Phishing is one of the most common forms of cybercrime affecting South Africans today. It is not a technical hack in the traditional sense. It is deception. It relies on trust, urgency and familiarity to trick people into handing over sensitive information or money.
Phishing happens when criminals impersonate trusted organisations, public figures or institutions. They send emails, text messages, social media posts or even make phone calls that appear legitimate. The goal is simple. Get the recipient to click a link, open an attachment, share login details or make a payment.
At Scamtuition, the focus is prevention. The more people understand how phishing works, the less power it has.
The Case of Professor Tim Noakes and the Keto Gummy Scam
A clear South African example involved Professor Tim Noakes. Fraudsters created online advertisements promoting so-called keto gummies and weight loss products. These adverts falsely claimed endorsement by Professor Noakes and used his name and image without permission.
The advertisements looked convincing. They included fabricated quotes and professional branding. People were directed to purchase products that were never delivered. Neither Professor Noakes nor his foundation had any involvement in these products.
This case highlights two important phishing tactics. First, scammers hijack the credibility of respected public figures. Second, they create urgency and social proof to push people into making quick purchases.
The misuse of a trusted name creates a false sense of safety. That is precisely how phishing succeeds.
What Phishing Looks Like in Everyday Life
Phishing can appear in many forms:
- Emails claiming to be from banks asking you to verify account details.
- SMS messages stating your parcel cannot be delivered unless you click a link.
- Fake government notices threatening legal action unless you respond immediately.
- Social media adverts promoting miracle investments or health products endorsed by celebrities.
- Phone calls pretending to be from financial institutions requesting one time passwords.
South African authorities regularly warn about fake court summons, fraudulent tender communications and impersonation of government departments. These messages are designed to alarm recipients into acting quickly without verifying authenticity.
A key principle to remember is this: legitimate organisations do not ask for sensitive personal information through unsolicited messages.
Why Phishing Works
Phishing is a form of social engineering. It manipulates normal human behaviour.
It plays on fear.
It plays on urgency.
It plays on trust.
A message may say your account will be suspended unless you act now. It may claim you have won a prize but must confirm details immediately. It may suggest a legal issue requiring urgent attention.
When people feel rushed or anxious, they are more likely to click before thinking. That moment of haste is what scammers rely on.
Phishing has become more sophisticated. Criminals now copy official logos, website layouts and email formatting with high accuracy. Some messages are personalised using information gathered from social media or previous data leaks.
The deception can be convincing. That is why education matters.
Red Flags That Should Trigger Caution
There are consistent warning signs that help identify phishing attempts:
- Requests for passwords, one time pins or banking details.
- Links that look unusual or slightly misspelled.
- Messages creating panic or urgency.
- Unexpected attachments.
- Communication from a known organisation but sent from an unfamiliar email address.
- Advertisements using celebrity endorsements that cannot be verified through official channels.
If something feels rushed, secretive or threatening, pause. Phishing depends on speed. Safety depends on slowing down.
Practical Protection Steps
Building scam intuition requires deliberate habits.
- Do not click links in unsolicited emails or SMS messages. Instead, type the official website address directly into your browser.
- Never share one time passwords or authentication codes with anyone.
- Verify health products, investments or endorsements by checking official websites or verified social media accounts.
- Keep devices updated with security patches.
- Enable multi factor authentication where possible.
- Discuss suspicious messages with someone you trust before responding.
A few minutes of verification can prevent months of financial and emotional recovery.
Reporting Matters
When phishing attempts are identified, reporting them helps protect others. Suspicious emails claiming to be from banks or government departments should be forwarded to the legitimate organisation for investigation. Banks and public institutions have dedicated fraud reporting channels.
Reporting disrupts scam networks and limits their reach.
A Final Word
Phishing is not about intelligence. It is about manipulation. Well educated, capable people fall victim because the deception is crafted carefully and delivered at the right emotional moment.
The aim of Scamtuition is simple. Build awareness before loss. Teach people to recognise patterns. Encourage thoughtful verification rather than reactive clicking.
When communities understand how phishing works, scammers lose their advantage. Knowledge is not just power. It is protection.