Skip to main content

Look something up Scams going around What we check Report a message

Loading the latest scam warnings…

A calm second opinion for suspicious messages, links and calls. Built for South Africans; free to use; no account needed.

Money already gone?

Call your bank’s fraud line immediately
Report the crime to SAPS
Change any shared passwords

What sits behind the answer

urlz.dev sandbox & phishing hunter
OpenPhish · phishunt · community reports
TweetFeed — community reports on X
Web & social monitoring

Report a message Scams going around What we check Privacy Terms of Use Disclaimer Contact

Scam Check · Independent and free · Security feeds and community warningsStill unsure? Ignore the message and contact the brand through its official app or the number on your card.

Don’t touch this one · impersonating Sasfin

Reaches you by website · urlz · 24 Oct

Safely captured page connected to this warning — Captured preview, not a live website. The page may have changed since this image was taken.

The trick it’s trying

This page has been flagged as malicious. Do not enter personal or banking details.

The details

Impersonates: Sasfin
Reaches you by: Website
Reported address: live[.]sasfin[.]iretire[.]co[.]za/
First seen: 2026/10/24, 13:06:44
Reported via: urlz
Original report: Not linked — unverified external site
Security scan: Opened in urlz.dev's remote sandbox

What to do now

Don’t tap links in unexpected messages — open the Sasfin official app or website yourself.
Never send a PIN, password or one-time code (OTP) in reply to a message or caller.
Sasfin will never ask you to “verify” or “re-activate” your account through an unexpected link.
If you shared a password, change it through the official service. For card details or lost money, call your bank’s fraud line.

Check another link

Warnings that work the same way

Different pages, same playbook — matched by what they do, not just the brand.

Loading preview…

A safely captured image, never the live page.

SASSA: malicious website

A confirmed malicious page built to look like SASSA.

nsfasupdates[.]co[.]za/

urlz22 OctDetails

Loading preview…

A safely captured image, never the live page.

Absa Website

Absa: malicious website

A confirmed malicious page built to look like Absa.

www[.]absa[.]agrp[.]co[.]za/

urlz25 OctDetails

Loading preview…

A safely captured image, never the live page.

Absa: malicious website

A confirmed malicious page built to look like Absa.

absa[.]agrp[.]co[.]za/

urlz25 OctDetails

Loading preview…

A safely captured image, never the live page.

Absa: malicious website

A confirmed malicious page built to look like Absa.

autoconfig[.]3dsecure-absa[.]co[.]za/

urlz18 OctDetails

Loading preview…

A safely captured image, never the live page.

SASSA: malicious website

A confirmed malicious page built to look like SASSA.

www[.]sassa[.]shop/

urlz16 OctDetails

Loading preview…

A safely captured image, never the live page.

Absa: malicious website

A confirmed malicious page built to look like Absa.

knowmad[.]co[.]za/images/

urlz12 OctDetails