combine Technology With Education
FNB’s warning points to a two-part response: improving technical fraud controls and educating customers about how scams operate.
Technology can help banks identify unusual account activity, assess suspicious transactions and recognise behaviour that differs from a customer’s established spending patterns. Banks can also use risk models to determine when additional checks or warnings may be appropriate.
However, security systems cannot eliminate every threat. Criminals may persuade a legitimate account holder to approve a payment, making the transaction appear authorised even when the customer has been deceived.
For that reason, stronger technical controls need to be supported by clear communication. Customers should understand that genuine security procedures do not require them to disclose confidential passwords or card security codes to unsolicited callers.
Warnings are most useful when they explain specific situations. Rather than simply telling customers to avoid scams, banks can show examples of fraudulent messages, explain how impersonation works and demonstrate how to verify suspicious contact independently.
Banks can also make reporting procedures easier to find. Customers who suspect fraud should be able to locate official contact channels quickly, freeze affected cards where appropriate and receive clear instructions about the next steps.
Practical Steps Customers Can Take to Protect Their Money
Customers can reduce their exposure by adopting a few consistent security habits.
First, they should stop and verify any unexpected request involving money or confidential information. A caller who insists that a payment must be approved immediately is creating pressure that can prevent careful decision-making.
Second, customers should end suspicious calls and contact their bank through an independently verified official number or the bank’s established application. They should not rely solely on a telephone number, link or contact supplied during the suspicious interaction.
Third, passwords, PINs, one-time authentication codes and card security details should remain confidential. Customers should never share these credentials simply because someone claims to be investigating fraud.
Fourth, account holders should enable available security notifications, review transactions regularly and report unfamiliar activity as soon as possible. Card controls and transaction limits may also help reduce exposure, depending on the services offered by the bank.
Finally, customers should keep their devices and banking applications updated, use secure authentication methods and avoid accessing financial accounts through links in unexpected messages.
If money has already been transferred or information disclosed, the customer should contact the bank immediately using official channels. Prompt reporting can help the institution investigate, secure affected accounts and explain whether further steps are necessary. Customers should retain relevant messages and transaction details where possible.
Families Can Help Without Removing Independence
FNB’s advice also highlights the potential role of families in supporting older relatives. A practical first step is to discuss common fraud techniques before an incident occurs.
Families can agree on a simple verification arrangement, such as checking unexpected financial requests with a trusted relative through a separate communication channel. A private family safe word may provide an additional way to verify identity in situations where impersonation is suspected.
Where appropriate, relatives can help customers review account alerts, understand banking applications and locate official reporting channels. Card controls or reduced spending limits may also be considered when they suit the account holder’s needs and preferences.
Support should preserve dignity and independence. Older customers should remain involved in decisions about their finances, and confidential banking credentials should not be shared casually, even with relatives. The objective is to create a safer decision-making environment, not to assume that every older person needs someone else to manage their money.
Implications for South Africa’s Banking Industry
The warning has wider implications for South African banks as digital services become more central to payments and account management. Customer trust is essential to the industry’s operation, but that trust can be undermined when criminals successfully impersonate financial institutions.
Banks must continue investing in fraud monitoring, authentication, customer support and awareness campaigns. They also need to communicate clearly about legitimate procedures so that customers can recognise suspicious requests without becoming afraid of every banking interaction.
Financial institutions, telecommunications providers, regulators and law-enforcement agencies all have potential roles in addressing the problem. Sharing relevant threat information, investigating reported incidents and improving public education can help make fraud more difficult to carry out.
At the same time, customers need realistic expectations. No security measure guarantees complete protection, and a sophisticated scam may exploit human behaviour as well as technology. Effective prevention therefore depends on several layers of protection working together.
Conclusion: Vigilance Is Essential to Financial Security
FNB’s warning illustrates how modern banking fraud increasingly depends on deception rather than simply stealing physical cards or guessing passwords. Criminals may use personal information, impersonation and artificial intelligence to create convincing situations in which customers are pressured into revealing information or authorising payments.
Older South Africans deserve particular attention where targeted risks are identified, but fraud prevention remains a responsibility shared across the banking community. Banks must strengthen their systems and communicate clearly, while customers should verify unexpected requests and protect confidential information.
Families can contribute through respectful education and practical support. Ultimately, the most important response is to make verification a normal part of banking: stop when a request feels urgent, contact the institution independently and never allow pressure to replace careful judgement.
The central lesson is clear. Convenience and digital access are valuable, but protecting savings requires technology, education and informed decisions working together.
