WhatsApp

Advocate Johnson gave instructions approving an appeal based on Mr Padayachee’s affidavit and sent a WhatsApp message instructing Advocate Ramsamy to inform Advocates Serunye and Hlatshwayo, though Advocate Hlatshwayo did not ask for the bail condition in court.

“Advocate Johnson gave instructions approving the appeal based on Mr Padayachee's affidavit and she then sent a WhatsApp to Advocate Ramsamy, instructing her to then inform Advocate Serunye and Advocate Hlatshwayo... but Advocate Hlatshwayo did not ask for that condition in court.”

Mr Bellochun contacted Witness N via WhatsApp making him understand who he was using the same phone number registered as 'Suneel Bro' on Mr Asif Muhammad's phone.

“On the 22nd of December 2025, I was contacted by Mr Bellochun via a WhatsApp call and text making me to understand who he was ... Which is the same number that Mr Asif Muhammad has registered as 'Suneel Bro' on his phone.”

Communication between Mr. Nku and Iby was 99% through WhatsApp.

“99% of the time”

It is technically and factually impossible for a third party to have planted the authentic video and voice note in the WhatsApp chats between Mr Van Wyk and Mr Matlala because the chats were extracted from an image of Mr Matlala's iPhone 16, and planting a message or media file would leave a trace of amendment.

“we are informed that it is not possible to plant a message or a media file into a WhatsApp chat record on an Apple iPhone 16 without leaving a trace that the file of the whole WhatsApp was amended at a later date”

The video sent by the third party was deleted for everyone from the chat at 07:49:59 and no trace of the video remains in chats between Mr Matlala and the third party or elsewhere on the phone, except in chats between Mr Van Wyk and Mr Matlala.

“The video that was sent by the third party was deleted for everyone ... what is significant is that there was no trace of the video on the chats between Mr Matlala and the third party. And indeed there is no trace of the video anywhere on the phone other than in the chats between Mr Matlala and Mr Van Wyk.”

Three encrypted messaging applications - Threema, WhatsApp, and Telegram - were found on devices linked to the investigation and were used for communications related to the case.

“Encrypted messaging applications. I discovered the use of three encrypted messaging applications, Threema, WhatsApp, and Telegram...”

There were two WhatsApp chats on the site first page with initials E-by and I-by referring to different persons, with 'I-by' being Tumelo.

“There was two WhatsApp chats on the site on the first page. I think it is the first screenshot. It was written as E-b-y. But if you check the WhatsApp conversation of Tumelo and it is I-b-y. So this person who is calling I-by as E-by, it is another person, it is not Tumelo. But he knows Alpha.”

No communication evidence was found linking Tumelo Nku to someone driving a truck using WhatsApp chats.

“From the WhatsApp chats, there is nothing that will suggest to say Tumelo Nku is communicating with somebody who is driving a truck”

Chief Mashaba and Nku switched communication from WhatsApp to Telegram at some point, but Chief Mashaba does not know why and does not even remember using Telegram.

“I do not even remember we used Telegram .”

Chief Mashaba downloaded Telegram app but says he had no specific reason to switch from WhatsApp other than preference, denying he recalls the reason for moving to Telegram.

“No specific reason per se . If I am in WhatsApp and say let us switch , it would mean we are giving WhatsApp a break . Let us go to Telegram .”

Chief Mashaba disputes the times of WhatsApp and Telegram messages sent to him on 8 July 2021 related to the operation, stating he does not remember and needs their authenticity verified.

“I am refusing the times...The authenticity of this also needs to be verified”

Chief Mashaba cannot recall whether Telegram or WhatsApp was used to send the location message from Mr Nkuo on 8 July 2021 night.

“Now that you are bringing Telegram, I cannot remember were Telegram or WhatsApp used...”

Chief Mashaba acknowledges a WhatsApp message stating they would 'grab him' but insists that does not mean he was part of the team planning or effecting an arrest, highlighting the distinction between presence and active participation.

“it does not mean necessarily that I was part of the team. But because of the airport, if that is what I meant that it is going to happen, I am also here around. Not necessarily that I am part of that operation”

Screenshots presented in the report come from Threema and WhatsApp applications.

“The first sequence is from Threema ... The second and the third, those ones are from? WhatsApp.”

The first sequence of text is identified as being from Threema, not WhatsApp, based on certain identifiable features such as captions and encryption indications seen in screenshots.

“the first one , we said it was sent , they got it via Threema , then captured on the screenshots of Tumelo ... it shows that it is through those encrypted chats of Threema”

Mr Mogotsi admitted deleting a WhatsApp message dated 11th March at 11:29 am, asserting the deletion was not intended to mislead the Commission.

“Mr Mogotsi is ays that he admits that he deleted the message dated the 11th of March that was sent at 11:29 a.m. And the intention was not to mislead the Commission”

Whatsapp calls show communication between Phokungwana and Mashaba while submitting a telephone number on a WhatsApp chat.

“these people called each other, Phokungwana and Mashaba. The calls lasted for - I cannot now, but it lasted – it shows that that is when he was submitting the telephone number of - because on the WhatsApp chat, he said, you will get one. Then, after that call, Mashaba is making a call too.”

Sergeant Nkosi shared WhatsApp groups related to three specific entities which raised concerns about apparent interference in the supply chain management process.

“obviously these entities, with hindsight of course, some of them are the ones that were shared with Sergeant Nkosi, correct?”

Sergeant Nkosi affirmatively agreed that a WhatsApp message showed he sent a picture of a card on 23 December 2024 following an urgent call from Mr Matlala, who needed the card urgently to see Deputy President Mashatile and General Sibiya.

“Well, the WhatsApp’s show that you sent this card, a picture of the card, on the 23rd of December 2024.”

Mr Matlala sent WhatsApp messages on 5 and 21 January 2025 requesting return of his card, complaining it had long been left at Mr Msibi's place of abode.

“If further avert that the plastic referred to on the WhatsApps messaged dated 5 January 2025 and 21 January 2025, he was requesting I return to him his card, averred above, as it was long left at Mr Msibi's place of abode.”

Sergeant Nkosi exchanged WhatsApp messages with Mr Sibanyoni and Mr Mnisi involving an access code to Centurion Residential Estate for a 4 o'clock meeting on 30 April 2025.

“you send a screenshot of your chats with Mr Sibanyoni to Mr Mnisi ... He sends back an access code to Centurion Residential Estate ...this screenshot is sent on the 30th of April ... you say to Mr Sibanyoni at 18:31: "Kgotsong Sion, I am ready." ... he sent you an access code, entry code, to a residential estate for a 4 o'clock meeting”

Sergeant Nkosi received the contact number for Mr. Khawula through WhatsApp from Natasha.

“Through WhatsApp.”

General Shibiri admits his phone recorded in WhatsApp chats as operational by 20 February 2025 contradicts his prior claim that it was replaced in March 2025 after being stolen.

“What this shows is that by the 20th of February, you had a device that was operational and you were already in communications on WhatsApp. ... So your version that you only got a replacement phone in March is not supported by the ... WhatsApp exchanges with Sergeant Nkosi.”

General Shibiri states he deletes WhatsApp messages periodically for storage purposes and some delete automatically, resulting in inability to provide requested WhatsApp chats to the Commission.

“As I indicated on my statement, now and then I delete my messages for storage purposes and sometimes it deletes itself when I forward for a certain period. ... My Cloud, my backup was not activated.”