White-Collar Crime 2023 Comparisons

Last Updated October 24, 2023

Law and Practice

Authors



Herbert Smith Freehills South Africa LLP (HSF) is a leading global law firm with over 2,000 legal professionals in 27 offices worldwide, spanning Europe, the Middle East, Africa, Asia-Pacific and North America. It is recognised as a global leader in investigations, contentious regulatory work and dispute resolution. Its investigations capability is extensive, comprising more than 50 investigations partners and 100 investigations lawyers in its global practice. HSF acts for clients operating in many regions and industries, and its global practice covers all areas of white-collar criminal investigations and enforcement, regulatory investigations, competition investigations, tax investigations and cybercrime, as well as offering advice on trade sanctions, insider trading and anti-money laundering, and the development of sophisticated multi-jurisdictional compliance programmes. It also advises on cross-border and domestic criminal, internal and regulatory investigations, including legal and regulatory exposure, disclosure and reporting obligations and reputational issues arising from investigations.

South Africa's criminal legal framework consists of a mixture of common law and statutory offences, and does not include a formal framework of categories of offences. However, offences can be categorised in terms of severity, by way of the sentence or sanction ascribed in connection with the offence, whether in terms of minimum sentences prescribed under legislation or in terms of precedent through case law. For most offences in South Africa, the following elements must be proved beyond a reasonable doubt by the state against the accused: voluntary conduct that is unlawful, criminal capacity and fault (in the form of intention or negligence).

In terms of white-collar offences, South Africa has a matrix of domestic legislation that caters for the particular offences associated with white-collar crime, which stands alongside common law offences such as fraud. The primary statutes that form part of the matrix of statutes dealing with white-collar crime in South Africa are as follows.

  • The Prevention and Combatting of Corrupt Activities Act 12 of 2004 (PRECCA) is South Africa's principal piece of corruption legislation and creates the general offence of corruption. It also makes provision for a number of specific corruption offences as well as ancillary offences, such as being an accessory to corruption and attempting or conspiring to commit an offence under PRECCA.
  • The Prevention of Organised Crime Act 121 of 1998 (POCA) creates statutory offences that are encountered in the organised crime environment, such as racketeering, money laundering and offences relating to the proceeds of unlawful activities. The offences of racketeering and money laundering are cast widely, and address conduct relating to a pattern of racketeering activity and conduct concerning arrangements or transactions that involve the proceeds of unlawful activity.
  • The Financial Intelligence Centre Act 38 of 2011 (FICA) plays a central role in the combatting of white-collar crime in South Africa. It established the Financial Intelligence Centre, a state agency tasked with the identification and combatting of money laundering and terrorist financing and the implementation of financial sanctions pursuant to resolutions of the Security Council of the United Nations. In addition to the monitoring of money-related activity, FICA creates reporting and monitoring obligations for accountable institutions (such as banks), and monitoring, inspection and investigation powers for the Financial Intelligence Centre in relation to suspected offences such as money laundering or terrorist financing. FICA also creates offences relating to non-compliance with its provisions, and offences of interfering in the investigations of the Financial Intelligence Centre.

Motive is not required to prove liability for the commission of a crime, nor for an offence to be punishable. However, fault – whether in the form of intention or negligence – is generally a requirement that must be proven.

The Criminal Procedure Act 51 of 1977 (CPA) governs procedures and related matters in criminal proceedings. Section 18 of the CPA provides that the right to prosecute any offence will lapse after the expiry of a period of 20 years from the time when the offence was committed, except for certain specific offences such as murder, rape or treason. White-collar crimes would not fall within the list of offences that exceed this 20-year period. In this regard, the CPA defines an offence as an act or omission that is punishable by law.

Section 35 of PRECCA specifically provides that a South African court may have jurisdiction to prosecute a corruption offence outside of South Africa in the following circumstances:

  • if the alleged offender is a South African citizen or a company incorporated or registered in South Africa;
  • if the person to be charged is ordinarily resident in South Africa; or
  • if the person was arrested in the territory, in territorial waters or on board a ship or aircraft registered in South Africa.

POCA's ambit extends beyond the borders of South Africa; any conduct that meets the definition of racketeering in POCA, whether occurring in South Africa or elsewhere, is also an offence in South Africa. Furthermore, the definition of “unlawful activities” that features in many of the offences in POCA includes unlawful conduct that constitutes a crime whether before or after the commencement of POCA and whether it occurred in South Africa or elsewhere. It is evident that POCA casts the net wide in terms of attaching culpability in relation to offences that may be committed outside the borders of South Africa. This extends to property that may have been used in the commission of an offence, under POCA, in South Africa or elsewhere.

South Africa has also enacted legislation with the specific purpose of facilitating co-operation with foreign enforcement authorities; see 2.5 Mutual Legal Assistance Treaties and Cross-Border Co-operation.

Corporate entities may face criminal liability in South Africa for a wide range of offences. They can be prosecuted for any crime, unless the law specifically limits liability for a particular offence to natural persons.

Section 332 of the CPA contains express provisions deeming certain acts and omissions of the directors and “servants” of a company to be the acts and omissions of the company itself. In general, the acts and omissions of a company’s directors or “servants”, when exercising their powers or performing their duties or when undertaken in furtherance of the company’s interests, are attributed to the company for the purposes of imposing criminal liability on the company for any statutory or common law offence.

While there is no definition of “servant”, the term is understood to encompass not only employees but also anyone whose work falls under the company’s control. In general, for a company to incur criminal liability, a degree of supervision and control by the company over the relevant individual is required.

In South Africa, however, if an individual commits a crime while acting to further the company’s interests, regardless of whether such conduct was within the scope of that individual’s duties, a company may face criminal liability.

Both the company and the individuals involved may be prosecuted for the same crime. A company is a legal person without any physical existence and has no mind or will of its own. For this reason, the acts, omissions, intentions, purposes and knowledge of certain individuals within the company are regarded as being the acts, omissions, intentions, purposes and knowledge of the company. However, even if the individuals who committed an offence are not prosecuted in their personal capacities, a company may be prosecuted for the offence. Company representatives will face criminal liability only if they were complicit in the wrongdoing.

As separate legal entities, parent companies are unlikely to face criminal liability for the conduct of their subsidiaries unless they are complicit in the unlawful conduct, or knowingly condone it. Furthermore, if a company is acquired after the occurrence of the offending conduct, the acquiring entity cannot be held liable for the prior conduct of the target, nor will any newly appointed board members or employees face liability as they were not directors and/or employees (as the case may be) at the time of the commission of the offence.

The common law in South Africa entitles a person who has suffered financial loss caused by the unlawful and wrongful actions of another individual to recover that financial loss from the wrongdoer. This would include a claim by a victim against the actions of the perpetrator of a white-collar crime. Such a claim would usually be instituted under the law of “delict” (tort).

In order to be successful in a claim for delictual damages, the plaintiff must prove the following:

  • the defendant performed an act;
  • the act was “wrongful”;
  • the wrongful act caused harm to the plaintiff, in the form of damage or loss; and
  • the act occurred due to the fault (whether intentionally or negligently) of the defendant.

Importantly, South African law does not recognise the concept of “punitive damages”, as such; the victim of a crime is only able to recover the damage that they can prove they have actually suffered.

Although the provisions of POCA are more focused on the forfeiture and confiscation of the proceeds of crimes to the state, it also contains provisions which specifically recognise that there may be individuals who wish to recover property from the perpetrator or perpetrators through civil proceedings. In this regard, under POCA, the National Director of Public Prosecutions is entitled to apply to the state for the confiscation or forfeiture of the benefits derived from any unlawful activities (ie, the proceeds of a crime).

However, POCA also allows individuals who have “suffered damage to or loss of property or injury as a result of an offence or related criminal activity (...) which was committed by the defendant” to make representations to the court in regard to suspending the forfeiture of those proceeds to the state, pending the civil proceedings to be instituted, and finalised, by the victim against the perpetrator. Those proceeds can then be used to satisfy any judgment against the perpetrator.

The Asset Forfeiture Unit (AFU) was established in 1999 specifically to ensure that the powers of confiscation and seizure under POCA were implemented. The AFU's mandate is primarily to target the proceeds of economic crimes and to seize criminal assets derived from or deemed the instrumentality of a criminal offence.

The court of first instance in South Africa is a magistrates court or a high court (depending on the quantum of the dispute).

Commissions

In the past few years, South Africa has embarked upon a series of judicial Commissions of Inquiry (Commissions) to investigate and gather information relating to concerns of widespread corruption and maladministration in South Africa's public sector, with the most high-profile being the Judicial Commission of Inquiry into Allegations of State Capture (the Zondo Commission).

These Commissions have revealed allegations of corruption involving multiple high-profile individuals and well-known global corporations relating to dealings with the South African government. The involvement of the Gupta family has been a common thread in the allegations of corruption exposed in the various Commissions. Their involvement in corruption in South Africa resulted in three brothers from the Gupta family being among the first 22 people on the list of individuals sanctioned in the UK's Global Anti-Corruption Sanctions Regulations, published in late April 2021. In February 2022, Interpol issued Red Notices against two of the Gupta brothers – Atul and Rajesh – for their alleged involvement in state capture, fraud and money laundering that took place in South Africa. Atul and Rajesh have since been arrested in the UAE in connection with the aforementioned crimes, and extradition negotiations took place between South Africa and the UAE, with the goal of extraditing the brothers so they can face charges in South Africa for their crimes.

In April 2023, the UAE court dismissed South Africa's request to extradite the brothers. South Africa denounced the UAE court's decision and expressed the view that it runs counter to Article 17 of the UN Convention Against Corruption, to which both nations are a signatory. South Africa and the UAE intend to engage and discuss South Africa's resubmission of the extradition application for the Gupta brothers.

The final report of the Zondo Commission was released in June 2022, bringing an end to over ZAR1 billion of state expenditure and over four years of investigations and reports issued by the Commission into the alleged state capture that took place during former President Jacob Zuma's term. Since the publication of the multiple reports, various arrests have been made of those found to have been involved. The high-profile arrests include the two Gupta brothers, the former chief executive of Transnet and Eskom (Brian Molefe), the former chief financial officer of Transnet and Eskom (Anoj Singh), and another former chief executive of Transnet (Siyabonga Gama).

In the first half of 2022, the Zondo Commission made a number of recommendations on how the legal framework for white-collar crimes in South Africa could be enhanced in order to combat such crimes, especially in the public sector. The recommendations include:

  • a national charter against corruption (specifically in public procurement);
  • the establishment of an independent agency to combat corruption;
  • enhanced protection and incentives for whistle-blowers;
  • deferred prosecution agreements; and
  • amending PRECCA to include a “failure to prevent bribery” offence.

Other Authorities

The President also established the Investigating Directorate (ID) in the office of the National Prosecuting Authority (NPA), to investigate high-profile commercial crimes with a specific focus on state capture and corruption. The ID is also set to commence investigations in line with the Zondo Commission reports, which revealed widespread corruption in South Africa's public sector.

In the financial regulatory space, the Financial Sector Conduct Authority (FSCA) has been more active, with notable enforcement action taken against Steinhoff International Holdings (Steinhoff) and, more recently, Tongaat Hulett, both of which were found to be guilty of contravening the Financial Markets Act 19 of 2012. In September 2019, Steinhoff was fined ZAR1.5 billion, which was reduced to ZAR53 million, making it one of the largest fines imposed by the FSCA. Similarly, in August 2020, Tongaat Hulett was fined ZAR118 million, but will only be required to pay ZAR20 million.

The trial in the longstanding corruption case against former President Zuma, which commenced on 17 May 2021, has been further delayed due to the requirement that the Constitutional Court must first hand down its judgment on former President Zuma's application for leave to appeal his application to have former state primary prosecutor Adv Billy Downer removed from the prosecution on the basis that he does not have the requisite “title” to prosecute President Zuma.

In February 2023, the Financial Action Task Force (FATF – an international organisation aimed at combatting money laundering) officially added South Africa to the grey list owing to South Africa's failure to put satisfactory measures in place to combat money laundering and the financing of terrorism. The consequence of the grey listing will be felt by businesses that operate internationally, and may result in increased costs and administrative burdens.

Legislation

South Africa’s long-awaited data privacy law, the Protection of Personal Information Act, 2013 (POPI), came into force on 1 July 2020, and the 12-month grace period for compliance with POPI ended on 1 July 2021. It brings South Africa broadly into line with other jurisdictions around the world that have enacted similar legislation. The law contributes towards a more transparent society in which individuals have greater control over their personal information and the uses to which it can be put. Amongst other things, POPI provides for the civil enforcement of data breaches, including through criminal activity such as hacking, whereas the Cybercrimes Act (see 3.9 Cybercrimes, Computer Fraud and Protection of Company Secrets) deals with the criminal consequences.

On 22 December 2022, the South African president signed into law the General Laws (Anti-Money Laundering and Combating Terrorism Financing) Amendment Act 22 of 2022 (AML Act), which seeks to address the adverse findings in the mutual evaluation report by the FATF. The AML Act will align South Africa with international best practice and assist in the fight against corruption and financial crimes. The AML Act amends the following legislation:

  • the Trust Property Control Act, 1988;
  • the Nonprofit Organisations Act, 1997;
  • FICA; and
  • the Companies Act, 2008.

A number of entities may investigate corporate crime in South Africa, but most investigations are led by specialised units within the South African Police Service, most notably the Directorate of Priority Crime Investigation (DPCI – known colloquially as the “Hawks”) and the Commercial Crimes Unit, which focus on the investigation of sophisticated economic offences. The NPA is empowered to institute and prosecute criminal proceedings on behalf of the state. The Special Investigating Unit (SIU – a specialised unit constituted by legislation) and the AFU (a specialised unit established within the NPA) may also become involved in corporate criminal investigations. However, the limited capacity of the South African Police Service to investigate sophisticated white-collar crime and the perceived lack of independence of the Hawks as an anti-corruption agency remain significant obstacles in the investigation and ultimate prosecution of corporate crime in South Africa.

In addition to the Police Service, certain other regulatory bodies may refer criminal matters to the NPA, including the FSCA and the South African Reserve Bank (responsible for banking regulation). Following such a referral, the regulators may assist the NPA in building its case – particularly given the complex and specialised nature of some financial crimes and the fact that the referral may have been preceded by an in-depth regulatory investigation. The Financial Intelligence Centre also assists the Police Service and the NPA in the identification of the proceeds of unlawful activities and the combatting of both money laundering activities and the financing of terrorist and related activities, and by providing financial intelligence for use in the fight against crime.

The Competition Commission and the Competition Tribunal are two highly active enforcement authorities that conduct investigations into unlawful corporate conduct – including cartel conduct and restrictive business practices – and determine the punishment for these offences. This is addressed in further detail in 3.7 Cartels and Criminal Competition Law.

Finally, the Specialised Commercial Crimes Court has also been established within the judicial ranks of the South African court system, and it conducts some of the trials relating to commercial criminal offences.

There are a number of agencies and governmental bodies with mandates that include investigating corporate impropriety. These bodies have powers to subpoena information and witnesses, powers of search and seizure, and powers to access financial information. Accordingly, the manner in which an investigation is conducted will likely depend on the agency conducting the investigation and the nature of the offence. For example, an investigation concerning money laundering would likely involve the Financial Intelligence Centre, which is the body mandated to monitor financial transactions for the purposes of combatting money laundering and other finance-related offences, such as terrorist financing. However, an investigation concerning corruption would often involve the DPCI, whose remit includes investigating commercial crimes.

Investigations may be triggered via multiple avenues, including third-party reports made directly to the authorities, voluntary self-disclosures or reports made in accordance with statutory obligations.

In order to pursue a criminal prosecution, the agency or body conducting the initial investigation will refer the investigation to South Africa's prosecuting authorities (the NPA) and thereafter co-operate with the NPA to gather evidence and prepare a case against the alleged offenders.

Multiple statutory bodies are empowered to investigate corporate crime. The investigative powers afforded to a particular agency or body are generally determined by the empowering legislation that confers the authority on the agency to conduct investigations. The range of powers typically granted to agencies authorised to conduct investigations include:

  • powers to compel the production of evidence (ie, books, records, documents, electronic data or other information) from “any person” (natural or juristic) believed to be able to furnish information relevant to the investigation;
  • powers to compel persons to appear in person to provide verbal information;
  • powers to acquire relevant information (both documentary and verbal information) through a range of mechanisms, including subpoenas or through invoking specific legislative provisions authoring the request for information;
  • powers of search and seizure (ie, dawn raids); and
  • powers to access financial records and information.

South Africa's principal piece of criminal law legislation, the CPA, also addresses issues such as the admissibility of evidence, search warrants and powers in relation to the entering of premises and the seizure and disposal of property. In addition, under the CPA, everyone who is a compellable and competent witness can be required to give evidence in court.

South Africa has no single overarching duty, nor any specific requirement or obligation, for companies to conduct internal investigations. The relevant statutes applicable in respect of the prosecution and enforcement of financial or white-collar crimes generally make provision for investigation by the relevant regulatory bodies.

However, certain South African statutes create fiduciary duties on the part of the directors and senior managers of companies. In addition, in certain instances, companies may have an obligation to report a “suspicion” that certain crimes have been committed, such as theft, fraud or “corrupt activities”. Although not obligatory, internal investigations may assist organisations to comply with those duties, and to assess their potential exposure in the event of investigations being launched by regulatory bodies.

In certain circumstances, the evidence and information revealed as a result of internal investigations may be used in subsequent court proceedings or by regulatory bodies and enforcement authorities, insofar as they comply with the relevant requirements for admissibility in respect of those proceedings. For example, FICA states that a certificate issued by an official of the Financial Intelligence Centre, stating that the information specified in the certificate was reported or sent to the centre in terms of FICA, is admissible as evidence of any fact contained in it on its mere production in a matter before a court.

South Africa is party to numerous international agreements and legal instruments that provide for mutual legal assistance and cross-border co-operation.

The International Co-operation in Criminal Matters Act 75 of 1996 provides a process for a South African court to submit a request to an overseas regulator for assistance in obtaining evidence in criminal proceedings. The Financial Sector Regulation Act 9 of 2017 also provides for information sharing and the creation of memoranda of understanding between financial sector regulators and overseas regulators. In this regard, the Financial Intelligence Centre and the FSCA have entered into numerous memoranda of understanding with countries such as the UK, the USA, Peru, Brazil, Portugal, Sweden, Denmark, Ghana, Angola, Russia, India, China, Australia and New Zealand.

South Africa has also adopted different initiatives to co-operate with foreign countries, such as the Mutual Legal Assistance in Criminal Matters treaty with Algeria, Argentina, Canada, China, Egypt, France, India, Lesotho, Nigeria and the USA. In terms of national legislation, the Extradition Act 67 of 1962 provides for the surrender of an accused or convicted person by South Africa to a “designated state”; such states are Ireland, Zimbabwe, Namibia and the UK.

South Africa has entered into the agreement on “Trade, Development and Co-operation between the European Community and its Member States and the Republic of South Africa”, which is aimed at “notifying enforcements and co-operation between the parties in investigating harmful or unfair business practices”. In addition, South Africa is a signatory to:

  • the Council of Europe's Convention on Extradition in 2003;
  • the Southern African Development Community (SADC) Protocol on Extradition;
  • the United Nations Convention against Transnational Organized Crime; and
  • the SADC Protocol on the Control of Firearms, Ammunition and Related Materials.

South Africa is also part of the London Scheme on Extradition and the Harare Scheme on Mutual Assistance.

In addition, South Africa and the UAE have entered into and ratified the Extradition Treaty and Mutual Legal Assistance agreement, for the extradition of the Gupta brothers from the UAE to South Africa (see 1.6 Recent Case Law and Latest Developments).

Although a number of enforcement agencies investigate white-collar offences in South Africa, these agencies co-ordinate with South Africa's primary prosecuting authority, the NPA, which is the body responsible for prosecuting white-collar crimes. The National Director of Public Prosecutions determines prosecution policy and issues policy directives.

For example, the SIU is an independent body created by statute with the primary mandate of recovering and preventing financial losses suffered by the state. Although the SIU has certain powers of investigation, such as the power to subpoena, search, seize and interrogate witnesses, the SIU refers its reports, findings and evidence to the South African Police Service and the NPA, and works with them to ensure effective investigation and prosecution of the matters the SIU investigates.

The AML Act has amended FICA to allow the Financial Intelligence Centre to share information held or produced by it with investigative divisions in national departments, the Public Protector and the investigative division of the Auditor General.

Although Deferred Prosecution Agreements (DPAs) are becoming increasingly popular in various jurisdictions globally, no such mechanism formally exists in South African legislation. However, the Zondo Commission has recommended that South Africa should introduce legislation that allows for the introduction of DPAs, subject to various conditions, including that:

  • the company must co-operate fully and self-report;
  • there must be remedial action that is agreed;
  • a fine must be paid; and
  • the terms of the DPA must be sanctioned.

The issue of corruption in both the public and private sectors is garnering more attention than ever before, and pressure is mounting on enforcement authorities to achieve meaningful results and successfully prosecute white-collar crimes. However, South Africa's enforcement authorities have a very poor record of prosecuting corporate crimes, and the NPA in particular is under pressure as it is under-resourced and lacks the capacity to address the levels of corruption and related white-collar offences. If South Africa were to implement a system that included some form of DPA programme, it could well serve to assist with the capacity and resource challenges the NPA is facing.

Under Section 105(A) of the CPA, an accused party may negotiate and enter into an agreement with the state, prior to pleading to the charge brought against them.

In respect of corporate bodies, a plea of guilty will only be valid if the individual representing the entity is authorised to enter into such a plea agreement.

A prosecutor may enter into a plea agreement after consultation with a person charged with the investigation of the case, with regard to the following factors:

  • the nature and circumstances of the offence;
  • the personal circumstances of the accused;
  • any previous convictions of the accused; and
  • the interests of the community.

Where it is reasonable to do so, a prosecutor must also give the complainant the opportunity to make a representation regarding the content of the agreement and the inclusion of conditions relating to compensation. The court must satisfy itself that the accused confirms that they entered into the agreement and that the requirements of Section 105(A) of the CPA have been satisfied. Lastly, the court will consider whether the agreed sentence is just.

Companies may face corporate criminal liability in South Africa for a wide range of offences – companies may be prosecuted for any crime unless the law specifically limits liability for a particular offence to natural persons (eg, sexual offences). Due to this wide ambit, including statutory and common law offences (such as fraud), it is not possible to provide a concise list.

A particular offence to note in the context of corporate fraud and white-collar offences is that, under PRECCA, any person who conspires with, aids, induces, instructs, commands or counsels another person to commit an offence under PRECCA is guilty of an offence. Accordingly, a company may be liable if a director or servant of that company instructs or is complicit in a third party’s commission of an offence, when exercising their powers or performing their duties in furtherance of the company’s interests.

Fines and, in certain circumstances, the confiscation and forfeiture of assets are the only forms of punishment courts may impose on companies found guilty of a crime. The size of the fine depends on the nature and scope of the crime and the existence of aggravating and mitigating factors (such as co-operation with the investigation).

The AML Act amends the Companies Act, 2008 to include the disqualification of a director if they have been convicted for an offence involving money laundering, terrorist financing or proliferation financing activities.

PRECCA creates the general offence of corruption (the primary corruption offence in South Africa) as well as a number of specific corruption offences, including:

  • offences in respect of corrupt activities relating to public officers;
  • offences in respect of corrupt activities relating to foreign public officials; and
  • offences in respect of corrupt activities relating to contracts.

Although PRECCA makes provisions for specific corruption offences, the elements of each offence are substantially similar to the general corruption offence contained in Section 3 of PRECCA, which provides that a person is guilty of the offence of corruption if they carry out any of the following acts, directly or indirectly:

  • accepting or agreeing to accept any gratification from another person; or
  • giving or agreeing to give to any person any gratification, whether for the benefit of themselves or for the benefit of another person, in order to act personally or by influencing another person to act in a manner that amounts to:
    1. illegal, dishonest, unauthorised, incomplete or biased behaviour;
    2. the misuse or selling of information or material acquired in the course of the exercise;
    3. carrying out or performing any powers, duties or functions arising out of a constitutional, statutory, contractual or any other legal obligation;        
    4. abuse of a position of authority, a breach of trust or the violation of a legal duty or a set of rules, designed to achieve an unjustified result; or        
    5. any other unauthorised or improper inducement to do or not to do anything.

Under PRECCA, it is an offence to enter into a corrupt relationship with any person, rendering such conduct illegal in both the public sector and the private sector.

PRECCA does not create an obligation to prevent corruption. However, Section 34 contains a specific reporting obligation (addressed in greater detail in 4.4 Whistle-Blower Protection), which makes it an offence not to report corruption to the Directorate for Priority Crime Investigation.

With regard to insider dealing and market abuse, the primary statute involved is the Financial Markets Act 19 of 2012 (FMA). Chapter X (Market Abuse) of the FMA provides for the offences of insider trading; prohibited trading practices and false, misleading or deceptive statements; promises; and forecasts. It also provides for the penalties resulting from the commission of such offences.

Under Section 78 of the FMA, insiders who know that they have inside information and who deal, directly or indirectly or through an agent for their own account, in the securities listed on a regulated market or in derivatives related to those securities, to which the inside information relates or which are likely to be affected by it, commit an offence. Anyone who knowingly deals on behalf of an insider is also guilty of an offence.

The sanctions for insider trading vary. Such a person is liable to pay an administrative sanction not exceeding:

  • the equivalent amount of the profit that the person made (or would have made had they sold the securities at any stage) or the loss avoided through such dealing;
  • an amount up to ZAR1 million (adjusted for inflation annually) plus three times the amount referred to above;
  • interest; and
  • costs, including investigation costs.

In addition, any person who commits the offence of insider trading is liable on conviction to a fine not exceeding ZAR50 million or imprisonment for a period not exceeding ten years, or both.

The FMA also regulates market-manipulating behaviour, prohibiting any conduct that:

  • creates the false appearance of demand for a security of a company listed on a regulated market;
  • creates an artificial price; or
  • makes any false, misleading or deceptive statement in connection with the securities of a company listed on a regulated market.

The FMA also places a positive obligation on any person who makes such a statement while being unaware that the statement was false, misleading or deceptive, and on any person who becomes aware of such, to publish a full and frank correction with regard to such statement without delay.

A person who commits an offence relating to market manipulation under the FMA is liable on conviction to a fine not exceeding ZAR50 million, imprisonment for a period not exceeding ten years, or both.

Although there is no statute dealing directly with criminal banking, the Banks Act 94 of 1990 regulates the business of a bank and prohibits a person from conducting the business of a bank unless such person is a public company and is registered as a bank in terms of the Banks Act. A person found guilty of conducting the business of a bank without complying with the Banks Act shall be liable to a fine (to be determined by the court) or imprisonment for a period not exceeding ten years, or both.

The Tax Administration Act 28 of 2011 (TAA) governs tax-related offences in South Africa. In addition to giving the South African Revenue Service (SARS) wide-ranging powers to investigate potential tax violations, it also prescribes the criminal offences relating to non-compliance with tax legislation.

The TAA criminalises a variety of offences in relation to non-compliance with tax legislation, including:

  • dissipating a person's assets or assisting another to dissipate their assets in order to impede the collection of any taxes, penalties or interest;
  • issuing an erroneous, incomplete or false document required to be issued under tax legislation;
  • failing to comply with a directive or instruction issued by SARS; or
  • failing or neglecting to disclose to SARS any material facts that should have been disclosed.

Such offences may result in a fine or imprisonment for a period not exceeding two years.

In addition, the TAA provides for the offence of tax evasion. A person who falsifies information, gives a false answer to a request for information under the TAA, prepares and maintains false books or makes use of fraud or contrivance, with intent to evade or to assist another person to evade tax or to obtain an undue refund under tax legislation, commits the offence of tax evasion and is guilty of an offence under the TAA, being subject to a fine or imprisonment not exceeding five years.

Although there is no express duty to prevent tax evasion in South Africa, with regard to the wording of Section 235, a person who has knowledge of tax evasion activity but does nothing to prevent it could be said to have assisted in the evasion of tax in the event that they were complicit in enabling tax evasion (for example, a private banker who knowingly allowed their bank to be used by another party in evading tax).

In 2023, the Constitutional Court in Arena Holdings (Pty) Ltd t/a Financial Mail and Others v South African Revenue Service and Others (CCT 365/21) 88359/2019) confirmed that certain sections of the TAA were unconstitutional, to the extent that they disallow access to a person's tax records even where the requirements of the Promotion of Access to Information Act 2 of 2000 are met. The case dealt with the tax records of a former president and issues of public interest in respect of his tax records. There are thus uncertainties about the confidentiality of the tax records of high-profile public figures.

FICA obliges particular entities defined as “accountable” to keep various records pertaining to clients, prospective clients and transactions. These records must be kept for at least five years. In particular, accountable institutions are required to retain customers' “due diligence records” and records of all “transactions” with the client. Examples of the due diligence records that must be kept include documents used in verifying the identity of a party, the source of funds and the nature of the business relationship. Examples of transaction records that must be retained include the amount and currency involved, the parties and the nature of the transaction, business correspondence and the identifying particulars of all accounts, account files and account facilities.

In addition, the Financial Intelligence Centre is entitled to examine, make extracts from or make copies of any such record.

Failure to comply with the record retention requirements under FICA constitutes an offence, and the accountable institution will be subject to an “administrative sanction”. The nature of the sanction is determined at the discretion of the Financial Intelligence Centre. The factors that are taken into account include the nature of the non-compliance with FICA, previous compliance history and any remedial action taken to prevent a recurrence of the non-compliance.

The sanction may include:

  • a caution not to repeat the conduct;
  • a reprimand;
  • a directive to take remedial action or to make specific arrangements;
  • the restriction or suspension of certain specified business activities; and
  • a financial penalty not exceeding ZAR10 million in respect of natural persons and ZAR50 million in respect of legal persons.

It should be noted that the Financial Intelligence Centre may direct that, in respect of institutions, the penalty should be paid by the natural person for whose actions the relevant institution is accountable in law if that person was personally responsible for the non-compliance.

The AML Act enhances the requirements of FICA in line with international practice. It requires accountable institutions to demonstrate how their risk management and compliance programme applies across all branches and subsidiaries, and requires accountable institutions to share suspicious activity and transaction data across all branches and subsidiaries. The AML Act also provides for greater co-operation between regulators such as SARS and the Financial Intelligence Centre, and for the set-up of a public private partnership, which is similar to the Joint Money Laundering Intelligence Taskforce in the UK.

The Competition Amendment Act 18 of 2018 prohibits various forms of traditional cartel conduct, including price fixing, market allocation and collusive tendering. This conduct is prohibited per se, in the sense that no pro-competitive gains can be offered to justify the conduct.

Firms can engage in this conduct by way of agreement or through a concerted practice. Agreements in this context are broadly defined to include contracts, arrangements and understandings, whether or not they are legally enforceable, and the notion of a “concerted practice” encompasses co-operative or co-ordinated conduct through direct or indirect contact between firms that does not amount to an agreement, but which replaces those firms' independent action.

The responsibility for investigating and prosecuting firms for such conduct lies with the Competition Commission of South Africa. If, following an investigation, the Competition Commission considers there to be sufficient evidence that a firm has contravened the Competition Act, it will refer the matter for prosecution before the Competition Tribunal (Tribunal).

The Tribunal may make a finding that the firm has engaged in cartel conduct of the nature described above, in which case it may impose an administrative penalty on the firm of up to 10% of the firm's annual turnover in South Africa and its exports from South Africa during the firm’s preceding financial year. If the firm subsequently engages in conduct that is substantially a repeat of the conduct that was previously found by the Tribunal to be a prohibited practice, this limit is increased to 25%.

In determining the extent of the administrative penalty to be imposed, the Tribunal can increase the cap on the administrative penalty amount to include the turnover of a firm that controls the guilty firm. The Tribunal can also hold a controlling firm jointly and severally liable for the administrative penalty imposed.

The Competition Act imposes criminal liability on persons (but not firms) who, while being a director of a firm or while engaged or purporting to be engaged by a firm in a position having management authority within the firm, either:

  • cause the firm to engage in cartel conduct; or
  • knowingly acquiesce in the firm engaging in such conduct.

It is a prerequisite to any such finding that the firm involved has either acknowledged in a consent order that it engaged in cartel conduct or has been found to have engaged in such conduct by the Tribunal or Competition Appeal Court.

A person convicted of this offence is liable to a fine not exceeding ZAR500,000 or to imprisonment for a period not exceeding ten years, or to both a fine and imprisonment. The authority to prosecute individuals for the offence is vested in the independent NPA.

The majority of consumer crimes (eg, fraud, theft) are dealt with under the South African common law (and criminal law in particular) and are not necessarily established by statute. However, the Consumer Protection Act 68 of 2008 also plays a part in this particular area of the law.

A report is generally made to the South African Police Service (particularly the Commercial Crimes Unit) and, if a decision is made to do so, the defendant is prosecuted by the NPA. If the offence is a contravention of the Consumer Protection Act, it can also be reported to the National Consumer Commission, which may refer the complaint to the NPA.

Where the crimes in 3. White-Collar Offences are successfully proved and the defendant is found to be guilty, the sanction is generally imprisonment (natural persons) and/or a penalty.

Pyramid schemes may constitute both a fraud and a theft. They also represent a contravention of Sections 11(1) and 11(2) of the Banks Act, which constitutes an offence thereunder.

The Consumer Protection Act was enacted in order to:

  • establish norms and standards relating to consumer protection;
  • prohibit unfair marketing and business practices;
  • promote responsible consumer behaviour; and
  • create an enforcement framework relating to consumer transactions and agreements.

The Act imposes various obligations and standards on the suppliers of goods and services, and attempts to ensure the protection of the consumer. It also prohibits certain “unconscionable” conduct relating to the marketing and supply of goods and services to consumers, and the negotiation, conclusion and enforcement of an agreement to supply goods or services to consumers.

Although the common law crimes of fraud and/or theft still apply, the Consumer Protection Act also prohibits (amongst many other things) the initiation, sponsoring or promotion of, or participation in, “fraudulent schemes and offers”, including pyramid schemes.

The Consumer Protection Act entitles a consumer who wishes to enforce any of their rights thereunder to:

  • refer the matter to a consumer court;
  • refer the matter to the relevant ombud with jurisdiction;
  • refer the matter to the Consumer Tribunal (in certain instances); or
  • file a complaint with the National Consumer Commission, which is entitled to investigate any complaint and, if necessary, refer the matter to the NPA if an offence has been committed.

A person convicted of an offence under the Consumer Protection Act is liable to a fine or imprisonment for a period not exceeding 12 months, or to both a fine and imprisonment.

The Consumer Tribunal is also entitled to impose administrative fines in respect of prohibited or required conduct. The administrative fine may not exceed the greater of 10% of the respondent's annual turnover during the preceding financial year or ZAR1 million. The appropriate penalty is determined after considering a range of factors, such as the gravity of the offence, the loss suffered, the level of profit derived from the contravention and the degree of co-operation of the transgressor.

The Electronic Communications and Transactions Act 25 of 2002 (ECTA)

ECTA criminalises conduct aimed at unlawful interference with, access to, or interception of electronic data, including hacking, the production and sale of devices such as software used for hacking and related offences. If committing any of these offences results in the production of fake data with the intent that this data be considered or acted upon as if it were authentic for purposes of obtaining any unlawful advantage, that is also an offence.

To be found guilty of any of these offences, it must be proved that the perpetrator acted with intention and without authority (as opposed to, for example, the lawful interception of data by law enforcement authorities under the direction of a court order).

It is also unlawful in terms of ECTA to threaten to commit any of these crimes but to offer not to do so in return for a reward. Accordingly, extortion and ransom attacks are also criminal offences.

The penalties for these offences range from fines to periods of imprisonment for up to five years.

The Cybercrimes Act

The Cybercrimes Act 19 of 2020 was passed into law on 26 May 2021 and seeks to criminalise digitised criminal activities. The enactment of POPI and the Cybercrimes Act are South Africa's response to criminal activities that may become prevalent in the increasingly digitised futures.

The objectives of the Act are to:

  • criminalise the disclosure of data messages that may be harmful, and to provide interim relief in the form of protection orders;
  • regulate the jurisdiction with regard to cybercrimes, and to regulate the powers to investigate cybercrimes; and
  • create offences for criminal acts that are of a digital nature, such as hacking.

The most notable specific offences that are included in the Cybercrimes Act are “unlawful access” offences. An individual will be guilty of this in circumstances where they unlawfully and intentionally accessed a computer system or a computer data storage medium. The unlawful interception, interference with or acquisition of data, a computer program, a computer data storage medium or a computer system is also criminalised in the Act.

The Act further criminalises data messages that are sent to a person or a group of individuals with the intention to incite any damage to property belonging to a person or a group of persons, or any violence against any person or group of persons.

It also establishes the offence of disclosure of a data message of an intimate image.

The Cybercrimes Act casts the net wide in terms of application. It defines a “person” as a “natural and juristic” person, which means that both natural persons and organisations may be guilty of the offences contained in the Cybercrimes Act, but are also afforded the protections that the Cybercrimes Act provides.

POCDATARA Amendment Act

The Protection of Constitutional Democracy Against Terrorism and Related Activities Amendment Act, 2022 (POCDATARA Amendment Act) includes reference to certain offences under the Cybercrimes Act being considered a “terrorist activity”, such as:

  • unlawful access;
  • unlawful interception of data;
  • unlawful interference with data or computer programs;
  • unlawful interference with computer data storage;
  • unlawful acquisition, possession, provision, receipt or use of a password, access code or similar data;
  • unlawful use or possession of a software or hardware tool; and
  • cyber-extortion.

As South Africa is a member of the United Nations, Article 41 of the Charter of the United Nations provides that only the United Nations Security Council (UNSC) is mandated to apply sanctions that must be complied with by all member states. Part 2A of FICA provides for the enforcement of financial sanctions issued by the UNSC. Section 26(B) of FICA provides for a wide prohibition on dealing in any way, or inviting to deal, with a person or entity identified pursuant to a resolution of the UNSC, subject to limited exceptions. Failure to comply with this provision of FICA constitutes an offence and is punishable with a fine not exceeding ZAR100 million or imprisonment not exceeding 15 years. South Africa has not issued specific sanctions in response to the Russia–Ukraine conflict, and there has been no UNSC resolution requiring sanctions in respect thereof.

FICA also makes it an offence for an accountable institution (that has reporting obligations under FICA) not to report to the Financial Intelligence Centre that it possesses or controls property that is owned or controlled by, on behalf of or at the direction of a person or entity that has been identified in a notice by the President of South Africa under Section 25 of the Protection of Constitutional Democracy against Terrorist and Related Activities Act 33 of 2004 (POCDATARA) following a resolution of the UNSC identifying such an entity or person. The accountable institution concerned will also be subject to an administrative sanction.

POCDATARA also contains wide prohibitions on dealing in any manner with a person or entity identified pursuant to Section 25 of POCDATARA following a resolution by the UNSC, and also captures the threatening, attempting, conspiring, aiding, abetting, inducing, instructing or procuring the commission of an offence under POCDATARA. Failure to comply constitutes an offence and is punishable with a fine not exceeding ZAR100 million or imprisonment not exceeding 15 years.

Under POCA, which is South Africa's primary anti-money laundering (AML) legislation, it is an offence to enter into a transaction so as conceal or disguise the nature or source of property (including money) that is deemed to be the proceeds of unlawful activity. This is addressed in more detail in 3.13 Money Laundering.

Generally, conspiring with or aiding another party to commit an offence may render the party who assisted the offender in committing a crime guilty of an offence. South Africa's AML legislation contains specific references to aiding or assisting another party to commit a money laundering offence and renders this conduct an offence as well. See 3.13 Money Laundering for further detail.

Section 21 of PRECCA (South Africa's corruption legislation) provides that a person who conspires with any other person to commit an offence in terms of PRECCA, or aids, abets, incites, instigates, instructs, commands, counsels or procures another person to do so, is guilty of an offence.

POCA and FICA are the two statutes that primarily govern South Africa's AML framework.

The primary purpose of POCA is to combat organised crime, money laundering and criminal gang activities. POCA prohibits two main money-laundering offences:

  • general money laundering offences involving the proceeds of any unlawful conduct; and
  • offences involving proceeds from a pattern of racketeering activity.

In broad terms, a person commits a money laundering offence under POCA if that person knows, or ought reasonably to have known, that property is, or forms part of, the proceeds of unlawful activities, and enters into any transaction, agreement or arrangement, or performs any other act in connection with such property, that has or is likely to have the following effects:

  • concealing or disguising the nature, source, location, disposition or movement of said property or the ownership thereof, or any interest that anyone may have in respect thereof; or
  • enabling or assisting any person who has committed or commits an offence, whether in South Africa or elsewhere, to:
    1. avoid prosecution; or
    2. remove or diminish any property acquired directly, or indirectly, as a result of the commission of an offence.

A person who uses or has possession of property and knows, or ought reasonably to have known, that the property forms part of the proceeds of unlawful activities of another person may also be liable under POCA.

FICA established the Financial Intelligence Centre in order to combat money laundering and the financing of terrorism and related activities. In order to combat money laundering, FICA imposes a number of compliance obligations on certain persons and organisations, particularly those that fall within FICA’s definition of “accountable institutions” and “reporting institutions”.

The principal obligations that these institutions are required to comply with include:

  • identifying and verifying the identity of new and existing customers;
  • retaining records of identities of clients and transactions entered into with clients;
  • reporting irregular transactions to the Financial Intelligence Centre; and
  • training staff and implementing internal controls.

In addition, accountable institutions are required to develop and maintain AML and counter-terrorist financing risk-management and compliance programmes.

Although the reporting obligations under FICA relate primarily to accountable or reporting institutions, there are certain instances where non-accountable or non-reporting institutions are required to file reports with the Financial Intelligence Centre in terms of Section 29 of FICA – eg, when a person who is in charge of or manages a business knows or suspects that the business has received or is about to receive the proceeds of unlawful activities or property that is connected to an offence relating to the financing of terrorist and related activities.

Due to serious AML and counter-terrorist financing deficiencies, South Africa was placed on the FATF grey list in February 2023. South Africa has committed to resolving these deficiencies under the observation of the FATF, which will ultimately result in the tightening of AML controls in South Africa.

There is no statutory defence that expressly provides for the existence of a compliance programme being an affirmative defence against criminal prosecution for an offence such as fraud or corruption. However, the existence of a compliance programme may serve as a mitigating factor in any enforcement action.

From a reporting perspective, a person charged with certain offences under POCA may raise the defence that they reported the knowledge or suspicion of the offence in terms of Section 29 of FICA.

There is no minimum amount for a white-collar crime to be deemed a crime. For example, PRECCA does not prescribe a minimum threshold stipulating what constitutes a corrupt payment or benefit. Furthermore, facilitation payments are not permitted in South Africa and are illegal.

As stated in 3.13 Money Laundering, South Africa's corruption legislation contains an onerous reporting obligation, and failing to report certain offences in excess of ZAR100,000 is a criminal offence.

Although there is no formal policy governing co-operation with investigators or prosecuting authorities, in practice co-operating with the authorities will likely serve as a mitigating factor when the matter is considered by the courts.

Section 204 of the CPA provides for instances when a prosecutor puts forward a witness who gives self-incriminating evidence in return for a discharge from prosecution, provided that certain requirements are met (most importantly, that the court is satisfied that the witness' answers are frank and honest). Section 204 immunity arrangements are done by agreement with the prosecutor before the witness gives evidence. Section 204 immunity can only be granted to individuals (not companies).

South Africa's Competition Commission has adopted a leniency policy in order to encourage participants in cartel conduct to make disclosures to the Competition Commission in accordance with Section 49E of the Competition Act.

Although there are no particular incentives for whistle-blowers to report impropriety, certain legislation criminalises the failure to report corrupt conduct or suspicious transactions. Some, but not all, of these statutes also encourage whistle-blowers to come forward in light of the protection afforded to them under those specific statutes.

The Protected Disclosures Act 26 of 2000 (PDA) aims to encourage whistle-blowing in the workplace in both the public and private sectors. In this regard, the disclosure of certain categories of information by “employees” or “workers” to certain individuals who are specifically listed in the PDA are deemed to be “protected disclosures”. In particular, the PDA:

  • protects employees from occupational detriment in circumstances where their disclosure is deemed to be a “protected disclosure”; and
  • requires procedures to be put in place in the workplace, in order for the employee or worker to make the relevant disclosure.

Importantly, an employee or worker is able to elect to make the disclosure anonymously.

The PDA deems a disclosure to be a “protected disclosure” if it is made to the individuals or bodies designated in the PDA and if it relates to information that shows, or tends to show, inter alia, that:

  • a criminal offence has been committed, is being committed or is likely to be committed;
  • a person has failed, is failing or is likely to fail to comply with any legal obligation to which that person is subject;
  • a miscarriage of justice has occurred, is occurring or is likely to occur;
  • the health or safety of an individual has been, is being or is likely to be endangered; or
  • any of the above has been, is being or is likely to be deliberately concealed.

Employers are able to tailor their own policies to encourage whistle-blowers to come forward.

A discussion document proposing reforms to the whistle-blower protection regime in South Africa was published on 29 June 2023. The purpose of the document is to:

  • expand the scope of the PDA to encompass a wider range of relationships;
  • ensure that adequate resources, protection and support are given to whistle-blowers; and
  • give the Human Rights Commission authority to address protected disclosures.

Section 34 of PRECCA creates an obligation to report the knowledge or suspicion of certain white-collar crimes (specifically corruption, theft, fraud, forgery, uttering a forged document and extortion) involving ZAR100,000 or more. The reporting obligation is placed on an individual who “holds a position of authority”, and the report must be made to the Directorate for Priority Crime Investigations (Hawks) within the South African Police Service. Failure to do so constitutes an offence under PRECCA in itself. However, PRECCA does not contain any provisions pertaining to the protection of the reporting individuals.

FICA places an obligation on individuals and entities to make reports, including reports of suspicious and unusual transactions, to the Financial Intelligence Centre. Section 38 of FICA provides protection to the entities and/or individuals making reports under the Act. In particular, it states that no action, whether criminal or civil, lies against an accountable institution, reporting institution or any other person complying in good faith with a provision of FICA.

FICA does not provide for the protection of individuals in terms of anonymity; however, the Financial Intelligence Centre does have a duty to ensure that appropriate measures are taken in respect of personal information in its possession or under its control.

Section 107 of the Consumer Protection Act states that it is an offence to disclose any personal or confidential information concerning the affairs of any person obtained as a result of initiating a complaint or participating in any proceedings under the Consumer Protection Act.

The state has the burden to prove every element of the crime beyond reasonable doubt.

Section 35(3)(h) of the Constitution of the Republic of South Africa, 1996 provides that every person’s right to a fair trial includes the right “to be presumed innocent, to remain silent and not to testify during proceedings”. The Constitutional Court in S v Coetzee 1997 (3) SA 527 held that Section 332(5) of the CPA was unconstitutional as it deemed all directors and employees to be guilty of the same offence committed by the company and as a result breached the right to be presumed innocent.

Following conviction by a competent court of an offence, the accused is then arraigned for sentencing. Generally, South African courts have wide discretion when it comes to sentencing. However, there are legislative guidelines in respect of periods of imprisonment or the imposition of fines, including minimum and maximum penalties that can be administered. In respect of white-collar offences, PRECCA, POCA and FICA contain maximum limits on the penalties that can be imposed in respect of offences under those acts, such as fines, imprisonment and, in certain instances, both.

In addition, the CPA and the Criminal Law Amendment Act 105 of 1997 (CLA) prescribe minimum sentences for a variety of offences, including fraud. For example, for a first-time offender convicted of fraud involving an amount exceeding ZAR500,000, the minimum sentence is imprisonment for a period of not less than 15 years. Only substantial and compelling circumstances may justify a deviation from the minimum sentences prescribed by the CPA and the CLA.

The parameters set out in the above-mentioned legislation will be used as a basis, and then mitigating and aggravating circumstances will be considered in determining the appropriate sentence. Mitigating and aggravating circumstances may include the accused's co-operation with the relevant authorities.

The CPA also provides for the general rules regarding the assessment of penalties in relation to plea agreements (see 2.8 Plea Agreements).

Herbert Smith Freehills South Africa LLP

Rosebank Towers – 4th Floor
15 Biermann Avenue
Rosebank
Johannesburg
2196
South Africa

+27 (0) 10 500 2600

+27 (0) 11 327 6230

Cameron.Dunstan-Smith@hsf.com www.herbertsmithfreehills.com
Author Business Card

Law and Practice in South Africa

Authors



Herbert Smith Freehills South Africa LLP (HSF) is a leading global law firm with over 2,000 legal professionals in 27 offices worldwide, spanning Europe, the Middle East, Africa, Asia-Pacific and North America. It is recognised as a global leader in investigations, contentious regulatory work and dispute resolution. Its investigations capability is extensive, comprising more than 50 investigations partners and 100 investigations lawyers in its global practice. HSF acts for clients operating in many regions and industries, and its global practice covers all areas of white-collar criminal investigations and enforcement, regulatory investigations, competition investigations, tax investigations and cybercrime, as well as offering advice on trade sanctions, insider trading and anti-money laundering, and the development of sophisticated multi-jurisdictional compliance programmes. It also advises on cross-border and domestic criminal, internal and regulatory investigations, including legal and regulatory exposure, disclosure and reporting obligations and reputational issues arising from investigations.