VoIP • Call security

Spam & scam calls in South Africa: where VoIP actually helps

Robocalls, Wangiri missed-call traps and bank-impersonation vishing are rising. Here is what you can report, how to lock down your phones, and where a properly secured business VoIP system gives you controls a landline never could.

US$38.95bnGlobal telecom fraud, 2023 (CFCA)
WangiriThe one-ring callback trap
POPIA s69Governs SA direct marketing
Opt-inMarketing calls need consent
The short answer

Does VoIP stop spam and scam calls?

Not on its own. A properly secured hosted VoIP system gives you central call-blocking, destination barring, admin multi-factor login and spend alerts that a copper landline or a personal mobile cannot match. But no platform blocks every call, and a misconfigured VoIP line is exactly what fraudsters abuse, so layered defences and trained staff matter more than the technology label.

0
US$bn global telecom fraud, 2023
0
US$bn lost to IRSF / Wangiri, 2023
0
SIP port attackers probe
0
layers of call defence
A South African office worker looking warily at an unknown number ringing on a desk phone
Caller ID alone is no longer proof of who is calling. Spoofing makes a familiar-looking number worthless as a trust signal.

What spam and scam calls look like in South Africa

Most nuisance calls fall into a handful of patterns. Knowing the shape of each one is the first line of defence, because the giveaway is usually in how the call behaves, not the number on the screen.

  • Wangiri (one-ring) scams. A single ring from an international code, designed to make you call back to a premium-rate number. The money is in the callback.
  • Robocalls. Pre-recorded messages pushing fake offers or posing as a bank, SARS or a delivery service.
  • Caller-ID spoofing. The number is faked to look local or trusted, so a familiar prefix is no guarantee of who is actually calling.
  • Vishing (voice phishing). A live caller impersonates your bank or provider to harvest card details, OTPs or login credentials.

These are cheap to run at scale. Mass-dialling software, easy access to international SIP routes and leaked contact databases let a single operator dial thousands of South African numbers a day, which is why the volume keeps climbing.

Can you report a spam number? Yes, with limits

South Africa has no single national do-not-call switch, but you do have several real channels, each suited to a different kind of nuisance.

ChannelBest forWhat it does
Your providerPersistent nuisance numbersBlock or report the number; most mobile and VoIP providers offer a report path
ICASAAbusive or repeated offendersThe telecoms regulator takes complaints via icasa.org.za
National Consumer CommissionUnwanted marketing callsHandles complaints under the Consumer Protection Act
POPIA (section 69)Marketing without consentElectronic direct marketing needs your opt-in; unsolicited calls are restricted
!
Reporting rarely stops a spoofed number: a fraudster who fakes a different caller ID for every batch is hard to trace. Reporting helps the regulator build a pattern, but day to day, blocking and screening protect you faster than reporting does.

How to lock down your phones

Most of the win comes from a few settings and habits. Split the job between personal mobiles and the business phone system.

Turn on native call screeningEvery modern smartphone can silence unknown callers and send them to voicemail. It is the single highest-impact setting for personal lines.
Add a spam-blocking app as one layerTruecaller, Hiya or Call Control flag known offenders from a shared database. Useful, but they cannot catch a freshly spoofed number, so treat them as a filter, not a fix.
Never call back unknown international numbersThis defeats the Wangiri trap outright. If you do not recognise the country code, do not return the call.
On the business line, use destination barringBlock outbound calls to premium-rate and high-risk international destinations you never call. It stops both staff mistakes and fraud on a compromised extension.
Train staff to recognise vishingNo bank asks for an OTP over the phone. A 10-minute briefing on what a phishing call sounds like prevents most successful scams.

Where business VoIP genuinely helps

A copper landline gives you a dial tone and little else. A properly secured hosted VoIP system hands you the controls that actually reduce spam exposure, provided it is set up correctly.

Layered defence on a business VoIP call

Incomingspam call Network / CLIscreening VoIP platformblock + bar + alert Trainedstaff You Each layer removes calls the previous one missed. No single layer is enough on its own.
ControlTraditional landlineSecured business VoIP
Central call-blockingLimitedBlock lists applied across every extension at once
Destination barringNoneBar premium-rate and risky international routes
Admin securityNoneMulti-factor login on the management portal
Anomaly and spend alertsNoneFlags unusual call volume or spend in real time
✓
The flip side, stated honestly: VoIP is also the cheap infrastructure fraudsters abuse. An exposed system with default passwords and open SIP ports (5060 and 5061) gets probed within hours. The advantage only holds for a system that is hardened: strong admin credentials, a session border controller or firewall on the SIP ports, and barring switched on.

VoIP is not magically safer than a landline. A secured, well-run hosted system is, because it hands you the off switches a copper line never had.

WhichVoIP editorial

Can you eliminate spam calls entirely?

No, and any product that promises to is overselling.

Spoofing and cheap international routes mean new numbers appear faster than any database can list them. The realistic goal is not zero calls, it is a small enough trickle that the few that get through are easy to ignore. Layered defences, a screened business line and staff who know what a scam sounds like get you most of the way there.

A VoIP administrator reviewing call-blocking and barring settings on a management dashboard
Central blocking and destination barring are the controls a landline never gave you, applied across every extension at once.

Our verdict

Spam and scam calls are a permanent feature of the South African phone network, not a passing wave. You cannot block every one, but you can shrink your exposure: report persistent offenders to ICASA and your provider, lock down both mobile and desk phones, and choose a VoIP platform that puts call-blocking, destination barring and admin security in your hands. The line “VoIP is safer” is only true when the system is set up properly.

Our recommendation: Treat call security as a buying criterion. When you compare hosted VoIP, ask each provider how it blocks and screens calls, secures admin access and alerts you to unusual spend.

Comparing secure VoIP for your business?

Tell us your team size and we will match you with South African VoIP providers whose platforms include call-blocking, destination barring and admin security as standard.

Get matched with providers Read the VoIP fraud guide

Frequently asked questions

How do I report a spam call in South Africa?
Report persistent nuisance to ICASA (icasa.org.za), unwanted marketing to the National Consumer Commission under the Consumer Protection Act, and the number to your own provider. Under POPIA, marketers must have your consent to call you in the first place.
Are missed calls from international numbers safe to call back?
No. This is the Wangiri trap: a one-ring call from a foreign code, designed to make you call back to a premium-rate number. Do not return calls to numbers you do not recognise.
Is VoIP more secure than a landline?
A properly secured hosted VoIP system gives you more control, including call-blocking, destination barring and admin multi-factor login, than a copper line. A poorly configured one is less secure, because open SIP ports get probed quickly.
Can a spam app like Truecaller block calls?
It can flag and screen many known spam numbers, but it relies on a community database and cannot catch a freshly spoofed number. Treat it as one layer, not a complete fix.
What is caller-ID spoofing?
Faking the number shown on your screen so a scam call looks local or trusted. It is why a familiar-looking number is no guarantee the caller is who they claim to be.
Does POPIA stop marketing calls?
POPIA section 69 requires consent for electronic direct marketing, so unsolicited marketing calls are restricted. You can also lodge a complaint and ask to be removed from a marketer list.

Keep reading

VoIP fraud prevention guide Cloud PBX voicemail security How to vet a VoIP provider

Sources: ICASA; POPIA (Act 4 of 2013, section 69); National Consumer Commission / Consumer Protection Act; Communications Fraud Control Association 2023 telecom-fraud survey; Afrihost (RICA process). Verified June 2026.

Now hiring Hire your AI receptionist