Cyber Conduct
South African Cyber Guide

Fake SARS messages

What is it?

Fraudulent SMS and emails pretending to be from the South African Revenue Service (SARS), usually about a refund or an urgent tax issue.

How does it work?

These messages typically include a link to a fake SARS eFiling page designed to capture your login details, ID number, or banking information under the guise of processing a refund.

How do I recognise it?

  • Unexpected refund notifications with a link to 'claim' it.
  • Threats about penalties or legal action for unpaid tax.
  • A link that doesn't go to the official sars.gov.za domain.

What should I do?

  • Don't click the link. Log into eFiling directly by typing the address yourself.
  • Check your actual SARS eFiling profile for any genuine correspondence.
  • Report the message to SARS using its official phishing-reporting channel: phishing@sars.gov.za.

What should I avoid?

  • Don't enter your ID number, tax number, or banking details through a link in a message.
  • Don't call any number provided in the suspicious message.

Where can I get help?

  • SARS phishing reporting: phishing@sars.gov.za or the SARS Fraud and Anti-Corruption Hotline on 0800 00 2870.
  • Your bank, if you entered banking information.