SARS Fraud Alert: Taxpayers Urged to Stay Vigilant

The South African Revenue Service (SARS) has issued another urgent warning to the public, cautioning taxpayers about a newly circulating scam aimed at stealing money and sensitive information. This is not the first time cybercriminals have taken advantage of South Africa’s tax season, as SARS says scam volumes typically spike between September and October every year, coinciding with the final weeks of return submissions.

Key Takeaways

• Scammers are exploiting tax season panic: Fraudsters are sending fake SARS emails disguised as “Settlement Notifications” to pressure taxpayers into making payments to fraudulent accounts.
• SARS will never ask for payments via email: Legitimate SARS transactions occur only through eFiling, MobiApp, or preloaded EFT beneficiaries. Any unsolicited email or attachment should be treated with suspicion.
• Vigilance and verification are key: Taxpayers should report phishing attempts to phishing@sars.gov.za, use two-factor authentication, and always access SARS services directly through the official website.

A Familiar Yet Dangerous Scam Pattern

This latest fraudulent campaign mirrors previous phishing attempts, disguising itself as legitimate SARS correspondence. Scammers are sending out deceptive emails that closely imitate the design, tone, and layout of genuine SARS notifications. These fake messages are labelled as “Settlement Notifications” and seek to create anxiety by claiming that recipients must take immediate action by a specified date. Experts note that emotional manipulation, especially fear of legal action, is one of the oldest and most effective tactics in the cybercriminal playbook.

The fraudulent emails further escalate the sense of urgency by threatening legal proceedings, substantial penalties, or even the freezing of accounts should the taxpayer fail to comply. The message typically includes a PDF attachment which appears to contain official payment information. However, the document contains counterfeit banking details, tricking recipients into transferring funds to criminal accounts.

Timing of the Scam

The circulation of these fake notices is no coincidence. It coincides with South Africa’s tax season, a period when many citizens are actively engaging with SARS. October is the final month for non-provisional taxpayers to submit their returns, with the official closing date set for 20 October. As this deadline approaches, cybercriminals are exploiting the heightened level of activity and trust associated with legitimate SARS communications.

In recent months, banks, financial institutions, and tax practitioners have all observed an uptick in fraudulent incidents targeting unsuspecting individuals.

Other Common SARS-Themed Scams

SARS reported that these new settlement notifications are part of a much broader trend. Taxpayers have recently encountered a variety of similar deceptive messages, including:

• Threats that SARS is issuing court summonses to individuals
• False warnings of blacklisting by SARS
• Claims that SARS will impose stop orders on personal or business accounts
• Messages stating that the taxpayer owes money to SARS or is owed a refund
• Alerts regarding delayed payments allegedly pending FICA verification
• Fake notices about active or pending SARS audits
• The latest iteration, a so-called “Urgent Settlement Notice”
  

SARS maintains an official online page displaying current examples of scams to help the public identify fraudulent communications more easily.

SARS Reiterates Safe Payment Practices

Taxpayers are strongly advised not to click on suspicious links or attachments, and never to make payments based on unsolicited emails. SARS clarified that it will never instruct taxpayers to pay money via email correspondence. Legitimate payments are made exclusively through recognised channels such as SARS eFiling, the SARS MobiApp, or electronic funds transfer (EFT) via the taxpayer’s bank.

When paying through eFiling, SARS sends a secure payment request directly to the taxpayer’s banking platform. The amount due then appears automatically within the user’s authorised banking product, which the taxpayer must manually approve before any funds are released to SARS.

For EFT payments, taxpayers must select SARS from the preloaded list of trusted beneficiaries within their bank’s online system. All valid SARS beneficiary IDs begin with the prefix “SARS,” ensuring authenticity. South Africa’s banks and SARS have been collaborating since 2005 to pre-load official SARS beneficiaries, a security feature that has saved thousands of taxpayers from being defrauded.

How to Identify and Avoid Phishing Attempts

SARS reminded the public to exercise extreme caution when engaging with emails and text messages related to tax matters. The revenue service outlined several key safety guidelines:

• Never open or reply to messages from unfamiliar sources.
• Treat with suspicion any email requesting personal, banking, or tax-related credentials.
• SARS will never ask for banking details via post, email, or SMS. These details may only be verified verbally during official phone calls for identity confirmation purposes.
• SARS will never send web links to other websites, including banks.
• Do not trust SMS messages that claim to be from SARS without verification.
• SARS does not send attachments ending in *.htm or *.html.
• SARS will never request credit card details under any circumstances.

Those who receive a suspicious message or wish to confirm its legitimacy can report the incident by emailing phishing@sars.gov.za. Before deleting a phishing email, forward it to SARS’ fraud department so they can track the scam’s origin. You can also notify your bank if you have clicked on a suspicious link to flag potential compromise.

2025 Tax Season Deadlines

SARS also reiterated the key filing dates for the 2025 tax year to ensure taxpayers remain compliant and less vulnerable to last-minute scams:

Income Taxpayer Type	Opening Date	Closing Date
Auto-Assessments	7 July 2025	20 July 2025
Individuals	21 July 2025	20 October 2025
Provisional Taxpayers	21 July 2025	19 January 2026
Trusts	20 September 2025	19 January 2026

In 2024, more than 90% of tax returns were filed electronically, making digital scams the most common form of attack. Taxpayers are urged to double-check URLs and avoid using public Wi-Fi when accessing eFiling.

Conclusion

The latest wave of SARS-related scams underscores the importance of remaining alert and informed during South Africa’s tax season. Cybercriminals continue to refine their tactics, preying on fear, urgency, and trust to extract money and personal information from unsuspecting taxpayers. By staying cautious, verifying every communication, and using only official SARS channels, individuals can significantly reduce their risk of falling victim. The best defence is awareness, vigilance, and education, knowing how SARS truly operates and refusing to be rushed or intimidated by fraudulent messages.