SASSA SRD Grant Fraud Explained: How It Works, Who's Affected, and What to Do

SASSA’s Social Relief of Distress (SRD) R370 grant reaches more than 8 million South Africans every month. It also attracts organised criminals who have stolen hundreds of millions of rands from the system — often without beneficiaries or even SASSA knowing, until it’s too late.

In late 2024, two Stellenbosch University computer science students discovered something alarming: 91% of all people born in February 2005 had active SRD grant applications — far higher than any plausible legitimate uptake. When they surveyed 60 people at their own campus, 56 had active SASSA applications in their names. None of them had applied.

This is not a small problem. This guide explains how the fraud works, what SASSA has done to fight it, and what to do if you are one of the affected South Africans.

How Big Is the Problem?

The scale of SASSA SRD fraud is difficult to fully measure — but the numbers that are confirmed are staggering:

The hacker group N4aughtySec publicly claimed to have stolen R175 million through TymeBank-linked SRD accounts — though GroundUp was unable to independently verify that specific figure.

How SASSA Grant Fraud Works

Step 1: Get Your ID Number

South African ID numbers are widely available through data breaches. Multiple large-scale leaks — from credit bureaux, government databases, and private companies — have put tens of millions of South African ID numbers into criminal hands. Your ID number is the single key to your SASSA profile.

Step 2: Get an Unregistered SIM Card

Millions of unregistered (un-RICA’d) SIM cards circulate through informal markets. Fraudsters buy these and use them to register a cellphone number on your SASSA profile — one they control, not you.

Step 3: Open a Fraudulent Bank Account

Until August 2024, both Shoprite Money Market and TymeBank allowed new SRD-linked accounts to be opened with minimal verification. Fraudsters opened accounts in victims’ names using stolen ID numbers. Both institutions have since tightened requirements and now demand biometric verification for any SRD-linked account.

Step 4: Create or Hijack a SASSA Application

Using the victim’s ID number, the fraudster either:

• Creates a new SRD application with the fraudulent phone number and bank account, or
• Accesses an existing legitimate beneficiary’s profile and changes the registered phone number and banking details — redirecting payments to the fraudster’s account

The old SASSA system had no password on beneficiary profiles. Access required only an ID number and a phone number. There was also no rate-limiting — one person with a laptop could run 700 ID queries per minute on SASSA’s public portal.

Step 5: Pass the Means Test

SASSA verifies each month that applicants earn below R625 per month. Fraudulent accounts registered to criminals show zero income by design — so they pass the means test easily every month.

Step 6: Withdraw and Disappear

Grant payments flow into the fraudulent bank account. The criminal withdraws cash and the victim either never knew they had an application, or finds their own legitimate grant payment has been redirected.

Internal Fraud: The R260 Million Scandal

Not all SASSA fraud comes from outside. In March 2025, eight SASSA officials in Johannesburg were arrested for a fraud scheme worth R260–R265 million. They had:

• Used their internal system access to create fictitious beneficiary accounts
• Issued physical SASSA bank cards for those fake accounts
• Used over 150 fraudulent SASSA and bank cards to withdraw cash at Shoprite supermarkets in Soweto and across Gauteng

The case was only uncovered after Shoprite workers noticed suspicious activity and alerted police. By May 2026, charges had escalated to over 1,300 counts of cybercrime, fraud, and theft. Five additional officials were dismissed in February 2026, with 43 total SASSA officials dismissed for fraud and corruption since the crackdown began, and 65 further cases still pending.

In June 2026, SASSA CEO Themba Matlou issued a public warning: officials who manually bypass the biometric verification system to approve fraudulent grants face immediate dismissal, criminal prosecution, and a court application to freeze their GEPF pension benefits.

What SASSA Has Fixed (and What Still Needs Work)

What Has Improved

Biometric verification rollout (from September 2025):
SASSA began mandatory facial and fingerprint biometric verification at all 432 offices. By March 2026, nearly 1 million beneficiaries had been verified. Grants are suspended after two months of non-compliance and lapse after a third month.

Five-layer security system:

1. Mandatory facial biometric verification for all SRD applicants
2. Quarterly cybersecurity audits
3. 24-hour security monitoring centre
4. Upgraded data encryption
5. Improved authentication protocols

Expanded data matching:
SASSA now cross-checks applicants against SARS, UIF, banks, credit bureaux, NSFAS, government payroll, and Correctional Services records monthly.

Banking partners tightened controls:
TymeBank and Shoprite Money Market now require biometric verification for any new SRD-linked account (from August 2024).

Fake website takedowns:
Of the 150+ fraudulent SASSA copycat sites identified, approximately 70 have been shut down as of mid-2026.

What Still Needs Work

The biometric crackdown has caught a real problem — but it has also created a new one. When the eKYC (Electronic Know Your Client) system was taken offline for “enhancements,” legitimate beneficiaries who were incorrectly flagged as fraudulent had no way to verify themselves. This catch-22 — suspended for suspected fraud, but unable to clear themselves because the verification system is offline — has been raised in Parliament’s Portfolio Committee on Social Development. #PayTheGrants advocacy group has documented dozens of cases of legitimate beneficiaries left without income because of this.

GroundUp’s tracking found that active fraudulent applications dropped by 73% between November 2024 and January 2025 after SASSA’s initial response — showing real progress, but also confirming the problem was far larger than officially acknowledged.

Is There a Fake SRD Application in Your Name?

You may have a fraudulent SRD application active in your name right now — even if you have never applied for the grant. Here is how to check:

1. Go to srd.sassa.gov.za
2. Enter your South African ID number and registered phone number
3. If a status shows up — and you never applied — a fraudulent application exists in your name

If you see “Referred” as your status, SASSA has flagged your application for potential fraud — but this can also happen to legitimate beneficiaries caught in the verification net.

What to Do If Your Grant Was Stolen or a Fake Application Exists

Step 1: Report the unauthorised phone number change

Go to srd.sassa.gov.za/sc19/update — SASSA’s dedicated form for reporting that your cellphone number was changed without your consent. This is the most common fraud method: the fraudster swaps your registered number for one they control.

Step 2: Request identity verification online

Log in at srd.sassa.gov.za, select “request identity verification,” and SASSA will send an SMS with a biometric verification link.

Step 3: Complete biometric verification in person

Visit any of the 432 SASSA offices with your original South African ID document. Biometric verification is free. Reinstated grants are paid within 5 working days for legitimate beneficiaries.

Step 4: Report to SAPS

Call 10111 or visit your nearest police station. Bring your ID and any documentation of the fraud. You will need a case number for follow-up.

Step 5: Report to SASSA directly

• Toll-free fraud hotline: 0800 60 10 11 (available Monday–Friday, 08:00–16:00)
• Email: [email protected]
• Include your ID number, what happened, and any dates you noticed the problem

Step 6: Contact #PayTheGrants if SASSA is unresponsive

The advocacy organisation #PayTheGrants assists beneficiaries stuck in the verification system. They have direct contacts at SASSA and can escalate cases that have fallen through the cracks.

How to Protect Yourself from SRD Grant Fraud

Protect your ID number:
Never share your South African ID number in WhatsApp groups, on social media, or with unofficial “SASSA helpers.” Your ID number alone is enough to access your SASSA profile.

Use only the official SASSA website:
The real SRD portal is srd.sassa.gov.za — verify the domain in your browser address bar before entering any information. Fraudulent copycat sites use addresses like srd-sassa.org.za or srdsassagov.co.za.

Check your SRD status regularly:
Even if you do not receive the grant and never applied, check periodically. If a status shows up, act immediately.

RICA your SIM card:
Make sure your active SIM cards are registered in your name. Unregistered SIM cards are one of the primary tools fraudsters use to intercept SASSA notifications.

Never pay anyone for SASSA services:
All SASSA applications, status checks, and verifications are free. Any person or website charging fees for SASSA services is committing fraud.

Report fake websites immediately:
If you find a website impersonating SASSA, report it to:

• SASSA fraud hotline: 0800 60 10 11
• SAPS Cybercrime unit
• The South African Banking Risk Information Centre (SABRIC): 0861 009 111

Frequently Asked Questions

How do I know if someone applied for SASSA in my name?

Check srd.sassa.gov.za with your ID number. If a grant status appears and you never applied, a fraudulent application exists in your name. Report it immediately using the SC19 form or by calling 0800 60 10 11.

Will SASSA reinstate my grant if I was a victim of fraud?

Yes — SASSA has confirmed that legitimate beneficiaries who complete biometric verification in person will have their payments reinstated within 5 working days.

What is the SASSA fraud hotline number?

The toll-free SASSA fraud hotline is 0800 60 10 11, available Monday to Friday, 08:00–16:00.

Can SASSA suspend my grant even if I did nothing wrong?

Yes. The biometric crackdown has incorrectly flagged some legitimate beneficiaries. If your grant is suspended and you believe it is an error, visit your nearest SASSA office immediately with your original ID for biometric verification.

Where do I report a fake SASSA website?

Report to the SASSA fraud hotline (0800 60 10 11), your nearest SAPS station, or email [email protected].

Sources

GroundUp — “We discovered flaws and massive fraud in SASSA’s SRD system” — 2024
GroundUp — “How the SRD grant system has been defrauded”
GroundUp — “SASSA is making progress against fraud, our study shows” — January 2025
GroundUp — “SASSA to suspend SRD grants where fraud is suspected”
GroundUp — “SASSA expects R341 million saving in lapsed grants” — 2025
IOL — “SASSA’s biometric rollout leaves thousands without grants amid fraud crackdown” — May 2026
IOL — “SASSA axes 43 officials as corruption purge intensifies” — May 2026
IOL — “More charges added as SASSA officials face over 1,300 counts in R260 million fraud scheme” — March 2025
EWN — “MPs applaud whistleblowers after arrests of SASSA employees for R265 million grant fraud scheme” — March 2025
The Witness — “SASSA suspends 68,000 grants in major biometric crackdown” — May 2026
gov.za — “SASSA welcomes arrest of suspects in fraud case” — February 2026
Daily Maverick — “Grants grow, SRD extended, and SASSA tightens checks to cut fraud” — February 2026
Moneyweb — “Massive fraud in SASSA’s grant system” — 2024