The Resignation Trick: How Fraudulent Employees Exploit South Africa's Reference Culture

In South Africa, when you ask for a reference, you're almost certainly going to get one from a friend. Probably not a boss or anyone with real oversight of their work. More likely a colleague. A or a friend. Someone the candidate chose because they knew what would be said. South Africa's professional networks tend to be close. In many industries, everyone knows everyone, and that closeness means references end up being exchanged as favours rather than any kind of meaningful due diligence. If this part of vetting a new candidate carries a fair bit of weight in your process for a new hire, it can be a problem.

TL;DR

  • In SA, references almost always come from friends, not supervisors. That makes them close to useless for catching risk.
  • MIE data from 3.2m+ screening transactions shows fake qualifications, identity fraud, and financial misrepresentations are on the rise.
  • Over 50% of CVs in SA contain fabrications during economic downturns.
  • The resignation trick: leave before the investigation catches up, get a clean reference from a friend, start fresh elsewhere, repeat.
  • If your hiring process relies on reference calls as a safeguard, you're exposed. Intelligence-led screening fills the gap.

The reference call was never designed for this

A reference call, in theory, is a professional handover. It's supposed to give the next employer context: dates and job title, sure, but also real insight into performance, conduct, and anything the next employer should know about.

In practice, particularly in South Africa, that's rarely what you get.

The professional landscape here is built on relationships. Industries are smaller, people move in overlapping circles, and when someone puts down a referee, it's almost always someone they trust to say the right things. The result is a reference that tells you very little beyond what the candidate wants you to hear.

The reference system depends on honest, institutional feedback, and the culture around it doesn't always deliver that. People are not necessarily acting in bad faith. The structure just doesn't work.

The resignation trick

When an employee resigns while under investigation, or before concerns are formally recorded, there's very little that follows them to the next employer. The investigation stalls. The exit happens without fireworks. And the reference, when it comes, confirms employment dates and not much else.

I wrote about this pattern in a previous article, looking at the UK context and the Oxfam scandal. The same dynamic exists in South Africa, arguably in a more pronounced form.

In SA, the combination of close networks and cautious legal advice means that even where concerns exist, former employers are reluctant to put anything on paper. The risk of defamation claims, combined with a culture of "let's just move on," means that problematic employees can move from one organisation to the next with no trail.

That's the resignation trick: Resign before the process catches up, collect a clean reference from a friend, and move on. Some people do it more than once.

The numbers tell the story

MIE (Managed Integrity Evaluation), South Africa's leading background screening company, analysed over 3.2 million screening transactions and found that fake qualifications, identity fraud, and financial misrepresentations are becoming more common across all levels of hiring.

During periods of economic pressure – which South Africa has experienced consistently – the rate of CVs containing lies exceeds 50%.

In a stack of ten CVs, at least five contain something that isn't true. A reference call from a friend is not going to catch it.

The worse economic conditions get, the more people stretch the truth to get hired. And the more stretched the truth, the less useful a traditional reference check becomes.

POPIA doesn't solve the screening gap

South Africa's Protection of Personal Information Act (POPIA) rightly requires organisations to handle personal data with care. Screening must be conducted with proper consent, proportionate data collection, and adequate security.

POPIA tells you how to handle information lawfully. It doesn't help you find the information that matters. It was never designed to.

Common compliance failures – checks without proper consent, excessive data collection, inadequate security, failing to issue adverse action notices – show that many organisations are still getting the basics wrong. And those that are compliant with POPIA are not necessarily conducting effective due diligence.

Being compliant and being effective are two different things...

From references to intelligence

Pretty much all organisations do some sort of vetting - formal or otherwise. The problem is that what they do doesn't align with the scale of the risk.

A reference call confirms that someone held a role. It rarely surfaces concerns about integrity, misrepresentation, or behavioural risk – particularly when the referee is a personal contact.

Registry-based checks tell you whether someone has a formal record. They won't surface undisclosed associations, concerning online behaviour or patterns that should inform a hiring decision.

Intelligence-led screening takes a different approach. It confirms who someone is (structured verification), then checks for online risk (digital risk discovery) – using the scalability of AI analysis to surface signals from open-source data across the surface, deep, and dark web. A human analyst then validates any red flag findings to ensure findings are accurate, relevant, and defensible.

What you get back is a structured, evidence-led report. It gives decision-makers actual context so they can make proportionate and informed decisions.

Instead of relying on a friend's good words, you get to build a picture of who you're hiring.

The reference culture isn't going to change overnight

South Africa's professional networks are what they are. The relationships, the closeness, the culture of personal endorsement – none of that disappears because a blog tells it to.

What can change is how organisations respond to it. A reference can- and should - still be part of the process, but it shouldn't be the part you rely too heavily on to catch fraud, misrepresentation, or risk.

The organisations that get this right treat references as one input among several, and make sure the other inputs are structured, objective, and designed to surface what references can't.

If your organisation is reviewing how it screens new hires in South Africa, Safehire.ai provides  Digital Risk Screening that combines AI-scale discovery with human analyst validation, giving you evidence-led, defensible insight that a reference call never will.

Continue reading