Anticorruption Gateway · Confidential reporting

Speak up safely.
Watch the case progress.
Stay anonymous.

Confidential reporting for South Africa.

Issued by this gateway
Sample reference
AC-2026-KBY9-ZAGS
You'll receive a unique reference like the one above and a PIN you choose yourself. Save them — they are the only way to access your postbox. We cannot recover them for you.
Anonymous by design
No login. No tracking. We never store identifying metadata against your report.
Forensic-grade evidence
Every uploaded image is stripped of EXIF and GPS data before it reaches storage.
Tenant-isolated
A discriminator on every record. Client A cannot read Client B's data — by design.
Scan · Don't type

Point your phone camera.
Report in seconds.

Print this poster in your canteen, depot or break-room — anyone with a smartphone can open the secure report form straight from the lock screen. No app install, no URL to remember, no fingerprints on the form.

  • Opens the report wizard over HTTPS — no tracking pixels.
  • Works from any modern Android or iOS camera.
  • Identity stays anonymous — we never see your number.
Scan the QR code with your smartphone camera to open anticorruption.co.za and report an anonymous tip-off
How it works

Four simple steps. No login. No technical skills required.

From the moment you tell us what happened to the moment your case is resolved — you stay in control.

1
Tell us what happened

Fill in the short form. Pick a category, describe the incident. Anything you can't share is optional.

2
Get your secret reference

You'll receive a unique 12-digit number and you choose your own password. Save them — they're your only way back in.

3
We investigate

A trained investigator reviews your report privately. You stay completely anonymous throughout.

4
Follow the progress

Pop back in any time to read updates, message the investigator, or add more information.

Who uses Anticorruption

Trusted across sectors that matter to South Africa.

From mining and logistics to public sector and financial services — each tenant gets an isolated postbox with their own brand.

  • Mining & resources
  • Logistics & supply
  • Financial services
  • Public sector
  • Healthcare
  • Manufacturing
What investigators look for

What makes a strong report.

Coming forward is a daunting decision. Your safety is paramount — which is why this platform is identity-less by design. But once you decide to speak, a few details turn a general complaint into an actionable case. Here is what investigators, auditors and journalists reach for first.

  • Be specific

    Strong reports name people, places, dates and amounts. They explain how a decision was made or how the misconduct occurred. They give a clear timeline. General rumours are hard to act on — firsthand detail is what moves a case forward.

  • Credibility is key

    Verifiable information turns a tip into a case. Attach what you can: internal documents, official emails or memos, audit reports, tender records, payment information, photos, recordings — anything that lets an investigator follow the paper trail.

  • What to cover

    Try to answer: what happened, who was involved, who did what, how it happened, when and where, how much money was involved, and the result — the loss, harm or impact. The wizard's Step 2 walks you through the same checklist.

Only share what you have a legitimate right to share. Never put yourself at risk to obtain documents. Your safety always comes before the strength of the case.

Compliance & standards

Built to South African and international compliance standards.

Every report is handled inside a regulatory perimeter designed for the people who need protection the most — backed by South African statute and aligned with the leading international standards for information security and anti-bribery.

  • POPIA — Act 4 of 2013

    Lawful, minimal, purpose-bound personal-information processing. Subject rights honoured. Operator obligations met.

  • Protected Disclosures Act — 26 of 2000

    Whistleblower protections engineered in: identity is never required, never shared, and never disclosed to the employer without consent.

  • ISO/IEC 27001

    Information-security management aligned: access control, encryption, audit logging, incident handling, and continual improvement.

  • ISO 37001

    Anti-bribery management principles applied — independent escalation routing, conflict-of-interest controls, executive-protected lists.

  • Companies Act — 71 of 2008

    Supports directors' fiduciary duties (s.76) and the social-and-ethics committee mandate (Reg. 43) for in-scope companies.

  • TLS 1.3 in transit · AES at rest

    Encrypted end-to-end on the wire and inside the database. Issued under Google Trust Services PKI.

IP addresses are never recorded.

Every tenant on this platform runs in zero_ip_mode by default. Your network address is dropped at the boundary — there is no field to retrieve, no log to subpoena, and no admin who can see it. POPIA-stronger than the statutory minimum, by design.

Chain of custody

Bundles you can verify with your phone.

Every evidence bundle we issue carries a deterministic SHA-256 fingerprint and a scannable QR. Anyone holding the printed cover sheet can confirm — in under ten seconds, with no special tooling — that the document is real, untampered, and issued by us. No app to install, no account to create.

Document integrity · SHA-256
1472b92e513886ad7c0075973c208163af755eef5037f4cb1b3a69a672068bb1
anticorruption.co.za/verify/…068bb1

Example panel. The real QR on your cover sheet links directly to a public verification page that returns the URN, issue date and file count — and nothing else.

Frequently asked

Reporting corruption in South Africa

Everything you need to know about anonymous reporting, anti-corruption policies, and corporate corruption programs under POPIA.

Where can I report corruption in South Africa?

+
You can report corruption anonymously through Anticorruption Gateway at anticorruption.co.za. The platform is POPIA-compliant, encrypts every communication in transit using a Google Trust Services SSL certificate, and never stores identifying metadata. You receive a unique reference number (URN) and a PIN you choose yourself — these are the only way to access your private postbox to track the investigation. The Public Protector, the Special Investigating Unit, the Hawks and Corruption Watch are also recognised reporting channels in South Africa, but they are not anonymous by default.

How do I report corruption anonymously?

+
Click Whistleblow and complete the 4-step wizard:
  1. Choose the corruption category — bribery, fraud, theft, conflict of interest, procurement irregularities and more.
  2. Describe the incident in your own words. No personal details required.
  3. Attach any supporting evidence. EXIF and GPS metadata are stripped automatically from every photo and document before storage.
  4. Set a PIN you can remember — combined with the URN, this is your only key to your postbox.

No login is required, no phone number, no email, no IP tracking. Anonymous reporting of corruption is the default — not an option you have to turn on.

How can we stop corruption in South Africa?

+
Stopping corruption requires both prevention and reporting. Strong anti-corruption policies, transparent procurement, regular audits, robust whistleblower protection under the Protected Disclosures Act, and a safe channel for citizens and employees to come forward together create real accountability. Anticorruption Gateway provides that safe channel — anonymous by design, encrypted end-to-end, and POPIA-compliant.

Do you offer corporate corruption programs and anti-corruption policies for businesses?

+
Yes. South African companies can deploy Anticorruption Gateway as their own private tenant — branded with their own logo and colours, fully isolated from other clients, with role-based investigator access and full POPIA compliance. Email info@anticorruption.co.za for a corporate anti-corruption programme demo and pricing.

Is my identity protected when I report?

+
Yes. The Protected Disclosures Act (PDA) and POPIA together protect whistleblowers in South Africa. Anticorruption Gateway adds technical anonymity on top of legal protection: no login, no tracking pixels, no phone-number requirement, EXIF/GPS scrubbing on every upload, and TLS 1.3 encryption for all communications via a Google Trust Services SSL certificate.
Anticorruption Gateway
ANTICORRUPTION GATEWAY

A confidential reporting service operated under POPIA. Reports are anonymous by design and all data is encrypted.

All communications on this website are encrypted in transit (TLS 1.3) using an SSL certificate issued by Google Trust Services.

Secured by
Google Trust Services
Compliance
  • POPIA — Act 4 of 2013
  • Protected Disclosures Act — 26 of 2000
  • ISO/IEC 27001 · ISO 37001 aligned
  • Companies Act — 71 of 2008
  • TLS 1.3 in transit · AES at rest
  • EXIF / GPS metadata stripped on upload
  • IP addresses never recorded
Johannesburg · Firebase verified

Your report stays on South-African soil. The server refuses to boot from any other region.

© 2026 Anticorruption GatewayForensic Standard · Multi-Tenant Isolated