Procurement Scam Alert

Eskom Forensic has been inundated with volumes of complaints relating to fraudulent Eskom orders (procurement scam). The scammers target companies across the country using the Eskom name to unsuspecting companies.
Approach / Method used
The victim’s company would receive a bogus Request for Quote (RFQ) either by email or by fax with the Eskom logo. The contact person would supposedly be a “buyer” who is unknown to Eskom and with incorrect Eskom contact details.

The following scenarios are normally used:


Core Business
 If the bogus RFQ is reflecting the core items supplied by the approached company:
    • They would require items in bulk (or high volume of stock) with a total price not less than R1m.
    • The RFQ would reflect as if it is coming from Eskom’s Finance Director or CEO.
    • They would fax forged order forms to the victim and ask them to deliver goods to a specified address.  


Rare Equipment
If the bogus RFQ is sent to a company that does not deal with equipment the method is usually as follows:
    • They would create a bogus website reflecting a company (bogus OEM) that would be able to provide the specific unique item required.
    • The referred bogus company is part of the same syndicate, although the numbers reflected would differ from those of  the “buyer” so that it would be as if one is dealing with different people / entities.
    • After submitting the RFQ back to Eskom, a fraudulent order number is issued with delivery date within a short period of time.
    • Upon engaging this bogus company, they would request an upfront deposit of approximately 50% of the total value.
    • The deposit would have to be paid into the bank account belonging to a certain individual, not a business account.
    • In some instances the scammers would try to put pressure to get the whole amount of an order before delivery would be made.
    • The bogus company would offer to deliver the goods to Eskom on behalf of the victim company, and request to meet the representative of the victim company at the delivery address.
    • No delivery would be made to Eskom and they would sometimes provide a fake delivery note to the victim company as if the goods were delivered to Eskom and demand the outstanding balance. This would serve as delaying tactics so that they would be able to clear their bank account before the victim registers a criminal case for the bank account to be frozen.
    • If the victim demands more information indicative of being suspicious, they would avoid taking calls from the victim or they would discontinue using their contact numbers and close the website to open another one.
 The delivery address reflected on purchase orders is either an address that does not belong to Eskom or a correct Eskom address.  Where delivery is made to correct Eskom premises, receipt of goods will be done outside the security check point by scammers purporting to be Eskom employees.
Please use the following to report suspicious activities:  Primedia Crime Line:  SMS 32211 or visit  
It should be noted that Eskom does not use email addresses that end with:
NB: These domain addresses change frequently.
Because it is also possible that the fraudsters can spoof a correct Eskom e-mail address, suppliers must be vigilant and where necessary verify the RFQ using Eskom numbers other than any contact details that appear on the RFQ / order.
If a supplier has to make a deposit into a bank account of a provider with no previous business relations, it is advisable for the supplier to verify ownership with the bank before making the deposit.
Victims should immediately register criminal case of fraud with the SAPS as soon as they become aware that they have been scammed and alert the bank that was used to deposit the funds.