How are tourists tricked in Cape Town? The 10 most common scams
May 26, 2026
The Top 10 Scams in Cape Town,
in plain English
Ten common scam patterns documented in central Cape Town. What each one looks like, where it tends to happen, and what the official numbers say.
How scams work in Cape Town
Cape Town’s city centre is a small area, about 1.6 square kilometres of restored old buildings, modern offices, museums, restaurants, and one famous street called Long Street. In a normal summer season around five million people walk through it. For almost all of them, Cape Town is exactly what the postcards promise: beautiful, walkable, and very friendly.
But a small, organised group of criminals sees those five million visitors as a market. The scams they run fall into two clear groups, and it helps to keep them separate in your head.
The first group is in-person scams. These happen face to face on the street, at the airport, or near tourist hot spots. Fake airport drivers, fake “officers” demanding fees, smash-and-grab teams at traffic lights. (“Smash-and-grab” means criminals breaking your car window at a red light to grab a phone or bag.) These scams are visible and they make the news, but they are usually small in money terms compared with the digital category.
The second group is digital scams. These happen on your phone or computer and they don’t care where in the world you are. Fake bank messages, fake tax emails, romance fraud on dating apps, and the very expensive SIM swap attack. The two groups now overlap. A single victim can be hit by both inside 48 hours: a stolen card in the morning, a SIM-swap drain that night using the personal details the criminals already collected.
Long Street and the surrounding City Bowl, the heart of in-person scam activity in central Cape Town.
The numbers, in plain English
Scams in South Africa are big business. Three official bodies track most of the losses. They use long names and lots of abbreviations, so here is a quick guide before we look at the chart.
COMRiC is the Communications Risk Information Centre. It is the same idea but for the mobile-phone industry: Vodacom, MTN, Cell C and Telkom report SIM-swap and other phone fraud cases here.
SAPS is the South African Police Service, the national police force.
Pulling those numbers together, South Africans lost more than R7 billion in 2024 across the scam categories the industry actively tracks. That is about €360 million, or US$390 million. The real total is almost certainly higher because many scams (romance fraud especially) go unreported out of embarrassment.
Where the money goes: SA scam losses by type
Reported annual losses, latest available year. Bars show how much money each scam takes from South Africans in a year.
Sources: SABRIC (banking), COMRiC (mobile networks), CSIR (romance fraud, conservative estimate). Romance-scam totals are widely believed to be a fraction of the real figure because victims are embarrassed to report.
What does this tell a visitor? Two things. One: the scams that make the headlines (the airport overcharge, the cloned card) are real but small compared with the ones that move money out of bank accounts overnight. Two: the most damaging scams reach you through your phone, not through a face on the street. If you protect your phone, you have already cut your risk in half.
Why the city centre is getting safer
Inside the official city centre area, the news is genuinely good. To understand it, you only need one more name.
The CCID’s own numbers show that, between January and mid-September of 2024 and the same period in 2025, total reported incidents in the city centre dropped by about 35 percent. Card-fraud incidents specifically dropped from 116 to 51, a 56 percent fall.
Reported incidents in the city centre, 2024 vs 2025
All incidents reported to the CCID 24-hour control room. Jan 1 to Sept 15 each year.
Source: Cape Town Central City Improvement District (CCID), October 2025 press release.
The Top 10 scams, ranked
The ranking below is built from three things: how often each pattern is reported, how much money it typically takes per case, and how likely a visitor or new resident is to encounter it. Each card has a coloured edge: red for higher risk, amber for moderate, and green for lower risk in central Cape Town. Every entry ends with a “Defence” box describing the standard way to avoid it.
The fake airport ride
Someone in arrivals offers you a “taxi” or claims to be your Uber driver. They are neither.
This is the scam most likely to hit a first-time visitor. You walk out of the arrivals hall, tired after a long flight, and a friendly man holds out a phone showing your name on what looks like an Uber screen. Or he tells you he is a registered taxi driver and offers a fixed price. Once you are in the car the price multiplies, sometimes by ten, sometimes by a hundred, and the driver will not let you out until you tap your card on a portable machine that quietly charges far more than the displayed amount.
The most extreme case reported in late 2025 saw a single visitor charged about €2,000 (around R40,000) for the 18-minute trip from the airport to the city centre. The case made it onto a US State Department travel advisory in February 2026.
SIM-swap and phone-number theft
Your phone goes dead. A few hours later your bank account is empty.
This is the scam in the chart above, the one taking R5.3 billion a year out of South Africans’ pockets. The criminals never meet you. They collect bits of your personal information from data leaks, dark-web markets, or earlier phishing messages. Then they walk into a phone shop, or call the network’s customer service, pretend to be you, and ask for a new SIM card. Once the request goes through, your phone number now belongs to their SIM. They put it in their phone, log into your online banking, and ask the bank to send the one-time-password.
South Africa’s mobile networks count SIM-swap fraud as roughly 60 percent of all mobile-banking fraud. Visitors who buy a local SIM card and link it to mobile-banking are exposed too, although they are not the main target.
The fake “walking permit” and card-cloning hustle
A man in a high-visibility vest stops you to ask for a “permit fee”. He has a card machine.
A man in a fluorescent vest, sometimes carrying a clipboard or wearing what looks like a uniform, stops a tourist (often along the Sea Point promenade) and says they need a permit to walk in the area. He offers to take payment by card. The small fee, often around R200, is real but irrelevant. The card machine is rigged. It copies the card details and PIN; within hours the same card is used at ATMs or online to drain the account. Read our full breakdown of the walking-permit scam →
Bank impersonation, phishing and “QR-code phishing”
An email from “your bank” says your account will be locked unless you click a link. The email is fake.
South Africa is one of the most-attacked countries in the world for phishing. Mimecast’s industry survey found that 84 percent of South African organisations were targeted by phishing or impersonation in a single year. The scams here go further than abroad: criminals send fake WhatsApp messages claiming to be a senior boss demanding an urgent payment, fake bank “fraud department” phone calls asking you to read back the very code the bank just sent you, and a fast-growing version called quishing.
Quishing is the same idea, but the trap is a QR code. The scammer’s poster or sticker shows a QR code that takes your phone to a fake login page. It is becoming common on parking meters and “give a tip” signs.
Smash-and-grab at traffic lights
A side window shatters at a red light. Bag, phone or laptop on the seat is gone in three seconds.
Between July 2024 and May 2025, Cape Town’s Metro Police CCTV cameras detected 215 smash-and-grab incidents, and the city’s own safety officials say the real number is much higher because most happen outside camera coverage. The worst stretch is the corridor between Bonteheuwel and Langa, but Foreshore, Milnerton, Epping, Elsies River and Philippi are all consistently hot. The targets are bags, laptops and phones on the passenger seat. The window glass is gone in two seconds.
The fake property listing (Airbnb / rental scam)
A beautiful Camps Bay apartment for half the normal price. It does not exist.
The scammer copies real photos and a real address from another listing and puts it up at a suspiciously low price. The victim asks to book. The “host” agrees, but says the booking platform is “down” and asks for the deposit to be paid by bank transfer. The money goes, the apartment turns out to be already occupied or non-existent, and the host disappears. The same trick targets long-term rentals: a R12,000-a-month flat advertised at R7,000, with a request for two months’ rent up front.
The crypto “guaranteed return” scam
A new online friend explains how they made 30 percent a month in Bitcoin. So can you.
South Africa was home to two of the biggest crypto Ponzi collapses in world history. Mirror Trading International took roughly R30 billion of investors’ Bitcoin before collapsing in 2020. Africrypt vanished in 2021 with around 69,000 Bitcoin, worth about US$3.6 billion at the time. Today the scam is smaller per case but much more common, and now it usually comes through a personal contact on a dating app, a WhatsApp group, or a social-media direct message.
Romance fraud and “pig-butchering” scams
A new partner you have only ever spoken to online asks for money. There is always a good reason.
Romance fraud relies on emotional trust rather than technical tricks, and it tends to play out over weeks or months rather than minutes. The scammer spends that time building a relationship before any money is mentioned. Then the requests start: a medical emergency, a customs fee on a delivered gift, a stuck investment account that just needs one more transfer to unlock. South African researchers estimate annual romance-fraud losses at at least R125 million, but the real number is almost certainly higher because most victims, mostly women aged 50 and over, never report what happened. The newer “pig-butchering” version (the name comes from the criminals’ own slang) combines romance with crypto investment.
Tax-office (SARS) impersonation
An email or SMS says you owe tax and must pay today. The email looks official. It is not.
SARS is the South African Revenue Service, the country’s tax office. Criminals send near-weekly fake messages pretending to be SARS: “Final Demand” PDFs, “Settlement Notification” emails, and “Letter of Demand” links that take the victim to a fake login page. SARS itself estimates that South Africans lose roughly R200 million a year to this single category. The 2024 figure was a 50 percent increase on the year before.
Phishing, as a reminder, is a fake message pretending to be from a trusted organisation. SARS phishing is simply phishing with a SARS uniform on.
Street hustles on Long Street and around tourist hot-spots
The baby-formula request, the distraction pickpocket, the over-priced bar tab.
This is the smallest-money category on the list, but the most common to actually run into on the street. It includes the baby-formula scam: a friendly stranger asks you to buy formula or nappies for their child at a nearby shop, then quietly returns the formula for a cash refund. The distraction pickpocket: a chatty stranger keeps you busy while a partner lifts your phone or wallet. The hostess-bar trap: a stranger invites you to a bar where drinks are loaded onto a tab and a large group of intimidating staff appears when you ask for the bill. And the persistent drug-dealer hustle on Long Street after dark, which long-time visitors describe as the single most common nuisance in the area.
Where and when scams happen
Most scams are not random. They follow predictable patterns of place and time. Here is a quick guide to the patterns that matter.
Time-of-day pattern
Pickpocketing peaks during the day in busy markets and outside major attractions. Smash-and-grab peaks in late afternoon and early evening, when drivers are tired and distracted. Drug-dealer hustling on Long Street and the bar-tab trap peak after 10pm. Online scams have no time pattern at all: they come whenever you are looking at your phone, with a small spike on payday weekends and tax-return season (June and July in South Africa).
Who scammers go after most
Different scams target different people. Knowing where you sit on the map helps you prioritise.
First-time visitors are the prime target for the airport scam, the walking-permit scam, the baby-formula hustle, and the over-priced bar tab. The shared feature is unfamiliarity: someone fresh off the plane has no way to know that walking permits do not exist or that the airport pickup is in Parkade 1.
Older residents, especially those over 50, are the prime target for romance fraud, crypto scams and tax-office phishing. The shared feature here is trust: scammers spend more time on the setup with this group because the eventual payouts can be large.
Anyone with a local mobile number is exposed to SIM-swap fraud, the most expensive scam in the country. Tourists are not the main target, but anyone who buys a local SIM card and links it to mobile banking is in the same risk pool as everyone else.
Local businesses and their staff are targets for impersonation phishing, where an email or WhatsApp message arrives claiming to be from a boss demanding an urgent transfer.
How much each scam typically costs
The chart below shows the rough typical loss per case for each scam. Bars are drawn on a logarithmic scale: each step right is roughly ten times the previous one. The chart only shows ranges, because real losses vary widely.
Typical money lost per scam case
Logarithmic scale. Each bar shows the rough range of losses per single victim, not annual totals.
Sources: SABRIC, COMRiC, SAPS, CSIR, CCID, news reports 2024–2026. Ranges are typical, not maximum: individual cases at the top end have run much higher.
Habits that prevent most of these scams
The scams above share more habits in common than they look. A short list of everyday routines covers most of them. The most useful single one sits at the top.
Eight habits worth keeping
- If anyone is creating urgency, asking you for a payment, or asking you for a code, it is almost certainly a scam. Step back, slow down, and verify before doing anything. This one rule alone catches most of the scams on this page.
- Book your airport ride inside the Uber or Bolt app. Walk to Parkade 1. Match the number plate before you get in. Never accept a ride from someone who approaches you in the arrivals hall.
- No street in Cape Town requires a permit fee. Anyone in a vest demanding payment is a fraudster. Walk away.
- Activate SIM-swap protection on any South African mobile number you use. Phone Vodacom, MTN, Cell C or Telkom. It takes five minutes.
- Use your bank’s app with face or fingerprint login rather than SMS one-time-passwords wherever possible. Treat any unsolicited code request as fraud, even if the caller knows your name and ID number.
- Never pay a holiday booking outside the booking platform. The moment a host asks you to bank-transfer the deposit instead of pay through Airbnb or Booking.com, the booking is fake.
- Hide things in your car before you start the engine, not at the traffic light. Boot, not seat. Bag, laptop, phone, jacket. All out of sight.
- Treat any “guaranteed return” investment as a scam. Crypto especially. Check the FSCA register if in doubt.
What to do if you have been scammed
The first hour matters most. Banks can sometimes reverse fraudulent transfers if you call them very quickly. After 24 hours, recovery becomes much harder. The order below works in almost every case.
If money has just left your account. Phone your bank immediately. Every major South African bank (Standard Bank, FNB, ABSA, Nedbank, Capitec, Investec) has a 24-hour fraud line printed on the back of every card. Tell them exactly what happened. Ask them to freeze the account and try to reverse the transaction.
If your phone signal has just died unexpectedly. Treat this as a likely SIM swap. Get to Wi-Fi or borrow a phone, then call your bank straight away and freeze online banking. Then phone your mobile network and demand they reverse the SIM transfer.
If your card was cloned or stolen. Cancel the card through your banking app or fraud line. Order a new one. Most banks deliver to your hotel within 24 hours in Cape Town.
Report the scam. Phone SAPS Crime Stop on 08600 10111 or the national emergency line on 10111. For incidents in the city centre, also call the CCID control room on 082 415 7127. Email phishing attempts to phishing@sars.gov.za if they pretended to be the tax office, or to your bank’s fraud-reporting address otherwise.
If you are a tourist and money cannot be recovered. Get a police case number (you need it for the insurance claim). Most travel-insurance policies cover the value of a single scam up to a stated limit, often a few thousand Euro. Tell your bank back home as well: in some cases the home bank will reverse a fraudulent transaction even when the South African bank cannot.
The verdict
Cape Town is a safer city today than it was three years ago, and the city-centre data proves it. Reported incidents are down 35 percent on the year. The visible private security, the CCTV cameras and the rapid-response control room are doing real work.
But the scams have not disappeared. They have shifted shape. The face-to-face hustle is being replaced by a quieter, more profitable digital theft. A single SIM-swap attack can take more money than a year of street-level scams put together.
Taking all of this into account, the overall risk score for central Cape Town comes out at 6.5 out of 10. That puts it in the moderate band on our internal scale. Most visitors will leave with nothing worse than a story about a friendly stranger on Long Street trying the baby-formula trick. A smaller number will lose larger sums to a SIM-swap or a fake e-hailing ride. The gap between those two outcomes is almost entirely the eight habits in the section above.
Three patterns account for almost all visitor losses: the fake airport ride, smash-and-grab in a hire car, and phishing on your phone. Account for those three and the trip will usually be uneventful in the scam sense.
Activate SIM-swap protection on day one. Use your bank app login, not SMS codes. Be ruthless about any “guaranteed return” investment offered through a personal contact.
Romance fraud and impersonation scams now move more money than physical robbery. Talk to elderly relatives about both. Verify any “boss” WhatsApp request by phone.
Common questions, answered
Is Cape Town safe for tourists in 2026?
For most prepared visitors, yes. Daylight hours in the V&A Waterfront, City Bowl, Atlantic Seaboard, wine farms and major attractions carry low scam risk. The two real exceptions are the airport on arrival (use the Uber or Bolt app, walk to Parkade 1) and your phone (treat any unsolicited code request as fraud). The most common visitor experience is a friendly trip with no incidents at all.
Are Uber and Bolt safe at Cape Town airport?
Yes, when used properly. Book the ride inside the app before you walk out of arrivals. Confirm the booking is live and the driver, photo and number plate match what the app shows. The airport pickup zone is in Parkade 1, not on the curb at arrivals. Anyone who approaches you in the arrivals hall claiming to be your driver is a scammer.
What is a SIM swap and why is it so expensive?
A SIM swap is when criminals trick your mobile-phone company into moving your phone number onto a new SIM card they own. Once the swap goes through, every banking text message and one-time-password code arrives on their phone instead of yours. They use those codes to drain your bank accounts. South African networks count SIM-swap fraud as roughly 60 percent of all mobile-banking fraud, costing about R5.3 billion a year nationwide. Activate SIM-swap protection on your account: it is free and takes five minutes.
Is it safe to carry a card in Cape Town, or should I use cash?
Card is safer than cash for most situations. Tap-to-pay with a phone or watch is safer still, because the card details never leave the device. Use ATMs only at well-lit, busy locations (inside a shopping centre rather than on the street). If anyone in a vest stops you on the street and asks to take payment by card, walk away: there is no legitimate situation where this happens.
Can I trust an Airbnb listing in Cape Town?
Yes, as long as you book and pay inside the Airbnb (or Booking.com) platform. The platform handles the money, holds the deposit, and refunds you if the listing is fake. The fraud risk only appears when someone asks you to send money outside the app: by bank transfer, EFT, or a different payment service. Refuse, and the booking is safe.
What is a Ponzi scheme?
A Ponzi scheme is a fake investment business. The people running it use money from new investors to pay false “returns” to earlier investors. There is no real underlying business making money. The scheme only works while new victims keep joining. The moment new money slows down, the entire structure collapses and almost everyone loses what they put in. Mirror Trading International in 2020 and Africrypt in 2021 are two of the largest in world history, both based in South Africa.
If I am scammed, can I get my money back?
Sometimes, if you act in the first hour. Phone your bank’s 24-hour fraud line immediately and ask them to reverse the transaction. Many fraudulent transfers can be reversed within the first few hours but not after that. Also report the scam to the police on 10111 and get a case number for your insurance claim. Travel insurance often covers a single scam up to a stated limit, often a few thousand Euro.
What is the one phone number I should save before I arrive?
Save two. 10111 is the national police emergency line (the equivalent of 999 or 911). 082 415 7127 is the city centre’s private 24-hour control room (the CCID); they will dispatch the nearest patrol within seconds for an incident anywhere in the central business district.
Latest news
US State Department issues advisory after €2,000 airport scam
The United States State Department added Cape Town International Airport to its February 2026 travel advisory, citing a documented incident where a single visitor was charged about €2,000 for an 18-minute trip from arrivals to the city centre by a fake e-hailing driver.
Source: US State Department travel advisory, Times LiveCCID reports 35 percent drop in city-centre incidents
The Cape Town Central City Improvement District released figures showing total reported incidents fell from 1,186 in the first nine months of 2024 to 773 in the same period of 2025. Card-fraud incidents fell from 116 to 51, a 56 percent drop attributed to CCTV-led monitoring.
Source: CCID press release, October 2025Fake walking-permit scam moves from CBD to Sea Point
Local residents reported that the fake “walking permit” card-cloning hustle, previously concentrated on Greenmarket Square, has shifted to the Sea Point promenade where private-security coverage is thinner.
Source: IOL Cape Argus, Sea Point Community Police ForumSABRIC reports digital banking fraud up 86 percent year-on-year
The South African Banking Risk Information Centre published its annual figures: digital banking fraud reached R1.888 billion in 2024, an 86 percent increase on the previous year. Mobile-app fraud accounted for more than R1.2 billion of the total.
Source: SABRIC annual fraud report 2024Metro Police CCTV detects 215 smash-and-grab incidents in 11 months
Between July 2024 and May 2025, Cape Town’s Metro Police camera network recorded 215 smash-and-grab incidents at intersections. Safety MMC Alderman JP Smith stated the real number is substantially higher because most incidents fall outside camera coverage.
Source: City of Cape Town Safety & Security press releaseCOMRiC: SIM-swap fraud now 60 percent of mobile-banking crime
The Communications Risk Information Centre released its 2025 sector report, putting annual SIM-swap losses at around R5.3 billion, or roughly US$291 million. The report calls SIM-swap protection “the single most effective consumer-level defence available”.
Source: COMRiC 2025 industry reportSARS publishes weekly scam alerts after R200m loss estimate
The South African Revenue Service began publishing weekly scam alerts on its own website. The 2024 estimated cost of SARS-impersonation phishing was around R200 million, a 50 percent increase on the previous year.
Source: sars.gov.za scam-alert archiveFBI Bitcoin-ATM scam alert names South Africa as transit market
The US Federal Bureau of Investigation issued a 2024 alert noting US$333 million lost to Bitcoin-ATM scams nationally, with South Africa’s under-regulated crypto-ATM network repeatedly used to launder proceeds.
Source: FBI public service announcement, TechCentralCape Town orientation video. For live safety updates inside the city centre, follow @CapeTownCCID on social media and save 082 415 7127 to your phone.
Where the numbers come from
This guide draws on official statistics, industry reports, news coverage and verified incidents reported between mid-2024 and early 2026.
Official statistics and industry bodies
- Cape Town Central City Improvement District (CCID) press releases and quarterly safety briefings, 2024–2025
- South African Banking Risk Information Centre (SABRIC) annual fraud reports, 2023 and 2024
- Communications Risk Information Centre (COMRiC) 2025 industry report on SIM-swap fraud
- South African Police Service (SAPS) quarterly crime statistics, accessed via crimehub.org and crimestatssa.com
- South African Revenue Service (SARS) scam-alert archive at sars.gov.za
- City of Cape Town Safety & Security, Metro Police CCTV detection reports
- Council for Scientific and Industrial Research (CSIR) 2022 study on romance fraud
News reporting and case documentation
- US State Department travel advisory, February 2026 (Cape Town airport e-hailing scam)
- Times Live coverage of the €2,000 airport-ride incident
- IOL Cape Argus and BusinessTech on Sea Point permit-scam migration
- TechCentral on Bitcoin-ATM and crypto-Ponzi scams
- Daily Maverick on Mirror Trading International and Africrypt collapses
- Mimecast 2023 State of Email Security report (South African phishing exposure)
Direct help and reporting
- SAPS national emergency: 10111
- SAPS Crime Stop: 08600 10111
- CCID 24-hour control room (city centre): 082 415 7127
- SARS phishing reports: phishing@sars.gov.za
- Bank fraud lines: printed on the back of every South African bank card