Security and Fraud
We are serious about preventing fraud and misconduct in the Momentum environment.
The Momentum Ethics and Fraud line is a facility where you can report any misconduct or fraud that you are aware of within Momentum Metropolitan Holdings Limited. All incidents reported will be handled with the strictest of confidence, and the caller's identity will remain anonymous.
We view any criminal activity as an extremely serious matter with zero-tolerance for misconduct or fraud and are committed to the enforcement of an anti-crime culture throughout the organisation.
If you suspect fraud, irregular or unethical practices, you can report it by contacting us.
Contact numbers
The Momentum Ethics and Fraud line is in operation 24 hours a day, 7 days a week, and 365 days a year.
The service is provided and administered by Deloitte Tip-offs Anonymous (Pty), which ensures an independent and unbiased reporting platform.
Momentum Health Solutions
momentumhealthsolutions@tip-offs.com
To report fraud and unethical practices relating to the schemes administered previously by Metropolitan health or MMI Health.
The service is provided and administered by Deloitte Tip-offs Anonymous (Pty), which ensures an independent and unbiased reporting platform.
The service is provided and administered by Deloitte Tip-offs Anonymous (Pty), which ensures an independent and unbiased reporting platform.
Reporting directly to Group Forensic Services
Reports can also be made directly to the Group Forensic Services department. Momentum guarantees that all direct disclosures will remain confidential and that every effort will be made not to reveal the identity of an informant.
Quick tips on phishing scams you need to know
To ensure the safety of your personal information across various digital platforms, we’d like to remind you of the continuous threat of phishing scams, and ask that you be mindful of any suspicious-looking emails, SMS or WhatsApp messages.
Remember, it is in your best interest to remain vigilant with any correspondence you receive by not clicking on any links or attachments, if you are unsure of their safety or origin. When in doubt, simply delete.
Things to look out for
Criminals come up with new ways to steal your money and identity every day. Here are a few things you can look out for to ensure your safety.
- Emails asking you to confirm personal information, such as passwords, personal pins or your ID number. This one should always be a huge red flag.
- “Business” emails sent from public email domains. Another red flag.
- Emails using generic greetings such as “Dear Sir” or “Hello dear” instead of your name.
- Unexpected emails from unknown or even legitimate-looking sources, prompting you to click on a link or attachment.
- Poorly worded emails. Pay as much attention to grammar as you would the spelling.
- Always check that the URL provided matches the actual domain.
Types of phishing scams
Find out about popular phishing techniques, to help keep you clued up, and armed with enough “tech-savvy” to avoid getting scammed.
Deceptive phishing
This is by far the most popular method used by fraudsters. You get a credible-looking email from a bank or other reputable institution asking you to confirm personal information either by responding to the email or following a link. No bank will ever ask you to disclose sensitive information through an email, SMS or digital link.
Spear phishing
Unlike traditional email phishing, where one email is sent to numerous random users, spear phishing is more targeted. Fraudsters study their victims' online habits then customise their messages accordingly. When you open the email, the source and content look legitimate, and the next thing you know, you've been scammed.
Link manipulation
Crafty and often difficult to spot. With this technique, you receive a link and click on it, thinking it’s taking you to a specific website, but you land on the phisher’s malicious site, which is often a duplicate of a legitimate website. Always be wary of emails prompting you to click on links or attachments.
Website spoofing or forgery
As the name suggests, criminals create a replica of a genuine website, with the aim of collecting confidential information from users in order to defraud them. Always check to see if the URL is correct and matches the website. Preferably type the URL yourself rather than follow a link.
Vishing
Vishing is merely phishing done through a telephone call. Similar to the electronic version, the aim is to trick you into handing over confidential information to the caller, who usually claims to be representing a legitimate institution such as your bank.
Smishing
Crafty and often difficult to spot. With this technique you receive a link and click on it, thinking it's taking you to a specific website. Instead, you land on the phisher's malicious site, which is often a duplicate of a legitimate website. Always be wary of emails prompting you to click on links or attachments.
Already been scammed? Take immediate action to avoid further damage
Relax, it happens to the best of us. If you suspect you may have fallen victim to a scam, make use of the following tips to protect yourself from further loss.
- Look out for warning signs that your information may have been compromised, such as unexpected SMSs asking you to verify your pin.
- Change ALL your passwords immediately. This goes for emails, online banking and other profiles, as well as social media passwords.
- Run a full system scan to help detect any viruses or harmful malware in your device.
- Get in touch with crucial institutions like your bank, insurance provider and retail stores you may have credit accounts with, to inform them of the fraud.
- Inform all major credit rating agencies to protect your credit record.
- Report the fraud on the Southern African Fraud Prevention Service (SAFPS) helpline: +27(0)11 867 2234.
Visit the SAFPS website for more comprehensive tips on fraud prevention and other useful contacts.