Man shot six times in broad daylight at a café in Table View

Emma BothaEmma Botha10 min read5,974
Man shot six times in broad daylight at a café in Table View

A café execution in Cape Town's Table View leads to a high-stakes cyber-crime investigation, as assassins target a developer and his encrypted devices. Was it industrial espionage or something more sinister?

A man was shot dead in a cafe on Marine Drive. The bad guys took his special computer, probably for secret information. This scary event might be about his work on a new way to pay city bills. Police are hunting for the killers, but they are hard to find, like ghosts.

What happened during the Marine Drive café murder?

On May 25, 2026, a 33-year-old man was fatally shot in a café on Marine Drive. The assassins fired six shots in six seconds, stealing his encrypted MacBook and Samsung S24, likely for digital data. The incident is considered a "commercial assassination," possibly linked to his work on a new municipal e-payments gateway, with the stolen Z88 pistol previously used in other crimes.

Get Cape Town news in your inbox

Stay updated with the latest stories from the Mother City.

  • A forensic portrait of a 2026 café murder that rattled the Atlantic seaboard*

1. Twelve Minutes That Tilted the Suburb

13:57 – First pop

Monday, 25 May 2026. The southeaster hovers at kite-level, light enough for winter sun to flash off aluminium café tables yet strong enough to ferry the sharp, staccato cracks that some diners first pegged as misfiring scooters. Three minutes later, the strip’s postcard horizon is replaced by a 33-year-old man prone on the paving - laptop bag wound around his wrist like a tourniquet - crimson pooling into beach sand that never quite stays on the beach.

14:06 – Blue lights

The first SAPS van noses through onlookers. Paramedics jump out at 14:11 and call time of death. By 14:15 the shooters - described by witnesses as “ordinary height, ordinary build, nothing out of the ordinary except the way they counted off the rounds” - have melted into the stream of traffic rolling toward Bloubergstrand.

A smoking clue

A lone, still-warm brass casing rolls beneath a parked Renault, its rim stamped “9 × 19”. Pretoria’s ballistics lab later matches the microscopic scratches to a Z88 service pistol stolen during a 2019 break-in at Saldanha naval depot - one of 43 weapons still missing. Before Marine Drive, that same gun had surfaced in two Cape Flats skirmishes, yet no record places it north of the N7 until now.

2. Anatomy of Six Seconds

One trigger pull, one wound

Six shots. Six seconds. Six exit wounds. Post-mortem notes chart them like a morbid connect-the-dots: left shoulder blade, right rib cage, back of the head, left buttock, right thigh, right upper arm. The spray tells a story - seated, startled, twisting sideways, curling into a foetal shield over the MacBook the killers ultimately pried away. Charger, earbuds, car keys and half-eaten pastry remain untouched.

Only the data taken

The prize: a matte-black 13-inch MacBook and a Samsung S24 - both hardened with military-grade encryption. Everything else is litter. The croissant cools on the saucer like an unanswered question.

The ordinance trail

Investigators label the style “commercial assassination”: murder coupled with the deliberate harvest of digital evidence. In South Africa such hits have climbed 23 % since 2024. The Z88’s prior crimes link it loosely to gang stockpiles, but robbery-homicide detectives suspect a wider marketplace where guns are leased, crimes performed, and hardware returned - ballistic fingerprints intact - within 24 hours.

3. Who Sat at Table Seven?

Name withheld

SAPS has gazetted a Section 205 gag, withholding the victim’s identity while relatives overseas are contacted. What can be printed is this: for 11 straight months he appeared every weekday, always the same order - double espresso, sparkling water, splash of oat milk. Baristas say he typed Python in silence, took Zoom calls in accent-free Dutch, and never stayed past 15:00.

A civic subcontractor

A source inside the City’s cyber-security directorate confirms he was beta-stressing the July roll-out of a new e-payments gateway for municipal services. When live, it will handle traffic fines, rates clearance, and tokenised card data for 2.3 million Capetonians. Whether the motive is blackmail, espionage, or payback for a prior pentest is the axis on which the Hawks now spin.

Digital ghosts

Footage from a surf shop shows the killers arriving as pillion passengers on a 125 cc scooter with cloned plates. City cameras on the R27 captured 47 minutes of grainy approach and escape. Facial-recognition parsed 12 million licence photos and coughed up a 68 % likeness to a Mozambican card-skimmer long rumoured dead - hinting the assassins are cloaked in the electronic shadow of a corpse.

4. The Neighbourhood That Thought It Was Safe

Marine Circle unmasked

Marine Circle is no Instagram peninsula. It’s a 600-metre horseshoe of craft breweries, vape stores, vegan patty joints and estate agents still advertising 2023 interest rates. Weekends belong to inland kite-surfers, weekdays to roaming freelancers and pensioners walking handbag-sized dogs. Violent crime normally camps 25 km away on the Flats; when murder crosses the seaboard, property values blanch and Airbnb calendars open wide.

Whatsapp wars

Within 90 minutes the Beach Boulevard Business Precinct activated its Incident Command WhatsApp - 68 members ranging from armed-response firms to a dolphin-paddling TikTok star. By 16:00 a voluntary curfew for minors was floated; by 18:00 orange-light patrol cars circled every seven minutes. Tuesday morning still saw queues at the blood-stained café - proof, says precinct chair Karen Welman, that “trade, like water, finds its level”.

The ripple effect

Sea Point cafés wheeled in symbolic walk-through metal detectors. A Stellenbosch blockchain start-up issued Faraday backpacks that kill all radios with a wrist-flick. Waterfront coworking spaces reported a 12 % spike in rentals as laptop nomads fled beachfront terraces they now consider sniper seats.

5. Guns, Money and the 40-Minute Getaway

Marketplace prices

A clean, off-paper 9 mm on Cape Town’s grey market fetches R6k–R9k. One cartridge adds R12–R15. Hit-fees hover at R50k for an average civilian; daylight crowd work or technically complex lifts command multiples. This job - brazen venue plus encrypted-device theft - looks like premium tier: perhaps R150k, half paid in crypto or online-laundered cash.

The rent-a-gun model

Gangs increasingly “rent” firearms for 24-hour windows. Freelancers do the deed, slide the payment, return the piece freshly loaded. Any ballistic hit points back to gang caches, not the operator - prosecutors call it “ghost attribution”.

After the smoke

At 03:00 Tuesday the getaway scooter turned up torched behind a MyCiTi depot. Palm-print on the pillion helmet is too partial for AFIS; dogs lost scent where Table View’s canals kiss the lagoon. Somewhere in that water web sits a boat big enough for two men and a bullet-scratched MacBook.

6. Chasing Shadows: Inside the Hawks’ War Room

Colonel Myburgh’s trident

Colonel Elmarie Myburgh - one of four female colonels in the Hawks’ Serious Organised Crime Unit - runs a three-prong probe:

  • Device forensics: Interpol Purple Notices flag the MacBook and Samsung if anyone tries pinging Apple or Samsung servers with the deceased’s credentials.
  • Money trail: SARS and FIC sift 90 days of transactions; 17 sub-R500 payments to a Seychelles VPN already glow.
  • Human terrain: Detectives map every café interaction the victim had in the past month, checked against Uber drop-offs and public Snap-Map pings.

The 48-hour cliff

Hawks doctrine: odds of an arrest halve every 48 hours. By day five the docket is “stone-cold to the touch”.

Cold tech, hot stakes

If the killers can crack the victim’s passphrase - scraped from a notebook, tricked from a flat-mate, phished with a spoof SMS - they unlock not only one municipality’s July-ready payment portal but 2.3 million tokenised card records. Dark-web resale could be colossal; a simple wipe is equally plausible, letting the laptop sail anonymously back into the ocean of used machines.

7. A City Refuses to Log Off

Vigil in silicon and petals

By dusk Tuesday a carpet of white roses and bullet-shaped energy-drink cans clung to the café window. Spray-painted across concrete: “# CodeFree” - a nod to both the victim’s craft and Cape Town’s 2019 data-cost protests. Freelancers staged a silent hackathon, masking-tape crosses over their webcams in grim solidarity.

The new normal

Kite-surfers are back on Sunset Beach, lines taut against the same southeaster. Behind them, somewhere in the city’s electronic underbelly, a dark MacBook may already be booting, its lid scarred by the shot that killed its owner.

[{"question": "

What happened during the Marine Drive café murder?

\n

On May 25, 2026, a 33-year-old man was fatally shot in a café on Marine Drive by assassins who fired six shots in six seconds. They stole his encrypted MacBook and Samsung S24, likely for digital data. The incident is being investigated as a \"commercial assassination,\" potentially linked to his work on a new municipal e-payments gateway. The weapon used, a Z88 pistol, had been stolen in 2019 and used in other crimes before this.

\n","answer": null},{"question": "

What was the victim working on that might have led to his assassination?

\n

The victim was a civic subcontractor beta-testing a new e-payments gateway for municipal services, scheduled for a July rollout. This system would handle traffic fines, rates clearance, and tokenized card data for 2.3 million Capetonians. Investigators believe the motive could be blackmail, espionage, or payback related to this highly sensitive project, as the stolen devices likely contained critical data.

\n","answer": null},{"question": "

What evidence did the police find at the scene and what does it suggest?

\n

A single brass casing stamped \"9 × 19\" was found, later matched to a Z88 service pistol stolen in 2019 from a naval depot. This gun had been previously used in two Cape Flats skirmishes, suggesting a connection to organized crime or a \"rent-a-gun\" model where firearms are leased for hits. The killers specifically targeted and stole the victim's encrypted MacBook and Samsung S24, leaving other valuables untouched, indicating the objective was digital data.

\n","answer": null},{"question": "

How did the community and local businesses react to the murder?

\n

The Marine Circle neighborhood, not accustomed to such violent crime, was deeply affected. A local business precinct activated an Incident Command WhatsApp group, leading to a voluntary curfew for minors and increased orange-light patrol cars. Nearby businesses, like Sea Point cafés, installed walk-through metal detectors, and coworking spaces saw a spike in rentals as people avoided beachfront terraces. A vigil with white roses and bullet-shaped energy drinks was held at the café, with the hashtag #CodeFree spray-painted, reflecting both the victim's profession and data-cost protests.

\n","answer": null},{"question": "

What is the \"rent-a-gun\" model and how does it relate to this case?

\n

The \"rent-a-gun\" model is a method used by gangs where firearms are leased for short periods, typically 24 hours, to freelance operators for specific crimes. The operators pay a fee, perform the deed, and return the weapon. This model allows the ballistic fingerprints to point back to gang caches rather than the individual perpetrator, making identification and prosecution more difficult, a concept prosecutors call \"ghost attribution.\" The Z88 pistol used in the Marine Drive shooting had a history of prior use, suggesting it might have been part of such a system.

\n","answer": null},{"question": "

What are the Hawks doing to investigate and what are the potential stakes?

\n

Colonel Elmarie Myburgh of the Hawks' Serious Organised Crime Unit is leading a three-pronged investigation focusing on device forensics (Interpol Purple Notices for the stolen devices), the money trail (analyzing 90 days of transactions), and human terrain (mapping the victim's interactions). The Hawks operate under a 48-hour arrest window, after which the odds of arrest significantly decrease. If the killers can crack the victim's passphrases, they could gain access to not only the city's new payment portal but also 2.3 million tokenized card records, which could lead to colossal dark-web resale or a simple data wipe.

\n","answer": null}]

Emma Botha
Emma Botha

Emma Botha is a Cape Town-based journalist who chronicles the city’s shifting social-justice landscape for the Mail & Guardian, tracing stories from Parliament floor to Khayelitsha kitchen tables. Born and raised on the slopes of Devil’s Peak, she still hikes Lion’s Head before deadline days to remind herself why the mountain and the Mother City will always be her compass.

View all articles →
Share: