Skip to content


Online Banking Scam A “World First”: Expert

A R7m (US $911,331) Internet banking scam in South Africa, which experts say may only be the tip of the iceberg, represented a world first in breaching SMS-based based banking integrity.

Vodacom technician Mbokodana Christopher Khoza has appeared in the Johannesburg Commercial Crimes Court on charges of fraud and contravening the Electronic Communications Act. Khoza is allegedly at the center of the scam, which intercepts SMS messages from banks to customers on the Vodacom network.

The case had to postponed by seven days after it was revealed that another R3.3m (US $429,653) had been removed from accounts.

The security breach was bound to happen “sooner or later,” said Costin Raiu, chief security expert at Kaspersky Lab, a company headquartered in Moscow which has offices worldwide. “This incident is, as far as we know, a world first”, he explained. “It only enforces my opinion that SMS-based authentication, while providing a bit better security than simple username-password combos, is outdated and no longer sufficient by itself.”

Vodacom spokesperson Dot Field says additional security measures have been implemented,to ensure that this type of fraud does not happen again. “Vodacom is working closely with the SAPS and Sabric (South African Banking Risk Information Centre),” Field said, adding that due to the immediacy of online banking, customers should keep their online banking details secure from any third party.

Related posts:

  1. World Cup Terror Threat “Serious”: US Expert
  2. R. Kelly In South Africa Swindle Scam
  3. UK Warns World Cup Fans Of Race War Fears
  4. Obama To Attend 2010 World Cup
  5. World Cup Trophies Stolen In South Africa

Posted in Hello, Africa!.

Tagged with , , , , .


One Response

Stay in touch with the conversation, subscribe to the RSS feed for comments on this post.

Continuing the Discussion

  1. ZION SECURITY linked to this post on July 23, 2009

    Stealing SMS one-time passwords: http://bit.ly/1lL6Yi

You must be logged in to post a comment.