Education Hub

Fake proof-of-payment isn't rare. It's routine.

Most sellers find out their POP was fake after the goods are gone. Here's what fraudsters actually do, and what to look for before you find out the hard way.

The four most common scams

What fraudsters actually send you

Most common

The edited screenshot

A real POP from a previous (smaller) transaction, edited in a photo app to change the amount. The fonts often don't quite match — a tell our forensic layer is built to catch.

Fast & cheap

The fake bank template

A blank "proof of payment" template downloaded from a scam forum and filled in with your details. No real transaction ever happened.

Hard to spot

The reversed payment

A genuine payment that's sent — then reversed or disputed minutes later, after the seller has already released goods based on the screenshot.

Targets urgency

The "wrong bank" stall

A real-looking POP from a bank that doesn't match the claimed account — relying on the seller being in a hurry and not checking carefully.

Under the microscope

Anatomy of a fake POP

Bank Capitec Bank
Amount
↳ font weight differs from template
R 14 500.00
Reference
↳ field missing entirely
Date / Time 14 Jun · 09:42
01

Font inconsistency

Genuine bank apps render every field in the same typeface. Edited amounts often use a slightly different font, weight, or kerning.

02

Missing reference number

Real transactions always carry a unique reference. Its absence — or an oddly short one — is one of the strongest fraud signals we check.

03

Metadata mismatch

Screenshots carry hidden file data. A "just now" payment with file metadata from three weeks ago is a major red flag.

04

Pixel-level editing artifacts

Photo editors leave faint compression artifacts around altered text — invisible to the eye, but detectable algorithmically.

Protect yourself

8 things to check before you trust a POP

01

Spot doctored bank logos

Scammers alter logos slightly when faking a screenshot. Compare it pixel-by-pixel against the bank's real app if you're unsure.

02

Verify the transaction reference

Ask the buyer to read you the reference number over a call. Fraudsters faking a POP usually can't produce one that checks out.

03

Check timestamp consistency

A payment screenshot claiming "just now" should match your own bank notification time — within a minute or two.

04

Confirm amount and recipient match

The amount on the POP should exactly match your invoice, and the recipient name should be your registered account name.

05

Be wary of WhatsApp-forwarded POPs

Forwarding strips metadata. Always ask for the original file, not a re-shared screenshot of a screenshot.

06

Round numbers deserve a second look

An exact R1000.00 or R5000.00 with no cents is statistically rare on real bank transfers — most genuine payments include odd cents.

07

Know your bank's font

Each South African bank uses a specific, consistent font in its app. A mismatched font anywhere on the screenshot is a clear red flag.

08

When in doubt, ask for the banking app

The single most reliable check: ask the buyer to share the transaction directly from their banking app, not a screenshot.

Stop checking manually.

POPcheck runs all 8 of these checks automatically, in under a minute.

Join the Founding 200