The Presidency has officially received its request for President Cyril Ramaphosa to authorise a Special Investigating Unit (SIU) probe into the explosive R2 billion Ekurhuleni billing scandal, as pressure mounts for urgent action against what opposition parties say is one of the biggest municipal cybercrime and corruption scandals to hit Gauteng.
This follows shocking revelations before Parliament’s Standing Committee on Public Accounts (SCOPA) that cybercriminals allegedly infiltrated the City of Ekurhuleni’s billing system over several years, manipulating municipal accounts, unlawfully writing off debt and issuing fraudulent tariff clearance certificates while billions disappeared from the metro’s finances.
The Democratic Alliance (DA) has confirmed that it first raised concerns with the SIU in July 2025 after uncovering evidence of funds allegedly being siphoned from the municipality through compromised billing and IT systems. Recent developments emerging from SCOPA, together with a Hawks investigation into several municipal officials, have intensified calls for a full-scale criminal probe.
DA Ekurhuleni mayoral candidate Khathutshelo Rasilingwane said the party’s request to Ramaphosa was facilitated by DA Parliamentary Leader George Michalakis MP.
“Our direct request to Ramaphosa, facilitated by DA Parliamentary Leader, George Michalakis MP, relates to this scandal. The president must authorise an SIU investigation immediately, so that those responsible can face justice,” Rasilingwane said.
Evidence presented before SCOPA revealed that hackers allegedly exploited unsecured Wi-Fi infrastructure at the Bedfordview Licensing Department, where spyware was reportedly installed to steal passwords and manipulate municipal debt records from vehicles parked outside the building.
An independent forensic report issued in July 2025 reportedly warned that internal collusion and weak cybersecurity controls had enabled the attacks, yet opposition parties claim the ANC-led administration failed to act decisively while residents continued enduring failing service delivery, power outages, deteriorating roads and rising municipal tariffs.
“The DA’s stance is clear: Ekurhuleni is not for sale. If the Presidency and the SIU allow this opportunity to act against massive corruption, and a clear attack on a major municipality’s ability to deliver services go past unchecked, we have entered dangerous territory,” Rasilingwane said.
The Freedom Front Plus (VF Plus) also weighed in on the scandal, describing it as proof of deep-rooted governance failures within the metro.
“This incident of cybercrime is no accident; it is the direct consequence of years of cadre deployment, incompetent appointments, inadequate oversight and an utter lack of accountability under ANC rule,” the party said.
The party called for “a thorough, independent forensic investigation into all IT transactions, account manipulations and payments over the relevant period” and demanded that implicated officials, contractors and political leaders be publicly identified and prosecuted.
The scandal has further reignited scrutiny around the murder of senior forensic audit official Mpho Mafole, who was reportedly involved in investigations linked to the missing funds before he was killed in 2025. The DA previously raised concerns that Mafole may have compiled sensitive evidence connected to the matter, although investigators have not confirmed any direct link.
“This matter goes beyond a technical breach. Under Mayor Nkosindiphile Xhakaza oversight and accountability within the city has collapsed and weak controls have been allowed to persist, creating an environment in which public funds can be looted with little consequence,” the DA said.
Recently, mayor Xhakaza’s acting spokesperson, Ramatolo Tlotleng, told The Star that all political parties must follow established council procedures instead of seeking political advantage through the media, adding that the city remains firmly committed to transparency, accountability, and good governance.
Opposition parties warned that the alleged theft has severely weakened a metro already battling financial strain and growing public frustration over deteriorating basic services.
The DA added that it will not allow the public purse to be the go-to for criminals.
“The message, and request to Ramaphosa is a simple one, to help us to catch criminals. We must convict them, and clean up our municipalities,” Rasilingwane said.
The ANC has since defended its record on fighting corruption, saying it supports all lawful investigations into allegations linked to the City of Ekurhuleni billing scandal.
ANC national spokesperson Mahlengi Bhengu said Ramaphosa’s administration had signed numerous SIU proclamations targeting corruption, fraud and maladministration across government institutions.
“The ANC has consistently championed the fight against corruption and maladministration in all spheres of government, under the leadership of President Cyril Ramaphosa,” Bhengu said.
She added that the ANC supported “all lawful and credible efforts to investigate allegations of wrongdoing wherever they may arise, including within local government”, while accusing opposition parties of using governance failures for “narrow political gain”.
Bhengu said the ANC had also established a Local Government Intervention Team aimed at strengthening governance systems, improving financial controls and accelerating service delivery in struggling municipalities.
The Star
masabata.mkwananzi@inl.co.za