As the 2025 tax season begins, both taxpayers and practitioners must be on high alert for a rise in scams and fraudulent activity targeting the SARS eFiling system.

Scammers often impersonate SARS officials or send fake correspondence to trick individuals into sharing sensitive information or unknowingly redirecting refunds. These scams generally fall into two categories:

  • Direct fraud: Trick you into sharing personal/banking details or making payments.

  • eFiling profile fraud: Hijack your SARS profile to claim fraudulent refunds.

Criminal tactics range from simple phishing emails to more sophisticated schemes involving remote access software, fake biometric verifications, and web calls.

Somaya Khaki, SAICA’s Tax Advocacy lead, highlights common scam types and how to guard against them:

Common Scams

  • eFiling profile hijacking: Criminals change banking or contact details to steal refunds.

  • Phishing messages: Fake SARS emails/SMSs request personal or banking information or contain malicious links.

  • Impersonation calls: Fraudsters posing as SARS agents request OTPs or logins under the pretense of assisting with refunds.

  • Fake SARS letters of demand: Fraudulent payment requests on counterfeit SARS letterheads.

  • Fake tax advisors: Scammers promise large refunds and submit false returns—leaving you liable when SARS audits.

  • Audit scams: Messages claim your return is being audited and lead you to phishing sites.

  • Targeting the vulnerable: Elderly or less tech-savvy taxpayers are often manipulated into handing over sensitive data.

How to Protect Yourself

Stay informed and cautious. Here are key safety measures:

 Use Official SARS Channels

  • Always go to www.sars.gov.za directly.

  • Never click links in unsolicited emails, SMSs, or WhatsApp messages.

 Keep Your eFiling Profile Secure

  • Regularly review your tax return and ensure all details (especially banking info) are accurate.

  • Never share OTPs, passwords, or account info.

  • Enable strong passwords and multi-factor authentication.

  • Avoid using public WiFi for eFiling or banking.

 Be Wary of Calls and Remote Access

  • Don’t allow remote access to your phone or PC unless you fully trust the person.

  • SARS will never call to request OTPs or banking details.

 Verify Tax Advisors

  • Confirm your tax practitioner is registered with SARS and a recognised body.

  • Ask for a letter of good standing.

 Help Vulnerable Individuals

  • Support elderly or less tech-savvy family members by assisting with their tax matters.

  • Establish a family support protocol to monitor and verify SARS communication.

 Report Suspicious Activity

If you suspect your profile, device, or information has been compromised:

  1. Report identity theft to SAPS.

  2. Use SARS’s Online Query System (SOQS) → Select “Report Digital Fraud” to stop fraudulent refunds.

  3. Inform your tax practitioner so they can take additional precautions.

  4. Immediately change passwords from another secure device.

  5. Disconnect compromised devices from the internet.

Stay vigilant throughout the filing season. For updates on new scams, visit the SARS Scams & Phishing page.

Knowledge and caution are your best protection.