South Africa Payments

South Africa is the most-banked market in sub-Saharan Africa — approximately 98% of adults hold a bank account, with only 2% (roughly 7 million people) unbanked according to FinScope 2024. This single structural fact explains almost everything else about the South African payment landscape: why mobile money failed to take root the way it did in Kenya or Tanzania (the access problem was already solved), why card payment infrastructure dominates (banks built it as part of their core retail offering), and why PayShap — the SARB-mandated instant A2A rail launched in March 2023 — has had a slower-than-expected adoption curve relative to its Brazilian or Indian equivalents.

For an operator entering South Africa, the operational reality is simpler than entering Nigeria or Kenya — there's no need to design around significant unbanked segments — but more competitive than entering an emerging market where the local fintech ecosystem is thin. South Africa has a deep, sophisticated local PSP ecosystem (Yoco, iKhokha, Peach Payments, PayFast, Ozow, Stitch, Adumo, Netcash) that operators must navigate alongside or instead of global names like Adyen and Stripe.

Real-time payments — PayShap

PayShap is South Africa's instant A2A rail, launched on 13 March 2023 by BankservAfrica — since renamed PayInc — under a SARB mandate. Beneficiaries are identified by ShapID — either a registered mobile phone number or a custom handle — rather than a bank account number, which removes the friction of having to know the recipient's account details. PayShap operates 24/7/365 with sub-10-second settlement and is integrated into all major South African banks (Standard Bank, Absa, FNB, Nedbank, Capitec, Investec, Discovery Bank, and others).

Adoption to date: PayShap has processed R100 billion across 136 million transactions and registered 4.5 million ShapIDs by mid-2025. Transaction volumes grew more than 1,000% between December 2023 and December 2024 — strong growth on a small base. Within the first 18 months of operation, BankservAfrica processed 74.2 million transactions worth R46 billion (USD 2.59 billion).

The slower-than-expected curve: Two years post-launch, PayShap has not seen the kind of mass adoption that Pix achieved in Brazil or UPI in India. The reason is structural and important to understand: South African banks already operate paid Instant EFT products and instant in-bank transfer channels that generate fee revenue. Migrating those flows to PayShap — where pricing is regulated and constrained — means cannibalising existing fee revenue, which the banks have been resistant to actively promote. SARB has applied steady pressure but has not used the kind of zero-MDR fiat that Banco Central do Brasil applied to Pix.

Where PayShap is winning: P2P transfers (especially among younger consumers who care about the alias-based UX), small-value SME settlements, and government social grant disbursements. Where PayShap is not yet winning: high-value B2B settlement (still on EFT or RTGS) and merchant e-commerce checkout (still cards or Instant EFT aggregators).

For operators: PayShap acceptance via API is available through Stitch, Ozow, and several enterprise PSPs. Treat it as growing infrastructure to integrate alongside Instant EFT — not yet as the primary checkout method, but adoption is trending up sharply.

The national payment system has been restructured — PASA is no longer the PSMB

South Africa's payment-system governance changed materially in August 2026, and any operator relying on the old PASA/BankservAfrica map needs to update it. On 11 August 2026, the SARB announced it is withdrawing recognition of the Payments Association of South Africa (PASA) — the self-regulatory body that has organised and regulated NPS activity, including authorising PSOs, SOs and TPPPs, since 1996 — as the country's payment system management body.

The transition ran in two steps, and the second has now passed. With effect from 11 August 2026: a first tranche of PASA's functions, staff and intellectual property transferred directly to the SARB — regulatory and authorisation activity, card interoperability, the high-value payment clearing house, and standards work including MyStandards. From the same date, "the PCH SO, SO and TPPP authorisation and registration functions and capability will transition to the SARB National Payment System Department's (NPSD) Policy, Regulation and Licensing Division (PRLD)." On 2 September 2026: PASA's recognition as a PSMB was withdrawn. The SARB's 11 August notice is the operative instrument and states it plainly — "The withdrawal of PASA as a PSMB is effective on 2 September 2026" — giving "[s]tructural and operational challenges associated with the PSMB model" as the reason. The accompanying media release sets out what went where: the functions transitioning to PayInc are "managing credit and debit electronic funds transfers (EFTs), Authenticated Collections (DebiCheck), Registered Mandate, rapid payments (PayShap) and real-time clearing (RTC) arrangements, as well as related operational responsibilities." The SARB has since confirmed the outcome rather than the plan — its payment-system-management-body page now records that the Bank "has concluded the withdrawal of the Payments Association of South Africa's (PASA) recognition as a payment system management body (PSMB)", and that "functions transitioning to PayInc did so on 2 September 2026".

Your existing authorisation did not lapse on 2 September, and this is the part worth getting right. Under section 3(2A) of the NPS Act the withdrawal "does not affect arrangements, rules, agreements or authorisations in force prior to withdrawal, unless otherwise determined by the SARB". The notice applies that specifically: PCH system operator and system operator authorisations granted before 11 August 2026 "will remain valid and effective unless otherwise determined by the SARB", explicitly including those falling due for renewal during the transition. TPPP registrations remain valid "until the SARB publishes the Directive in respect of Specified Payment Activities within the National Payment System (Authorisation Framework)" — so confirm whether that directive has published before assuming your registration still rests on the transitional clause. New PCH SO and SO applications continue to be assessed against the existing PASA criteria until the SARB issues its own. What changed for an operator is the counterparty and the postbox, not the licence.

A note on how this reads across SARB's own material, because it changed within days: through early September the PSMB overview page still described the withdrawal in the present progressive, while the dated notice had already fixed the effective date. The page has since been updated to past tense. Where a dated instrument and a web page disagree, the instrument governs.

PayInc is the renamed BankservAfrica — the same entity that has operated PayShap since 2023 — rebranded in 2025. The SARB itself now co-owns PayInc: Governor Lesetja Kganyago confirmed the central bank completed a 50% stake purchase in November 2025. Practically, this means South Africa's core clearing infrastructure is shifting from an industry self-regulatory model to one where the central bank is both regulator and part-owner of the rail operator. The SARB has stated the transition will not disrupt card payments, EFTs, debit orders or ATM withdrawals for consumers and businesses during the changeover.

Domestic rails beyond PayShap — DebiCheck, Registered Mandate and RTC

PayShap gets the attention, but most recurring and business payment volume in South Africa still runs on three older rails that any subscription or billing-heavy operator needs to understand.

DebiCheck is South Africa's authenticated collections system for debit orders, built on ISO 20022 messaging. It is not compulsory: PASA's own debit order FAQ states that service providers choose whether to use DebiCheck or EFT Debit, so a large share of South African recurring collection still runs unauthenticated. Unlike a legacy EFT debit order, a DebiCheck collection requires the consumer to digitally confirm the mandate — amount, date, frequency, service provider — directly with their own bank before the first collection runs, via USSD, banking app, ATM or branch. Response windows differ by request type; take them from your sponsoring bank's current specification rather than from secondary material, which disagrees with itself on at least one cut-off. Once approved, the bank enforces the mandate terms on every future collection, and PASA's own materials describe disputes on authenticated collections as available in exceptional cases rather than closed off — which is still why PASA introduced it, to curb both rogue unauthorised debit orders and opportunistic chargebacks from consumers avoiding valid ones. The companion Registered Mandate (RM), formerly the Registered Mandate Service, handles non-authenticated collections. It is no longer part of DebiCheck: SARB's 2025/26 oversight report records the separation as implemented in May 2025, with AC/DebiCheck and RM now operating as independent, standalone payment systems under their own PCH, and PASA's current guidance puts RM in the evening collection window ahead of EFT debits rather than behind DebiCheck in the morning. For a merchant, the trade-off is explicit: legacy EFT Debit is cheaper and lower-friction for reliable, known customers, while DebiCheck costs more onboarding friction in exchange for a materially stronger evidentiary position on recoverable revenue. See the DebiCheck operator reference for the mandate mechanic in detail.

Real-Time Clearing (RTC), introduced in 2006, was South Africa's first instant interbank payment rail — a real-time transfer directly between participating banks, predating PayShap by 17 years. It never achieved mass adoption: high transaction fees and limited bank participation left it a minority rail even before PayShap launched, and PayShap is now displacing it for consumer P2P and A2A use cases. RTC still sees use for same-day, higher-value transfers where PayShap's rand-value limits don't fit.

EFT, DebiCheck, Registered Mandate and RTC all sit alongside PayShap as the clearing-house arrangements that moved from PASA to PayInc on the 2 September 2026 PSMB withdrawal (above) — so the operator-facing question for any of these rails ("who do I raise a dispute or onboarding query with") now points at PayInc rather than PASA.

Cards — Visa and Mastercard, no domestic scheme

Unlike France (Cartes Bancaires), Brazil (Elo), or Germany (girocard), South Africa has no significant domestic card scheme. Visa and Mastercard dominate the card market between them, with American Express having presence among premium-tier issuers. The absence of a domestic scheme means foreign acquirers don't need to think about CB-style routing economics — but it also means South African merchants have fewer levers to optimise card acceptance costs.

MDR ranges typically run 1.5–3.0% for credit and 0.5–1.5% for debit, with negotiation room for higher-volume merchants. South African card markets are also shaped by SARB-regulated interchange: the current determination (last updated 5 February 2026) sets debit card interchange at 0.44% of transaction value for card-present, EMV-compliant purchases and 0.58% for card-not-present, 3D-Secure-compliant purchases (rising to 0.98% where only the issuer, not the acquirer, is 3D-Secure compliant); credit card interchange runs 1.48% and 1.68% respectively for the same tiers (up to 2.45% on the issuer-only-compliant case). SARB also regulates ATM interchange — currently R5.31 plus 0.64% of the withdrawal amount per cash withdrawal, effective 12 June 2021 — and is mid-way through Interchange Determination Project Phase V, a Deloitte-assisted review of methodology and rates across all regulated streams, launched August 2024 with a roughly 24-month timeline.

The unique SA card dynamic: Capitec Bank — South Africa's largest digital bank by user count — has been a structural disruptor. Capitec's pricing strategy (low fees, high transparency) has compressed competitor banking economics across the broader market, including impacting card-related fee revenue.

E-commerce — cards plus Instant EFT aggregators

South African e-commerce checkout is dominated by two method families: cards (Visa/Mastercard) and Instant EFT — a category of pseudo-real-time bank-transfer products operated by aggregator-style PSPs. The Instant EFT mechanic: at checkout, the consumer is redirected to a hosted page that authenticates them into their bank account using bank credentials (or, more recently, via secure bank API), authorises a transfer to the merchant, and returns to the merchant with a real-time confirmation. Settlement is near-instant, but the underlying rail is still EFT (or, increasingly, PayShap on the back end).

The dominant Instant EFT players:

• Ozow: Largest Instant EFT specialist in SA. Direct integration with major banks. Standard pricing 1.5–2.5%.
• PayFast: Instant EFT pioneer; now offers cards, EFT, and other methods. Strong SME positioning.
• Stitch: Modern API-first acquirer building on bank API integrations; positions itself as the "Stripe for African payments." Includes open banking flows alongside Instant EFT.

Why Instant EFT matters: South African consumers are sometimes wary of providing card details to unknown e-commerce merchants, particularly in higher-ticket categories. Instant EFT bypasses card details entirely — the consumer authenticates against their bank, never sharing card data with the merchant. This has driven strong adoption, particularly in marketplaces and travel.

The PayShap question: As PayShap scales and bank API access matures, the underlying rail behind Instant EFT may shift from legacy EFT to PayShap — the consumer experience stays the same, but settlement gets faster and cheaper. Stitch has already begun routing some flows through PayShap. Operators choosing an Instant EFT provider should ask about their PayShap roadmap.

QR wallets: Scan-to-pay digital wallet apps Zapper and SnapScan remain active in the South African market, but as a minority checkout method behind cards and Instant EFT. The category's structural problem is fragmentation — a merchant's QR code has typically worked with one provider's app but not a competitor's. The SARB is addressing this directly: it published version 1.2 of a QR+ Standard on 7 July 2026 under its Payments Ecosystem Modernisation Programme, designed to let a single QR code (or barcode or digital link) initiate payment across providers and rails, including a defined PayShap payload. Treat existing QR wallets as a supplementary acceptance method rather than a primary one until QR+ adoption plays out.

Local fintechs — Yoco, iKhokha, and SME card acceptance

South Africa has produced one of Africa's strongest fintech ecosystems for SME payments. The standouts:

• Yoco (Cape Town): Mobile-first card acquiring for SMEs. Plug-and-play card readers, simple pricing, strong market share among small merchants. Standard MDR 2.6–2.95%.
• iKhokha (Durban): Direct competitor to Yoco — card terminals, e-commerce gateway, lending products. Owned by Crossfin Holdings.
• Peach Payments: Multi-method e-commerce gateway with broader feature set (cards, Instant EFT, EFT, RCS Mobicred, MoreTyme, BNPL). Strong mid-market positioning.
• Adumo: POS-focused with e-commerce gateway; merged with Lesaka Technologies.
• Netcash: Established player with broad multi-method coverage; strong in subscriptions and recurring billing.

For operators choosing among these, the SME-focused tier (Yoco, iKhokha) competes on simplicity and pricing transparency. The mid-market tier (Peach, Netcash) competes on method breadth. The enterprise tier requires combining one of these with an international acquirer like Adyen.

BNPL — fragmented, smaller market

BNPL has gained traction in South African e-commerce but remains smaller than card or Instant EFT shares. The dominant providers:

• Payflex (acquired by Australia's Zip Co): Pioneered BNPL in SA. 4-instalment, interest-free model.
• Mobicred: Revolving credit, integrated with major retailers, FSCA-regulated.
• MoreTyme (TymeBank's BNPL): Bank-backed BNPL leveraging TymeBank's customer base.
• Capitec Pay Anywhere and PayJustNow: Smaller but growing.

BNPL share of SA e-commerce is in the 3–5% range and growing — material but not dominant. Most major SA e-commerce merchants offer at least one BNPL option at checkout.

Crypto and digital assets — FSCA CASP licensing

South Africa has one of Africa's most developed crypto regulatory frameworks. The FSCA brought crypto-asset service providers (CASPs) into FAIS Act licensing on 1 June 2023 — making South Africa the first major African market to require formal crypto licensing. As of December 2025, 512 CASP licence applications had been received, with 300 approved, 14 declined, and 121 voluntarily withdrawn.

Travel Rule implementation: The Financial Intelligence Centre's Directive 9 brought travel-rule obligations for crypto-asset transfers into force on 30 April 2025. CASPs must now collect and transmit beneficiary and originator information for crypto transactions, similar to FATF travel-rule standards in other jurisdictions.

Stablecoins: South African banks have begun issuing regulated stablecoins. Absa launched a gold-backed stablecoin in 2024. Yellow Card — the African stablecoin infrastructure leader — secured a CASP licence to operate in SA in late 2024. South Africa is increasingly viewed as the gateway market for stablecoin-based cross-border payment products into the broader African continent.

Regulator and licensing — Twin Peaks

South Africa moved to a Twin Peaks regulatory model on 1 April 2018 under the Financial Sector Regulation Act 2017. Two regulators split the financial sector mandate:

• Prudential Authority (PA), housed within the South African Reserve Bank (SARB): Regulates prudential soundness of financial conglomerates, banks, insurers, and certain financial market infrastructures including the National Payment System. Designates and supervises payment system operators.
• Financial Sector Conduct Authority (FSCA), successor to the Financial Services Board: Regulates market conduct, consumer protection, disclosure obligations, and advisory standards. Supervises crypto-asset service providers under FAIS.

Licensing categories under the National Payment System Act 78 of 1998:

• Payment System Operator (PSO): Entities operating a payment infrastructure (clearing, switching, settlement). PayInc (formerly BankservAfrica) is the primary PSO.
• System Operator (SO): Entities providing services to a PSO or to participants.
• Third Party Payment Provider (TPPP): Entities accepting funds on behalf of a payee from a payer (most e-commerce gateways operate under this category).

Foreign operators typically operate via partnership with a SARB-licensed local entity rather than seeking direct authorisation. Direct PSO licensing is reserved for major payment infrastructure providers.

Note on the licensing bodies themselves: the authorisation function described above — registering TPPPs, authorising PCH SOs and SOs — historically sat with PASA. As covered above, that function moved to the SARB's NPSD Policy, Regulation and Licensing Division on 11 August 2026, and PASA's recognition as a PSMB was withdrawn on 2 September 2026; the licensing categories (PSO, SO, TPPP) are unchanged, only the administering body changed.

Exchange control — moving money out of South Africa

South Africa retains exchange controls, administered by the SARB's Financial Surveillance Department (FinSurv) under the Exchange Control Regulations and detailed in the Currency and Exchanges Manual for Authorised Dealers. For a foreign operator, this — not the NPS Act licensing regime above — is usually the real operational constraint: it governs how money actually leaves the country.

The mechanism runs entirely through banks (with one narrow exception). FinSurv does not deal with an operator directly — SARB's own FAQ states any request must be channelled through an Authorised Dealer (a bank registered under the Banks Act) or an Authorised Dealer in foreign exchange with limited authority (ADLA), a category of non-bank bureaux de change with restricted scope that is not the route for corporate profit repatriation, which runs through banks. Authorised Dealers must hold documentary evidence that cross-border transactions are concluded at arm's length and at fair market-related prices before processing them. In principle, capital invested in South Africa by a non-resident is not trapped: income earned on the investment "may be transferred abroad," and the sale or redemption proceeds of non-resident-owned assets are freely transferable, subject to that documentary check.

A recent tightening operators should know about: SARB Exchange Control Circular No. 15/2025 (22 October 2025) amended the Manual to add a tax-compliance gate on dividend remittances. Authorised Dealers may now only transfer dividends from a South African company to a non-resident shareholder once SARS tax clearance is produced — a Manual Letter of Compliance for International Transfer if the beneficiary isn't SARS-registered, or a TCS–AIT PIN if it is. Practically: profit repatriation out of South Africa is a routine, bank-intermediated compliance process rather than a blocked one, but it now requires SARS-side tax clearance layered on top of the existing Authorised Dealer and arm's-length documentation requirements — build that into treasury timelines rather than assuming a same-day wire.

PSP coverage

South Africa's PSP market is dominated by local players, with international acquirers having more limited direct presence than in Europe or the US:

• Yoco — SME card acquiring, mobile-first
• iKhokha — SME card terminals + e-commerce
• Peach Payments — multi-method e-commerce gateway, mid-market focus
• PayFast — Instant EFT pioneer + cards (acquired by Network International, now part of Brookfield)
• Ozow — Instant EFT specialist + emerging PayShap routing
• Stitch — modern API-first acquirer + open banking + PayShap
• Adumo — POS + e-commerce (Lesaka Technologies)
• Netcash — established multi-method, strong in subscriptions
• Adyen — international enterprise acquirer with SA card processing
• Stripe — limited direct SA card acquiring; growing presence in subscription/SaaS verticals

For operators choosing an acquiring strategy: the SME tier (Yoco, iKhokha) wins on simplicity; the mid-market tier (Peach, PayFast, Netcash) wins on method breadth; the enterprise tier typically combines an international acquirer (Adyen) with a local Instant EFT specialist (Ozow or Stitch) for full coverage. PayShap routing is becoming a differentiator — operators should ask each PSP about their PayShap integration timeline.

For African expansion strategy beyond SA, see the Nigeria market guide for the largest sub-Saharan banking market by population, and the M-Pesa interoperability briefing for context on East Africa's mobile-money-led model — which is why M-Pesa thrives in Kenya/Tanzania but failed in South Africa.