There’s a small, almost invisible moment that happens every time someone pays for something in South Africa today. A tap. A glance at a phone screen. A confirmation. Done. It feels effortless because a decade of quiet, hard-won innovation has made it that way.
It wasn’t always like this. Over the past ten years, South Africa’s online payments landscape has moved through four distinct eras, each one solving the problems left behind by the last. QR code wallets gave way to screen-scraped instant EFTs, which gave way to secure bank APIs, which have now given way to device-native wallets living right there on our phones. Regulation nudged it along. Fraud risk shaped it. Consumer habits pushed it forward. And then COVID-19 arrived and did in eighteen months what might otherwise have taken a decade; it normalised contactless payment before the wallet had even properly gone digital.
But here’s the catch: as the ecosystem grew, so did the confusion. Consumers ended up with more ways to pay than ever before, and precious little guidance on which one to use, or how to keep it all under control. That gap is exactly what’s opened the door for smarter, smoother platforms ones that hand control back to the consumer without ever getting in the merchant’s way.
Era one: the QR code years (2013-2020)
It started with a scan. SnapScan launched in partnership with Standard Bank in 2013, and consumers took to it. Zapper followed, then Mastercard’s Masterpass, and suddenly pulling out your phone to pay felt like the future.
By 2018, Mastercard and Zapper had even joined forces; Masterpass users could scan Zapper codes, and Zapper users could pay at Masterpass merchants, stitching together a combined footprint of more than 100,000 physical retail points.
Impressive on paper. Messier in practice. Competing QR standards and inconsistent merchant experiences kept the ecosystem fragmented. And underneath all of it sat a quiet limitation nobody talked about much: QR codes were still, fundamentally, cards. SnapScan and Zapper were clever front ends that tokenised card credentials and rode on existing card rails. They made in-store payments easier for merchants without card terminals, but they never touched the underlying infrastructure, and they didn’t change online checkout in any meaningful way.
Era two: instant EFT, and the risk nobody saw coming (2015–2024)
Then came instant EFT and with it, a genuine break from cards. Providers like Ozow and PayFast built a bridge straight to a customer’s bank account. You’d type your internet banking username and password into a third-party checkout page, the provider would log into your bank on your behalf, and the payment would clear almost instantly. No card required. No card fees for the merchant either.
It was fast, it was cheap, and it worked until you thought about what you were doing: handing your banking credentials to a website that wasn’t your bank.
The regulators noticed too. In November 2020, the South African Reserve Bank, the FSCA and the Payments Association of South Africa issued a joint public warning, flagging four distinct risk areas: data privacy, fraud exposure, contractual liability and transaction finality. SARB has since barred merchants from issuing EFT credit payment instructions on a customer’s behalf unless they’re SARB-registered and have proper consent. Instant EFT is still faster and cheaper than cards from a merchant’s point of view; it’s just had to grow up fast under tighter rules.
Era three: the direct bank API takes over
This is where things start to feel properly secure. Instead of a third-party logging into your bank for you, the direct API model creates a machine-to-machine channel between merchant and bank, and you handle your own authentication, directly with your bank. Your credentials never leave the banking environment. It’s a small architectural shift with a huge trust dividend, and it lines up neatly with SARB’s Vision 2025 open banking agenda.
In December 2025, Capitec and Stitch pushed this further, extending API payments into a Variable Recurring Payments (VRP) model, a structured, consent-driven alternative to the DebiCheck and manual debit orders many of us have quietly resented for years.
And within this same era, PayShap arrived. Launched in 2023 and operated by PayInc, it set out to simplify the payment experience, and it’s working. By May 2026, PayShap had more than six million registered users and had processed 905 million transactions. It’s had its growing pains, as any young system does, but a recent 50% acquisition by SARB has given it real momentum.
Era four: closing the last gap: checkout itself
Here’s the thing about PayShap and the API era: they solved security. They didn’t solve friction. Paying still meant a deliberate, multi-step dance open the app, find the option, authenticate, confirm, wait.
Enter Apple Pay and Google Pay, finally landing properly in South Africa. Their entire value proposition is collapsing that dance from twelve steps down to two. A tap, a glance, done.
Except it’s not quite that simple to bring global tools into a local market. Apple Pay and Google Pay were built for payment ecosystems that don’t work quite like ours, and their global frameworks leave gaps that had to be filled to meet South African merchant needs. Take recurring charges: a single order could trigger further payments against the same card with no prompt and no re-authorisation fine in some markets but not aligned with what local merchants and regulators expect here.
This is the gap Ecentric set out to close, giving South African customers the ease, speed and security of Apple Pay and Google Pay, without merchants losing the granular control they need.
We solved it at the gateway. When a payment is first authorised, Ecentric captures that original payload and hands the merchant back a single order-level reference. Any future payment tied to that order carries only the reference nothing more and Ecentric processes the charge against the already-authorised credential behind the scenes. Security stays intact. Liability stays exactly where it should. And the customer just… pays. Simply, quickly, safely. Global capability, built for local reality.
Where we are now
Four eras. Ten years. A lot of trial, error, regulation and reinvention all in service of a moment that now barely registers: a tap to the left, a glance at a screen, and it’s done. That’s where South African payments sit today: an era of accessible speed, where the options finally match how people actually want to pay, and where the systems behind the scenes have caught up to a genuinely mobile-first way of life.
Wesley Fetter, OLP Product Manager at Ecentric Payment Systems
