Alleged criminal network

The Big Five cartel

The Gauteng syndicate at the centre of the Madlanga Commission - allegedly woven into the drug trade, a R360 million police tender, and the politics of law enforcement itself.

Drug traffickingCriminal justice systemPoliticsPrivate securityTender fraudContract killingsHarbour & customs corruptionPort logistics manipulationSurveillance & interception technologyMunicipal transport procurementProvincial health procurement
Gautengalleged base of operations
R360mSAPS tender at the centre
Jul 2025complaint that launched the commission
Jan 2023chats on the alleged 'grabber' plan
25 Aug 2026the introduction Matlala says he made
2 Sep 2026the photograph shown to the commission

What it is

The “Big Five” is the name Crime Intelligence gave to a Gauteng-based criminal syndicate at the centre of the Madlanga Commission. According to testimony, it allegedly runs drug trafficking, tender fraud, extortion, kidnappings and contract killings - and has reached into the criminal justice system, politics and private security. The commission itself was triggered by allegations that anti-cartel investigations were being interfered with.

The map

What was on Msibi's phone

On 18 August 2026 the Madlanga Commission sat with no witness and spent the day inside the devices of a dead taxi boss. This map renders the relationships those messages placed on the public record, alongside the cartel names already in evidence, and the limb added on 25 August 2026 when Vusimuzi 'Cat' Matlala said from the witness box that he had introduced Msibi to Hangwani 'Morgan' Maumela. It is a map of allegations and testimony, not of proven facts.

ALLEGATIONS ONLY. Every link here comes from WhatsApp messages, photographs and video led in evidence before the Madlanga Commission of Inquiry, or from testimony already on the record. Nothing here is a finding of guilt. Jotham Msibi is deceased and can answer none of it. The living people named have not given evidence in answer and are presumed innocent. The commission expressly cautioned that it does not know the content of the call to the Ekurhuleni city manager and that no inference should be drawn from it.

How we got here

  1. 19 Sep 2022The Jack Frost Pharmaceuticals cannabis licence issues; the evidence suggests production had already begun
  2. Jan 2023The 'Swazi deal' chats about acquiring a grabber from a Czech supplier
  3. 26 Apr 2023Msibi sends Ze Nxumalo the details of the Ekurhuleni transport contract
  4. 23 Sep 2023Motsumi sends Msibi the contact details of city manager Imogen Mashazi
  5. 25 Sep 2023Msibi calls her; the commission says it does not know what was discussed
  6. Oct 2023Nxumalo confirms the submission has reached the bid evaluation committee
  7. 29 Sep 2025Dumisani Khumalo names the alleged 'Big Five' cartel in testimony (Day 8)
  8. 17 Aug 2026Matlala names Msibi from the stand, then claims privilege on almost everything else (Day 160)
  9. 18 Aug 2026No witness; the commission spends the day on the Msibi phone evidence (Day 161)
  10. 25 Aug 2026Matlala says he introduced Msibi to Hangwani Maumela, over a Pagani Huayra Maumela wanted to sell (Day 166)
Deceased

Jotham “King Mswazi” Msibi

Taxi boss; owner of Themy Styles; director of Tucofin

  • Described in evidence on Day 161 as a former leader of the alleged Big Five cartel.
  • His phone supplied a full sitting day of documentary evidence: messages, photographs and video.
  • On the “Swazi deal”: “It's on the table but they have to display. We don't want to become fools.”
  • He is dead and can answer none of it.

The alleged instrument

Not money this time, but capability: a device that intercepts cellphone traffic, allegedly to be bought under the police's name and sold across a border.

Alleged procurement

The “grabber”

IMSI catcher; cellphone interception device

  • Allegedly to be bought from a Czech supplier and resold in eSwatini.
  • Chaskalson: “The Czech Republic has been told that this is a demonstration for the South African Police Service.”
  • A related thread on active monitoring systems from Paris and Hamburg was valued at about R1.16 million.
  • Interception capability is tightly held in South African law and judicially controlled.

A device described in evidence, not a person.

The circle on the messages

The three men named alongside Msibi on the January 2023 chats about the eSwatini deal. None has answered any of it before the commission.

Has not answered this

Sgt Fannie Nkosi

Suspended SAPS sergeant

  • Alleged to have applied SAPS stamps to the procurement paperwork.
  • That paperwork is what made a private purchase read as a police one.
  • His WhatsApp traffic with Tshwane's suspended CFO was separately led in April 2026.

Named on the record; no profile page yet.

Named in testimony

Katiso “KT” Molefe

Businessman named in the Big Five evidence

  • Named by Crime Intelligence head Dumisani Khumalo in September 2025 as an alleged Big Five leader.
  • Named again on the Day 161 messages as a party to the alleged interception-device plan.
  • His 6 December 2024 arrest at Sandhurst is itself a sustained subject of the inquiry.
  • Faces separate, untested criminal charges; presumed innocent.
Has not answered this

Steve Motsumi

Private security businessman

  • Named on the Day 161 messages as a party to the alleged interception-device plan.
  • Sent Msibi the contact details of Ekurhuleni's then city manager on 23 September 2023.

The procurement limb

A municipal transport contract identified before it was awarded, a call the commission refuses to draw an inference from, and a bus joint venture the investigators had missed.

Named in evidence

Zesimdumise “Ze” Nxumalo

Gauteng businessman

  • Sent the details of an Ekurhuleni transport contract by Msibi on 26 April 2023.
  • “Please give me until Tuesday, all will be well.”
  • Confirmed in October 2023 that the submission had reached the bid evaluation committee.
  • Also named in the Khan network evidence over a chartered flight.

Named on the record; no profile page yet.

No inference drawn

Dr Imogen Mashazi

Former city manager, City of Ekurhuleni

  • Her contact details were sent to Msibi on 23 September 2023; he called her two days later.
  • The commissioners said they do not know what was said and cautioned against assuming anything.
  • Commissioner Sandile Khumalo on the message about R1 million: “We have not established that the she is her.”
  • She faces separate, untested charges in the Ekurhuleni matter and is presumed innocent.

Named on the record; no profile page yet.

Will not be recalled

Suleiman Carrim

North West businessman; Ziggy Investments

  • A joint venture with Transnational Coaches, tied to subsidised bus contracts, surfaced on Day 161.
  • R1 million was paid into Tucofin, of which Msibi was a director; R700,000 went to Santaco.
  • Chaskalson: the connection had not previously been identified by investigators.
  • The commission resolved on 14 August 2026 to lay criminal charges over his non-appearance.

The limb added on Day 166

The man the SIU calls central to the Tembisa Hospital fraud, placed in the same room as the late cartel figure by the witness who says he made the introduction.

Has not answered this

Hangwani “Morgan” Maumela

Businessman; named by the SIU as central to the Tembisa Hospital matter

  • The SIU identifies him as the central figure in an alleged R820 million procurement fraud at Tembisa Hospital.
  • Matlala, Day 166: a joint venture from about 2015, roughly R1 million each, Gauteng health department quotations, ten percent each on the other's deals.
  • Matlala says he introduced him to Msibi, over a Pagani Huayra that Maumela wanted to sell.
  • He has never given evidence to this commission and has not answered any of it.

The one who answered

The first person named inside this network to take the stand and reject the label. His account inverts the map: not a member, but the man it twice tried to kill.

Denies it - testified Day 169Charged separately

Joe “Ferrari” Sibanyoni

Taxi owner; president, SALLDTBO

  • Suspended Sergeant Fannie Nkosi told the commission he was one of a 'group of five' businessmen.
  • On Day 169 he rejected it and said he was the network's target: two attempts on his life, in 2006 and August 2022.
  • He named the late Jotham Msibi as the source of the threat, and succeeded him at the head of the taxi body.
  • Separately charged with extortion and money laundering over an alleged R2.2m in protection fees. He denies it.

How it reached the record

The Crime Intelligence head who named the cartel from the witness box, and the businessman who named Msibi the day before his phone was opened in public.

Lt-Gen Dumisani Khumalo

Head, SAPS Crime Intelligence

  • Named the alleged “Big Five” cartel in testimony on 29 September 2025.
  • Identified Molefe and Matlala among its alleged leaders.
  • The Msibi phone evidence runs through the same names as documents rather than testimony.
Testified - claimed privilege

Vusimuzi “Cat” Matlala

Businessman at the centre of the R360m SAPS tender

  • Named Msibi from the stand on Day 160 as one of three businessmen he knew who are linked to alleged syndicates.
  • Claimed the privilege against self-incrimination on almost everything else.
  • His postponement to 24 August is why Day 161 had no witness at all.
  • His plea agreement was declared null and void; trial is set for 11 September 2026.
Political / allianceBusiness / moneyIntelligenceLaw enforcementLegal / investigativeThreat / harm allegedDashed lines mark indirect or contested links. Labels name the alleged exchange.

Evidence led by

Named in testimony

Alleged figures

Plea withdrawn - trial 11 Sep 2026 - presumed innocent

Vusimuzi “Cat” Matlala

Businessman named in testimony as a central Big Five figure. He pleaded guilty over the R360 million Medicare24 SAPS tender on 25 June 2026 and turned section 204 state witness, but the court rejected the agreed sentence and on 13 July 2026 the plea agreement was withdrawn and declared null and void - the guilty plea fell away and the charges are once again untested, with trial set down for 11 September 2026. He testified under subpoena on 17 August 2026 (Day 160) and claimed the privilege against self-incrimination on almost everything of consequence.

View profile →
Named in testimony

Katiso “KT” Molefe

Named in Crime Intelligence testimony as a central figure in the syndicate. On 18 August 2026 he was named again in WhatsApp evidence from the late Jotham Msibi's phone, as an alleged party to a plan to buy a cellphone interception device by representing the purchaser as the SAPS. His arrest at Sandhurst on 6 December 2024, and the Hawks units that arrived while it was under way, has been a running subject of the inquiry since October 2025; the retired Hawks national head answered it himself on 27 August 2026 (Day 168). He has never given evidence to the commission and is presumed innocent.

View profile →
Deceased - named in evidence

Jotham “King Mswazi” Msibi

Taxi boss and owner of the security company Themy Styles, described in evidence on Day 161 as a former leader of the syndicate. He is dead; the material recovered from his phone - the alleged eSwatini 'grabber' deal, an Ekurhuleni transport contract, a Carrim bus joint venture and a Germiston cannabis operation - became a full sitting day of documentary evidence on 18 August 2026.

View profile →
Named in evidence - has not answered it - presumed innocent

Hangwani “Morgan” Maumela

Businessman identified by the Special Investigating Unit as the central figure in an alleged R820 million procurement fraud at Tembisa Hospital. He entered the commission's record through Suleiman Carrim's March 2026 evidence about payments running between Carrim, Matlala and himself. On 25 August 2026 (Day 166) Matlala described a joint venture with him for financing Gauteng health department quotations, and said he introduced Maumela to Jotham Msibi over a Pagani Huayra that Maumela wanted to sell. That introduction is the first direct link the commission has heard between this alleged network and the Tembisa Hospital matter. He has never given evidence to the commission and has not answered any of it.

View profile →
Named in testimony - presumed innocent

Sgt Fannie Nkosi

Suspended SAPS sergeant. Alleged on the Day 161 messages to have applied SAPS stamps to the procurement paperwork that presented a private purchase of interception equipment as a police one. His WhatsApp traffic with Tshwane's suspended chief financial officer was separately led in April 2026.

Named in testimony - presumed innocent

Steve Motsumi

Private security businessman. Named on the Day 161 messages as a party to the alleged interception-device plan, and as the person who sent Msibi the contact details of Ekurhuleni's then city manager two days before Msibi called her.

Named in evidence - has not answered it - presumed innocent

Ignatius Mothakathi

Identified on 2 September 2026 (Day 172) as one of the five men in a photograph recovered from Katiso Molefe's phone and put to retired Hawks national head Lieutenant General Godfrey Lebeya, who said he did not know any of them. No allegation of specific conduct by him has been led before the commission and he has never given evidence to it.

View profile →
Named in evidence - has not answered it - presumed innocent

Mthethwa, known as “King Nyambose”

Named twice on Day 172. He is one of the five men the commission's evidence identifies in the photograph from Molefe's phone, and he is the person on whose behalf the businessman using the name Malcolm X thanked Lebeya by WhatsApp on 6 December 2024, the night of the Sandhurst arrest. Lebeya said he does not know him and never asked who he was; the chairperson asked what he was being thanked for. The outlets differ on his first name - SABC News and EWN report Andrew 'Boy' Mthethwa, TimesLIVE and The Citizen report Jabu Mthethwa - so the archive carries the surname and the alias.

View profile →
Named in testimony - denies it - charged separately - presumed innocent

Joe “Ferrari” Sibanyoni

Taxi owner and president of the South African Local and Long Distance Taxi and Bus Organisation. Suspended Sergeant Fannie Nkosi told the commission he was one of a 'group of five' businessmen. He is the first person named in this network to answer the allegation from the witness box: on 28 August 2026 (Day 169) he rejected it and told the commission he was the network's target, not its member, describing two attempts on his life and naming the late Jotham Msibi as the source of the threat. He is separately charged with extortion and money laundering, which he denies, and is the state's first witness in the attempted murder trial arising from the August 2022 shooting. Part-heard; cross-examination set down for 21 September 2026.

View profile →
Arrested - presumed innocent

Tumelo Nku

Civilian arrested at the Aeroton scene; the encrypted chats and tracking data recovered from his phone are central to the alleged port-to-Gauteng drug logistics heard by the commission.

Named in testimony

Samuel Mashaba

Gauteng traffic officer saved on a suspect's phone as “General Mashaba of Hawks”; named in testimony as a suspect in the Aeroton matter and a complainant to IPID.

Unidentified - alleged

“Alpha”

Unidentified contact (called “boss”) who, on the chats led in evidence, allegedly coordinated photographing containers and seals with insiders at Durban harbour.

Unidentified - alleged

Alleged Transnet & harbour insiders

Per testimony, an insider at Transnet sent shipping manifests and helped steer which berth a vessel used, alongside alleged customs, crane and forklift contacts at the port.

Who exposed it

The witnesses

Witness

Lt Gen Nhlanhla Mkhwanazi

KZN Police Commissioner whose July 2025 complaint - that anti-cartel investigations were being interfered with - triggered the commission.

Witness

Lt Gen Dumisani Khumalo

Crime Intelligence head who named the “Big Five” and detailed its alleged political and criminal web.