🚩 Analysis of the “Nelisiwe Gumbi – DCS” Tender Email
1. Sender Email is Unverifiable
While the address Nelisiwe.Gumbi@dcs.gov.za appears legitimate, the scam lies not in the email display name, but in the instructions and destination address it includes:
Forward All Quotations to: Siyabulela.Budaza@dcs.gov.za
That’s the scam address — they create aliases using “@dcs.gov.za” in the display name only and redirect real responses to a lookalike or spoofed inbox hosted elsewhere (often external phishing servers).
2. Suspicious Urgency & Paperwork Demands
The email aggressively pushes for:
-
Signed quote
-
Product specs
-
Tax Clearance Certificate
-
BBBEE Certificate
-
CSD Registration
-
SBD forms (common in SA tenders)
This overwhelming request for compliance documents tricks you into thinking it’s official, but its true goal is to:
-
Build credibility
-
Pressure you into quoting for unfamiliar items
-
Potentially make you pre-order stock or pay freight to a scam courier
3. Untraceable Contact Numbers
-
Tel: 0311100536 – This is not registered to any DCS branch.
-
Cell: 0731431766 – Reused in other scam emails. Not associated with any legitimate government official.
✅ Government departments always use traceable switchboard numbers, not generic prepaid mobile lines.
4. Quotation Routing to Another Person
As seen before, the message ends with:
Forward all quotations to: Siyabulela.Budaza@dcs.gov.za
This "change of hands" tactic is used to funnel replies into private scam inboxes, even if the original sender appears legitimate.
5. No Tender Reference or Item Description
There’s:
-
No RFQ Number or PRFQ Number given
-
No item or service listed
-
No closing date or response timeline
These omissions are critical — no legitimate DCS tender would omit this.
✅ Final Verdict: Fake Tender Email (Scam)
This is a scam posing as an RFQ from Westville Correctional Services. It attempts to bait you into sending sensitive company documents and placing orders for unspecified products.
🛡 What You Should Do:
-
Do NOT send your quote
-
Do NOT provide any company documents
-
Block the domain and sender
-
Report to the Department of Correctional Services fraud hotline
-
Report also via CyberSecurity Hub South Africa










