Dailymaverick logo

Business Maverick

This article is more than a year old

TAP CARD, SWIPE CASH

Hawks arrest two for rigging a Yoco card payment machine, which the company says is ‘near impossible’

The Eastern Cape Hawks have arrested two men who ‘rerouted’ Yoco mobile card payment machines to send money to one of their accounts instead of the business owner, in what the company described as a near-impossible fraud.
Hawks arrest two for rigging a Yoco card payment machine, which the company says is ‘near impossible’ Dylan 'Buzz' Strydom (L) and Mkhululi Vena (R) have appeared in the Mthatha Specialised Commercial Crimes Court for fraud after allegedly programming a hotel's card machine to send the money to themselves. | Yoco Neo Touch. (Photo: Supplied)

In what card machine company Yoco described as a “near-impossible” fraud, two men have allegedly managed to divert R1.2-million from card transactions from an Eastern Cape hotel owner to their own bank account.

The Hawks said on Tuesday they were investigating several other cases and that more cases are also before court.

Dylan “Buzz” Strydom (27) from Komani was arrested in September on fraud charges for allegedly selling a rigged Yoco machine to the owner of the hotel, based in Tsomo in the Eastern Cape, for R3,500. It was set up in a way that the money from sales that went through on that machine was deposited into the alleged fraudsters’ account and not that of the business. 

This past weekend the man who allegedly owned the account into which the money was deposited, Mkhululi Vena (41), was also arrested.

Vena appeared before the Mthatha Specialised Commercial Crimes Court on Monday and has provisionally been charged with fraud. He has been released on bail of R1,000. 

Strydom and Vena are due back in court on 22 January. 

Hawks spokesperson Ndiphiwe Mhlakuvana said it is alleged that the complainant – the Tsomo hotel owner – was approached by someone who introduced himself as an employee of Yoco, a mobile speedpoint machine company. 

An official response from the company confirmed that Yoco worked with the Hawks and provided key transactional information, including statements and account details relevant to the investigation. 

“This collaboration was crucial in the recent arrest,” the company said.

“The suspects are reported to have sold three (3) speedpoint machines for R3,500 to the complainant. It is further alleged that after a few months of using these speedpoint machines, the complainant realised that the sales money was not going into their business account and decided to open a case of fraud with the Hawks,” Mhlakuvana said.

Mhlakuvana said the Hawks’ investigations showed the bank account into which the sales money was going belonged to Vena, who was living in East London. 

“Further investigations established that the suspect colluded with Strydom to defraud the complainant.”

The transactions, worth R1.2-million, had taken place between July and September 2023.

The provincial Head of the Hawks, Major General Mboiki Obed Ngwenya, applauded the swift response and proper use of expert investigation skills by the team.

Yoco said in its written response to questions that it was nearly impossible to rig a Yoco machine in this way. 

“Yoco devices are engineered with robust security features to prevent unauthorised manipulation. The only scenario in which funds could be redirected involves a fraudster impersonating a Yoco representative during the setup process and deceitfully entering incorrect banking details. Merchants are advised to ensure all setup procedures are conducted through verified Yoco channels,” is said. 

The company also gave the following safety advice:

“To confirm the authenticity of a Yoco device, ensure it is purchased directly from Yoco or an authorised distributor. Each Yoco device comes with unique identifiers which can be authenticated through the Yoco app or by contacting Yoco’s customer support for verification.

“It’s nearly impossible to redirect funds on a genuine Yoco Device without authorised access from the merchant to the Yoco Profile linked to the device. Even if access were gained, such actions would leave a digital footprint, which helps to detect and prevent fraud.” DM

Comments (10)

carlbothabp@yahoo.com Nov 13, 2024, 07:07 AM

these days, death is the only thing that still seems to be foolproof

kate.posthumus Nov 14, 2024, 12:09 PM

Did you follow the Thabo Bester saga? Turns out even death is not fool-proof! ;)

ozinsky Nov 13, 2024, 07:22 AM

"Nearly impossible" actually means that it is possible.

Fanie Rajesh Ngabiso Nov 13, 2024, 07:44 AM

They certainly fit my perception of criminal mastermind geniuses. :D :D ...but the Yocos on me it seems. Boom Boom

John Cawood Nov 13, 2024, 07:55 AM

So the Genius sent the money to his own bank account? In his own name, a registered bank account? And he expected that all the hotel cash would flow into his account for ever without being discovered? Not so clever maybe . .

Malcolm McManus Nov 13, 2024, 12:48 PM

To run a business and not notice 1.2 million not going into your account over a 3 month period also not so clever.

Elzaan Rohde Nov 13, 2024, 08:33 AM

Admittedly, I'm binge-watching Law and Order at the moment which might skew my perspective, but isn't R1,000 bail a bit low? What are the chances the accused will be back in court? I hope the business owner will be able to recover the funds.

Bernhard Scheffler Nov 13, 2024, 11:07 AM

Indeed! R1 000 for theft of R1 200 000 is rather low!

Julian Cape Town Nov 13, 2024, 08:49 AM

Ridiculous response from Yoco. If I work in a restaurant, there is nothing to stop me walking into Makro, purchasing a Yoco machine, and linking it to my bank account. Later that day, while at work, I pull the Yoco machine out of my pocket, and the customer has unwittingly paid me, and not he owner

kate.posthumus Nov 14, 2024, 12:07 PM

Sure you could. But that hasn't gotten around the safety features of the machine itself. That is on the owner of the business to be on top of their own book-keeping. In this case, the machine hasn't been hacked, just set up fraudulently.

Rae Earl Nov 13, 2024, 08:52 AM

Our timid and sloppy magistrates at it again, dishing out laughable bail amounts and releasing the crooks back into mainstream society at short notice so they can carry on with their filthy thieving.

Andries Herholdt Nov 13, 2024, 09:48 AM

Never believe a company that says their product/systems/network is impossible to hack. Never believe a company that claims they'll never ever lose your email address/passwords/credit card details. The more they insist, the less you should believe them.

Harry Boyle Nov 13, 2024, 10:05 AM

DM your headline is misleading, To hack something is to delve into the inner programming of the device, this machine was just set up to the fraudsters account, hardly a hack!!

Indeed Jhb Nov 13, 2024, 10:19 AM

Agreed

DailyMaverick@ycn.co.za Nov 13, 2024, 04:24 PM

Just cause it was an easy hack doesn't mean it's not a hack.

kate.posthumus Nov 14, 2024, 12:08 PM

In this case though, it really isn't a hack.

Chris Elston Nov 13, 2024, 10:32 AM

It would be most informative to read how these scammers open bank accounts,transfer, and then extract their stolen funds without leaving a trace. The banks should be able to trace these transactions down the line DM should interview the top banks on this topic of how the money is "washed."