🇿🇦South Africa eSIM: RICA Section 40 Binds Every Seller

12 plans for South Africa, from 1 GB at $3.99 to 20 GB at $36.99, plus 6 unlimited-data tiers. 5 GB for 30 days costs $12.49 — 3rd cheapest of 35 in Africa, against a $25.99 median. Our retail prices from the operator catalogue, checked 28 September 2026.

Does this apply to you? (the duty sits with whoever sells the phone or SIM, not the buyer of this eSIM)

eSIM South Africa is CellSA’s foreign-issued data profile that roams on Vodacom’s 4G network under a number South Africa never issued, so it sits outside RICA Section 40’s duty on whoever sells a local Subscriber Identity Module (SIM) card.

South Africa runs a real identity-check duty for cellular phones and SIM-cards, and it names a wider group than “operator.” RICA’s Section 40 puts that duty on “any person” who sells or provides a phone or SIM-card — not on a licensed network alone. Before the sale, the seller must obtain, retain and verify the buyer’s ID.

The law behind that duty is the Regulation of Interception of Communications and Provision of Communication-related Information Act, 2002 (RICA, Act No. 70 of 2002). Section 40 spells out three steps: collect the buyer’s name, identity number, address and a certified photocopy of their ID; keep that photocopy; check the photo, name and number on it against the document.

This eSIM South Africa profile sits outside that chain. It comes from CellSA, roaming on Vodacom’s 4G network under a foreign-issued profile, with no ID step at checkout. Section 40 was written for a different sale: someone handing a physical phone or SIM-card to a buyer inside South Africa. Walk into a Vodacom, MTN or Cell C store for a local SIM, and Section 40 meets you at the counter — not here.

How we read this law: the government’s own PDF was unreadable, and fixing that changed the answer

South Africa’s Government Printing Works publishes RICA as a 49-page PDF (Government Gazette No. 24286, 22 January 2003, Vol. 451). Its text layer is broken: it renders “service providers” as “sewice pro\ iders,” “theft” as “thefr,” “Unlawful” as “Unlau.ful.” Quoting that layer would misquote the law.

We re-scanned all 49 pages through Apple’s Vision OCR and read the resulting 160,682-character file directly — the same method used for a Vietnamese decree elsewhere on this site. The gap this closed is not cosmetic. The phrase “identity number,” counted whole-word and case-insensitive, appears 0 times in the broken text layer and 10 times in our re-scanned version — five inside Section 39, five inside Section 40. Read the broken file, and this page would report that South African law never asks for an ID number at a SIM sale. That would be false.

Even our re-scan makes small errors of its own. Commas render as periods in places, as in “a telecommunication service provider. other than a telecommunication service provider who provides a mobile cellular telecommunication service.” Quotes below stay short for that reason. Longer passages are paraphrased rather than quoted. Every quote here comes from our own OCR pass, not from a certified or official translation of the PDF.

Section 40: three duties, not one

Section 40(1) sets three duties for a natural-person buyer, in sequence: obtain, retain, verify.

“[Before any sale, the seller] must... obtain from him or her his or her full names, identity number, residential and business or postal address... [and] a certified photocopy of his or her identification document... retain the photocopy... and verify the photo, full names and identity number... with reference to his or her identification document.” (Section 40(1)(a), RICA, our OCR pass, condensed)

Three actions, each named on its own in the text: obtain, retain, verify.

For a juristic-person buyer, Section 40(1)(b) adds four more items on top of the representative’s own name, identity number and address. It adds the business’s name and address, its registration number where one exists, and a certified photocopy of the company’s letterhead — plus retention and verification of both the person’s identification and the company’s registration details.

Section 40(3) folds in Section 39’s follow-up mechanism too. An applicant seeking to intercept a communication can ask the seller to confirm the buyer is a real customer and hand over the retained photocopy. The seller “must immediately comply” once confirmed.

One gap stands out against the three countries this project already covers. Germany names seven document types. Taiwan requires two originals. Section 40 names none — only “identification document,” with no schedule anywhere in the 160,682 characters we read.

Compared with Germany, Taiwan and Morocco: the same duty, four different edges

Germany lets the seller pick from seven listed papers. It skips a photocopy step and puts the duty only on the firm that switches on a German number (Germany eSIM: § 172 TKG’s Seven-Document ID Check, Explained).

Taiwan asks a foreign buyer for two original documents and bars any remote check (Taiwan eSIM: Article 3 Needs Two IDs, Not Just a Passport). Morocco puts “verified identification” on the operator, who stays on the hook even when a street vendor runs the actual check (Morocco eSIM: Article 23 Ties Resellers to the Operator). South Africa’s Section 40 stands apart: it names the seller directly, as “any person” who sells or hands over the phone or SIM-card. It asks for a certified copy, its retention and a cross-check — but names no document type at all.

Section 39 and Section 41: the same duty for fixed lines, and what happens after a phone is lost

Section 39 sets the identical three-part duty — obtain, retain, verify — for any telecom provider that is not a mobile carrier, before it signs up a customer.

“Before a telecommunication service provider, other than a telecommunication service provider who provides a mobile cellular telecommunication service, enters into a contract with any person for the provision of a telecommunication service to that person...” (Section 39(1), RICA, our OCR pass)

Section 39 is South Africa’s fixed-line and non-mobile counterpart to Section 40. The buyer’s name, identity number and address, plus the same certified-photocopy check, get collected before a non-mobile contract starts.

Section 41 runs the other direction: report a lost, stolen or destroyed phone to the police.

“Whenever a cellular phone or SIM-card is lost, stolen or destroyed, the owner of that cellular phone or SIM-card, or any other person who was in possession, or had control, thereof when it was so lost, stolen or destroyed, must within a reasonable time after having reasonably become aware of the loss, theft or destruction... report such loss, theft or destruction in person or through a person authorised thereto by him or her, to a police official at any police station.” (Section 41(1), RICA, our OCR pass)

The official taking the report must hand back written proof, or a reference number for a telephonic report. The station must keep a record of every report filed. Section 55 makes the flip side its own offence: failing to report a lost, stolen or destroyed phone is something “any person” can be convicted of.

Is Section 40 itself a crime to break? We checked — it is, in the lighter of two brackets

RICA sets two separate offence brackets in Section 51, and Section 40 sits in the one written for the seller, not the one written for operators.

Section 51(1)(a)(i) makes “any person” guilty of an offence for failing to comply with several sections at once, including “40(1), (2) or (3)” — the seller’s own duty, named explicitly. Section 51(1)(b)(i) sets that offence’s penalty. Our OCR garbles the fine figure into nonsense at that exact spot in the file, but the prison term reads clean: “imprisonment for a period not exceeding two years.”

That is the lighter of RICA’s two brackets. A second, heavier bracket, in Section 51(3)(a), is reserved for “telecommunication service provider[s] or employee[s].” It names Sections 7(2), 8(3), 28(1)(b) or (2), 30(1) or (4), 7(5), 8(5), 39(1) or (2), and 42(2) — not Section 40. A provider convicted there faces up to R5,000,000 as a juristic person, or R2,000,000 plus ten years' imprisonment as a natural person or employee. A private seller who skips Section 40’s check instead falls under the lighter “any person” bracket — capped at two years, fine illegible — not the provider-level fine or ten-year cap that applies to Section 39.

What we could not verify: this is the 2002 text, and a 2008 amendment we could not retrieve

This page reads RICA exactly as it was gazetted on 22 January 2003 — the original 2002 Act, not necessarily today’s law.

Searching our 160,682-character file for “amendment” (whole word, case-insensitive) returns 15 hits, not zero — a number worth stating precisely rather than rounding away. Reading each one shows why it doesn’t change the conclusion. Every hit is either RICA amending three other statutes by name (Act 51 of 1977, Act 140 of 1992, Act 40 of 1994) or the procedural sense of amending a judicial interception direction. None of the 15 concerns an amendment made to RICA itself, and the string “2008” does not appear anywhere in the file.

That absence matters, because RICA’s SIM-registration regime was substantially reworked by the RICA Amendment Act, No. 48 of 2008 — a document we could not retrieve. Direct requests to gov.za and justice.gov.za addresses went unanswered, and SAFLII returned an empty shell instead of readable text. Everything above — the three-part duty, the offence brackets, the police-report rule — describes the Act as gazetted in 2003. This page cannot say which parts still stand unchanged after 2008, or after anything amended since.

What you get: CellSA on Vodacom, 4G, data-only

This eSIM South Africa profile runs on CellSA, roaming on Vodacom’s 4G network, data-only, with no KYC step at activation and an Access Point Name (APN) that fills in automatically — Airalo catalog data, checked 17 August 2026.

That sits outside Section 40’s duty to register a buyer at the point of sale. It isn’t a way around South African law — the duty was never written to reach a foreign-network profile in the first place.

The profile is rechargeable, with no stated expiry on a loaded balance.

The 5 GB / 30-day plan is the one most short trips land on.

Buying a local South African SIM instead: what Section 40 actually asks for at the counter

Buy a physical SIM at a Vodacom, MTN or Cell C counter, and Section 40’s three steps run in full. Hand over your name, identity number (or passport number, since the text reads “whichever is applicable”), address, and a document the shop can photocopy and certify. The shop retains that photocopy and checks your photo, name and number against it.

RICA names no specific list of accepted document types the way Germany’s or Taiwan’s laws do, so this page cannot say which document a given counter will accept from a foreign passport holder. We did not read ICASA’s rules or any operator’s own terms, and neither substitutes for Section 40 itself.

The APN, and before you fly

CellSA’s APN fills in automatically, per Airalo’s catalog notes for this profile — no manual entry step reported.

Install the profile before departure, on Wi-Fi. Nothing activates at install, so a profile that reads installed but inactive before boarding is normal. The usage clock starts at first connection to Vodacom, once you land and turn on data roaming.

This eSIM South Africa profile is data-only and carries no phone number. Anything that verifies you by SMS to a South African number — a bank one-time code, a delivery app, a loyalty sign-up — sits outside what it can do. First eSIM install? The iPhone guide and the Android guide cover the QR-scan and manual-entry paths.

FAQ

Sources and freshness

Checked against RICA, Act No. 70 of 2002, published in Government Gazette No. 24286 (22 January 2003).

The government’s PDF text layer is unreadable in places. We re-scanned all 49 pages via Apple’s Vision OCR, checked 17 August 2026. Sections 39, 40, 41, 51 and 55 were read in full; Sections 7, 8, 28, 29, 30 and 42 only where Section 51 cross-references them. Not read: the rest of the Act, and the RICA Amendment Act, No. 48 of 2008, which we could not retrieve.

The competitor pages collected for this site were searched before writing, not assumed empty — for “South Africa,” “RSA,” “Güney Afrika,” “Afrique du Sud,” “Südafrika” and “Suid-Afrika.” None of them is dedicated to South Africa; the name appears only inside destination-directory lists (esimdb.com, traveltomtom.net, esim.io), each naming it once among hundreds of countries. One genuine SERP capture targets this topic directly: 37 results for a South Africa SIM-registration query, with a People Also Ask block asking “Can tourists get a SIM card in South Africa?” Its results describe current retail RICA practice — self-service apps, in-store checks, airport counters — and none quotes Section 40’s three-part text or its offence-bracket split.

Plans, prices, network and activation notes come from Airalo’s catalog data for CellSA, checked 17 August 2026, and can change without notice. This page reads South African law as it stood in 2003 — recheck it and RICA’s later amendments before relying on it beyond ordinary travel.

Sources cited only — expert review pending. For individualized advice, consult a licensed professional.