Fake USSD Codes South Africa

Last checked: 26 June 2026

Quick Answer

Fake USSD codes South Africa are short mobile codes that look like real banking, airtime, data, SASSA, SARS, loan, refund, reward, or subscription codes, but are used to trick people into sharing sensitive information or approving unsafe actions.

Do not dial a USSD code from a forwarded WhatsApp message, SMS, social-media post, stranger’s phone call, fake website, or unofficial “agent” until you have verified it with the official provider. The Banking Association South Africa warns that criminals can use fake USSD menus, SIM-swap fraud and social engineering to steal personal or banking information, and advises users to dial USSD codes only from trusted official sources. (The Banking Association South Africa)

There is no safe shortcut where one unknown USSD code should be used to verify another unknown USSD code. The safest approach is to check the exact code with the bank, mobile network, government department, regulator, or service provider it claims to belong to.

If the USSD code claims to be for…Safer action before dialing
Banking, wallet, refund, payment, account unlock, or loan	Check the official banking app, bank website, ATM, branch, or verified fraud-support route.
Airtime, data, WASP service, content subscription, or premium service	Check your mobile network app or support page. For WASP-linked short codes, long codes and USSD strings, use the WASPA lookup tool. WASPA says it can display linked member contact details if it has the code or USSD string on record. (codes.waspa.org.za)
SASSA grant, SRD, payment date, or grant application	Use official SASSA channels. SASSA lists 0800 60 10 11 for enquiries and suspected social-grant fraud. (SASSA Services Portal)
SARS refund, tax debt, customs, eFiling, or “tax settlement”	Check SARS directly. SARS says it will not request banking details by post, email or SMS, will not send hyperlinks to other websites, and will never ask for credit-card details. (South African Revenue Service)
Free data, prize, job, giveaway, urgent verification, or “limited-time” benefit	Stop. Do not dial the code until the company confirms it through an official website, app, branch, or support channel.

For a broader safety guide, read are USSD codes safe. If the message claims to be from a public service, read report fake SASSA website. For verified provider guides, use USSD codes South Africa.

Step-by-Step Instructions

1. Check where the code came from

Start by asking who gave you the code.

A code is higher risk if it came from:

A forwarded WhatsApp message.
A random SMS.
A Facebook, TikTok, Telegram, or Instagram comment.
A stranger claiming to be a bank, SASSA, SARS, network, courier, or support agent.
A website that is not the provider’s official domain.
A screenshot with no official source.
A call where someone tells you to dial while staying on the line.

A real code should be easy to confirm from the provider’s official website, official app, branch, ATM screen, SIM pack, customer-care page, or verified support route.

2. Look for pressure or fear tactics

Fake USSD codes are often shared with urgent instructions such as:

“Dial now before your account is blocked.”
“Your SASSA grant will be cancelled.”
“Your bank account has been frozen.”
“Claim free data before midnight.”
“Your SARS refund is waiting.”
“Approve this to reverse the debit order.”
“Dial this code to protect your money.”

Urgency is a warning sign. Scammers use pressure so that you act before checking. If the message makes you panic, stop and verify it through the official provider first.

3. Compare the menu with the task

A normal USSD menu should match the task you expected. For example, a balance-check code should not ask for your full card number, banking password, OTP, or ID-document photo.

Stop immediately if the menu asks for information that does not make sense for the service. The Banking Association South Africa specifically warns that fake USSD menus can mimic real services to steal personal or banking information. (The Banking Association South Africa)

4. Verify the code through an official route

Use this order before trusting a code:

Check the provider’s official website or mobile app.
Search the provider’s help centre for the exact USSD string.
Contact the provider using a number from the official app, bank card, SIM pack, statement, or official website.
Visit a branch, bank, mobile-network store, or government office if the action involves money, identity documents, banking access, or grants.
For WASP-related services, check the short code, long code, or USSD string with the WASPA lookup. WASPA says you can enter a USSD string without spaces, and if it has the string on record, the linked member details will be displayed. (codes.waspa.org.za)

A missing WASPA result does not automatically prove that a code is fake. It may simply mean the code is not on WASPA’s record. Bank, network, government, and private-service codes must still be checked with the provider that supposedly owns the code.

5. Do not share sensitive details

Never share these details through an unverified USSD code, call, message, or website:

Banking PIN.
ATM PIN.
App PIN.
Online banking password.
OTP or one-time PIN.
Card CVV.
Full bank card number.
Card expiry date.
Transaction verification code.
SARS eFiling password.
SASSA card PIN.
ID document photo.
Bank statement.
SIM-swap or number-port approval.
Remote-access code.

SABRIC warns that criminals use phishing and social engineering to trick people into disclosing usernames, passwords, credit-card details, mobile numbers and OTPs. (sabric.co.za) Absa also says it will never ask for a PIN, password, passcode, transaction verification, or card CVV number. (Absa)

Important Notes Before You Use the Code

Warning signs

Treat a USSD code as suspicious if:

It promises free money, free data, instant loans, double grants, prizes, jobs, refunds, or debt cancellation.
It says you must dial immediately.
It asks you to stay on a call while dialing.
It asks you to read out what appears on your screen.
It asks for an OTP, PIN, password, CVV, or full card number.
It claims to be from SASSA, SARS, UIF, Home Affairs, a bank, or a mobile network but is shared through an unofficial channel.
It uses spelling errors, copied logos, shortened links, or strange wording.
It says the provider’s official support channels are “too slow” or “offline”.
It asks you to move money into a “safe account”.
It asks you to approve a transaction you did not start.
It says you must pay a fee before receiving a grant, refund, job, or prize.

What not to do

Do not:

Dial a code just because many people shared it.
Trust a code because it starts with *120*, *130*, *134*, or another familiar pattern.
Share an OTP with anyone who calls you.
Approve a banking prompt you did not start.
Enter your banking password into a USSD menu.
Send your ID, bank card, or bank statement to a WhatsApp “agent”.
Call back a number shown by a caller who claims to be from your bank.
Install an app or remote-access tool because someone says it will “fix” your account.
Keep retrying a code after a suspicious message.
Publish a code as official unless it has been checked with the provider and date-stamped.

Official verification steps

Before using or publishing a USSD code, confirm:

Check	Why it matters
Exact USSD string	A single digit can lead to a different menu or service.
Provider name	Users must know whether it belongs to a bank, network, government department, or WASP.
Current menu path	USSD menus can change. Do not rely on old screenshots.
Cost	Some services may be free, standard-rated, reverse-billed, or premium-rated.
Subscription risk	Some services can trigger recurring billing if the user confirms.
Required details	A legitimate task should not ask for unnecessary sensitive information.
Support route	Users need a safe escalation route if something goes wrong.
Last-checked date	Live codes, fees, support routes and menus should be reviewed before publishing.

WASPA explains that premium-rated services can be charged to a prepaid or contract phone bill, and that premium-rated services cost more than the standard mobile operator rate. It also says five-digit short codes are often linked to premium-rated services, although they can also be billed at standard rates. (WASPA)

What to do if affected

If you already dialled a suspicious USSD code:

Stop using the menu.
Do not enter more details.
Take screenshots if possible.
Write down the USSD code, sender number, message, time, date, and what you entered.
If banking details, PINs, OTPs, card details, or approvals were involved, contact your bank immediately through the official app, branch, card number, or official website.
If your SIM, number, airtime, or subscriptions may be affected, contact your mobile network.
If you were billed for a WASP service without permission, use WASPA’s unwanted-billing route. WASPA says it can try to ensure that services being charged without permission are cancelled. (WASPA)
If the message involved SASSA, contact SASSA through official channels. SASSA lists 0800 60 10 11 for enquiries and suspected grant fraud. (SASSA Services Portal)
If the message involved SARS, check the official SARS scams and phishing guidance before trusting any refund, debt, eFiling, customs, or tax-settlement message. (South African Revenue Service)
If the matter involves fraud or corruption in a state department or state-owned entity, the South African Government lists the National Anti-Corruption Hotline as 0800 701 701. (Government of South Africa)

Fake USSD codes South Africa searches usually come from users who are unsure whether a code is safe. The safest next step depends on what the code claims to do.

User situation	Better next step
“I found a code for SASSA or SRD.”	Read report fake SASSA website and verify through official SASSA channels.
“I want to know whether USSD is safe.”	Read are USSD codes safe.
“I need the correct code for a normal task.”	Start with USSD codes South Africa.
“My airtime is disappearing.”	Check mobile subscriptions through your network and use WASPA’s unwanted-billing route if it appears to be a WASP service.
“A code says it is from SARS.”	Check SARS directly. Do not trust messages asking for banking details, credit-card details, or non-SARS links.
“A code says my bank account is blocked.”	Open your official banking app or call the bank using the number in the app, on your card, or on the official website.

Safer alternatives to an unverified USSD code include:

Official provider app.
Official provider website.
Bank branch.
ATM.
Mobile-network store.
Government office.
Verified customer-care number.
WASPA code lookup for WASP-linked short codes, long codes and USSD strings.
Mobile-network subscription-management tools.

FAQs

What is the code for fake USSD codes South Africa?

There is no universal official USSD code that checks every fake USSD code in South Africa. Do not use one unknown code to verify another unknown code. Check the exact code with the provider it claims to belong to. For WASP-related short codes, long codes and USSD strings, use the WASPA lookup as one verification step. (codes.waspa.org.za)

What is fake USSD codes South Africa used for?

This page helps South African users identify suspicious USSD codes before they dial them. It is mainly for people who receive codes linked to banking, airtime, data, grants, SARS refunds, jobs, prizes, loans, rewards, or subscriptions and want to know whether the code is safe.

How do I know if a USSD code is fake?

A USSD code may be fake if it comes from an unofficial source, creates urgency, asks for sensitive information, promises unrealistic benefits, or tells you not to contact the official provider. Stop if the menu asks for your OTP, PIN, banking password, card CVV, full card number, ID document photo, or approval of a transaction you did not start.

Does this USSD code need airtime or data?

USSD services usually work through the mobile network rather than normal internet browsing, but costs can differ by provider, network, service type, and billing model. Some services may be free, some may use standard charges, and some may be premium-rated. Check the provider’s current fee information before dialing.

What should I do if the code does not work?

Do not keep retrying an unverified code. Check whether the code was typed correctly, whether your SIM has signal, whether the code belongs to your network, and whether the provider still supports that menu. If the code came from an unofficial message or asks for sensitive details, stop and verify it through the official provider route.

Are there costs, limits, or eligibility rules for fake USSD codes South Africa?

Fake USSD codes are not official services, so there are no legitimate costs, limits, or eligibility rules for them. For a real provider code, costs, limits, expiry times, menu paths and eligibility rules must be checked with the official provider and updated with a visible last-checked date.

What should I do if I entered my bank details?

Contact your bank immediately through the official app, branch, bank card, or official website. Do not call a number given by the suspicious message or caller. Ask the bank to help secure the account, block affected cards if needed, review recent transactions, and suspend risky access where appropriate.

What should I do if I entered an OTP?

Treat it as urgent. Contact your bank or service provider immediately. SABRIC warns that criminals may request OTPs to access online banking or authorise transactions, and Absa warns users not to provide OTPs or transaction verification details to callers. (sabric.co.za) (Absa)

What should I do if my airtime was deducted?

Check your mobile subscriptions through your network first. If it appears to be unwanted WASP billing, use WASPA’s unwanted-billing route. WASPA says the form is for users being charged for WASP services without permission. (WASPA)

Where can I find related USSD codes?

Use USSD codes South Africa for broader provider and task guides. Use are USSD codes safe for safety rules before dialing. If the code involves SASSA, SARS, Home Affairs, UIF, grants, refunds, or other public services, read report fake SASSA website before entering any personal information.