South Africans could soon face a financial storm few saw coming. The South African Revenue Service (SARS) is proposing a policy change that would allow immediate taxation of retirement funds when citizens emigrate or cease tax residency—removing the current three-year grace period that protects such savings.

Framed by Treasury as a “technical correction”, the proposed change, buried in the Draft Taxation Laws Amendment Bill (2025), effectively grants SARS the right to tax retirement benefits the moment one leaves the country. The shift has been dubbed the “Granny Tax” by civil rights group Free SA, which has launched a national campaign to stop what it calls “a raid on retirees’ life savings.”

What The Proposed Law Means

If passed, South Africans with pension or retirement annuity funds could be taxed immediately upon changing tax residency. Previously, a three-year waiting period allowed access to these funds without early taxation. That window may soon vanish.

The stated reason from Treasury: to prevent “double non-taxation” and align the country’s residence-based tax framework with international norms. But critics say it’s another example of the state tightening its grip on private wealth under the guise of reform.

Who Will Be Affected

This isn’t limited to the wealthy. The policy could affect:

• Emigrants and expatriates who saved locally before moving abroad.

• Foreign nationals retiring in South Africa whose overseas pensions may now fall within SARS’s scope.

• Returning citizens who worked abroad and contributed to foreign pension funds, which could lose their tax-exempt status.

In short, it’s anyone who has played by the rules, saved diligently, and sought to retire securely—whether at home or overseas.

Ethical and Legal Questions

Opponents argue the proposal changes the rules after the fact, penalising those who planned their retirements under the old system. There’s also the question of double taxation—many foreign pensions have already been taxed abroad.

Free SA warns that this move, if unchecked, sets a dangerous precedent for future pension interference. Their campaign calls for public consultation, fiscal discipline, and an end to “treating retirees as the government’s ATM.”

According to Free SA, the issue is not about tax fairness—it’s about control. “Instead of fixing corruption, inefficiency, and bailouts,” the group says, “the state is reaching into citizens’ pockets to fill its budget shortfalls.”

A Broader Trend of Economic Overreach

Critics see this as part of a broader pattern—an incremental centralisation of economic power and erosion of financial autonomy. Similar debates have emerged around pension preservation, compulsory fund participation, and even speculation about future nationalisation of retirement assets.

While the government insists the proposal simply closes a loophole, detractors view it as another step toward taxing capital flight rather than addressing why professionals, families, and investors are leaving the country in record numbers.

Public Response and Petition

Free SA’s campaign, Stop the Granny Tax, is calling on South Africans to submit objections directly to Parliament and the National Treasury. Citizens can read more and sign the petition at freesa.org.za.

The organisation warns that without collective pushback, this may only be the beginning—opening the door to forced preservation, pension nationalisation, or other measures that undermine financial independence.

Freedom or Fiscal Feudalism?

The “Granny Tax” debate exposes a fundamental question: Is your retirement truly yours—or does it belong to the state once you’ve stopped working?

For millions of South Africans, the answer could redefine not only their financial future but the very meaning of private ownership in a failing economy.

The post SARS “Granny Tax” Sparks Outrage Among Retirees appeared first on Casting Out Deceptions.

Across South Africa’s digital landscape, a growing number of companies and government agencies are enforcing mandatory Two-Factor Authentication (2FA) as a baseline security measure. While ostensibly designed to protect users, this compulsory imposition raises significant concerns around personal freedom, constitutional rights, and compliance with data protection laws such as the Protection of Personal Information Act (POPIA).

This article exposes how entities like Capitec Bank, SARS eFiling, Ozow, PayFast, and others mandate 2FA without meaningful user choice—a practice that not only undermines customer agency but may also contravene legal standards protecting individual rights.

South African Companies Mandating Two-Factor Authentication

Several major players in South Africa have institutionalised mandatory 2FA across their platforms:

• Capitec Bank: All online banking customers must register for 2FA, choosing between the Capitec Mobile App or a physical hardware token. Transactions require entering a PIN or biometric confirmation alongside one-time passwords, making 2FA compulsory for every internet banking account.

• SARS eFiling: Since November 2024, SARS enforces 2FA for all individual tax profiles, requiring users to enter a one-time PIN sent via SMS or email after standard login credentials.

• Ozow: Every EFT payment through Ozow requires bank-level 2FA authorisation, either via an app prompt or SMS OTP, without exception.

• PayFast: Multi-factor authentication is mandatory for all merchant accounts, requiring time-based codes generated by authenticator apps such as Google or Microsoft Authenticator.

These institutions’ security policies explicitly preclude opting out, embedding 2FA as a non-negotiable barrier to accessing critical financial and governmental services.

Legal Concerns: Constitutional Freedom of Choice

The enforced nature of 2FA practices directly clashes with constitutional protections enshrined in Section 10 and Section 14 of the South African Constitution, which guarantee the right to dignity, privacy, and freedom of choice.

• Freedom of Choice and Personal Autonomy: Forcing citizens to submit additional personal data or security credentials without meaningful consent places individuals under duress. The constitutional principle of dignitas implies respect for personal agency, which forced security measures violate by removing user discretion.

• Right to Privacy: Section 14 explicitly protects individuals against arbitrary interference with privacy. Mandating 2FA—often involving biometric data or device-generated codes—without a risk-based approach or opt-out options infringes on this right by expanding data processing beyond necessity and proportionality.

This unilateral enforcement undermines the principle that security measures should be balanced, context-sensitive, and subject to individual risk assessments.

POPIA Analysis: Non-Compliance with Consent and Proportionality

The Protection of Personal Information Act (POPIA) further complicates the legality of forced 2FA:

• Section 11(1)(a) and (3): Consent and Objection Rights
  POPIA requires that personal data processing be based on informed consent or lawful justification. Section 11(3) explicitly empowers data subjects to object to processing based on legitimate grounds. Forcing 2FA credentials as mandatory, without providing opt-out mechanisms or risk-based alternatives, violates these provisions by negating genuine consent and overriding valid objections.

• Section 11(1)(b) and (c): Contractual Necessity and Legal Obligation
  While companies cite contractual necessity or legal obligations as bases for processing, these claims are contestable when the imposed measures exceed what is reasonably necessary. No clear legislative mandate compels 2FA for all customers irrespective of their security posture, making blanket enforcement legally tenuous.

• Section 19: Accountability and Reasonableness
  POPIA mandates proportional and reasonable safeguards tailored to actual risk. Enforcing one-size-fits-all 2FA disregards the principle of risk-based assessment and excludes individuals with superior or alternative security measures. This blanket approach introduces new risks—such as potential loss of access, increased attack surfaces via TOTP vulnerabilities, and systemic lockouts—contradicting the Act’s intention.

The Broader Implications: Institutional Overreach and User Disempowerment

The growing trend of forced 2FA by financial institutions and government agencies reflects a worrying shift towards institutional overreach and erosion of individual rights in the digital sphere. By eliminating meaningful choice, these policies treat users as mere data points subject to a uniform security mandate rather than autonomous agents capable of managing their own risks.

This undermines not only privacy and consent principles but also sets a dangerous precedent for future digital governance, where customer agency and constitutional freedoms may be subordinated to corporate or bureaucratic convenience.

Questioning the Cost of “Security”

While the protection of personal and financial data is undeniably crucial, it is equally important to scrutinise the methods by which security is enforced. South Africans deserve transparent, justifiable, and choice-respecting security practices, not blanket mandates that sidestep constitutional rights and POPIA safeguards.

Are companies like Capitec, SARS, Ozow, and PayFast truly acting in the best interests of their users, or are they simply prioritising operational ease at the expense of fundamental freedoms? What mechanisms exist to hold them accountable for overstepping legal bounds?

These questions must be urgently explored by regulators, policymakers, and the public to prevent digital coercion from becoming the norm.

The post Legal Risks of Forced 2FA Under South African Constitution appeared first on Casting Out Deceptions.

As South Africa rolls out its revamped banking laws on May 1, 2025, the mainstream narrative heralds them as progressive safeguards for consumers. Yet, beneath the carefully manicured press releases and financial jargon lies a deeply concerning shift toward systemic financial surveillance and reduced personal financial freedom. This so-called financial “modernisation” warrants rigorous scrutiny — and citizens deserve to ask tough questions the government and banks would rather avoid.

The Hidden Costs Behind The Smokescreen Of ‘Consumer Protection’

On the surface, these laws claim to promote transparency, enforce fair lending, and protect deposits up to R200,000. However, history shows that increased regulation often translates into administrative overreach and higher banking costs for the public. Mandatory biometric verification for transactions, enhanced digital identity checks, and increased reporting thresholds might sound like security measures, but in practice, they centralise personal financial data into vulnerable digital systems.

The 2019 Reserve Bank of India (RBI) data breach, for example, exposed sensitive biometric banking information of over 1.3 million users despite rigorous digital ID protocols, proving such systems are not fail-safe (source).

Who Really Benefits From Faster Dispute Resolutions And Transparent Fees?

The government’s promise of “faster dispute resolutions” within 15 business days sounds appealing, yet it comes paired with complex fee structures and increased loan application scrutiny that disproportionately affect small businesses and lower-income earners. What isn’t being emphasised is how banks retain the authority to limit services for those refusing biometric data registration. This effectively forces compliance through financial exclusion — a tactic previously criticised by privacy advocates in the European Union’s GDPR regulatory framework (source).

Cross-Border Transparency Or Government Currency Control?

Perhaps the most dangerous amendment lies in the new cross-border transaction transparency requirements. While sold as a measure against money laundering, these rules allow the Reserve Bank and other state actors to scrutinise private international financial activity without probable cause. The global precedent here is troubling: Nigeria’s central bank in 2021 enforced similar regulations that ultimately throttled access to foreign currency, strangling small business imports and personal remittances (source).

Digital Identity Systems: A Threat To Privacy Rights

With the introduction of enhanced digital identity verification for online accounts, South Africa edges closer to a state-controlled financial surveillance infrastructure. Under the guise of anti-fraud protection, these systems can be weaponised to profile citizens, restrict financial freedoms, and limit dissent — a risk highlighted by South Africa’s own Human Rights Commission in 2023, warning against excessive biometric data collection (source).

A Financial Panopticon: The Real Risk

The expansion of deposit insurance to R200,000 is a strategic sweetener meant to appease the public, but it distracts from the broader systemic issue: a consolidated financial oversight regime where banks and regulators dictate the terms of access and control over private wealth. Citizens will gradually find it harder to make large cash withdrawals, transfer funds discreetly, or open anonymous accounts.

As we’ve seen in Canada’s 2022 financial clampdown on protest donors, where personal accounts were frozen under financial emergency powers, such regulatory frameworks can be misused to silence dissent (source).

Final Thoughts: Who Really Wins?

While financial reform is necessary in a digital age, South Africa’s 2025 banking laws veer alarmingly toward a state-corporate financial surveillance complex. Consumers may face higher costs, reduced financial autonomy, and increased privacy risks. It’s a future where citizens must surrender personal data and financial freedoms for the illusion of safety.

South Africans should demand clear opt-out mechanisms, independent oversight of biometric systems, and guarantees protecting financial freedoms. Anything less risks turning the nation’s financial infrastructure into a tool of control rather than empowerment.

What are your thoughts? Will these changes genuinely protect citizens, or are they paving the way for systemic overreach?

Sources:

• Privacy Concerns with Aadhaar – Communications of the ACM
  Discusses vulnerabilities in India’s Aadhaar biometric ID system, highlighting risks of identity theft and unauthorized data use.

• The Breach of a Face Recognition Firm Reveals a Hidden Danger – WIRED
  Reports on a significant data breach involving facial recognition technology, emphasizing emerging privacy concerns.

• AI-driven biometric fraud surges in Africa, fueling financial crimes – VOA News
  Details the rise of AI-powered biometric fraud in Africa, leading to increased financial crimes.

• Everything You Need to Know About the Cyprus Bank Disaster – The Atlantic
  Provides an in-depth analysis of the 2013 Cyprus banking crisis and its implications for depositors.

• Lebanon to refund locked bank deposits – AGBI
  Covers Lebanon’s plans to return billions in locked bank deposits to customers amid financial reforms.

• Bitcoin donation freeze was unlawful, Canada judge rules – Blockworks
  Discusses a Canadian court ruling deeming the government’s freeze of protest-related bitcoin donations unconstitutional.

• India’s Congress says $25m frozen by tax department ahead of election – Al Jazeera
  Reports on the freezing of the Indian National Congress party’s bank accounts by the tax department before national elections.

• Digital identity and biometrics in Africa, Part 2: risks and questions – Medium
  Explores the political and logistical risks associated with biometric systems in African financial services.

The post Shocking Loopholes In SA’s Financial Security Laws appeared first on Casting Out Deceptions.

The Promise of Smart IDs via Banks
According to a report by BusinessTech, South Africa’s biggest banks will soon serve as conduits for issuing Smart IDs and passports. This initiative is presented as a customer-centric move aimed at reducing congestion at Home Affairs offices and speeding up application processes. Proponents claim these Smart IDs offer enhanced security, with officials asserting that they are “far more resistant to forgery” than older forms of identification.

But is this claim justified? Evidence suggests otherwise. While digitisation may modernise the process, it also introduces vulnerabilities that could undermine security rather than bolster it. Here are 10 counterarguments challenging the narrative that Smart IDs are “forgery-resistant.”

1. Centralisation Increases Risk of Data Breaches
South Africa’s reliance on centralised data systems has exposed critical vulnerabilities, as seen in cyberattacks targeting government departments and financial institutions. Recent breaches have affected entities like the Department of Public Works, which lost over R300 million in a decade, and the Government Pensions Administration Agency, where hackers claimed to have stolen 668 GB of sensitive data. High-profile attacks on Transnet, the Office of the Chief Justice, and the City of Johannesburg further highlight the dangers of centralised IT systems. Experts warn that such breaches leave millions exposed to identity theft, fraud, and exploitation, as personal data sold on the dark web remains valuable for years. TimesLive.

2. Biometric Forgery is a Growing Threat
Unlike traditional ID theft, biometric forgery is harder to detect but not impossible. Recent advancements in 3D printing and AI-driven face-swapping technologies have demonstrated how fingerprints and facial features can be replicated. Criminals with the right tools could circumvent biometric scanners, calling into question the claim that Smart IDs are “forgery-resistant.”

3. Dependency on Corporate Systems
While Home Affairs is a government entity, private banks are profit-driven corporations. Relying on their infrastructure to issue IDs raises questions about the extent to which they control public access to essential services. If banks experience system failures, power outages, or cyberattacks, millions could be left without access to their IDs. ITWeb.

4. Loss of Personal Autonomy Over Identity
When citizens must rely on banks for Smart ID issuance, they cede control over their identification process to private entities. This system creates a dynamic where access to vital public documents depends on private sector rules and systems. Worse still, banks might impose additional conditions, such as requiring customers to open accounts or pay fees for “added convenience.”

5. Increased Surveillance and Technocratic Control
Digital IDs are a core component of the World Economic Forum’s (WEF) push for a global identification system. While branded as “convenience,” these systems also enable mass tracking and monitoring of citizens. If South Africa’s Smart IDs are linked to financial services, every transaction, movement, and purchase may soon be traceable.

6. “Forgery-Resistance” is a Marketing Term, Not a Guarantee
The claim that Smart IDs are “forgery-resistant” sounds reassuring, but similar claims have been made for past “secure” systems that were later compromised. Hackers are often one step ahead of the technology, finding ways to bypass security measures. In reality, no system is foolproof, especially one that is highly centralised and accessible through multiple points.

7. Exclusion of Unbanked Populations
South Africa has around 11 million unbanked citizens, many living in rural areas without access to banking services. By shifting ID services to banks, an entire demographic may be excluded from essential identification documents, worsening inequality. Smart ID issuance through banks risks becoming a privilege rather than a right.

8. Potential Hidden Costs for Users
Currently, Home Affairs issues Smart IDs as a free public service, but only for first-time applicants (like 16-year-olds). If you’re replacing a green ID book, it costs R140. With the process shifting to banks like ABSA, FNB, Nedbank, and Standard Bank, there’s a strong chance that “convenience fees” could follow. Banks might introduce handling fees or impose new conditions, further monetising a once-public service.

9. Reduced Accountability and Oversight
Home Affairs is a government department with public accountability mechanisms. If services shift to banks, the same level of oversight may not apply. Complaints and disputes regarding Smart IDs might be handled under bank policies instead of government regulations, making recourse more difficult for citizens.

10. A Single Point of Failure
When ID systems are centralised within banking institutions a single point of failure is created. If a major bank’s system goes down, South Africans may be unable to access their IDs, impacting everything from travel to accessing government services. The potential for systemic collapse increases the broader societal risk.

While South Africa’s government claims that Smart IDs issued via banks are more “forgery-resistant,” the evidence suggests otherwise. Increased centralisation, corporate control, and the potential for system failures expose the public to greater risks than the narrative suggests. Instead of handing over critical identification services to profit-driven financial institutions, citizens and policymakers should question who benefits most from this arrangement.

The post Big Banks to Issue Smart IDs and Passports — But Are They Truly “Forgery-Resistant”? appeared first on Casting Out Deceptions.