The email lands in your inbox with the familiar WesBank logo at the top. The letterhead looks official, the language sounds professional, and the request seems urgent but reasonable. You’re about to click, about to respond, about to make that payment. But pause for a moment, because that split-second decision could cost you dearly.
In late 2024, almost 70% of South Africans were targeted by fraud, with victims typically losing more than R12,500. Digital banking fraud surged by 86 percent, costing the industry R1.888 billion
WesBank is alerting consumers to a concerning surge in letterhead-based scams, where fraudsters have mastered the art of deception. These criminals exploit the bank’s branding to create convincing, official-looking documents designed to trick customers into sharing personal information or transferring money to fraudulent accounts.
What makes these scams particularly dangerous is their sophistication. They appear legitimate, sound urgent, and feel personalised, often targeting customers with existing or previous vehicle finance agreements. The fraudsters know exactly when you’re most vulnerable, what language will create panic, and how to make their forgeries look authentic enough to fool even cautious consumers.
Fraudsters are employing a range of tactics to exploit unsuspecting customers, including:
- Proof of payment scams involve fraudsters sending fake payment confirmations to trick sellers into releasing vehicles before verifying actual payment.
- Change of banking details fraud sees scammers posing as WesBank officials requesting customers update payment information to fraudulent accounts.
- Refund or overpayment scams claim customers have overpaid and require bank details to process a refund.
- Car sales-related scams target private sellers with fake financing approval letters, whilst vehicle finance arrears notices create panic by falsely claiming accounts are in arrears and demanding immediate payment. The criminals will then use fake legal action letters to threaten repossession or legal proceedings unless urgent payment is made.
- Account verification scams request customers verify sensitive information under the guise of security checks.
- Fake insurance or warranty add-ons pressure customers into purchasing non-existent additional cover through convincing but fraudulent communication.
Fraudsters strategically time their attacks to coincide with periods when consumers are most vulnerable or when legitimate communication from financial institutions is expected. These scams often appear after public holidays or year-end shutdowns, when consumers are financially stretched, shortly after a vehicle purchase, resale, or settlement, during periods of high fraud activity across the financial sector, or when customers naturally expect legitimate communication from their bank.
“These letterhead scams are becoming increasingly sophisticated, making it difficult for even vigilant consumers to distinguish between genuine and fraudulent communication,” says Lebogang Gaoaketse, Head of Marketing and Communication at WesBank. “Fraudsters invest considerable effort in replicating our branding, tone, and document formats to create convincing forgeries.”
According to WesBank’s ScamProof guide, several warning signs can help consumers identify fraudulent communication:
- Examine the sender’s email address carefully. Legitimate WesBank emails come from official domains. Fraudsters often use addresses that closely mimic official ones but contain subtle variations such as extra characters or different domain extensions.
- Poor spelling and grammar frequently appear in scam communications. Whilst legitimate institutions maintain high standards of written communication, fraudulent messages often contain errors, awkward phrasing, or inconsistent formatting.
- The tone of the message can reveal deception. Scam communications typically create unnecessary urgency, use aggressive or threatening language, or apply pressure for immediate action without allowing time for verification.
- Requests for sensitive information should raise immediate concerns. WesBank will never ask customers to share passwords, PINs, full banking details or one-time passwords via email or text message.
- Payment instructions directing funds to new or unusual accounts, particularly those requesting payment outside official channels, are clear indicators of fraud.
Gaoaketse emphasises the importance of verification: “We encourage all customers to pause before acting on any communication that requests payment, personal information or urgent action. Contact WesBank directly through our official channels to verify any communication you receive. Taking a few minutes to confirm authenticity could save you from significant financial loss and identity theft.”
If you receive suspicious communication claiming to be from WesBank, do not click on links, download attachments or provide any information. Instead, contact WesBank directly using the official contact details on their website at www.wesbank.co.za or call their customer service centre. Report suspicious emails or messages to WesBank immediately and verify all payment instructions independently before making any transactions. Trust your instincts; if something feels wrong or too urgent, it probably warrants further investigation. Remember, legitimate financial institutions will never pressure you into immediate action or request sensitive information through unsecured channels. When in doubt, verify directly through official channels. For more information on protecting yourself from scams, visit www.wesbank.co.za or download WesBank’s ScamProof guide.

