Eskom Confirms Online Vending System Secure After Fraud Scare

South Africans can breathe a little easier when topping up their prepaid electricity meters: Eskom has confirmed there are no new breaches of its Online Vending System (OVS). The announcement follows a months-long crackdown on a fraudulent token scheme that had raised serious concerns about both the physical and digital security of the country’s prepaid electricity infrastructure.

The issue first came to light in Eskom’s 2024 Annual Results, where a forensic report revealed how the OVS had been exploited to generate and distribute fraudulent electricity tokens, potentially costing the utility billions of rands.

Decisive Measures Restoring Confidence

Eskom spokesperson Daphne Mokwena emphasised that the utility took decisive action to strengthen its systems and protect revenue.

“Any claims that Eskom did not respond to media queries are inaccurate,” she said, noting that two detailed updates were issued in July 2025, outlining the intervention strategy designed to prevent further abuse.

Actions taken include:

• Tighter physical access controls in vending environments to prevent unauthorized manipulation

• Enhanced cybersecurity monitoring to detect and block suspicious activity

• Stronger user-access controls with weekly dashboards to flag irregularities

These steps, Mokwena said, are part of a multi-layered approach to secure both the technology and the people responsible for maintaining the system.

Employees Under Scrutiny

The scandal also revealed internal vulnerabilities, prompting Eskom to review staff involvement. Some employees implicated in the fraudulent activity have been referred to law enforcement, with investigations already concluded for certain cases.

“The company will cooperate fully with the authorities,” Mokwena added.

How the Fraud Worked

The illicit tokens exploited vulnerabilities in both the physical and digital components of the OVS, highlighting risks in the prepaid electricity system. The forensic probe, launched in December 2024, investigated both the technical breaches and the possible complicity of staff members, seeking to restore public trust in the system.

Rebuilding Public Trust

Social media reactions following Eskom’s latest update have been cautiously positive, with many South Africans welcoming the assurance that their prepaid electricity top-ups are now secure. Some commenters, however, have stressed the need for ongoing vigilance, reminding Eskom users that past breaches had caused widespread frustration and financial losses.

Energy analysts note that Eskom’s response could serve as a case study for utilities across Africa, demonstrating the importance of cybersecurity investment, strong operational controls, and proactive law enforcement collaboration in protecting critical infrastructure.

While Eskom reports that vending fraud is now at very low levels, Mokwena cautioned that the investigation continues in coordination with law enforcement.

“Stronger systems, smarter technology, and decisive action are protecting revenue and ensuring secure, reliable electricity for all South Africans,” she said.

For the millions of South Africans who rely on prepaid electricity, the message is clear: Eskom’s OVS is back on track, but vigilance remains key to preventing a repeat of last year’s costly security lapses