IRBA bans ex-VBS auditor Sipho Malaba for life, fines R11 million

A lifetime ban, a R10.8 million financial hit and a finding of guilt on all charges have turned Sipho Malaba’s role in the VBS collapse into a fresh warning for every Big Four audit floor. South Africa’s Independent Regulatory Board for Auditors said on 16 April 2026 that Malaba is permanently disqualified from registration as a registered auditor, fined R1.6 million and ordered to pay R9.2 million in costs.

IRBA said its disciplinary panel found Nhlanhla Sipho Malaba guilty on all charges of improper conduct. The regulator also noted that Malaba did not take part in the sanction hearing after the merits ruling was issued, leaving the penalty to land without any mitigation from the former VBS auditor. For audit firms, that matters as much as the punishment itself: the case shows how one partner’s failures can become a firm-wide credibility problem, especially when a bank collapse is tied to weak challenge, weak supervision and weak escalation.

The VBS scandal has long stood as one of South Africa’s most damaging financial crimes. A forensic report by advocate Terry Motau and Werksmans Attorneys described the bank’s collapse as driven by “two principal pillars of unlawfulness” and recommended criminal and civil action against more than 50 people. News reports have put the amount looted from VBS at more than R1.9 billion, with the wider scandal feeding years of scrutiny over how auditors, directors and regulators missed or minimized warning signs.

Malaba’s name has remained central to that scrutiny. In October 2018, a News24 report said he allegedly knew about nearly R1 billion in cash shortages at VBS but signed off on the financial statements anyway, and that he benefited by about R28 million for the work. KPMG announced on 14 April 2018 that Malaba and fellow partner Dumi Tshuma had resigned amid disciplinary charges tied to the VBS engagement.

The consequences did not stop there. In February 2021, VBS liquidator Anoosh Rooplal sued KPMG South Africa for R863.6 million plus interest over the allegedly fraudulent 2017 financial statements. Then, in July 2024, former VBS chair Tshifhiwa Matodzi pleaded guilty to 33 charges and received an effective 15-year sentence, deepening the sense that the bank’s collapse was not a single failure but a chain of ethical breakdowns.

For auditors at KPMG and its rivals, the message is blunt. Training, review, partner challenge and rapid escalation are not compliance theater when a client’s books do not add up. Once a firm’s sign-off is tied to ghost auditing and a multibillion-rand looting scheme, the damage reaches far beyond one engagement and into the profession’s license to be trusted.