Client ID numbers and transfer files stay in the practice
Conveyancing files, deceased estates and litigation bundles are full of South African ID numbers and trust-account banking details, while secretaries and paralegals are targeted daily with fake proof-of-payment links. ZDNS adds a network safeguard from one router setting, from R499 a month for a practice of up to 10 people.
Fake proof-of-payment (PoP) emails
Scammers send conveyancing secretaries a link to a "secure bank PoP viewer" or "updated bond figures" designed to steal Microsoft 365 logins and intercept trust-account EFTs. ZDNS blocks known phishing domains before the page loads.
Deeds & FICA bundle harvesting
Data-stealing malware on a secretary's PC scans recent transfer and estate folders for 13-digit SA ID numbers and bank account numbers and tries to smuggle them out via DNS. ZDNS checks the SA ID check digit and blocks the lookups.
Hacked correspondent & sheriff links
When another firm's email account is compromised and sends out a fake "SharePoint transfer pack" link, ZDNS blocks domains listed on Google Web Risk across every laptop and desktop on the practice Wi-Fi.
A plain-English record (from R499/mo)
POPIA asks for reasonable security safeguards. A practice of up to 10 people is covered for R499 a month with one router setting, and every blocked lookup is logged in plain English.
How it plays out
A five-attorney conveyancing practice. Illustrative, not a real customer.
- 1
A conveyancing secretary opens a "revised municipal clearance & PoP" link that installs a small data stealer.
- 2
It collects buyer and seller SA ID numbers from recent transfer files and tries to send them out in DNS lookups.
- 3
ZDNS recognises valid 13-digit SA ID numbers in the lookup names and blocks each one before it leaves the office.
- 4
The weekly report shows what was blocked and how to trace the affected computer on the office network.
Repeats about every 5 minutes · Find this computer →
Long numbers are masked to their last 4 digits before anything is stored.
Good to know
ZDNS checks every lookup for SA ID numbers, bank account numbers and client contact details, plus scrambled codes that malware uses to smuggle data. Here is what to expect.
An extra layer
ZDNS does not remove malware or replace antivirus or call-back verification of trust-account details. It stops known phishing domains and data leaving through DNS.
Fixed internet address
ZDNS recognises your practice by its internet address. If your provider changes it, update it in one click from the dashboard.
Nothing is blocked in week one
Every customer starts in shadow mode for about a week, sees what would be blocked, and whitelists anything they rely on before blocking starts.
Keep your clients' ID numbers where they belong
R50 a seat a month, from 25 seats. One router setting. Protected in shadow mode from day one.