Online banking scams are often discussed as if the story ends when money leaves an account. It does not.
A 2026 South African case involving approximately R21.55 million shows that law-enforcement and asset-recovery processes can continue after fraudulent transfers have taken place.
The National Prosecuting Authority's Asset Forfeiture Unit obtained a preservation order connected to the proceeds of an online banking scam. The case illustrates an important distinction: recovering stolen money is a legal and investigative process, not something a victim should attempt to handle privately.
For individuals, the immediate priority after suspected unauthorised banking activity is to contact the bank through an official channel, report the transaction and preserve relevant evidence. Screenshots, messages, telephone numbers, email headers and transaction references can all help establish what happened.
Do not delete suspicious conversations simply because they are upsetting or embarrassing. Evidence can be useful to investigators.
There is also a practical lesson here about prevention. Once a transfer has happened, recovery can become complicated. Before transferring money, especially after an unexpected call or message, independently verify who is requesting it.
A bank representative should never need you to prove your identity by following a random link sent through WhatsApp or another unsolicited channel.
The earlier a suspicious transaction is identified and reported, the more useful the available response options may be.