Cybercriminals frequently use phishing scams that resemble communications from the South African Revenue Service (SARS) to target individuals. These scams often mimic the SARS logo and email style, but they are fraudulent. It is important to understand their tactics and know how to protect yourself.

Potential threats

Cybercriminals use phishing tactics to trick you into revealing personal and financial information. These tactics can come in various forms, such as

  • demands for immediate payment of outstanding penalty fees
  • tips on how to easily secure a tax rebate
  • false claims that you must pay an outstanding amount before filing your 2024 return
  • use fraudulent email addresses such as returns@sars.co.za or refunds@sars.co.za to suggest eligibility for tax refunds
  • send fraudulent SMSs claiming you owe money, are due a refund, or need to take immediate action to avoid penalties
  • include URLs or attachments that may contain malicious software designed to compromise your device.

Protect yourself

 

  • Do not open or respond to emails or SMSs from unknown sources.
  • Avoid clicking on suspicious links or opening attachments.
  • Beware of emails or SMSs requesting personal, tax, banking, or eFiling details.
  • Contact SARS directly via their official website or contact number to verify any information.
  • Ignore or delete suspicious messages.

SARS official communication practices

  • SARS will never request your banking details via post, email, or SMS. They may verify your personal details for security purposes during phone calls.
  • SARS will not send hyperlinks to other websites.
  • Notices from SARS will prompt you to log into eFiling or the SARS MobiApp.
  • SARS does not send *.htm or *.html attachments.

General security tips

  • Always ensure your device’s operating system (i.e., Windows, Apple, Linux, or Android) and software are updated with the latest available updates and security patches.
  • Review your devices regularly to identify software applications, including browsers that you do not use. Uninstall any applications that you no longer require.
  • Install anti-virus on all your devices and keep it updated.
  • Scan your devices regularly.

Need help?

SARS has created a webpage which provides a list of the latest tax-related phishing attacks and scams doing the rounds. You can also report these types of emails or SMSs to phishing@sars.gov.za, or call their Fraud and Anti-Corruption hotline on 0800 00 2870.