SARS fraud warning for South Africans

South Africans are being targeted by increasingly convincing SARS scams during tax season, including phishing messages, fake refunds, impersonation, and eFiling profile hijacking.

Tax season is an important period for South Africans to meet their tax obligations, but it is also one of the busiest times of the year for fraudsters seeking to exploit unsuspecting taxpayers.

As SARS continues to simplify filing through digital services and pre-assessments, cybercriminals are using increasingly convincing scams that closely resemble legitimate SARS communication.

As such, the Southern African Fraud Prevention Service (SAFPS) urged taxpayers to remain vigilant and verify every request before sharing personal information or making payments.

“Tax season consistently attracts fraudsters looking to exploit taxpayers,” explained SAFPS CEO Manie van Schalkwyk.

“Scammers are constantly adapting their methods, making it essential for consumers to understand the latest tactics and remain alert throughout the filing process.”

Fraudsters commonly impersonate SARS officials to manipulate taxpayers into disclosing sensitive information or making payments under false pretences.

They rely on urgency, fear, and the appearance of legitimacy to pressure victims into acting without verifying the request.

One of the most common scams involves fraudulent emails or SMS messages that appear to be from the revenue service.

These messages often contain links that direct taxpayers to fake websites designed to steal login credentials, banking details, and other personal information.

Van Schalkwyk explained that criminals have become increasingly sophisticated, often making subtle changes to email addresses or website links that are difficult to detect at first glance.

These messages may ask taxpayers to verify banking details, confirm personal information, or update their eFiling profile.

However, if taxpayers click on the embedded links, it can expose their confidential information or compromise their devices with malware.

“Always inspect the sender’s email address carefully,” he said. “Official SARS correspondence comes from an @sars.gov.za domain. If the address differs, treat it as suspicious and avoid clicking any links.”

Common tax-related scams

According to Van Schalkwyk, another common tactic used by fraudsters is communication claiming that a taxpayer is due a refund.

These emails or SMS messages encourage recipients to click a link to confirm their banking details or complete a verification process before the refund can be released.

The promise of an unexpected payment often creates excitement, making taxpayers less likely to question the authenticity of the communication.

SARS advised taxpayers to verify any refund notifications through their official eFiling profile or SARS’ authorised channels rather than following links contained in unsolicited messages.

Fraudsters will also often send emails claiming that taxpayers have outstanding tax liabilities requiring immediate settlement.

These messages typically warn of penalties, legal action, or account restrictions if payment is not made urgently, Van Schalkwyk explained.

Similarly, fake settlement notifications often include banking details controlled by criminals or direct recipients to fraudulent payment portals.

Taxpayers should remember that SARS is a pre-approved beneficiary with South African banks and does not request payments into unfamiliar accounts supplied through unsolicited correspondence.

Criminals are also increasingly contacting taxpayers directly by phone, email or messaging platforms while pretending to represent SARS.

These scammers claim there is a problem with a tax return, refund or tax status and offer to assist in resolving the matter.

During the conversation, they attempt to obtain identity numbers, tax reference numbers, banking details or one-time passwords.

“SARS representatives will never request sensitive personal information or banking credentials in this manner,” Van Schalkwyk stressed.

Another growing tactic taxpayers should watch out for involves criminals taking control of legitimate SARS eFiling profiles.

Fraudsters use stolen personal information to change banking details linked to taxpayer accounts, allowing legitimate refunds to be redirected into fraudulent bank accounts opened using stolen identities.

Victims often only become aware of the fraud after discovering that their refund has already been paid into an unfamiliar account.

This emerging trend shows the importance of protecting personal information and regularly monitoring eFiling profiles for unauthorised changes.

How taxpayers can protect themselves

According to the SAFPS, awareness remains the strongest defence that South Africans have against tax-related fraud.

Taxpayers should never share their eFiling usernames or passwords and should avoid disclosing banking information, PINs, or card details in response to emails, SMSes, or phone calls.

SAFPS stressed that all tax-related payments should be made through official SARS platforms or verified banking channels.

Consumers should avoid clicking on links received via email, SMS, or WhatsApp and instead access SARS services directly through the official website.

If there is any uncertainty, they urged taxpayers to contact the revenue service directly using verified contact details.

Strong passwords, multi-factor authentication and avoiding public Wi-Fi when accessing sensitive financial information can further reduce exposure to cybercrime.

Van Schalkwyk also urged taxpayers to remain cautious whenever communications create a sense of urgency or attempt to intimidate them into making immediate decisions.

Anyone who believes their tax profile or refund may have been compromised should immediately contact their bank, notify SARS and report the incident to the South African Police Service.

Incidents can also be reported to the SAFPS through Yima at www.yima.org.za, helping identify emerging fraud trends.

Yima provides information on current scam tactics, allows users to scan website links for potential risks, and provides access to a dedicated scams hotline, enabling consumers to report incidents quickly.

In addition, the SAFPS offers Protective Registration to help guard against identity theft and provides fraud victim listings on its database to support affected individuals. These services are available at no cost.

“Fraudsters continue to evolve their tactics, but consumers can significantly reduce their risk by staying informed, verifying every communication and making use of trusted reporting platforms,” Van Schalkwyk added.