SASSA Forensic Investigation Into SRD Fraud Must Be Escalated

Dear Editor

Today, the DA wrote to President Cyril Ramaphosa to urgently act on our request, dated 27 November 2024, for a Special Investigating Unit (SIU) probe into the extent of fraud within the SASSA SRD grant system. This investigation would help uncover the impact on many vulnerable South Africans, particularly youth, who are unable to access the Social Relief of Distress (SRD) grant due to fraudulent grants issued in their names.

Yesterday, the parliamentary committee on social development received SASSA’s presentation on the final audit report for the vulnerability assessment and penetration testing of the SRD online system, as well as an update on the investigation into weaknesses and fraud in the SRD grant application and payment system. The presentation also covered SASSA’s remedial plan in response to the findings.

While SASSA confirmed that the SRD online system is currently secure, the DA finds it extremely concerning that potentially malicious websites that mimic the official SASSA website (https://srd.sassa.gov.za/) have yet to be taken down. It is through these unofficial domains, of which 20 were listed in the report, that beneficiaries’ personal details are compromised.

The DA understands that cybersecurity is a constantly evolving space with thieves constantly testing the limits in order to gain access to information and funds, but we expect SASSA to have the highest possible measures, and the best possible risk mitigation plans in place to protect South Africa’s most vulnerable citizens.

It is deeply concerning that the biometric verification process Know Your Customer (KYC) is still temperamental with SASSA confirming the system is currently down while the roll out of biometric kiosks at SASSA local offices for beneficiaries who do not have smart phones to do fingerprint and facial verifications , is still underway. The lack of identity verification was the fundamental design flaw of the SRD system, and it has yet to be corrected.

We also find it unacceptable that progress on phase 2, the investigation on weaknesses and fraud in the application and payment system of the SRD grant, appears to have stalled as the Terms of Reference is incomplete.

The Department of Social Development’s recommendation to Minister for Social Development, Minister Tolashe, that an independent service provider with extensive experience in investigating social grant fraud with the ability to conduct digital forensic investigation on a national scale be appointed, echoes the DA’s initial call for an independent investigation by the SIU into fraud of social grants.

Of further concern is the redeployment of SASSA’s Chief Information Officer (CIO) to Mpumalanga instead of appearing before Parliament to account for what is essentially an ICT crisis. Instead, an Acting CIO has been appointed which along with the continued suspension of the SASSA CEO (on full pay), sparks curiosity.

SASSA continues to navigate crisis after crisis while vulnerable South Africans fall through the cracks.

Regards

Alexandra Abrahams MP
DA Deputy Spokesperson on Social Development