Every SIM card in South Africa must be registered to a verified person before it can be used. That is RICA — the Regulation of Interception of Communications Act. But RICA is not only a legal requirement; it is also a frontline defence against one of the most damaging crimes in the country: SIM-swap fraud.

What a SIM swap attack looks like

A criminal convinces a mobile provider to move your number to a SIM they control. From that moment, your calls and SMS — including one-time passwords for banking — go to them. In minutes they can reset your accounts and drain them.

The weak point in nearly every SIM-swap attack is identity: the fraudster poses as you, using stolen or guessed personal details to persuade the provider to action the swap.

Verification is the fix

The strongest defence is to make identity the gate. Before a SIM swap is actioned, the provider should verify that the person requesting it is genuinely the account holder — confirming identity against approved sources, checking living status and confirming the details match the registration on record.

When verification is strong, the fraudster’s impersonation fails at the first step, and your number stays with you.

Why this matters to every organisation

For mobile operators and MVNOs, RICA compliance and SIM-swap protection are the same discipline. For every other business, the lesson is broader: any process that changes a customer’s security posture — a password reset, a number change, an address update — should be gated by real verification.

J-Cred provides verification built for exactly these moments: fast, evidence-backed identity and living-status checks that stop impersonation before it succeeds.