Also let the cops know.
Their cyber crimes division is actually quite effective (I've met with them before) and, with info like bank accounts, they can more easily catch the crooks when they go to withdraw the cash.
(This has actually happened before.)
So you should always report it immediately.
http://cybercrime.org.za/reporting
