South African Cyber Guide
Fake SARS messages
What is it?
Fraudulent SMS and emails pretending to be from the South African Revenue Service (SARS), usually about a refund or an urgent tax issue.
How does it work?
These messages typically include a link to a fake SARS eFiling page designed to capture your login details, ID number, or banking information under the guise of processing a refund.
How do I recognise it?
- Unexpected refund notifications with a link to 'claim' it.
- Threats about penalties or legal action for unpaid tax.
- A link that doesn't go to the official sars.gov.za domain.
What should I do?
- Don't click the link. Log into eFiling directly by typing the address yourself.
- Check your actual SARS eFiling profile for any genuine correspondence.
- Report the message to SARS using its official phishing-reporting channel: phishing@sars.gov.za.
What should I avoid?
- Don't enter your ID number, tax number, or banking details through a link in a message.
- Don't call any number provided in the suspicious message.
Where can I get help?
- SARS phishing reporting: phishing@sars.gov.za or the SARS Fraud and Anti-Corruption Hotline on 0800 00 2870.
- Your bank, if you entered banking information.