SASSA enhances security measures in Covid-19 SRD grant system following identified vulnerabilities
The South African Social Security Agency (SASSA) says security measures in the COVID-19 Social Relief of Distress (SRD) system have been improved to protect the information of grant recipients and curb identity theft.
SASSA officials along with Minister of Social Development, Sisisi Tolashe recently briefed the Portfolio Committee on Social Development on measures taken to improve security measures.
This comes after concerns were raised by two Stellenbosch University students, in October 2024 regarding security vulnerabilities in the Sassa Covid-19 SRD grant system.
The students, Joel Cedras and Veer Gosai identified vulnerabilities in the SRD grant application and payment system through an informal on-campus survey they conducted after they realised that they were unable to apply for the grant. The system showed that they had already applied for and received the grant. Their survey confirmed that other students had also had the same problem.
The briefing focused on outcomes of the investigation into vulnerabilities within the SRD system as well as an update on the biometric identity verification process as directed by National Treasury.
In his presentation, Jabulani Makondo, acting Chief Information Officer, said that since its launch, the system has handled millions of applications and currently processes 17.8 million clients, with approximately 8 million approvals each month.
Makondo further highlighted that as part of verification and eligibility determination, the system uses data from external government and private institutions, such as the Department of Home Affairs and SARS to verify identity life status, employment and means testing.
To improve security measures, SASSA has implemented important security controls to protect the information of clients during web browsing, decreasing the likelihood of data leakage and misuse.
Furthermore, he said the agency has a contract with a service provider in place to validate cellphone numbers and has implemented biometric identity verification when clients log in. In addition, SASSA recorded a decrease in identity theft cases in quarter two of the 2025/26 financial year.
Tolashe said part of the measures that SASSA is implementing to address system vulnerabilities include the roll out of biometric verification for online transactions, upgrading security protocols and closer collaboration with key institutions such as the South African Revenue Services, the Unemployment Insurance Fund and banking institutions.
She also welcomed the recent announcement by the Minister of Finance to extend the COVID-19 SRD grant until March 2027.
“The extension marks a critical shift in our government’s ongoing commitment to support vulnerable individuals, especially in the face of the current economic climate,” added Tolashe.