Who regulates payments in South Africa?

The SARB. It handles rules and standards for the national payment system and the licensing, authorisation and registration of payment institutions [SARB, checked 2026-11-04], a role it took over from PASA, whose recognition as the payment system management body was withdrawn from 2 September 2026 [SARB, checked 2026-11-05].

Who runs PayShap and EFT in South Africa?

PayInc runs the retail schemes: EFT credits and debits, DebiCheck, Registered Mandate, PayShap and real-time clearing [SARB media release and FAQ, checked 2026-11-05]. PayInc is the company formerly called BankservAfrica [PayInc Business Report 2025, checked 2026-11-04].

Can a non-bank offer payment services in South Africa?

Yes. Since 11 August 2026 the SARB has handled the authorisation and registration of third-party payment providers [SARB, checked 2026-11-04], and it intends to publish the Authorisation Framework by the end of November 2026 [BIS: Kganyago, checked 2026-11-05].

Is Shopify Payments available in South Africa?

No. Shopify Payments is not offered in South Africa [Shopify Help Center, checked 2026-11-04], so Shopify stores here use a third-party gateway instead.

How payments work in South Africa: rails and regulators

Q: How big is PayShap compared with cards?

Still small. Last year PayShap processed only about 6% as many transactions as cards and under 40% of EFT credit volumes [BIS: Kganyago, checked 2026-11-04], even though it has passed 1 billion transactions since launch [BIS: Kganyago, checked 2026-11-05].

Q: When do CMA payments move to TCIB?

Settlement system participants must stop routing smaller CMA cross-border EFTs through SADC-RTGS by 31 March 2027 and route them through TCIB from 1 April 2027 [Government Gazette, checked 2026-11-05] (those not exceeding R5 million [SARB, checked 2026-11-04]).

Mctaba Labs builds payment integrations for businesses across Africa. This guide is written to be useful whether or not you ever hire us.

What does South Africa's payment system look like from a developer's seat?

Bank-led, layered and changing quickly. Almost every payment you build touches the same stack: a regulator that writes the rules, a scheme operator that runs the retail rails, a settlement system at the central bank, banks that hold the accounts, and PSPs that put an API on top. Here is that stack at a glance.

South Africa's payment rails at a glance
Regulator and rule-maker	The SARB sets rules and standards for the national payment system and licenses payment institutions^{[SARB, checked 2026-11-04]}
Retail scheme operator	PayInc runs EFT credits and debits, DebiCheck, Registered Mandate, PayShap and RTC^{[SARB media release and FAQ, checked 2026-11-05]}
Settlement	SAMOS, the real-time gross settlement system the SARB owns and operates^{[SARB, checked 2026-11-04]}
Instant payments	PayShap, live since 13 March 2023^{[SARB media statement, checked 2026-11-05]}; the payer's bank sets the limit it applies^{[PayInc Business Report 2025, checked 2026-11-04]}
Licensing for non-banks	The SARB authorises system operators and registers third-party payment providers^{[SARB, checked 2026-11-04]}; an activity-based Authorisation Framework is in draft^{[SARB Annual Report 2025/26, checked 2026-11-05]}
Settlement currency	South African rand (ZAR)
Cross-border	Transfers within the Common Monetary Area move from SADC-RTGS to TCIB^{[Government Gazette, checked 2026-11-05]}

Last verified: 2026-11-04.

The scale is worth knowing before you choose a rail. The SARB's 2025/26 Annual Report counts 39 banks, 486 non-bank payment service providers and 5 card schemes in calendar 2025^{[SARB Annual Report 2025/26, checked 2026-11-05]}, and EFT credits of R37 trillion across 1 billion transactions^{[SARB Annual Report 2025/26, checked 2026-11-05]}. That last figure is the one to remember: bank-to-bank EFT is the backbone every newer rail is measured against.

This page is the map for South Africa. For how it connects to its neighbours, start with payments in Southern Africa. For a side-by-side of rails across the continent, see the African payment rails matrix.

Who sets the rules, and who runs the rails?

The SARB writes the rules; PayInc runs the retail schemes. The arrangement took its current shape this year. The SARB withdrew PASA's recognition as the payment system management body from 2 September 2026^{[SARB, checked 2026-11-05]}, and the SARB now handles rules and standards for the national payment system and the licensing, authorisation and registration of payment institutions, sharing clearing house coordination with PayInc^{[SARB, checked 2026-11-04]}. Authorisation and registration of system operators and third-party payment providers moved to the SARB on 11 August 2026^{[SARB, checked 2026-11-04]}.

The operator is PayInc. PayInc runs the retail payment schemes: EFT credits and debits, DebiCheck, Registered Mandate, PayShap and real-time clearing (RTC)^{[SARB media release and FAQ, checked 2026-11-05]}. It is the company formerly called BankservAfrica^{[PayInc Business Report 2025, checked 2026-11-04]}, so older contracts and integration guides use that name, and the SARB holds a 50% stake in it^{[SARB, checked 2026-11-04]}.

Settlement happens at the central bank. SAMOS is the real-time gross settlement system the SARB owns and operates; it was introduced on 9 March 1998^{[SARB, checked 2026-11-04]}. For a developer SAMOS is mostly invisible: it is where your bank's obligations settle, not an API you call. SAMOS, RTGS and settlement explains how it affects your payments.

Cards run on the card schemes, which are not on PayInc's list. This year's handover is covered in what happened to PASA, and the rest of the rulebook in payment regulation in South Africa.

Why do South Africans pay from bank accounts rather than mobile wallets?

Because the banks got there first and the wallets never caught up. The best-known casualty: Vodacom announced on 9 May 2016 that M-Pesa in South Africa would close on 30 June 2016^{[Vodacom media release, checked 2026-11-05]}, and its chief executive said high levels of financial inclusion left little prospect of a critical mass of users in its current format in the mid-term^{[Vodacom media release, checked 2026-11-05]}. MTN decided in 2016 to decommission its mobile money offering as well^{[MTN SA press release, checked 2026-11-05]}, then came back with MoMo, which it said would go live in January 2020^{[MTN Group media release, checked 2026-11-05]}. FinMark Trust's 2017 research added agent network challenges, poor technology choices, an institutional environment that constrained the services and established competition in domestic remittances^{[FinMark Trust, checked 2026-11-05]}.

For a builder the verdict is simple: design around bank accounts and cards first, and treat wallets as a channel for specific audiences. The mobile money section covers the history and today's options, starting with why M-Pesa failed in South Africa. Whether the planned e-money rules change that picture is the subject of mobile money under the e-money tier.

Which rail should carry which payment?

Match the rail to the job, not to the newest option. This table is our starting verdict for the common cases.

Which South African rail suits which payment
What you need to do	Rail to start with	Why
Pay salaries, suppliers and other scheduled payouts	EFT credits, in batches through your bank or PSP	EFT credits moved R37 trillion across 1 billion transactions in calendar 2025
Send or receive a one-off payment that should land quickly	PayShap	Scheme limit raised to R50,000 in October 2024; each payer's bank sets its own threshold
Collect subscriptions, premiums or instalments	DebiCheck or Registered Mandate debit orders	Customers now dispute within 60 calendar days, not 365
Take online payments from card holders, including foreign customers	Cards through a PSP	Last year cards carried roughly seventeen times PayShap's transaction count
Take online payments from customers who prefer not to use a card	Pay-by-bank through a PSP (Ozow, Capitec Pay, PayShap Request)	Ozow says its payments involve no credit card chargebacks and no reverse transactions
Move a large interbank amount that must settle at once	RTGS through your bank	SAMOS, the SARB's real-time gross settlement system
Pay a business or person in another CMA country	Cross-border EFT, moving to TCIB	TCIB from 1 April 2027 for smaller CMA cross-border EFTs

Last verified: 2026-11-04. Sources, checked 2026-11-04 to 2026-11-05: SARB Annual Report 2025/26, PayInc Business Report 2025, PASA, BIS: Kganyago, Ozow FAQ, SARB, Government Gazette. The second column is our verdict. The third column comes from the cited sources.

Two rules of thumb sit behind it. Use pull rails (debit orders and DebiCheck) when the customer agrees once and you collect many times, and push rails (EFT, PayShap) when the payer acts each time. Use a PSP for anything customer-facing, because it turns several rails into one API, one webhook stream and one settlement report. EFT, RTC, RTGS or PayShap compares the bank rails in depth.

If you would rather have the rails wired up for you, Mctaba Labs payment integration builds integrations across these South African systems.

Where does PayShap fit, and how big is it really?

PayShap is the rail everyone is watching, and the one to offer where your PSP supports it. It launched on 13 March 2023^{[SARB media statement, checked 2026-11-05]}, and it has processed more than 1 billion transactions worth more than R1 trillion since launch, by the Governor's count in October 2026^{[BIS: Kganyago, checked 2026-11-05]}.

Two caveats keep those numbers in proportion. PayInc says PayShap's growth to 329 million transactions in its 2025 financial year came mainly from payments migrating from RTC^{[PayInc Business Report 2025, checked 2026-11-05]}, so part of the growth is old payments on a new rail. And it is still small next to the established rails: last year PayShap processed only about 6% as many transactions as cards and under 40% of EFT credit volumes^{[BIS: Kganyago, checked 2026-11-04]}.

What makes it useful to builders is the feature set. You can pay to an alias instead of a bank account number^{[SARB retail CBDC background note, checked 2026-11-04]}, PayShap Request, which lets a business start the payment, went live in December 2024 with eight banks^{[PayInc Business Report 2025, checked 2026-11-04]}, and the scheme limit rose from R3,000 to R50,000 in October 2024, with each payer's bank setting the threshold it applies^{[PayInc Business Report 2025, checked 2026-11-04]}.

Verdict: offer PayShap for one-off payments where speed matters, but do not build a business that depends on it alone yet. What PayShap is and how it works is the full guide, PayShap limits and fees by bank has the per-bank figures, and PayShap Request explained covers collection.

How do online businesses take payments here?

Through a PSP that bundles cards, pay-by-bank and sometimes PayShap behind one API. The established names each have a different centre of gravity. Paystack has operated in South Africa since 2021^{[Paystack blog, checked 2026-11-05]}. Payfast says merchants can enable 18 or more payment methods^{[Payfast home page, checked 2026-11-05]}, including SnapScan, Zapper and Capitec Pay^{[payfast.io fees page, checked 2026-11-05]}. Stitch offers Capitec Pay, Capitec Pay VRP and PayShap Request^{[Stitch, checked 2026-11-05]}. And Ozow EFT payments have no chargebacks^{[Ozow FAQ, checked 2026-11-05]}, which matters if you sell anything fraudsters like.

Our verdicts by business type:

Shopify stores: Shopify Payments is not offered in South Africa^{[Shopify Help Center, checked 2026-11-04]}, so pick a third-party gateway; Shopify Payments in South Africa lists the options.
WooCommerce stores: the plugin matters as much as the gateway; see WooCommerce payment gateways in South Africa.
Developers building a custom checkout: start with the Paystack in South Africa developer guide or the Payfast API tutorial, and compare providers in Payfast vs Paystack vs Ozow vs Peach Payments.
High-fraud products: add pay-by-bank next to cards, and read 3D Secure 2, chargebacks and fraud rules before launch.

Card pricing has a regulatory history worth knowing. The SARB's interchange determination implemented on 16 March 2015 set 0.44% for debit and 1.48% for credit on card-present purchases where both issuer and acquirer are EMV compliant; other transaction types carry different rates^{[SARB, checked 2026-11-05]}. Treat it as background, not as today's online rate card; your PSP's published pricing is what you pay. The gateways section compares fees, methods and developer experience.

How do recurring payments and debit orders work?

On mandates. The customer authorises a collection once, and you pull the money on schedule through one of PayInc's schemes. Debit orders, DebiCheck and Registered Mandate are the bank rails for this, and card tokenisation is the card route.

The rule that changed this year: the dispute period for debit orders, DebiCheck and Registered Mandates fell from 365 days to 60 calendar days from 13 April 2026^{[PASA, checked 2026-11-05]}. Refund logic, dispute ageing and customer messages written for a year-long window need updating.

The newest option is variable recurring payments: Stitch announced Capitec Pay VRP on 4 December 2025^{[Stitch blog, checked 2026-11-05]}, aimed at bills that change from month to month.

Verdict: card tokens for low-friction consumer subscriptions and foreign customers, DebiCheck for large or long-running contracts where you need a strong mandate, and VRP where the amount varies. Recurring payments in South Africa compares the three, with detailed guides to DebiCheck integration and Capitec Pay VRP.

What does a non-bank need before it moves other people's money?

A registration today and, soon, an authorisation for each activity. Third-party payment provider registrations granted before PASA's recognition was withdrawn stay valid until the SARB publishes the Authorisation Framework directive^{[SARB, checked 2026-11-04]}, and the SARB intends to publish that framework by the end of November 2026^{[BIS: Kganyago, checked 2026-11-05]}. The SARB non-bank Authorisation Framework covers the draft activity groups and capital figures, what a TPPP is covers the current test, and how to become a non-bank payment provider walks the route.

Authorisation is not the only obligation. For KYC, the FIC Amendment Act of 2017 provides for a risk-based approach to identifying and verifying clients^{[FIC Amendment Act, checked 2026-11-05]}, and every provider handling personal data must comply with POPIA^{[POPIA, checked 2026-11-05]}; FICA, KYC and POPIA for payment products has the detail. Crypto has its own regime: crypto asset service providers are listed in item 22 of Schedule 1 to the Financial Intelligence Centre Act^{[FIC, checked 2026-11-05]}, and the FSCA publishes a list of those licensed under the FAIS Act^{[FSCA, checked 2026-11-05]}. The crypto section covers it.

How does money cross South Africa's borders?

Through two different regimes, depending on where it is going. Inside the Common Monetary Area, SARB Directive 1 of 2025 treats EFTs between CMA countries as cross-border EFTs^{[SARB, checked 2026-11-05]}, and the rail is changing: settlement system participants must stop routing smaller CMA cross-border EFTs through SADC-RTGS by 31 March 2027 and route them through TCIB from 1 April 2027^{[Government Gazette, checked 2026-11-05]}. Further afield, South African businesses paying regional suppliers go through authorised dealers under the Currency and Exchanges Manual^{[SARB, checked 2026-11-05]}.

If you pay out to Namibia, Lesotho or Eswatini, read the TCIB deadline and how to migrate payouts now. The cross-border section covers the wider region, and sending money from South Africa to Zimbabwe covers the Zimbabwe corridor.

What changes in the next twelve months?

Four dates belong in your roadmap:

By the end of November 2026, the SARB intends to publish the Authorisation Framework^{[BIS: Kganyago, checked 2026-11-05]}.
In the first quarter of 2027, the SARB will pilot QR+^{[BIS: Kganyago, checked 2026-11-04]}, covered in QR+ in South Africa.
By 31 March 2027, settlement system participants must stop routing smaller CMA cross-border EFTs through SADC-RTGS^{[Government Gazette, checked 2026-11-05]}.
From 1 April 2027, those EFTs go through TCIB^{[Government Gazette, checked 2026-11-05]}.

The SARB's reform programme as a whole is explained in Payments Ecosystem Modernisation for builders.

Alongside those, the SARB has released a draft Fraud Risk Framework^{[SARB Annual Report 2025/26, checked 2026-11-05]}, covered in what the draft means for merchants and PSPs. None of these change how an EFT or a card payment works tomorrow. They change who can build, where people can pay, and how money leaves the country, so put them in your roadmap now.

When you want the build done on these rails, Mctaba Labs payment integration works on exactly these South African systems.

How payments work in South Africa: rails, roles and regulators