Tax Season Scams: What South Africans Need to Know

Every year, as tax filing season ramps up, fraudsters step up their game. They pretend to be the South African Revenue Service (SARS) and try to trick you into handing over personal or banking details. Knowing what these scams look like and how to react can keep your information safe.

Why Tax Season Attracts Scammers

Thalia Pillay, co‑founder and CEO of Orca Fraud, explains that the increase in genuine SARS messages—more emails, SMS alerts, and online notices—gives criminals a perfect cover. When you expect to hear from SARS, a fake message can seem legitimate at first glance.

Common Types of SARS‑Impersonation Scams

1. Fake Settlement Notice

You receive a text or email claiming you owe a specific amount of tax that must be paid by a certain date. The message often includes a bank account number for payment.

SARS rule: SARS will never ask for bank details via SMS, email, or post, and it will never provide a bank account number for you to send money to.

2. Fake Refund SMS

A message says a refund has been issued and asks you to click a link to confirm your details or to add a credit card so the money can be sent.

SARS rule: SARS never requests credit‑card information. Refunds are deposited directly into the bank account linked to your eFiling profile. Any link that leads outside the official SARS domain is a scam.

3. Fake Demand Letter

This looks more threatening: a warning letter, court summons, or blacklist notice. It includes a link or attachment that leads to a phishing site designed to steal your login credentials.

SARS rule: SARS does not send hyperlinks to external websites, including banks or legal notices. All genuine legal actions appear in your eFiling profile, not in unsolicited messages.

4. Fake Automated Assessment or Compliance Notice

You’re prompted to confirm your compliance status, update banking details, or finish an automatic assessment via a link. The goal is to direct you to a copycat website that mimics the eFiling portal.

SARS rule: SARS does not send links to external sites for compliance checks. If you need to update details or run an assessment, go straight to sars.gov.za and log in there.

How to Spot a Scam Message

• Unexpected request for personal or banking info.
• Urgent language designed to cause panic (“pay now or face legal action”).
• Links that don’t start with https://www.sars.gov.za or use misspelled domains.
• Attachments you weren’t expecting, especially .exe, .zip, or .scr files.
• Poor spelling, grammar, or formatting.

What to Do If You Receive a Suspicious Message

1. Do not click any links or open attachments.
2. Do not reply with personal information.
3. Verify the message by logging into your eFiling account directly (type the URL yourself).
4. Forward the suspicious SMS or email to phishing@sars.gov.za for investigation.
5. Delete the message after reporting it.

SARS’s Official Communication Policies (2025 Update)

As of May 2025, SARS has moved entirely to digital correspondence and no longer sends physical mail for system‑generated letters. This means more legitimate notices appear in your inbox and SMS feed, which also makes it easier for scammers to blend in. Remember:

• SARS will never ask for your password, PIN, or credit‑card details.
• All payment instructions will be given only through your secure eFiling profile.
• Official SARS messages will always come from a verified @sars.gov.za email address or a registered short code for SMS.

Quick Tips to Stay Safe

• Enable two‑factor authentication on your eFiling account.
• Keep your phone’s operating system and apps up to date.
• Use a reputable mobile security app that can flag phishing attempts.
• Educate family and friends—especially younger users—about these scams.
• When in doubt, call SARS directly using the official contact numbers from their website.

Conclusion

Tax season brings a surge in both genuine SARS communication and fraudulent attempts to mimic it. By knowing the most common scams, spotting red flags, and following the correct verification steps, you can protect your personal and financial information. Stay alert, verify before you act, and report anything that looks suspicious. A few cautious habits now can save you a lot of trouble later.