First 24 hours after a farm break-in: the checklist nobody gives you

What success looks like in the first 24 hours

A good 24 hours after a break-in looks like this. The SAPS docket has a clear case number, a clean statement, photographs taken before anyone moved a thing, and named witnesses pulled straight from the day's worker register. The insurance claim is submitted inside the policy's notification window, with an inventory that has serial numbers next to it, not guesses. The three nearest farms have been told what happened, what time, and what the suspects looked like, and have already passed the warning to their own neighbours.

A bad 24 hours looks like the opposite. A docket that goes cold in a week. A claim disputed for late notification or missing receipts. A neighbour hit two days later, hearing only afterwards. The difference between the two days is not luck. It is a checklist.

Hour 0 to 1, keep your family safe and the scene intact

Safety first, always. If the intruders are still on the property, or you are not sure they have left, do not engage. Get every person you can into one defensible room. Lock interior doors. Keep noise down. Call 10111 (SAPS emergency) or the local farm watch number you have programmed on speed dial. AfriForum's most recent farm attack report records that 36% of farm attacks last year involved serious violent acts with substantial risk of death. This first hour is not a moment for bravery.

Once SAPS is on the way:

• Note the exact time of discovery. Write it down with a pen, not a memory. This timestamp anchors the docket, the claim, and your statement.
• Do not touch anything in the affected area. Not the broken lock, not the safe door, not a single tool moved out of place. Forensics needs the scene as it was found.
• Lock the rest of the farm down. Close gates, do a roll-call of family members, and account for any workers already on site.
• Switch on every camera you have, and pull the last hour of footage to a memory stick before any auto-overwrite cycle hits it.

Hour 1 to 4, build a case that holds up at court

The aim of this block is a docket the prosecutor can actually use.

Photograph everything before SAPS arrives. Wide shots first, then close-ups. Every broken lock, every footprint, every tyre track, every tool out of place. Include something in frame for scale, a coin or a ruler. Photograph from the same angle that an attacker would have approached. Time-stamp on the phone is enough, the metadata is the proof.

Get the case number written down on paper. SAPS will log the incident in the Crime Administration System, CAS, and send a CAS number, sometimes by SMS, sometimes verbally. That number is what the insurer will ask for, what the detective will refer to, and what the magistrate's clerk will pull. Write it down twice.

Name your witnesses from HR records. Pull your worker attendance log for that morning. Who clocked in, who was on which block, who has line of sight on the entrance. A list of full names, ID numbers, and roles handed to the investigating officer makes their job possible. The same worker register you keep for BCEA compliance is the document that builds your witness list.

Ask about the LCRC. The Local Criminal Record Centre, the SAPS unit that lifts fingerprints, photographs the scene formally, and collects forensic evidence, is what turns a docket into a court case. If the officer at the scene does not radio for them, ask why. K9 tracking dogs are the other half of this, ask whether they are available in your district that morning.

Get a copy of your statement before you leave the charge office. It is your right. It is also the document your insurer will want.

The 24-hour clock starts at discovery, not when the dust settles.

Hour 4 to 12, get your insurance claim approved

Insurance policies vary, but most South African farm policies require notification of a loss within 24 hours of discovery. Some commercial policies are tighter, 12 hours. Miss the window and the claim can be repudiated on procedural grounds before the merits are even considered. Call your insurer in this block, not the next one.

What to file with the first call:

• The SAPS case number from hour 1.
• The exact time of discovery and time of the SAPS call.
• A description of what is missing or damaged, even if rough at this point.
• Photographs from hour 1 to 4, emailed or uploaded as the insurer asks.
• Contact details for the investigating officer.

Both Santam Agri and Old Mutual Insure Agriplus run 24/7 claims lines. Santam: 0860 505 911. Old Mutual: 0860 22 55 63. Whatever your insurer, find that number now, before you need it, and write it on the same piece of paper as the SAPS case number.

The inventory matters as much as the call. The items most often stolen in SA farm break-ins are predictable: diesel from the bowser, copper from solar installations and irrigation lines, batteries, hand tools, generators, fence wire, and livestock. Solar panel and battery theft has risen sharply with the spread of off-grid farm setups. Where you have serial numbers, list them. Where you have receipts, scan them. Emergency repairs to make the farm secure tonight, fixing a broken door, replacing a padlock, are claimable, but only with receipts.

Hour 12 to 24, account for your workers and warn your neighbours

Two jobs in this block, both about people.

Account for every worker. Use the same attendance log from earlier. Anyone who has not arrived and has not phoned in needs a documented attempt to reach them, not assumptions. A worker out of contact after an incident is a fact for the detective, not a reason for the farm to act alone. Do not confront a suspected worker. If you have a name in your head, give it to the investigating officer and let them handle it. Confrontation contaminates a case and creates a separate liability for you.

Three farms in four hours. The neighbour-call phone tree is the single most useful thing a farm can do in this block. Pick the three nearest farms, by road, not by GPS. Call. Tell them the time, the entry point, what was taken, and what the suspects looked like if you have a description. Ask them to call their three nearest. AfriForum and TAU SA reporting both consistently show clustering: incidents in the same area within the same week, often the same syndicate moving down a road. A four-hour warning across a district has stopped more second incidents than any single piece of hardware.

If your district runs the Eyes and Ears project, E2 for short, a shared information channel between farm watches, neighbourhood watches, and private security in many SA districts, log the incident there in the same window. When you are ready to think about longer-term security infrastructure, our piece on choosing a rural security provider covers what to ask before signing.

Five common mistakes that cost farmers their case

1. 01Cleaning before SAPS arrives. Sweeping up glass or righting a tipped chair erases evidence and weakens the docket.
2. 02Posting to the WhatsApp group before filing. A community post that names a suspect before SAPS does opens the farmer to a defamation claim and prejudices the investigation.
3. 03Confronting a suspected worker yourself. Hand the name to the detective. Anything that looks like assault or unlawful detention by the farmer ends the case.
4. 04Missing the insurance notification window. Most claims are rejected on procedure, not merit. The 24-hour clock starts at discovery, not when the dust settles.
5. 05Forgetting to call the neighbours. Stops at one farm because the call never went out. The cluster pattern is real and well documented.

A printable checklist you can pin in the farm office

Labour Link's Smart Security module, branded SAFE LINK, gives farms a digital occurrence book that captures everything in hour 1 to 4 in one record, and a single tap that sends the alert to every farm in the surrounding cluster in hour 12 to 24. The docket holds. The claim gets paid. The neighbours get warned. The first 24 hours are still on you. The next 24 do not have to be.