Cybercrime Hits SA Telecoms

Cybercrime South Africa Telecoms: R5.3 Billion Lost in One Year

Cybercrime and fraud cost South Africa’s telecommunications sector an estimated R5.3 billion in 2025, according to industry assessments that highlight the growing financial and operational strain digital crime is placing on one of the country’s most critical industries.

The figure was reported by Business Day and ITWeb, based on analysis from the Communication Risk Information Centre (COMRiC). COMRiC is an industry body established by major telecom operators to coordinate intelligence and responses to crime and security risks affecting the sector.

Telecommunications networks sit at the core of South Africa’s digital economy. They support mobile banking, online payments, government services, emergency communications, and day-to-day business operations. As a result, cybercrime targeting telecom operators has implications that extend far beyond individual companies, affecting consumers, financial institutions, and public trust in digital systems.

What the R5.3 Billion Figure Represents

According to industry reporting, the R5.3 billion estimate reflects fraud and cybercrime losses absorbed by telecom operators during 2025. This includes direct financial losses as well as costs associated with responding to cyber incidents.

These losses arise from a range of criminal activities, including:

Fraud exploiting telecom processes and customer verification systems
Cyber incidents that disrupt services or compromise systems
Expenditure related to investigations, remediation, and recovery
Losses linked to service outages, reputational harm, and customer impact

COMRiC’s findings indicate that cybercrime has become a persistent operational risk rather than an occasional disruption. The scale of losses reflects both the increasing sophistication of criminal networks and the strategic value of telecom infrastructure as a target.

Why Telecom Networks Are a Prime Target

Industry analysts note that telecom operators are particularly attractive to cybercriminals because of their role in digital identity and authentication. Mobile numbers are widely used for one-time passwords, account recovery, and verification across banking, social media, and government platforms.

When criminals gain control of a mobile number, they can often move laterally into multiple systems, amplifying the damage caused by a single breach. This has made SIM-related fraud and account takeovers a recurring concern across the sector.

COMRiC has warned that the telecoms industry faces a convergence of risks, including cybercrime, fraud, infrastructure vulnerability, and supply-chain exposure. Together, these risks pose a challenge not only to operators but to the stability of South Africa’s broader digital ecosystem.

Recent Incidents Underscore the Threat Landscape

Recent years have seen several cyber incidents involving South African telecom operators, underscoring the scale and complexity of the threat environment.

Industry reporting cited by Business Day and ITWeb refers to cases where operators have confirmed unauthorised access to customer data or experienced ransomware attacks affecting systems and operations. While operators have stressed that core network infrastructure remains secure, these incidents illustrate how peripheral systems and customer-facing platforms can still be exploited.

The cost of such incidents extends beyond immediate losses. Operators often face long-term expenses related to system upgrades, enhanced security measures, regulatory compliance, and customer support.

Industry Cooperation as a Defensive Strategy

COMRiC was established by South Africa’s major telecom operators to improve cooperation in addressing crime and security threats. Its members include leading mobile and fixed-line providers, reflecting a shared understanding that cybercrime is a collective challenge rather than a competitive issue.

According to industry leaders, improved information sharing and coordinated responses have helped reduce the potential severity of some incidents. However, COMRiC has cautioned that cooperation alone will not eliminate risk, particularly as cybercriminal tactics continue to evolve.

In its Telco Risk View for 2026, COMRiC warned that threats facing the sector are expected to intensify, driven by increased digital reliance, organised criminal activity, and the expanding use of mobile platforms for identity verification.

Implications for Consumers and the Wider Economy

Although the R5.3 billion figure reflects losses borne by telecom operators, the broader impact of cybercrime is felt across the economy.

Disruptions to telecom services can affect:

Banking and payment systems that rely on mobile authentication
Businesses dependent on reliable connectivity
Government services delivered through digital platforms
Consumers whose personal data or accounts may be compromised

For individuals, telecom-related cybercrime often manifests through fraud, account takeovers, or identity abuse. These incidents can lead to financial loss, long-term credit damage, and reduced confidence in digital services.

Public Awareness and Digital Risk

Cybersecurity specialists consistently point out that cybercrime rarely stems from a single failure. Instead, it often exploits a combination of technical weaknesses, procedural gaps, and human behaviour.

While telecom operators and regulators are responsible for securing infrastructure, industry observers note that public awareness of common online risks can influence the success rate of attacks that rely on social engineering rather than direct technical compromise.

In this context, independent online safety resources are sometimes referenced in industry discussions as part of broader efforts to improve digital literacy. One example is the Ubuntu Guard Cyber Toolkit (https://www.ubuntuguard.co.za/cyber-toolkit/index.html), a publicly available resource that consolidates information on common online risks and digital safety practices.

Such resources are not positioned as replacements for telecom security controls, banking safeguards, or regulatory oversight. Instead, they form part of a wider ecosystem of awareness initiatives aimed at reducing avoidable exposure to cybercrime.

Regulatory and Policy Considerations

The scale of losses reported for 2025 is likely to increase scrutiny from regulators and policymakers. Telecommunications are classified as critical infrastructure, and sustained cybercrime losses raise questions about resilience, oversight, and long-term risk management.

South Africa already has legal frameworks governing cybercrime and data protection. However, industry representatives argue that enforcement capacity, coordination, and cross-border cooperation remain ongoing challenges.

As digital services continue to expand, telecom operators are under increasing pressure to balance security investment with affordability and service availability.

What Happens Next

COMRiC’s outlook for 2026 suggests that cybercrime risks facing South Africa’s telecoms sector are unlikely to diminish in the near term. Organised criminal activity, rising digital dependence, and evolving attack methods continue to shape a complex risk environment.

For the industry, this means sustained investment in security, cooperation, and resilience. For consumers and businesses, it reinforces the importance of trust in the systems that underpin South Africa’s digital economy.

The R5.3 billion figure reported for 2025 serves as a clear indication that cybercrime in the telecoms sector is no longer a marginal issue. It is a structural risk with economic and social consequences that extend far beyond the industry itself.