DebiCheck: South Africa's Authenticated Debit Order System Explained

DebiCheck launched in South Africa in 2021 as the reserve bank's answer to a real problem: too many fraudulent and disputed debit orders. It is the infrastructure that makes Float's payment collections trustworthy. Understanding how it works explains why it matters.

What DebiCheck Actually Is

DebiCheck is an authenticated debit order system regulated by the South African Reserve Bank and administered through BankServ Africa. Unlike a standard debit order where the collecting party submits the instruction and it just goes through, DebiCheck requires the account holder to explicitly authenticate each mandate before any debit can be processed.

The authentication happens through your bank. Your bank pushes a notification to its app asking you to confirm the mandate details: who is collecting, how much, on what date, for how long. You approve it. Only then can collections proceed. No approval, no debit. Simple as that.

The Problem DebiCheck Was Built to Solve

Before DebiCheck, South African consumers were routinely hit with debit orders they never authorised. The old authenticated early debit order (AEDO) and non-authenticated early debit order (NAEDO) system had fraud vectors that bad actors exploited. Debt collectors, some operating in grey areas, could submit debit orders against accounts without clear proof of mandate.

In our tracking, the South African Banking Risk Information Centre (SABRIC) reported tens of thousands of disputed debit order complaints annually prior to DebiCheck rollout. The system was genuinely broken. DebiCheck fixes it at the authentication layer.

How the Authentication Flow Works

When Float creates a payment plan, here is what happens step by step:

1. Float submits the mandate details to BankServ Africa via the DebiCheck system.
2. BankServ routes the mandate authentication request to your bank.
3. Your bank sends you a push notification or in-app prompt.
4. You review the mandate: collection amount, date, frequency, collector identity.
5. You approve or reject within the app.
6. Approval is cryptographically recorded. Rejection cancels the mandate.
7. Collections can only proceed against an approved mandate.

The whole thing typically takes 90 seconds. The debit order is then locked to those specific parameters. If Float tried to collect a different amount or on a different date, the collection would fail at the BankServ level because it would not match the authenticated mandate.

DebiCheck vs Unauthenticated Debit Orders

Standard debit orders, still used widely by insurers, gym memberships, and subscription services, do not go through this authentication layer. They are submitted and collected without the account holder confirming anything upfront. You can dispute them after the fact, but reversal processes vary by bank and can take 30 to 40 days.

With DebiCheck, you are in control before the first rand leaves your account. That is a significant difference. For a financial product like Float, where we are restructuring a meaningful purchase over months, user trust in the payment infrastructure is non-negotiable. DebiCheck is why that trust is justified.

Bank Participation and App Coverage

All major South African banks participate in DebiCheck. Absa, FNB, Standard Bank, Nedbank, and Capitec all have in-app DebiCheck mandate authentication. Tyme Bank and African Bank also support the system. Coverage across South Africa's formal banking sector is now essentially complete for retail accounts.

Capitec has a slightly different UI for mandate authentication compared to the traditional banks, reflecting its app architecture. The outcome is identical. Some older feature phones using USSD banking do not support push-based DebiCheck authentication, which is a limitation for that segment, though it affects a small share of the credit card holding population.

What DebiCheck Cannot Do

DebiCheck authenticates the mandate. It does not guarantee funds availability. If your account does not have sufficient funds on the collection date, the debit still fails. Returned debit orders may attract banking fees depending on your bank's schedule. This is standard debit order behaviour, not a DebiCheck limitation, but it is worth knowing.

Honestly, the biggest user education moment we face is explaining that approving a DebiCheck mandate means you are committing to have those funds available on those dates. It is not a passive system. It requires some financial planning around collection dates.

For more on how Float uses DebiCheck in the payment plan process, see how Float BNPL works or visit the About Float page.