Prebo Digital

Managing Google Account Billing in South Africa: The Payments Profile, VAT and Card Playbook

A finance-first playbook for South African advertisers who need clean Google Ads billing, predictable FX, retrievable tax invoices and fewer declined cards.

Profile, Not Login

The Google Payments profile owns currency, VAT and cards, not your login.

Currency Lock-In

Payment profile currency is fixed at creation and shapes your ZAR reconciliation.

Auto vs Manual

Choose payment mode by cash-flow and FX certainty, not by default setting.
6 min readGoogle Ads
Get a Quote
Professional google ads strategies south africa image

The Midrand Scenario: A Card Decline the Week of a Seasonal Push

A Midrand direct-to-consumer brand, mid-way through a Black Friday build, sees its ads stop serving on Wednesday. Nobody touched the campaigns. The cause is a declined card on a Google Payments profile set up two years ago by a staff member who has since left. The card has expired and finance does not know which Google login owns the money layer. That is a billing-governance failure, and it is the problem this playbook addresses.

Which Google Billing Are You Actually Managing? A Disambiguation Table

South African finance teams regularly conflate three separate systems. Before changing anything, identify which one is on the credit card statement.

Billing typeWhat it chargesWhere it is managedTypical owner
Google AdsAd spend on Search, Shopping, PMax, YouTubeGoogle Ads > Billing > SettingsPerformance marketer or agency
Google WorkspacePer-seat licence feesAdmin console subscriptionsIT or Workspace super admin
Google CloudCompute, storage, API usageCloud console billing accountsEngineering

This article covers the first row only: the Google Ads payments layer, where most South African budget surprises originate.

The Payments Profile Is the Money Layer, Not the Login

A payments profile is the standalone Google record holding the legal business name, billing address, currency, tax status and payment methods. It is not your Gmail login and not your Google Ads account. One profile can fund several Google products; one Ads account can move between profiles only within limits. This separation lets you hand ad-spend control to an agency without handing over the card, provided profile ownership is structured correctly.

Four fields drive almost every reconciliation headache in South Africa:

  • Legal name and address - must match the entity claiming the expense.
  • Currency - the billing currency on every invoice.
  • Tax status - whether a VAT number is attached.
  • Payment methods - primary card plus, ideally, a secondary.

Currency lock-in warning: the profile currency is fixed at creation. A ZAR profile cannot simply be switched to USD in place - you generally need a new profile. Set this deliberately on day one and confirm current rules in Google's documentation, since billing screens change.

Automatic vs Manual Payments: Choosing by Cash-Flow and FX Exposure

Automatic payments charge your card after you spend past a billing threshold or at month-end, whichever comes first. Manual payments are prepaid: you load credit, then spend it. For SA advertisers this is a cash-flow and FX decision as much as a convenience one.

FactorAutomatic paymentsManual payments
Cash-flow timingPay after spend; less upfront cashPay before spend; needs working capital
FX exposureRate set at charge date, varies monthlyRate fixed at top-up; predictable
Risk of pauseHigher if a card declinesLower; stops only when credit runs out

A predictable ZAR budget line usually favours manual; a scaling account chasing demand favours automatic plus a funded backup card. See how this fits a wider reconciliation process in Prebo Digital's reporting approach.

Entering a South African VAT Number and Downloading Tax Documents

Services invoiced by Google Ireland typically carry VAT at the standard 15% rate, and a valid VAT number on the payments profile lets the tax treatment be reflected correctly on the tax document. Retrieve tax documents from Billing > Documents in Google Ads; statements live in the payments profile under Transactions. Download them monthly - older statements are easier to lose when staff change.

Tax caveat: VAT treatment depends on your entity, VAT registration status and current rules. Treat this as a pointer to the right screens, not tax advice. Confirm with a registered tax practitioner and check the SARS VAT guidance.

Who Holds Which Role: Payments Profile Admin, Billing User and MCC Manager

Most billing failures are permission failures dressed up as technical problems. Assign three roles clearly before spend scales.

RoleCan doShould not
Payments profile adminChange cards, currency, tax status, view invoicesRun campaigns
Billing-only userSee invoices and spend, no card editsOwn the profile
MCC / manager account managerLink accounts, manage campaignsHold the card by default

When an Agency Manages Spend: MCC Billing vs Client-Owned Payments Profile

A MCC (manager account) can consolidate billing across linked accounts, simplifying an agency relationship but shifting card ownership to the agency. The alternative - a client-owned payments profile with the agency given campaign access - keeps the card and VAT record in the client's name. For most South African mid-market advertisers the client-owned model wins on reconciliation, because the tax document matches the entity claiming the expense, and it preserves continuity if the agency relationship ends. Review the structure Prebo Digital uses for Google Ads management to see how access is typically split.

Card Verification, 3DS and Bank-Side Controls on South African Cards

Adding a card triggers a small verification charge and, increasingly, a 3DS/SCA verification step requiring the cardholder to approve in their banking app. Business cards from FNB, Standard Bank, Nedbank or Absa often have low default limits on international and recurring online debits. Two checks: confirm the card permits international recurring debits in your billing currency, and ensure whoever can approve 3DS prompts is reachable during the payment window.

Backup Payment Methods and Thresholds: Designing for No Surprise Declines

Google allows a secondary payment method, the single highest-value protection against campaign pauses. Pair it with a threshold sized to your monthly ZAR budget rather than the default.

Tip: set the automatic-payment threshold deliberately (for example, a mid-month figure you can absorb and reconcile), fund a backup card, and put both the profile admin and the finance reviewer on the card-expiry reminder cycle.

Invoice Retrieval and Month-End Hand-Off to Finance

Standardise a monthly routine: download the tax document from Google Ads Billing > Documents, pull the matching statement from the payments profile, and file both against the same internal cost centre. That habit removes most month-end ambiguity and gives auditors a clean trail.

Recovering From a Declined Payment or a Payment-Profile Suspension

When a payment declines, campaigns typically stop and Google may ask for identity or payment verification before reinstating the profile. The fastest recovery sequence: settle the outstanding balance, update the failing card, complete any 3DS verification, then respond to the suspension notice with the requested entity documents. Do not open a new profile to "start fresh" - you lose history and create duplicate tax records. Google's own payment-issue guidance is the authoritative step list, and the payments statement help explains where older receipts sit.

What Good Looks Like: Reconciliation Variance, Failure Count and Time-to-Reconcile

Measure the billing system, not just the campaigns. Track three figures monthly: variance between the ZAR budget line and the settled card amount, the number of failed payment attempts, and the hours finance spends reconciling. Falling variance, zero failures and a short reconciliation window signal that the money layer is genuinely under control.

Sources

Get a Quote

Why Choose Us

Here's what sets us apart

  • 500+ Expert Articles

    A content hub covering SEO, paid media, CRO and web design for South African businesses.

  • 200+ Success Stories

    Campaigns and builds delivered across retail, services, B2B and ecommerce.

  • 200+ Happy Clients

    Businesses that trust Prebo Digital with their digital growth.

  • 4.9 Average Rating

    Rated 4.9 out of 5 across verified Google reviews.

  • 24h Response Time

    Questions answered within one business day, every time.

  • Google Premier Partner

    Premier Partner status since 2022, placing us in the top 3% of agencies.

  • Amazon Verified Partner

    One of the first verified Amazon Ads partners in South Africa.

  • Meta Business Partner

    Certified to run paid social across Facebook, Instagram and beyond.

What Our Clients Say

Don't just take our word for it

Featured

“Great service and professional team.”

ES
Emelda Schuster
Featured

“Shout out to Leesha @Prebo Digital for great diligence and care handling our Google Ads account. Other agencies take your money and do nothing until you ask. Not Leesha & Prebo Digital. They do what they say and show up with a friendly face. Work to fix issues. Highly recommended.”

BS
Bradley Schmidt
Featured

“Excellent service and support.”

DB
Des Brown
Featured

“Very skilled and knowledgeable in the digital industry and you understand the importance of budgets. Start-ups do not have hundreds of thousands to spend at first and you guys really make the most of every budget provided.”

CS
Cat street
Featured

“Prebo will take your business to the next level. Extremely smart people, great service. Always go above and beyond.”

MG
Mike Gray
Featured

“A dedicated, knowledgeable and enthusiastic team of individuals that are determined to see your brand grow!”

AW
Alastair Waldeck
Featured

“A great agency to work with that always provides excellent service. Very professional and dedicated team.”

LV
Lynelle van Niekerk
Featured

“In the 4 months since we joined hands with Prebo our leads quantity and quality has increased with much more direct impact on our target market. The team is on point and forever in contact with new ideas and solutions to maximize our potential within the set budget cap. Very innovative group of people!”

RB
Rikus Booyens
Featured

“Great service from Prebo Digital team.”

MC
Mothusi Calvin Mogorosi
Featured

“Great Agency - growth-minded, a diverse team of talented individuals with collaborative success at its heart”

DD
David Delaney
Featured

“Outstanding digital marketing services.”

DD
DUNCAN DUNSHAM
Featured

“Industry experts!”

RB
Ricardo Banda
Featured

“Excellent work and professional service.”

MM
Menzi Mohale
Featured

“Expertise, ethos, excellence”

AJ
Andrew Johnson
Featured

“Professional and reliable service.”

ED
Ebert Du Plessis
5.0/ 5
15 reviews

Keep reading

Related Articles

Electrical meter and fuse box on a white wall in Cape Town, South Africa, for energy monitoring or billing.Google Ads

Google Account Activity Monitoring in South Africa: A Change-Forensics Playbook for Ad Accounts

The Sandton Scenario: A ROAS Drop, a Former Contractor, and a 2am Budget Rule A Sandton-based e-commerce brand sees ROAS tumble from 4.2 to 2.8 over a weekend. The team blames creative fatigue. Then someone notices a campaign budget was doubled at 02:13 on Saturday - by an account that still carried a former contractor's email. The contractor had been offboarded from payroll three months earlier, but nobody revoked their Google Ads access. This is not a login problem; it is a change-integrity problem. The same pattern repeats across South African marketing teams: a GA4 configuration change, a GTM tag paused, or a budget rule altered without a record of who did it. Monitoring Google account activity is how you rebuild that record. Warning: Monitoring logs can themselves contain personal information. Under POPIA, define a lawful purpose, tell staff what is logged, and set a retention limit. This article is not legal advice; consult counsel before implementing monitoring. What 'Google Account Activity Monitoring' Actually Means Across the Three Accounts in Play The phrase is overloaded. In South African ad teams it usually refers to one of three distinct surfaces, each answering a different question: Personal activity (My Activity): What a signed-in user did across Google services - searches, YouTube views, location history, ad personalisation. It is a consumer privacy dashboard, not an audit trail for business changes. Security and Workspace logs: Login events, admin actions, Drive changes, and the Security Investigation Tool. This answers “who accessed what, from where, and when” at the identity layer. Marketing change forensics: Google Ads Change history, GA4 Change history, and GTM Version history. This answers “what changed in the campaign or measurement setup, by which user, at what time.” The Sandton scenario lives in the third category, but you need the second to prove who the user was, and the first only if you are investigating a personal account’s broader activity. The table below compares the surfaces. Surface What it records Who can see it Retention Best for My Activity Personal searches, YouTube, location, ad personalisation The signed-in user (and admins only via investigation tools on some editions) User-set auto-delete (3, 18, or 36 months) Privacy hygiene, not campaign forensics Workspace Admin log events Admin actions, login events, Drive log events Workspace super admins and delegated admins Edition- and setting-dependent; check your Admin console Identity and access investigations Google Ads Change history Budget, bid, targeting, status changes with user and timestamp Anyone with Ads account access Rolling window; verify in-product for current length Attribution of performance shifts to specific edits GA4 Change history Admin edits to properties, data streams, key events GA4 admins and editors Limited; export or screenshot for long-term records Measurement configuration audits GTM Version history Container versions, tags, triggers, variables, workspaces GTM account users with publish rights Version history retained until deleted; workspaces are temporary Tracking pipeline forensics The Personal Trail: My Activity and Activity Controls Explained Without Fear-Mongering My Activity is where a user reviews and deletes their own Google service history. Activity Controls let them pause Web & App Activity, Location History, YouTube History, and Ad Personalisation, and set auto-delete at 3, 18, or 36 months. For a South African marketing team, this is relevant in two narrow cases: (1) a staff member uses a personal Gmail for work and you need to understand what data exists, and (2) an investigation requires the user to export their own activity. It is not a substitute for business-grade logging. Do not ask employees to hand over personal account credentials; instead, move work to Workspace accounts where admin logs apply. The Workspace Trail: Admin Log Events, Login Events and the Security Investigation Tool If your team uses Google Workspace, the Admin console under Reports > Audit and investigation is the identity backbone. Admin log events show who granted Ads access, changed a group, or altered an organisational unit. Login events show authentication attempts and suspicious sign-ins. The Security Investigation Tool (available on premium editions) lets you query these logs across users and time ranges. Use it to answer: did the former contractor’s account log in after offboarding, and from which IP range? Pair this with the Google Account “Recent security activity” page for individual users. This is the evidence layer that makes the marketing trail credible.

Nov 6, 20267 min read
Read more
Professional google ads optimization south africa imageGoogle Ads

Google Account Two-Factor Authentication Setup in South Africa: A Team-Wide 2SV Playbook for Ad Accounts

The Johannesburg Scenario: One Admin, One Second Factor, One Unreachable Week A Johannesburg e-commerce brand has a single Google Ads admin whose phone is the only device with 2-Step Verification (2SV) enabled. They go on leave to the Drakensberg for a week and a critical campaign needs a bid adjustment. The team has the password but not the second factor, so the account is effectively locked. A team-wide 2SV playbook - standardised factors, provisioned recovery paths, and enforcement via Google Workspace admin controls - prevents this. Prebo Digital, a Google Premier Partner (2022-2026), regularly helps South African advertisers avoid this kind of operational stall. 2-Step Verification vs Two-Factor Authentication: What Google Actually Calls This Google calls its two-factor implementation 2-Step Verification (2SV) : something you know (password) plus something you have (a second factor). Google accounts accept Google prompts, authenticator app codes, security keys, or backup codes. The terminology matters when following support documentation and configuring Workspace policies. Google is gradually moving away from SMS and voice codes as primary factors, favouring prompts, authenticator apps, and security keys. Plan your standard accordingly. Which Second Factor Should a South African Ad Team Standardise On? The choice depends on team size, budget, and risk tolerance. Factor How it works Best for Considerations Google prompt Tap “Yes” on a signed-in device Teams with company-managed phones Requires data connection; device must be enrolled Authenticator app Generate a time-based code Hybrid or remote teams Works offline; codes expire quickly; app must be backed up Security key (FIDO) Physical USB/NFC key High-value accounts (large budgets, admin roles) Low hundreds to a few hundred rand per key (estimate); store securely Backup codes One-time codes generated in advance Emergency access Print and store in a safe; single-use For most South African SMEs, an authenticator app balances security and practicality: it does not rely on mobile networks (unreliable during load-shedding) or extra hardware. Teams spending over R100,000 a month should consider security keys for admin accounts. The Setup Path, Step by Step: Enrolling Your First Admin Account Start with the primary admin account. Go to Google Account Security and sign in. Under “Signing in to Google,” select 2-Step Verification . Choose your factor: Google prompt, authenticator app, security key, or backup codes. Follow the prompts to enrol it. Generate and securely store backup codes. Repeat for each team member with access to Google Ads, GA4, or Merchant Center. Enable 2SV first on the account managing your Google Ads MCC (My Client Center) - often the single point of failure. Do not skip backup codes. They are your safety net if you lose your phone or security key. Securing Recovery Email and Recovery Phone Before You Need Them Recovery options are separate from 2SV but equally critical. Set a recovery email (preferably on a different domain) and a recovery phone number. For teams, use a shared inbox monitored by multiple people (e.g., security@yourcompany.co.za) and avoid personal numbers on shared accounts. Test recovery options periodically and keep them accessible to more than one trusted team member.

Nov 5, 20265 min read
Read more
Professional google ads specialist campaigns for corporations south africa imageGoogle Ads

Google Account Recovery Options in South Africa: A Restoration Playbook for Locked-Out Marketing Teams

The Pretoria Scenario: Locked Out of the Account That Owns the Campaign Picture a lean in-house marketing team in Pretoria running about R80,000 a month across Search, Shopping and Performance Max. This is an illustrative scenario, not a real client. Their single company Google account is the sole admin on the Google Ads account and the GA4 property, registered years ago against a personal recovery email and a prepaid SIM that has since been recycled. One Monday nobody can sign in. The ad account keeps spending, nobody can pause it, and conversion data feeding bid strategies starts to drift. This playbook is a decision tree for which recovery route fits your lockout, what breaks it in a South African context, and how to confirm spend and attribution survived. Google offers no paid or premium recovery tier and no route with a guaranteed outcome. Every method below helps you prove ownership, not override it. Recovery Is Not One Flow: The Five Routes Google Actually Offers Self-service password recovery via recovery email, recovery phone, or a device already signed in. "Try another way" to switch verification methods when the default prompt fails. The Account Recovery form when no standard method works, asking about recent passwords, creation date, devices and recovery contacts. Recovery options configured in advance, which only help if current. 2SV backup methods: backup codes, backup security key, device prompts or an Authenticator app. Two further routes matter for businesses: Workspace admin-assisted recovery, where a super admin resets a user password; and Google Ads access reinstatement, where an existing ad account admin grants entry even if your Google account is blocked. Which Recovery Route Fits Your Lockout? A Decision Table Lockout scenario Recommended route What breaks it Realistic effort Forgotten password, recovery phone/email active Self-service reset or "Try another way" Recycled prepaid SIM; dead recovery inbox Minutes 2SV prompt on a phone you no longer have Backup codes or backup security key Codes never exported to the team Minutes to hours Former employee held all recovery details Account Recovery form Weak answers on device history and old passwords Days, limited attempts Workspace user locked out, admin available Super admin password reset Admin unknown or also locked out Same day Ads access lost but Google account works Existing Ads admin reinvites you; Ads support You are the only admin Hours Scenario Guide: What Each Method Is Good For and What Breaks It Self-service reset is fastest and least forensic, working when recovery details still belong to the business and failing when they live on a personal handset or ex-staffer's inbox. The Account Recovery form is deepest and most fragile: Google weighs recent passwords, dates, devices and contacts, and repeated misfires weaken your signal. 2SV backups only exist if stored centrally. Workspace admin recovery bypasses the consumer flow but rests on someone holding the super admin role. Ads-side reinstatement is your lifeline when the ad account is fine and only your sign-in is dead. Consumer Account vs Google Workspace: Why the Route Changes Entirely A free Gmail-based account puts the burden on individual recovery details. A Workspace account on a .co.za domain brings governance: a super admin can reset without the user's old device. If the admin account itself is lost, a domain-verification-based Workspace admin recovery applies, which is why domain records must be owned by the business, not a departed web developer. Limiting this risk starts with good setup; our strategy consulting work routinely starts with who actually controls the domain.

Nov 5, 20266 min read
Read more
Professional google ads specialist management for companies south africa imageGoogle Ads

Google Account Privacy Settings Guide for South Africa: What Each Toggle Really Shares

Hypothetical scenario: a Durban e-commerce brand hands Google Ads and GA4 access to a new agency. A staff member asks the obvious question - now that the agency is 'inside' Google, can it see my personal Gmail and YouTube history? Here is the honest answer, mapped layer by layer. The Durban Scenario: A New Agency Gets Ads Access and the Team Asks What Else It Can See A retailer agrees to grant a working agency access to its Google Ads account and GA4 property. Most of the team is relieved. One person is not: their personal Gmail address is also the login for the admin account. They want to know what a third party with Ads visibility can actually read. The answer separates cleanly. Ads access does not open an inbox. But the same Google login surface hosts consumer privacy toggles, ads-account data sharing and admin visibility - and those are managed in different places by different people. Confusing them creates both privacy anxiety and genuine gaps. The Privacy Surface Map: Three Layers of Google Data Control Layer What it governs Where it lives Typical owner One - consumer activity Personal search, YouTube, location and ad personalisation data My Activity, My Ad Center The individual Two - ads and analytics governance Ad account data, audience lists, product linking Google Ads, GA4, Merchant Center Marketing lead Three - admin visibility Who can see and export ad and audience data User management and manager accounts Business owner Layer One: Consumer Activity Controls - My Activity, Web & App Activity, Location and YouTube History At myactivity.google.com a user can pause Web & App Activity, YouTube History and Location History, review what has been saved, and set an auto-delete window. This governs personal data tied to that login - not ad account data. Location History (surfaced as Timeline) affects how Google Maps personalises for that individual. It has only an indirect bearing on local marketing signals, and stopping it does not restrict what an advertiser can target. What the Ad Personalisation Toggle in My Ad Center Actually Changes (And What It Does Not) Inside My Ad Center , switching off personalised ads stops Google using that account's activity to target advertising. It does not stop ads appearing, and it does not touch a business's Google Ads account. Separate consumer privacy from ad performance. Disabling personal ad personalisation does not materially damage a campaign's ROAS - Ads relies on its own signals and consented conversion data, not one employee's YouTube history. Third-Party App Access: Reading Scopes Before You Approve 'Sign in with Google' Each 'Sign in with Google' grant carries scopes - read-only calendar access differs sharply from full Gmail or Drive access. Before approving, read the scope list. Full permission audits are a separate discipline; full permission audits sit on layer one and belong to the individual, not the ad account.

Nov 4, 20265 min read
Read more

Get Google Ads Consultation

Speak with our Google Ads specialists. Free Google Ads account audit (worth R1,500).

GET FREE ADS STRATEGY

Need Help?

Office 17, Block A, Willowbrook Office Park, Roodepoort, 1724

Why Choose Us for Google Ads

What working with Prebo Digital gets you on every Google Ads project

300% ROAS Average

Campaigns average a 300% return on ad spend across R50M+ in managed budget.

Google Premier Partner

Premier Partner status places us in the top 3% of agencies in the country.

Advanced Analytics Setup

Conversion tracking and GA4 configured properly from day one, not months later.

Rapid Campaign Launch

New campaigns built, reviewed and live in days rather than weeks.

Why Choose Us

Here's what sets us apart from the competition

500+ Expert Articles

A content hub covering SEO, paid media, CRO and web design for South African businesses.

200+ Success Stories

Campaigns and builds delivered across retail, services, B2B and ecommerce.

200+ Happy Clients

Businesses that trust Prebo Digital with their digital growth.

4.9 Average Rating

Rated 4.9 out of 5 across verified Google reviews.

24h Response Time

Questions answered within one business day, every time.

Google Premier Partner

Premier Partner status since 2022, placing us in the top 3% of agencies.

Amazon Verified Partner

One of the first verified Amazon Ads partners in South Africa.

Meta Business Partner

Certified to run paid social across Facebook, Instagram and beyond.

Frequently Asked Questions

Find answers to common questions

Google Ads can drive qualified traffic to your website, increase brand visibility, and generate measurable results.

We craft tailored strategies, conduct in-depth keyword research, and create compelling ad copy to maximize visibility and engagement.

As a Google Premier Partner, we offer advanced support and insights, ensuring your campaigns are optimized for success.