SARS has warned taxpayers of a disturbing rise in fraud attempts and breaches of eFiling profiles. These breaches can lead to identity theft, financial loss, and a lengthy process of restoring your good standing with the authorities.
Cyber threats have evolved from simple click-bait scams to sophisticated and planned fraudulent activities, often targeting vulnerable individuals such as the elderly, disabled and expatriates. These cleverly orchestrated profile hacks can wreak havoc on a taxpayer’s financial affairs.
Fraudsters are aware that many taxpayers are expecting / hoping for tax refunds or other communications from SARS and seek to prey on unsuspecting victims.
Warning from SARS
In June this year, SARS warned of a new scam targeting taxpayers using eFiling. It explained that fraudsters are posing as SARS and use an ‘outstanding tax payment’ as a hook.
The scammers will contact taxpayers and threaten that if they don’t make a payment to the attached account number, they won’t be able to file their returns for the 2024 tax season.
“SARS never provides bank account numbers. If you need to make a payment, only use the Official SARS payment channels,” SARS clarified.
If you want to make yourself aware of some of the common scams, check out the SARS website here: https://www.sars.gov.za/targeting-tax-crime/scams-and-phishing/.
Note that we have published the full URL (web address) so that you can check that it is not a link to a malicious site. BE VERY WARY OF CLICKING ON LINKS WHERE YOU DON’T KNOW WHERE YOU ARE BEING DIRECTED! Often you will be directed to a site which LOOKS legitimate but is not.
How to protect yourself
SARS have stated that to protect themselves, taxpayers should take note of the following:
- Do not open or respond to emails from unknown sources.
- Beware of emails [or phone calls] that ask for personal, tax, banking and eFiling details (login credentials, passwords, pins, credit / debit card information, etc.).
- SARS will never request your banking details in any communication that you receive via post, email, or SMS. However, for the purpose of telephonic engagement and authentication purposes, SARS will verify your personal details. Importantly, SARS will not send you any hyperlinks to other websites – even those of banks.
- Beware of false SMSs.
- SARS does not send *.htm or *.html attachments.
- SARS will never ask for your credit card details.
The most important thing with these scams to remember is that if you are ever put under pressure to act with any degree of urgency, it is very likely to be a scam.
If they call you on your phone be very wary. Do not give them your email address – they should have it on your SARS profile. If they are insistent, get a name, reference number and disconnect the call. You can always call a valid SARS number back to find out what is going on
If you get an email telling you that you need to pay money into a bank account don’t do it. It’s a scam.
If you get an email from ANYONE telling you that you need to download click on a PDF attachment to your computer DO NOT DO IT!
Pleaser take care of your financial lives by exercising higher degrees of caution at this vulnerable time.