Analysis · 14 Oct 2024 · GroundUp
We discovered massive fraud in SASSA’s grant system
Thousands of grants were being claimed with the ID numbers of people who had never applied. The findings went to Parliament.
SASSA SRDIdentity fraud
I find security holes in South African systems.
Then I write about them. I study computer science at Stellenbosch University, I’ve done three security and fraud internships at Capitec, and I build software and report for GroundUp News. So far that’s meant SASSA’s grant system, government websites, a R511-million scam and, most recently, Gauteng’s panic app.
Watches the logs · poke it
18
GroundUp bylines
5,000+
Security flaws in SITA’s services
R511m
Lost in the Morita Forestry scam
Top 200
M&G Young South Africans, 2025
Latest
Gauteng’s panic app left crime reports open
The database behind the province’s e-Panic Button app wasn’t secured. Anyone who knew where to look could see crime reports, including reports of domestic violence and assault, along with the names, phone numbers, locations and movement histories of the people who filed them.
What I do
Three kinds of work
They overlap more than you’d think, often in the same week.
Security researcher
At Capitec I’ve worked across red, blue and purple teams: internal penetration testing, breaking out of endpoints, moving across the network, and testing APIs with Burp Suite and Postman. I found and reported two internal vulnerabilities.
Investigative reporter
I write for GroundUp News about fraud, data breaches, RICA compliance and government IT. The SASSA grant investigation made national news and was taken up by Parliament.
Developer & sysadmin
Django, Python, Linux, Nginx, Cloudflare, Azure, Microsoft 365 and Google Workspace. I’ve built newsroom features, moved whole organisations onto new systems, and traced a denial-of-service attack back to its source.
Selected work
Three stories that made an impact
News · 3 Jun 2026 · GroundUp
The state says its computer systems are secure. We looked. They’re not
The first of four articles with Nathan Geffen on how secure and usable government websites are. SITA’s internet services had more than 5,000 security flaws.
Four-part seriesGov IT
Feature · 31 Jul 2026 · GroundUp
South Africans lose hundreds of millions of rands to Morita Forestry investment scam
Social media influencers helped make the scam possible, and were well paid for it. Later articles looked at how the police lent it credibility, and at the money mules who moved the cash.
Pyramid schemeThree parts
Recognition
Awards & honours
Mail & Guardian Top 200 Young South AfricansEditor’s Choice · 2025
DRD Special Recognition AwardEthical leadership and bravery
SA Reserve Bank MPC Schools ChallengeTeam Governor · Finalist
Stellenbosch University1st year Cum Laude
Elsewhere
Press about the work
MyBroadband
“The huge security flaw exposed in South Africa’s financial systems”
Stellenbosch University
Profile on the SASSA grant fraud findings
Mail & Guardian
Top 200 Young South Africans, Editor’s Choice
Available for
Talks and consulting
Speaking & media
Conferences, panels, campus talks, podcasts and interviews about grant fraud, scams, data breaches and government IT.
Topics and booking →
Consulting via Digifend
Websites, hosting, security reviews, and cloud and workspace migrations for small businesses and nonprofits, since 2023.
What I offer →
Found something broken?
Tip-offs, vulnerability reports, job offers, or a website that needs building. Email is the quickest way to reach me.