Cape Town urges Prasa to root out gang connections in central line contracts

Cape Town's Central Line rebuild, meant to revitalize economic opportunity, is allegedly exploited by criminal networks, turning an R12-billion project into a stage for corruption and gang profit.

Cape Town's R12-billion railway revival, meant to bring life back to key lines, became a goldmine for gangsters. Led by figures like Ralph Stanfield, gangs used threats and fake security companies to steal millions daily from Prasa, the rail agency. This money flowed through complicated networks of shell companies and offshore trusts. Even police were involved, protecting these criminal activities while commuters suffered from poor service and rising costs. This whole mess shows how crime groups, businesses, and even law enforcement can work together to steal public money.

How did the R12-billion railway revival in Cape Town become a gangster's jackpot?

The R12-billion railway revival became a gangster's jackpot through a sophisticated scheme involving protection rackets, inflated security contracts, and a web of shell companies. Gangs, led by figures like Ralph Stanfield, exploited the project by intimidating contractors and establishing security fronts that billed Prasa millions daily, diverting public funds through offshore trusts and dubious entities.

1. The Promise That Turned Predatory

The Central Line was supposed to be Cape Town’s heartbeat again - a 67-kilometre steel artery ferrying breadwinners from Khayelitsha, Langa and Mitchells Plain to jobs in the CBD after years of deliberate fire damage and copper looting. Treasury staked R12-billion on the Presidential Reconstruction Programme, branding it the country’s flagship “rail renaissance”.

Instead, the same syndicates that torched signal cables now ghost-write the comeback story. Investigative records seen by the City and corroborated by contractor whistle-blowers show how Ralph Stanfield - named in court as commander of the “12 B” gang offshoot of the Sexy Boys - graduated from squeezing protection rent out of Metrorail building sites to harvesting more than R2-million a day through security fronts billing the Passenger Rail Agency of South Africa (Prasa).

The choreography was anything but chaotic. Boardroom minutes, e-mail trails and deviation memos reveal a supply-chain coup mapped inside police corridors, Prasa sub-committees and a spider web of shelf companies wearing lipstick B-BBEE smiles while offshore trusts pulled the strings.

2. The Police Station “Feeding-Trough” Meeting

The officer greeted the room in Afrikaans: “Ons is hier om seker te maak almal eet” - Cape Flats slang for slicing up protection spoils. Within 48 hours the builder’s risk office e-mailed headquarters that “several attendees appear on Crime Intelligence organised-crime target lists”. The red flag reached Prasa’s CEO, yet the security cluster was still told to “deepen engagement”.

That encounter unlocked a floodgate: no open tender, no 21-day advert, just a single-source emergency note signed by Prasa security chief Dr Sipho Khumalo on 28 September 2022, citing “imminent sabotage threats” between Langa and Bonteheuwel. Mzansi Securifire became the “only capable responder” overnight.

3. How a “Taxi” Contract Siphons R25-Million a Month

A City forensic spreadsheet tells the rest. October 2022: 240 guards clocked in at R128 an hour - 42 % above the sector median. By February 2023, two sister firms joined via “variation orders” and the blended rate leapt to R147. June statements show combined invoices of R25.9-million a month - enough cash to hire 3 400 maintenance labourers at municipal minimum wage instead of 840 watchers.

Bank records subpoenaed from a sleepy Stellenbosch branch reveal 68 % of every incoming payment exiting the companies within 48 hours, ricocheting through shelf entities before settling in accounts held by Nicole Johnson - Stanfield’s wife and sole listed director of Securifire.

The paper trail is deliberately atomised. Forty percent of the shares sit in a Guernsey discretionary trust whose protector is a Mauritius fiduciary. Another 30 % hides behind a Khayelitsha stokvel chaired by a taxi-war name on the provincial violence watchlist. The final chunk belongs to a “women’s empowerment” cooperative registered seventeen days before contract signature, with Johnson the only signatory empowered to bind the vehicle. A 2021 High Court precedent in Prasa v. Swifambo labelled exactly such offshore origami a “recognised enabler of state capture”, prompting the City to file a Rule 43 application to pierce the veil and treat trust, stokvel and Johnson as one alter ego.

4. When Cops Become Door-Men and Commuters Pay the Shortfall

The most chilling chapter is law enforcement’s slide from gatekeeper to business partner. WhatsApp texts lifted during an unrelated raid capture the same colonel briefing Stanfield on 14 October: “Concor site manager will comply, het hom laat sweet.” Two weeks later, when a subcontractor tried to import a different security team, SAPS vans blocked the gate for six hours, citing “crowd-control concerns”. Intimidation case CAS 484/10/2022 was opened at Philippi East but transferred to an elite unit where it has suffocated for 18 months. The provincial office now admits the colonel has been “redeployed to training”, yet refuses to confirm any disciplinary hearing, hiding behind labour-relation secrecy clauses.

Commuters feel the pain twice. A R3.50 levy on every ticket is ring-fenced to “recover security costs”, yet trains operated only 12 of 27 weekdays in May 2024 because ghost guards abandon posts after 19:00. Cable theft along the reopened stretch is up 38 % year-on-year, suggesting orchestrated outages that keep emergency deviations - and cash taps - open. National fiscal models are grim: if 5 % of the R42-billion rail recapitalisation programme is hijacked, debt-service alone will swell by R1.2-billion over a decade, devouring budgets meant for school meals and primary health clinics.

Treasury has quietly placed 14 linked firms on a watch-list and is stress-testing a world-first “corruption coupon” that would add 75 basis points to future rail bonds if an independent forensic index flashes red. Hill-Lewis wants the Western Cape High Court to force Prasa to apply POCA asset-forfeiture tools and to pry open the stalled intimidation docket, arguing the public-interest override trumps police secrecy. A former Securifire clerk has already signed a Section 204 affidavit alleging 120 ghost guards and weekly cash pickups by a Bellville South warrant officer - testimony that could ignite the first full-scale racketeering trial linking badges, boardrooms and bullets.

[{"question": "

What was the Cape Town railway revival project and its initial goal?

The Cape Town railway revival project was a R12-billion initiative, part of the Presidential Reconstruction Programme and branded as a \"rail renaissance.\" Its primary goal was to restore the Central Line, a 67-kilometre railway, to full operation. This line was crucial for transporting commuters from areas like Khayelitsha, Langa, and Mitchells Plain to jobs in the CBD, especially after years of damage from fires and copper theft.

\n","answer": "The Cape Town railway revival project was a R12-billion initiative, part of the Presidential Reconstruction Programme and branded as a \"rail renaissance.\" Its primary goal was to restore the Central Line, a 67-kilometre railway, to full operation. This line was crucial for transporting commuters from areas like Khayelitsha, Langa, and Mitchells Plain to jobs in the CBD, especially after years of damage from fires and copper theft."},{"question": "

How did criminal syndicates infiltrate and exploit the railway revival project?

Criminal syndicates, led by figures like Ralph Stanfield of the \"12 B\" gang, exploited the project by transitioning from protection rackets on Metrorail building sites to operating security fronts. These fronts, such as Mzansi Securifire, billed Prasa (the Passenger Rail Agency of South Africa) millions daily, effectively siphoning off public funds. This infiltration was facilitated by a network of shell companies, offshore trusts, and alleged involvement from within police corridors and Prasa sub-committees.

\n","answer": "Criminal syndicates, led by figures like Ralph Stanfield of the \"12 B\" gang, exploited the project by transitioning from protection rackets on Metrorail building sites to operating security fronts. These fronts, such as Mzansi Securifire, billed Prasa (the Passenger Rail Agency of South Africa) millions daily, effectively siphoning off public funds. This infiltration was facilitated by a network of shell companies, offshore trusts, and alleged involvement from within police corridors and Prasa sub-committees."},{"question": "

What role did law enforcement play in the corruption scheme?

Law enforcement, specifically certain police officials, allegedly transitioned from gatekeepers to active participants in the criminal scheme. This included instances where police officers met with criminal elements to discuss \"slicing up protection spoils.\" There are also reports of SAPS vans blocking access for legitimate security teams, citing \"crowd-control concerns,\" effectively protecting the interests of the criminal syndicates. An intimidation case against these activities was opened but subsequently stalled, and a colonel involved was \"redeployed to training\" without confirmed disciplinary action.

\n","answer": "Law enforcement, specifically certain police officials, allegedly transitioned from gatekeepers to active participants in the criminal scheme. This included instances where police officers met with criminal elements to discuss \"slicing up protection spoils.\" There are also reports of SAPS vans blocking access for legitimate security teams, citing \"crowd-control concerns,\" effectively protecting the interests of the criminal syndicates. An intimidation case against these activities was opened but subsequently stalled, and a colonel involved was \"redeployed to training\" without confirmed disciplinary action."},{"question": "

How were funds siphoned off through security contracts?

Funds were siphoned off through inflated security contracts awarded primarily to Mzansi Securifire and its sister firms. These contracts involved billing Prasa substantial amounts, with guards clocked in at rates significantly above the sector median. Forensic investigations revealed that a large percentage of incoming payments to these companies would exit within 48 hours, moving through shell entities and offshore trusts. For example, 68% of payments were rerouted through entities with complex ownership structures, including a Guernsey discretionary trust and a Khayelitsha stokvel, ultimately settling in accounts linked to Nicole Johnson, Stanfield's wife.

\n","answer": "Funds were siphoned off through inflated security contracts awarded primarily to Mzansi Securifire and its sister firms. These contracts involved billing Prasa substantial amounts, with guards clocked in at rates significantly above the sector median. Forensic investigations revealed that a large percentage of incoming payments to these companies would exit within 48 hours, moving through shell entities and offshore trusts. For example, 68% of payments were rerouted through entities with complex ownership structures, including a Guernsey discretionary trust and a Khayelitsha stokvel, ultimately settling in accounts linked to Nicole Johnson, Stanfield's wife."},{"question": "

What are the consequences for commuters and the public?

Commuters face significant negative consequences, including poor service and rising costs. A R3.50 levy is added to every ticket to \"recover security costs,\" yet trains operated only 12 out of 27 weekdays in May 2024 due to ghost guards abandoning posts. Cable theft along the reopened stretch increased by 38% year-on-year, suggesting orchestrated outages. The broader public also suffers as hijacked funds from the R42-billion rail recapitalisation programme could lead to a R1.2-billion increase in debt service over a decade, diverting budgets meant for essential services like school meals and primary health clinics.

\n","answer": "Commuters face significant negative consequences, including poor service and rising costs. A R3.50 levy is added to every ticket to \"recover security costs,\" yet trains operated only 12 out of 27 weekdays in May 2024 due to ghost guards abandoning posts. Cable theft along the reopened stretch increased by 38% year-on-year, suggesting orchestrated outages. The broader public also suffers as hijacked funds from the R42-billion rail recapitalisation programme could lead to a R1.2-billion increase in debt service over a decade, diverting budgets meant for essential services like school meals and primary health clinics."},{"question": "

What actions are being taken to address this corruption?

To address this corruption, Treasury has placed 14 linked firms on a watch-list and is stress-testing a \"corruption coupon\" for future rail bonds. The City of Cape Town is pursuing a Rule 43 application to pierce the corporate veil of the implicated companies and has filed a Rule 43 application to treat the trust, stokvel, and Johnson as one alter ego, citing a 2021 High Court precedent. Additionally, the City Mayor wants the Western Cape High Court to compel Prasa to use POCA (Prevention of Organised Crime Act) asset-forfeiture tools and to reopen the stalled intimidation docket. A former Securifire clerk has also signed a Section 204 affidavit alleging 120 ghost guards and weekly cash pickups, potentially leading to a full-scale racketeering trial.

\n","answer": "To address this corruption, Treasury has placed 14 linked firms on a watch-list and is stress-testing a \"corruption coupon\" for future rail bonds. The City of Cape Town is pursuing a Rule 43 application to pierce the corporate veil of the implicated companies and has filed a Rule 43 application to treat the trust, stokvel, and Johnson as one alter ego, citing a 2021 High Court precedent. Additionally, the City Mayor wants the Western Cape High Court to compel Prasa to use POCA (Prevention of Organised Crime Act) asset-forfeiture tools and to reopen the stalled intimidation docket. A former Securifire clerk has also signed a Section 204 affidavit alleging 120 ghost guards and weekly cash pickups, potentially leading to a full-scale racketeering trial."}]