As online retail surges and FMCG margins thin, a different kind of disruption is scaling in the shadows, AI-driven fraud. From deepfake endorsements and cloned voices to counterfeit storefronts and loyalty scams, a new, faster breed of deception is testing South Africa’s digital trust at precisely the moment consumers move online.
A retail boom meets a trust shock
South Africa’s online retail market is finally hitting escape velocity. E-commerce sales reached roughly R71 billion in 2023 and are on track to capture around 10% of total retail by 2026 as Amazon’s local push, Mr D’s on-demand expansion, Takealot’s ecosystem and a swarm of specialist players reshape expectations for speed and convenience.
Logistics leaders warn of rising last-mile risk and rapidly escalating security costs as criminals follow the goods. That context matters, because retail’s next decade will be decided not only by who delivers fastest, but by who customers trust most.
Now the trust shock. South Africa has experienced one of the steepest global spikes in deepfake-linked fraud, with TransUnion reporting a 1,200% increase in cases in 2023. Deepfakes are no longer fringe curiosities, they are tools, woven into hybrid scams that blend AI voice or video with good old social engineering. Globally, deepfakes now account for an estimated 7% of fraud incidents, and half of businesses say they have encountered them.
Regulators are responding. In June, the FSCA issued a public warning about investment schemes using deepfake videos of well-known South Africans, urging the public to verify authorisations and avoid unsolicited offers.
Shortly after, the authority and media outlets flagged similar impersonation scams that misused the likenesses of business and political figures. This is not a retail-only problem, but retailers, with their direct-to-consumer channels, promo cycles and loyalty programmes, are an increasingly attractive target.
The new fraud stack hitting FMCG and retail
AI doesn’t invent fraud, it turbocharges it. The fastest-growing patterns now impacting retail and FMCG in South Africa include:
- Counterfeit storefronts and social pages, often with deepfake product videos or cloned voice-notes to “authenticate” the brand, then disappearing after payment. TransUnion highlights online retail among high-exposure sectors, with fake merchant accounts and scam fulfilment on the rise.
- Loyalty and promo abuse, bots and synthetic identities harvesting sign-up bonuses, exploiting coupon logic, or social-engineering contact centre agents to redeem points. South Africa’s leading chains have long warned customers about fake vouchers and job posts created to harvest personal data, a risk amplified by generative text and voice tools.
- Customer-service takeovers, where fraudsters mimic a retailer’s service agent… or impersonate a customer… to reset credentials, update delivery details or trigger refunds. TransUnion notes low identity-friction channels are being probed with deepfake voice and video to bypass routine checks.
- Executive deepfakes and BEC 2.0, where a fabricated video call or voice note from a “CEO” instructs urgent release of stock, gift card activation or supplier pre-payments. South African law firms and risk centres are warning clients that AI-assisted impersonation is now practical at scale.
- Last-mile manipulation, where syndicates surveil delivery routes and co-opt drivers, then use spoofed messages to reroute parcels. Logistics executives describe the cost of armed escorts and route hardening as “killing margins,” with an estimated 20 to 25 hijackings a day of delivery trucks and vans at times last year.
These threats are compounding an already expensive operating environment, power volatility, fuel costs, shrinkage and security. In other words, AI fraud is a force-multiplier for the risks retailers are already paying to manage.
The new fraud stack hitting FMCG and retail
- 1,200% the year-on-year surge in South African deepfake-linked fraud cases reported by TransUnion. Africa as a region has seen some of the world’s sharpest increases as tools proliferate and detection gaps persist.
- 7% share of global fraud incidents now linked to deepfakes, with audio and video impersonation rising fast. Only 44% of surveyed firms feel confident about detection.
- R3.3 billion to R2.7 billion, overall banking-sector financial crime losses fell in 2024 after industry countermeasures, yet digital banking incidents and losses still jumped, with 65.3% of all reported incidents in 2024 occurring via digital channels. The pattern is clear, fewer categories are shrinking, but AI-assisted digital fraud is expanding inside that total.
- E-commerce at R71 billion in 2023, with online share seen at ~10% by 2026, pulling more payments, deliveries and customer interactions into digital channels that fraudsters now mine with AI.
These datasets do not contradict each other, they map a transition. Banks have squeezed some legacy crime, while social-engineering and synthetic-media fraud grows in both frequency and cost.
Retail’s exposure map, where the attack surface is widening
Direct-To-Consumer Acceleration
FMCG brands now run their own stores, marketplaces and WhatsApp channels. That multiplies logins, tokens, promo codes and touchpoints that can be spoofed or scraped. As TransUnion notes, ecommerce is among the most exposed sectors in Africa precisely because identity checks are lighter and scale is the priority.
Loyalty Is A Soft Target
Points are cash-like assets. Synthetic identities and AI-written emails clean up grammar, mimic brand tone, and persuade agents to merge or transfer accounts. South African retailers have repeatedly warned against fake promotions and recruitment ads that harvest data under a brand’s logo.
Promotions And Creator Economy
As brands lean on influencers and short-form video, deepfake product endorsements are harder to spot. BusinessTech’s interview with TransUnion’s fraud lead notes retailers “have seen fake storefront scams,” and investment-style deepfakes have already exploited the likeness of public figures to gain credibility.
Last-Mile As A Profit Drain
Hijackings and stock theft add a visible tax to logistics. Companies are paying for escorts, hardened routing and insurance. “Spending an absolute fortune on security,” one courier CEO said… costs that “kill our margins.” Every rand diverted to armoured deliveries is a rand not spent on UX or fraud controls.
Retail’s exposure map, where the attack surface is widening
South Africa is not regulator-less. The Cybercrimes Act criminalises harmful data messages and certain online abuses. POPIA governs personal and biometric data, and the Information Regulator issues guidance and enforces compliance. In 2024, government also released a National AI Policy Framework for public comment to guide sector strategies. But there is still no deepfake-specific rulebook, and enforcement capacity is stretched.
In June, the FSCA took a strong stance, warning the public to verify authorisations and avoid unsolicited offers tied to deepfake videos. Several high-profile alerts followed as media and watchdogs flagged scams impersonating senior figures. This shows regulators can move fast, but also how quickly criminals pivot.
“To avoid unnecessary risk, the public should refrain from accepting financial advice, assistance, or investment offers from individuals or entities not authorised by the FSCA.”
Legal avenues exist to challenge deepfakes under privacy, identity and unlawful competition doctrines, and scholars have laid out civil and criminal remedies, but practical enforcement against fast-moving, cross-border actors remains difficult.
The economics of trust in South African retail
- Margin Compression. Fraud losses, chargebacks, takedowns and customer re-acquisition dominate CFO dashboards. A single viral deepfake promo can trigger thousands of calls, refunds or reputational damage, at a cost that never shows up in gross margin.
- Customer Hesitation. South Africans are digitally active, but the message from recent surveys is consistent, consumers will accept more friction for more security. This is an opportunity, and a warning.
- Capital Allocation. Investors reward predictable uptime, clean controls and low fraud. E-commerce platforms that can prove layered verification, rapid response and low loss rates will attract better partnerships, better payment terms and lower insurance premiums.
- Policy Credibility. Coherent AI policy, faster takedowns and coordinated law enforcement do not just protect consumers, they reduce a sovereignty discount that capital applies when digital trust is uncertain.
SABRIC’s latest annual data captures this pivot. Overall financial crime losses declined to R2.7 billion in 2024, yet digital banking incidents and losses increased materially, a sign that industry countermeasures are working in some places while AI-assisted fraud surges elsewhere.
What boards and executive teams should do next
Make Identity, Not Passwords, Your Moat
Adopt multi-factor verification with biometric liveness checks across customer onboarding, loyalty enrolment and agent tooling. Use step-up controls for high-risk actions like address changes, high-value refunds and gift-card activation.
Kill The Single Point of Failure
If an agent can be socially engineered, the system must not. Separate authorisation flows for returns, refunds and account merges. Record and audit risky actions.
Treat Generative Content As A Supply Chain Risk
Require creators and agencies to watermark originals, archive raw files and submit proof-of-origin. Build a takedown playbook with legal, PR and platform contacts pre-agreed.
Secure The Last Mile.
Geofence high-risk routes, limit change-of-address on in-flight orders and implement secure pickup with one-time tokens. Review driver comms. to prevent spoofed instructions.
Train For Deepfake Detection
Run red-team simulations that include fake CEO calls, cloned-voice refunds and counterfeit storefronts. Publish an internal “pause protocol” that empowers any employee to stop a suspicious transaction.
Share Intelligence
Join cross-industry fraud intel exchanges with banks, telcos and other retailers. The attacks are cross-platform, so must be the defence.
Align Legal And Policy Posture
Use the Cybercrimes Act and POPIA where applicable, pursue platform takedowns aggressively and contribute to AI policy consultations to ensure retail’s realities are reflected in national frameworks.
Communicate With Customers
Publish a live “Scam Alerts” page, list your official domains and social handles, and spell out the five behaviours your brand will never ask for. Shoprite’s public guidance is a useful consumer-facing pattern to emulate.
“Delivery vans are spending an absolute fortune on security, these kill our margins.” – The Courier Guy CEO
What this means for FMCG leaders
South Africa’s retail story is no longer only about category expansion, dark stores and on-demand delivery. It is about the economics of trust. Consumers have moved online.Criminals have, too. The same AI that helps you forecast demand and localise offers also allows fraudsters to fabricate identities, counterfeit storefronts and hijack your tone of voice.The test for leadership is not whether you can eliminate fraud, it’s whether you can contain it faster than it can scale, while signalling to customers that their identity, money and time are safe with you. Africa’s growth story is anchored in connectivity, not quiet. Every fibre laid, every mobile payment made, every data centre switched on strengthens a continental network of opportunity.
Yet as the economy digitises, trust becomes the new currency, one that determines whether innovation scales or stalls.South Africa does not need miracles, it needs execution with integrity. The challenge isn’t just to outsmart fraudsters, but to outpace them through collaboration, retailers tightening systems, banks reinforcing verification, regulators accelerating oversight. If these players can build layered defences, raise the cost of deception, and make it effortless for citizens to tell the real from the synthetic, the country could transform this moment of digital vulnerability into one of global leadership. Because in a continent hungry for credible digital commerce, trust is not a by-product of growth, it is the foundation of it.
When South Africa proves that a secure digital economy can thrive, it won’t just safeguard its markets, it will light the path for Africa’s digital future, one built on trust, resilience, and innovation.