Is MLM Legal in South Africa?

Yes. Direct selling, including multi-level compensation, is lawful in South Africa, and the sector has an established trade body in the Direct Selling Association of South Africa.

What differs from the US is not the underlying test — both regimes turn on where the money comes from — but the fact that South Africa writes the prohibition into consumer protection statute by name, and layers a strict data protection regime on top of it.

This is an overview, not legal advice. Have a South African attorney review your plan, your policies, your distributor agreement and your POPIA position before you launch or expand.

The Consumer Protection Act

The Consumer Protection Act 68 of 2008 (“CPA”) addresses prohibited schemes directly rather than by inference. Three categories are named:

• Pyramid schemes — participants recruit others who pay in, with the money paid out drawn from those participation payments.
• Chain letter schemes — the same mechanism in correspondence form.
• Multiplication schemes — where a person is offered an effective return that is unrealistically above the prevailing market interest rate.

The unifying element is the same one the FTC applies: a scheme is prohibited where the substantive source of what is paid out is participation payments and recruitment, not genuine sales of goods and services to consumers.

Enforcement sits with the National Consumer Commission, and consequences under the CPA extend beyond civil remedies.

The CPA also gives consumers rights that shape your operations directly, not just your plan:

• A cooling-off right on direct marketing sales, within a defined period.
• Return rights on goods, with specific conditions.
• Plain-language requirements on agreements — including your distributor agreement.
• Restrictions on unsolicited direct marketing, including opt-out obligations.

Every one of those is a workflow in your platform, not a clause in a document. A cooling-off cancellation has to reverse the order and the commission it generated, in the period it belongs to.

POPIA

The Protection of Personal Information Act is the part US companies expanding into South Africa most often underestimate, because a direct selling company is an unusually heavy processor of personal information.

Consider what you hold about a single distributor: name, identity number, physical address, banking details for payouts, tax details, purchase history, and their entire genealogy relationship to other people. Then multiply by the field.

What POPIA requires, in operational terms:

A lawful basis per purpose. Processing for paying commission is not the same purpose as processing for marketing. Each needs its own justification.

Consent for direct marketing to people who are not existing customers, and an opt-out that works for those who are. This is why the consent checkbox on a lead form is not decoration — it is the record of the lawful basis, and it needs to reference the privacy policy that describes the purpose.

A designated Information Officer, registered with the Information Regulator.

Defined retention periods. You may not keep personal information indefinitely because it might be useful. That includes former distributors — an account that terminated four years ago is a retention decision, not an archive.

Data subject rights you can actually action. Access requests and deletion requests need to be answerable within statutory timeframes. If honouring a deletion request would break your commission history, you need to have thought about that before the request arrives, not after.

Cross-border transfer restrictions. Sending personal information outside South Africa is conditional. In practice this constrains where you host and which sub-processors you use — a decision that is expensive to reverse once the field is live.

Other regimes in scope

SARS and VAT. Distributor earnings and their tax treatment, plus VAT on sales, with registration thresholds. Commission statements need to carry the right tax treatment from the first run.

Exchange control. Cross-border payouts to or from South Africa involve SARB regulations. If you have distributors in both South Africa and the US, payout routing is a compliance question and not only a banking one.

Product regulators. Health claims, supplements and cosmetics bring their own regimes, as they do everywhere.

DSASA code. Voluntary, but membership carries code commitments, and the code is a reasonable proxy for what “operating properly” looks like in this market.

The controls this implies

The list overlaps substantially with the US one in is MLM legal in the USA — order-level classification of retail versus participant purchases, per-period retail reporting, qualification caps on self-purchase, a tracked buyback policy, reproducible closed periods, an auditable payout trail.

South Africa adds four:

1. Consent captured as a record, not a checkbox. What was consented to, when, from which form, referencing which privacy policy version. A consent you cannot evidence is not a consent.

2. Retention policy enforced by the system. Periods defined per data category, applied automatically, with a documented approach to records you must keep for tax or dispute purposes.

3. Cooling-off and returns that reverse commission correctly. Into the right period, with the reversal visible on the affected distributors’ statements.

4. Data residency you chose deliberately. Know where distributor personal information is stored and processed, and be able to state it.

How order classification, reversal handling, qualification enforcement and per-period reporting are implemented is covered in commission software, and the South Africa deployment specifics — including local payment and data considerations — are on the South Africa page.

If you operate in both markets

Design for the stricter reading of each requirement rather than maintaining two plans. In practice that means: US-style retail sales discipline and income claim controls, plus POPIA-grade consent, retention and residency handling, applied everywhere.

It costs a little more at launch. It costs dramatically less than re-architecting a live platform with a field attached to it.