The Patterns Behind Cross-Border Fraud – and the Habits That Stop It
Why This Group Is Targeted
Fraud follows money, and it follows circumstances. South Africans moving funds across borders sit at the intersection of both, which is why this community is targeted so persistently.
The reasons are not complicated. The amounts involved are often large – retirement fund proceeds, property sale proceeds, inheritances, the accumulated savings of a working life. The transactions are unfamiliar, because most people do this once or twice in a lifetime and have no baseline for what normal looks like. The processes genuinely are complex, so a fraudulent request for unusual documentation or an unexpected account change does not stand out the way it should. And the participants are physically distant from each other, communicating almost entirely by email, which removes the informal verification that happens naturally when people can walk into a branch.
Add urgency to that mixture – a settlement date, a deadline, a family situation – and you have close to ideal conditions for fraud.
At FinSelect we hear about these situations regularly, and the thing that stays with us is how rarely the victims were careless people. They were ordinary, competent adults dealing with an unfamiliar process under pressure. That is precisely the point.
Impersonation: The Most Common Pattern
The dominant category of cross-border fraud is impersonation. Somebody presents themselves as an organisation you already trust.
It may appear to be your bank, your insurer, your investment platform, SARS, a conveyancer, or a financial services provider you are already dealing with. The communication looks correct. Logos are right, the tone is professional, the reference numbers look plausible, and the email address is a near-match for the genuine one – a letter transposed, a domain that differs by a single character, a hyphen where there should not be one.
The request is almost always one of two things. Either it asks you to confirm details by following a link and entering credentials, or it advises you that banking details have changed and provides new ones.
The second version is the expensive one, because the money goes directly to the fraudster rather than through the intermediate step of stealing your access first.
The defence is unglamorous and completely effective. Never act on banking details supplied in an email or message. Not once, not for anybody, regardless of how legitimate the communication appears. Verify every account detail by contacting the organisation on a number you already had – from a previous statement, from their official website which you navigated to yourself, from a business card – and never on a number contained in the message that prompted the concern.
Interception: When the Email Is Real Until It Is Not
A more sophisticated version does not create a fake organisation. It inserts itself into a genuine conversation.
If a fraudster gains access to an email account belonging to any party in a transaction – yours, a conveyancer’s, an administrator’s, an agent’s – they can read the entire thread. They know the amounts, the parties, the timeline and the tone. They wait until the moment funds are due to move, and then send a message from the genuine account, or from a lookalike, advising that the payment details have changed.
Nothing about the message looks wrong, because in terms of context it is entirely correct. It references the right property, the right amount, the right people. It arrives at exactly the moment such a message would be expected.
This is why the verification habit has to be unconditional rather than triggered by suspicion. You are not looking for a message that looks wrong. You are treating every set of banking details, in every transaction, as something to be confirmed by voice on an independently obtained number before any money moves. A thirty-second call is the entire defence.
It is also worth being alert to a change of details late in a process. Legitimate parties occasionally do change banking details, but it is uncommon, and a late change should always trigger verification rather than convenience.
The Rate That Is Too Good
A different category targets people shopping for a better exchange rate, which is a sensible thing to be doing and therefore an effective thing to exploit.
The offer is a rate noticeably better than anything the market supports. Sometimes it comes with an explanation – special arrangements, wholesale access, a particular relationship. Sometimes it is presented as a limited opportunity requiring a quick decision.
There is no legitimate mechanism by which a provider offers a rate meaningfully better than the market. Foreign exchange margins are thin and competitive. A rate that stands out dramatically is not a bargain that others have missed. It is bait.
The same applies to investment opportunities marketed to expats – offshore products with unusual returns, currency arbitrage schemes, structures promising to move money more efficiently than the regulated channels allow. If a proposition depends on you not asking why it is possible, that is the question to ask.
Time pressure is the reliable indicator across all of these. Legitimate financial arrangements survive a delay of two days while you check. Fraudulent ones do not, which is why urgency is manufactured so consistently.
Unlicensed Operators and Informal Channels
Not everything in this category is outright fraud. Some of it is people operating outside the regulatory framework, which exposes you to loss even where nobody intended to steal anything.
Informal transfer arrangements exist in every expat community. Somebody knows somebody who can move money more cheaply, or who has rands in South Africa and needs foreign currency and proposes an offsetting arrangement. These schemes trade on community trust and on the accurate observation that formal channels involve paperwork.
The problem is that if something goes wrong – the counterparty becomes insolvent, disappears, or is themselves defrauded – you have no recourse. There is no regulator to complain to, no compensation framework, and no legal structure holding your funds separately from the operator’s own money. There may also be exchange control implications for you, not just for them.
Licensing exists precisely so that the money moving through a business is protected by rules that apply whether or not the people involved are honest. Checking that a provider is properly authorised takes a few minutes and is the single most important piece of due diligence available to you.
Why Deceased Estates Are Targeted Specifically
There is one situation that attracts fraud more reliably than any other, and it deserves separate mention because the people involved are least able to protect themselves.
When somebody dies and the heirs are living abroad, several conditions arrive at once. There is a substantial sum of money with a known payment date. There are multiple parties who have never met – an executor, attorneys, banks, beneficiaries in different countries. Communication runs almost entirely by email between people with no established relationship. The beneficiaries are grieving, frequently jetlagged, and dealing with a legal process they have never encountered before and cannot easily evaluate.
Fraudsters understand all of this. The typical approach is a message, apparently from the executor or the attorneys, advising that beneficiary banking details need to be confirmed or that they have changed. Because the beneficiary genuinely is expecting correspondence about exactly this, and genuinely does not know what the normal process looks like, the request does not register as unusual.
The protection is the same as everywhere else, applied more strictly rather than less. Every party to an estate should establish, at the outset, a verified voice contact for every other party, and no payment instruction should ever be actioned on the basis of an email alone. If you are a beneficiary abroad, ask the executor directly at the start of the process how banking details will be confirmed and agree the method between you before it is needed.
Grief is not the state in which to be making judgement calls about whether an email looks slightly wrong. Set the verification rule up front, while nobody is under pressure, and follow it mechanically afterwards.
The Habits That Actually Work
Effective protection is behavioural rather than technical, and it comes down to a small number of habits applied without exception.
Verify every set of banking details by voice, on a number you sourced independently, every time. Treat any change of details, from anyone, at any stage, as requiring fresh verification. Never follow a link in an unexpected message to access a financial account – navigate there yourself. Confirm that any provider you use is licensed and check it directly with the regulator rather than accepting a claim on a website. Slow down when somebody creates urgency, because urgency is a tool. And for large transfers, consider sending a small test amount first and confirming receipt by phone before the balance follows.
None of this is sophisticated. All of it works, and it works specifically because fraud in this space depends on people not doing routine verification during an unusual and stressful transaction.
Deal With People Who Are Accountable For Your Money
At FinSelect, we are an authorised financial services provider, licensed and regulated, and everything we do sits inside that framework. That is not a marketing line. It is the structural reason your funds are protected when they move through us.
We will never send you banking details in an email and ask you to act on them without confirmation, and we will never ask you for passwords or login credentials. If you receive anything purporting to be from us that asks for either, contact us on a number you already have before you respond to it. We would far rather field a call about a message that turns out to be genuine than deal with the alternative.
Beyond that, working with a provider who knows your matter means somebody notices when something is out of pattern – an unexpected change of instruction, a request that does not fit the transaction, a detail that does not match what we already hold. That contextual knowledge catches things that no individual check will.
If you are moving a significant amount and you are not entirely confident about who you are dealing with, stop and verify before you send anything.
Contact Rudi at FinSelect today. Email rudi.stander@finselect.co.nz or DM us. Two days of checking is cheaper than any amount of regret.
Leave your details below and we’ll get in touch for a free consultation.
