R390 Grant STOLEN? Your 2026 Guide to Fighting 'Data Breach' Fraud and Recovering Your SASSA Money

Finding out your SASSA R390 grant was stolen is a gut-punch, especially after the massive April 2026 data breach leaked millions of our personal details. If your money is gone, you aren’t alone, but you have to act fast. This guide covers how to reclaim your funds and lock down your account.

Download

×

Download Full Size

The April 2026 Fraud Tsunami: Why Your R390 Grant is at Extreme Risk

We’re seeing a terrifying wave of grant theft this year. It turns out a huge data leak at a major South African mobile network exposed the personal info of over 15 million people. This isn’t just some abstract “security event”—it’s personal. Scammers now have ID numbers and phone numbers, which are the only things they need to hijack your SASSA payments.

I’m honestly angry that this happened, but the reality is that the South African Fraud Prevention Service (SAFPS) is seeing a 200% jump in identity theft since the leak. For the 9 million people waiting on that R390 SRD grant, it’s a total crisis. These criminals aren’t guessing anymore. They are using your own verified data to log into the system and swap your bank details just days before you’re supposed to get paid. Their goal is to divert your money into their accounts, leaving you with nothing for the month.

Step 1: Immediate Lockdown - How to Check if Your Account is Hijacked

Don’t wait until payment day to find an empty account. You need to check your details right this second. It’s the only way to know if someone has been messing with your profile.

Here is how I’d do it to stay safe:

1. Go straight to the official SASSA Website: Navigate directly to the official SASSA SRD website. Avoid any links sent to you via SMS or WhatsApp. Those are almost always traps.
2. Log in securely: Use your ID number and the 6-digit OTP (One-Time Pin) sent to your phone.
3. Look at your details like a hawk: Once you’re in, go to the payment or banking section. Check the mobile number and the bank account details very carefully.

Red Flags to look for:

• A phone number you don’t recognize.
• Bank details that aren’t yours.
• Your payment method was changed to ‘Cash Send’ without you doing anything.

If that OTP never hits your phone when you try to log in, that’s a massive warning sign. It usually means a scammer already swapped your contact number in the system. If you’re stuck, use our SRD Status Check guide to see what’s actually going on with your profile.

The ‘One-Time Pin’ Intercept: Unmasking the Scammers’ Masterstroke

I want to be clear about how these people operate because it’s incredibly sneaky. They use your leaked ID to start a “change of details” request on the SASSA portal. Then, they need that OTP to finalize it. This is where they try to trick you.

They might call or text you, pretending to be from SASSA. They’ll say something like: “We are verifying your account for the April 2026 payment. We have just sent you a security code. Please read it back to us to secure your grant.”

This is a total lie. That “security code” is the OTP that lets them change your bank details. Once you give it to them, they have full control. As cybersecurity analyst Ferial Haffajee pointed out, these tactics exploit the trust we have in the system. SASSA has said it a thousand times: they will never call you and ask for an OTP. Sharing that code is like handing a thief a signed, blank check.

Confirmed Theft? Your 3-Step Emergency Action Plan to Recover Your Grant

If the worst has happened and your money is gone, take a breath. It’s frustrating, but there is a path back if you act fast.

Step 1: Call SASSA immediately Your first move is calling the SASSA National Contact Centre at 0800 60 10 11. Tell them your grant was stolen. They’ll flag your account so the thief can’t keep doing it and start an internal investigation. Make sure you get a reference number before you hang up.

Step 2: Go to the police You have to report the theft to the South African Police Service (SAPS) and open a fraud case. It’s a hassle, I know, but SASSA won’t even look at your claim without an official police case number. Take your ID and any weird texts you got to the station. That affidavit is your proof that a crime happened.

Step 3: Talk to the banks If your money went to a compromised account, tell your bank’s fraud team. If it was a Postbank payment, you need to talk to their forensics department too. This helps create a paper trail. A 2026 SASSA directive makes it clear: no police case, no refund.

Fortifying Your Future Grants: Proactive Security for 2026 and Beyond

Getting your money back is a long, exhausting road. It’s much easier to stop them before they start. You’ve got to treat your SASSA account like it’s a high-security vault.

Your 2026 SASSA Security Checklist:

• Protect that OTP: It’s your digital signature. Never share it with anyone over the phone or text. No real official will ever ask for it.
• Fix your MySA Gov password: Make it long and weird. Don’t use your birthday or your name. Use a mix of letters, numbers, and symbols.
• Trust nothing: If a link comes via SMS, ignore it. Go to the site yourself by typing it in.
• Check in monthly: Log in a week before pay day just to make sure everything still looks right. It takes five minutes and can save you a month of stress.
• Lock your phone: Use a fingerprint or a strong PIN. If someone grabs your phone, you don’t want them grabbing your grant too.

Frequently Asked Questions