Black Friday 2026: How to Shop Safely Online (and Spot a Deal That's Too Good to Be True)

Why Black Friday is scam season

Black Friday lands on 27 November 2026, and the deals have already started. Amazon South Africa opened its early Black Friday sale on 21 October, and the big networks and retailers are running promotions all month (Briefly). Scammers love this season just as much as shoppers do.

The numbers are sobering. Digital banking fraud in South Africa topped R1.4 billion in 2024, and reported incidents almost doubled to more than 64,000 cases, according to SABRIC (Daily Maverick). In September, Capitec warned that criminals are now using AI to build convincing copies of stores like Takealot, Game and Incredible Connection (Briefly).

The good news: most scams can be avoided with a few habits and a healthy dose of scepticism. Here's how to grab the real bargains without handing your money to a criminal.

Before you shop: lock down your devices and accounts

A few minutes of preparation this week makes you a much harder target on the day.

1. Update everything. Install the latest updates for your phone, laptop, browser and banking app. Updates close the security holes criminals exploit.
2. Use strong, unique passwords. Never reuse your email or banking password on a shopping site. A password manager makes this painless.
3. Switch on two-factor authentication (2FA) for your email, shopping accounts and banking app. Your email is the master key to everything else, so protect it first.
4. Create a virtual card. Most South African banks let you create a virtual card in their app. Use it for online shopping, and delete or freeze it afterwards.
5. Lower your card limits. Set a temporary online spending limit close to your Black Friday budget, so a stolen card can only do limited damage.
6. Turn on transaction notifications so you see every purchase the moment it happens.
7. Consider a separate shopping email. It keeps promotional floods (and phishing) away from your main inbox.
8. Keep work and personal separate. Don't shop on your work laptop or log into personal shopping accounts on company devices. One bad click can put your employer's systems at risk too.
9. Make a list and a budget. Scammers rely on impulse. Knowing what you want, and roughly what it normally costs, is your best defence.

While you shop: safe habits on the day

Type the address yourself. Don't click deal links in WhatsApp messages, SMSes, emails or social media ads. Open the retailer's official app, or type its web address into your browser.

Only install apps from the official store, and only the retailer's own app. Never install an app because someone on WhatsApp or social media sent you a link for "promo codes". In one case highlighted by the National Financial Ombud, a shopper chasing cheap flight tickets installed a fake app and lost R120,000 within minutes (Daily Maverick).

Never share an OTP, PIN or CVV. No real retailer, courier or bank will ever ask for these by phone, WhatsApp or email. If someone asks, it's a scam. Hang up.

Watch out for fake delivery messages. "Your parcel is held, pay R25 to release it" is a classic Black Friday trick. Check orders only in the retailer's app or account.

Avoid public Wi-Fi for payments. Use your mobile data or a trusted VPN when you log in or pay.

Pay safely. Use a credit or virtual card through the store's secure checkout. Be very wary of anyone who insists on EFT, instant transfer, crypto or gift cards. Those payments are almost impossible to reverse.

Don't save your card on every site. Store card details only with retailers you use often and trust.

Check your statement within 48 hours of shopping, and report anything strange to your bank immediately.

Too good to be true? How to tell

If a deal makes you gasp, stop and check before you pay. Real Black Friday discounts are usually 10–40% on selected stock, not 80% off the newest phone or console. Scammers know exactly which products people want, and they price them just low enough to switch off your judgement.

Use a website checker. Before you enter card details on an unfamiliar site, paste its address into Yima, a free tool from the Southern African Fraud Prevention Service. It flags websites that have been reported or look unsafe (RCS, NCC).

Remember the padlock isn't proof. A padlock and "https" mean the connection is encrypted, not that the business is honest. Many scam sites have padlocks too.

Think you've been scammed? Act fast

Speed matters. Money stolen through fraud is often moved on within minutes.

1. Call your bank's fraud line immediately (the number is on the back of your card and in your banking app). Ask them to block your card and stop or trace the payment.
2. Freeze your cards in the app and change your banking, email and shopping passwords from a device you trust.
3. If you installed an app on someone's instructions, delete it and disconnect the phone from Wi-Fi and data until it has been checked.
4. Open a case at your local SAPS station and keep the case number. Your bank may ask for it.
5. Report the scam to SAFPS through Yima or its scam hotline on 083 123 SCAM (7226) (FA News). Your report helps warn other shoppers.
6. Keep the evidence: screenshots of the ad, website, chats, emails and payment confirmations.
7. If your bank won't help, you can escalate the complaint to the National Financial Ombud Scheme. For problems with a real retailer (late delivery, faulty goods, misleading prices), contact the Consumer Goods and Services Ombud or the National Consumer Commission.

And don't be embarrassed. These scams are built by professionals to fool smart people. Reporting quickly is the best thing you can do.

Shop smart, stay safe

Black Friday can save you real money if you slow down for a moment before you pay. Type addresses yourself, pay by card, never share an OTP, and when a deal feels too good to be true, trust that feeling.

Related services: Managed IT Support · Microsoft 365 · Backup & Disaster Recovery

Found these tips useful? Share this post with family and colleagues, especially anyone shopping online for the first time this year.