🛡️ Protect Yourself Against the Rise in SARS-Related Fraud

By Pamela Stander, Accountuit Senior Accountant

In recent months, there has been a noticeable increase in fraudulent activity taking place under the name of the South African Revenue Service (SARS). Cybercriminals are becoming increasingly sophisticated — imitating official SARS communication to deceive taxpayers into revealing personal details or making false payments.

At Accountuit, we’ve seen several clients targeted through fake SARS emails, SMSes and calls. As your trusted tax practitioners, we want to ensure you stay informed and protected against these scams.

How the Scammers Operate

Fraudsters use several deceptive tactics to impersonate SARS. The most common methods include:

1. Phishing Emails and SMSes

   
   

   Messages claiming you have a pending refund, outstanding amount, or that immediate action is required. These often include links that lead to fake SARS websites designed to steal your login details.

   
   

2. Fake SARS Calls

   
   

   Fraudsters posing as SARS officials may request urgent payment or personal information such as ID numbers, tax reference numbers or bank details.

   
   

3. Spoofed Websites and Social Media Accounts

   
   

   Scammers replicate the SARS logo and format to appear legitimate, often using domain names that look similar to the official one.

   
   

4. Payment Redirection Scams

   
   

   Businesses are sometimes tricked into paying “outstanding SARS accounts” into fraudulent bank accounts that appear genuine.

Red Flags to Watch Out For

Be alert for signs that a communication may not be legitimate:

• Emails or SMSes from addresses not ending in @sars.gov.za

• Poor grammar, spelling mistakes or suspicious links

• Urgent or threatening language (e.g. “Legal action will be taken immediately”)

• Requests for banking information, passwords, or OTP codes

• Websites not starting with https://www.sars.gov.za/

  
  

Important: SARS will never request your banking or personal information via email, SMS or telephone.

How to Protect Yourself

Here are some practical steps you can take to safeguard your tax and financial information:

1. Verify before you act – Always confirm any SARS communication by contacting us to confirm it on the SARS efiling profile.

2. Avoid clicking on links or attachments – Rather type the SARS web address manually into your browser.

3. Keep your credentials secure – Never share your login details or passwords, even with someone claiming to be a SARS official.

4. Educate your staff – Ensure that everyone involved in your finance or payroll processes knows how to identify potential scams.

5. Regularly update passwords – Use strong, unique passwords and change them periodically.

What to Do If You’ve Been Targeted

If you suspect fraudulent activity:

• Report the incident immediately to SARS at phishing@sars.gov.za

• Notify your bank if you’ve shared or used any financial details

• Change all relevant passwords and enable multi-factor authentication where possible

• Keep a copy of the fraudulent communication as evidence

We’re Here to Help

As your trusted tax professionals, our goal is to help you stay compliant and secure. If you receive a message or notice that seems suspicious, please contact us before responding or

making any payments.

We will gladly verify the communication and guide you on the correct next steps.

Staying alert and informed is the best defence against fraud — when in doubt, verify before you act. Contact us: contact@accountuit.co.za / www.accountuit.co.za