By Andrea Kritzinger
14 October 2025
With the ever-increasing ingenuity and sophistication of cybercrime and fraudulent transactions, it is essential to remain informed and vigilant, particularly when handling correspondence that appears to be from the South African Revenue Service (SARS).
Members of the public are often targeted with false “spoofed” emails or messages designed to look as if they were sent by SARS, but which are in fact fraudulent and intended to trick taxpayers into disclosing personal information. Fraudsters can then gain unauthorized access to taxpayer accounts, alter banking details, and redirect tax refunds for their own fraudulent gain.
It is therefore prudent to be aware of the indicators of potentially fraudulent correspondence, including:
- SARS will never request your banking or credit card details via post, email, or SMS.
- Emails that ask for personal, tax, banking and eFiling details (login credentials, passwords, pins, etc.).
- Urgent demands for payment or threats of legal action.
- Emails that appear to be from returns@sars.co.za or refunds@sars.co.za, indicating that taxpayers are eligible to receive tax refunds; these emails may contain links to false forms and fake websites.
- Emails or messages with poor grammar, spelling mistakes, or unusual formatting.
- Unexpected attachments or instructions to download software.
Imposters often play on emotions such as fear, urgency, or guilt to provoke hasty action. They may attempt to create panic by suggesting immediate penalties or missed deadlines.
SARS acknowledges that cybercrime is an evolving and growing risk. In an effort to uphold the integrity of South Africa’s tax administration system and curb fraudulent correspondence, SARS has implemented several measures to protect taxpayers:
- Monitoring high-risk changes to taxpayer profiles, such as password resets, banking detail changes, changes to company directors, or new access grants.
- Sending alert emails for any changes to a taxpayer’s registered details, including updates to security contact information.
- Regularly updating their website with information on scams and false emails circulating in the public domain. For official updates on scams and phishing attempts, visit: SARS Scams and Phishing.
Unfortunately, the increasing levels of fraud and cybercrime have made SARS more cautious, which means that even honest taxpayers may experience additional administrative procedures. Staying vigilant and being well-informed is the best defence against fraud and identity theft. Do not click on links or download attachments from unknown sources and be especially cautious when asked to provide personal information or banking details.
To protect yourself, always verify any suspicious correspondence directly with your tax practitioner or SARS. If you are uncertain or have concerns about an email or message received, do not hesitate to contact us for guidance.
www.auroprofessional.com
Paarl | Stellenbosch | Franschhoek | Wellington | Somerset West | Durbanville | Cape Town | Western Cape