How to protect your business from payment fraud

How to protect your business from payment fraud

Digital banking fraud in South Africa rose 86% in 2024, with losses up 74% to R1.888 billion (SABRIC). The fix isn’t complex technology. It’s a consistent habit: pause, verify in your system, then hand over goods. A screenshot, SMS, or notification a customer shows you is never proof that a Zapper payment has gone through. Only your Merchant Portal or POS can confirm that.

When customers trust your payment process, they’re far more likely to complete their purchase.

Zapper payments are already highly secure, built on PCI DSS Level 1 compliance, tokenisation, encrypted payment data, and 3D Secure authentication. Most transactions are smooth and legitimate, which means protecting your business comes down to one more simple habit: confirming that a sale has actually gone through before you complete it.

This is because what a customer shows as “proof of payment”, whether that’s a screenshot, notification, or voucher, may not always reflect what’s happened on your side.

 

Why does payment awareness matter for merchants?

 

Payment fraud rarely relies on sophisticated technology. It relies on speed, distraction, and pressure.

A customer might say:

  • “The payment is still processing.”
  • “Here’s my proof of payment.”
  • “My bank is just slow today.”
  • “Can I collect now?”
  • “I’ve already paid.”

During a busy shift, a long queue, or a rushed handover, it’s tempting to accept what’s shown and move on, but that’s exactly where discrepancies happen. The goal of a fraudster is often to persuade staff to hand over goods, complete a service, or close a sale before the payment has actually cleared.

 

Is a screenshot proof of payment?

 

No. A screenshot, SMS, notification, or voucher shown on a customer’s phone can be edited, reused, or shown before the transaction actually completes. The only reliable confirmation is your own Merchant Portal or POS, never the customer’s screen.

 

Red flags that a “proof of payment” screenshot may be fake:

 

  • Fonts, colours, or layout that look slightly different from your bank or payment provider’s usual notifications
  • A missing, shortened, or oddly formatted transaction reference number
  • A timestamp that doesn’t match the actual time (e.g., shown a few minutes before the customer arrived)
  • Blurry, cropped, or zoomed-in areas that could be hiding edited details
  • An amount in the screenshot that doesn’t match what the customer says out loud
  • The customer being unwilling to let you look closely, or rushing you to move past it

None of these guarantee fraud on their own, but any one of them is a reason to check your system before completing the sale, not a reason to argue with the customer.

 

Do secure payment systems like Zapper still require merchant verification?

 

Yes. Zapper uses multiple layers of security to protect transactions, including PCI DSS Level 1 compliance, tokenisation, encrypted payment data, and 3D Secure authentication where appropriate. These make Zapper payments highly secure and give customers confidence when they pay.

But no payment platform, however secure, can prevent a merchant from handing over goods before confirming a transaction is complete. Technology secures the payment. Merchant verification completes the process.

 

What payment security habits should every merchant follow?

 

Protecting your business doesn’t require complicated systems. Consistency matters more than complexity. Make these part of daily operations:

  1. Never rely solely on screenshots, SMS messages, or customer notifications
  2. Verify every payment in your Merchant Portal or POS
  3. Don’t let long queues encourage shortcuts
  4. Train every staff member on the same verification process
  5. Keep POS software and payment devices up to date
  6. Limit who can approve refunds or void transactions
  7. Report suspicious activity immediately

These habits take only seconds but ensure every transaction is accurate and accounted for.

 

High-risk periods for payment fraud

 

Fraud attempts tend to spike whenever queues get longer and staff are under more pressure to move fast, which is exactly when the habits in this guide matter most. Watch for an uptick around:

  • Black Friday and festive season, when transaction volumes are highest, and staff are often more junior or temporary
  • Month-end and pay-day rushes, when queues build quickly, and verification can feel like it’s slowing things down
  • Load shedding or system outages, when “the system is down, just let me through” becomes a common pressure line

Building verification into the process year-round means it doesn’t get skipped precisely when it’s needed most.

 

What should staff check before completing a sale?

 

Before finalising any transaction, your team should work through the payment verification checklist below. The short version is: confirm the payment in your own system, check the amount, and don’t release goods on a pending or unconfirmed transaction.

 

Why does staff training matter for payment verification?

 

A reliable payment process only works if everyone follows it. Make sure your team treats payment verification as part of checkout, not an optional extra,  whether it’s a quiet shift or a rush of customers.

Staff should always know:

  • Where to verify transactions
  • How vouchers should be redeemed
  • When to pause and check
  • Who to speak to if something looks wrong, and what to do if they suspect fraud (see below)

When everyone follows the same process, errors drop, fraud becomes harder to carry out, and staff feel more confident handling payments and vouchers.

 

Make your system the source of truth

 

The safest approach is simple: trust your system, not the customer’s screen. Your Merchant Portal or POS should be the only place used to confirm whether a payment has been completed. Building this into every transaction protects your business from avoidable losses without slowing down service.

 

What to do if you suspect a fraud attempt

 

If something feels off, such as a screenshot that doesn’t add up, a customer pressuring you to skip a check, or a call asking you to bypass your usual process, follow a simple sequence:

  1. Pause the transaction. Don’t hand over goods, complete the service, or process a refund while anything is unconfirmed.
  2. Don’t confront or accuse. Stay calm and professional. If you feel unsafe, prioritise your own safety and involve a manager or security rather than challenging the customer directly.
  3. Capture the details while they’re fresh: the time, what was shown to you, the payment reference number if visible, and a description of the customer if relevant.
  4. Escalate immediately to your manager or shift lead, following your store’s reporting process.
  5. Contact Zapper support at support@zapper.com with the transaction reference and details if the incident involves a Zapper payment or voucher, so we can investigate on our side too.

Acting on a hunch and being wrong costs a few seconds of double-checking. Not acting on it can cost the sale.

 

Payment verification checklist

 

Before completing any sale, your team should check:

✓ Payment appears in your Merchant Portal or POS

✓ Transaction shows as completed, not pending

✓ Amount is correct

✓ Vouchers are processed through the correct redemption flow

✓ No reliance on screenshots, SMS, or customer notifications alone

✓ No pressure, urgency, or “bypass the process” requests are being acted on without verification

✓ Anything unusual is paused and verified before handing over goods

 

Frequently Asked Questions

 


Is a bank notification or SMS enough proof that a customer paid?

 

No. SMS messages and notifications can be delayed, edited, or unrelated to the actual transaction. Always confirm the payment in your own Merchant Portal or POS before completing the sale.

 

What’s the fastest way to prevent payment fraud at checkout?

 

Build one habit: never hand over goods until the payment shows as completed (not pending) in your own system. This single check stops most fraud attempts that rely on speed and pressure.

 

Does using a secure payment provider like Zapper eliminate the need for manual verification?

 

Unfortunately not, but it’s a good first step. Security features like PCI DSS Level 1 compliance, tokenisation, and 3D Secure protect the payment itself, but a staff member still needs to confirm the transaction is complete before releasing goods or services.

 

What should I do if I suspect a customer is trying to commit payment fraud?

 

Pause the transaction, don’t confront the customer, note the details (time, reference number, description), and escalate to your manager immediately. Contact support@zapper.com if it involves a Zapper payment or voucher.

How common is payment fraud in South Africa?

 

According to SABRIC’s 2024 Annual Crime Statistics, digital banking fraud incidents rose 86%, with losses increasing 74% to R1.888 billion, making merchant-side verification more important than ever.

 

Who should I contact if I suspect payment fraud or a voucher issue?

 

Contact support@zapper.com for help with payment verification or voucher redemption questions.

 

Small habits that protect your revenue

 

Payment fraud and discrepancies usually exploit moments of distraction, not weaknesses in payment technology. A busy till, a long queue, or a rushed handover can be enough for something to slip through.

Building a consistent verification habit prevents that. Before completing any sale: pause, check, confirm. It’s a small step that makes a meaningful difference to your business.

If you have questions about payment verification or voucher redemption, contact support@zapper.com. We’re here to help.

Related Posts
Contact Sales Team

Tailored solution for NPOs or enterprise businesses based within South Africa

Contact Me By Fax Only

Contact Sales Team

Tailored solution for NPOs or enterprise businesses based within South Africa

Contact Me By Fax Only

Request a call back.

Feel free to reach out to our support team. We're here to help.

Contact me by fax only