Be wary of these scams this tax season

August 2024 News & Events, Security Services & Risk Management

As we approach the end of August, millions of South Africans will log onto the SARS eFiling website or visit their closest branch to complete their tax returns.

"While this is a very busy time for the South African Revenue Service (SARS), it is also a very busy time for scammers," says Manie van Schalkwyk, the CEO of the Southern African Fraud Prevention Service (SAFPS). "Over the past five years, the SAFPS has noticed a growing trend of tax scams which are targeting individuals who are desperate for cash."

Beware of auto-assessments

Van Schalkwyk warns the public against taking a SARS auto-assessment at face value. "SARS is increasingly gravitating towards an auto-assessment system for qualifying taxpayers. This means that SARS has already done the tax return on behalf of the individual. They then either qualify for a rebate or pay money back to SARS," says Van Schalkwyk.

While this is legitimate, he warns that scammers have also gotten on board with this trend. "Scammers, impersonating SARS, are contacting taxpayers. When targeted taxpayers log on to complete their auto-assessment, they are redirected to a proxy website where scammers will use the information they fill in on the form. The scammers will even produce a fake proof of payment document indicating that a rebate has been paid into the taxpayer's bank account," warns Van Schalkwyk.

Additional SARS scam

SARS also warns the public of an additional scam perpetrated by scammers impersonating SARS officials.

Scammers are posing as SARS, luring taxpayers into a trap with an Outstanding Tax Payment notice. The notice, sent via email, replicates SARS' logo and formatting, and warns taxpayers that they will be unable to file their tax return for the 2024 tax season until they pay an outstanding amount attached to their tax profiles.

The scammers warn that failing to pay the amount by a specific date will result in fines, penalties, and potential assessments on a taxpayer's affairs, which could result in conviction and prison time.

"As you can see, scammers are using sophisticated tactics," warns Van Schalkwyk, who adds that before taxpayers act in a panic, they should contact SARS and clarify the situation with them before taking action.

Additionally, SARS has a comprehensive list of the scams that involve SARS. This can be found at https://www.sars.gov.za/targeting-tax-crime/scams-and-phishing/

Spotting a scam

While a scammer's work is opportunistic in nature, Van Schalkwyk urges the public not to become complacent. Scammers are well-educated in current fraud tactics and are part of large syndicates that make a living from targeting individuals. Because of this, scams are becoming increasingly difficult to identify. The following points were made by SARS a recent media article, which is supported by Van Schalkwyk.

To avoid getting caught by these scammers, taxpayers need to pay attention to the following red flags:

• Be wary if the auto-assessment notice does not come from a @sars.gov.za address. The email should not come from a sub-domain (eg. SARS.Assessment.gov.za). If it does, do not open it.

• The auto-assessment email may contain hostile and threatening language.

• Be wary if the auto-assessment notice is not directly addressed to you or your business and does not contain your unique tax number.

• Be wary if the email demands an urgency on your part to avoid penalties.

• Be wary if the notice contains spelling and grammar mistakes. This is an immediate red flag but is becoming less prevalent as generative AI makes writing correspondence on behalf of users easier.

• Be wary if the email contains a strange link that you need to click on.

Immediately contact the authorities if:

• You receive this type of correspondence, have already filed your tax return, and do not owe SARS anything.

• The payment directive refers to specific bank account numbers and not SARS-approved bank references.

To make SARS payments easier, all banks already have SARS banking details under the public recipient details. Taxpayers won't have to enter the number. Rather, they can select the relevant account and add their payment reference number.

A helpful tool

Van Schalkwyk points out that the SAFPS launched Yima in response to the growing need for a proactive approach to fraud prevention.

"Yima is a one-stop-shop website for South Africans to report scams, secure their identity, and scan any website for vulnerabilities related to scams. They can also educate themselves on how to identify a scam. These tools will enable consumers to surf the internet, access key products such as online banking and money transfers more confidently and empower them to make informed decisions in their daily lives. These are just some exciting elements South Africans can access through the site for free," says Van Schalkwyk.

Alerting authorities

The website's main element will be the ability to report a scam incident or any suspicious activity to the SAFPS. This suspicious activity includes fake or suspect-looking online shopping and investment websites or portals, and instances where the user has received phoney banking information.

These reports will be collated and shared with law enforcement. Users will also be provided with a scam hotline to report a fraud incident directly to their banks, retailers, or insurance companies via a single number. Thus, users only need to remember one number rather than search for each institution's contact numbers online.

Additionally, Yima users will have access to the consumer products and services offered by the SAFPS.

We need to increase reporting

Manie van Schalkwyk, CEO of the SAFPS, warns that while the SAFPS and CSIR stats paint a picture of the growing nature of this crime, it is only a fraction of the crime's full impact.

"Unfortunately, there is a growing trend of victims not reporting these types of crimes to the authorities and the SAFPS. This is concerning, as we cannot become proactive in the fight against scams and fraud if crimes are not reported. The SAFPS reminds all victims that they are compelled to report a crime if one has been committed. This has been made very easy by Yima," says Van Schalkwyk. He adds that the process of being protected against these crimes and the fallout from these crimes are available through the click of a button and calling the Yima hotline.

The Yima website address is www.yima.org.za and the Yima Hotline number is +27 83 123 7226.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
The power of PKI and private sector innovation
Access Control & Identity Management News & Events Government and Parastatal (Industry)
At the recent ID4Africa 2025 Summit in Addis Ababa, the spotlight was firmly on building secure, inclusive, and scalable digital identity ecosystems for the African continent.

Read more...
Bosch Security renamed Keenfinity
News & Events
Globally renowned brands for video systems, access control and intrusion alarm systems, as well as communication systems, unite under the roof of the new company Keenfinity Group.

Read more...
2025 video surveillance market set for improved fortunes
News & Events Surveillance
Novaira Insights has unveiled its latest report, World Market for Video Surveillance Hardware and Software – 2025 Edition, forecasting a healthy growth rate of 8,1% until 2029, excluding China.

Read more...
Wialon announces integration with fleet maintenance and optimisation platform
News & Events Transport (Industry) Logistics (Industry)
Fleet management software platform integrates with a fleet maintenance and optimisation platform to support mutual customers for better workflows and deeper insights into fleet operations.

Read more...
DeepSneak deception
Information Security News & Events
Kaspersky Global Research & Analysis researchers have discovered a new malicious campaign which is distributing a Trojan through a fake DeepSeek-R1 Large Language Model (LLM) app for PCs.

Read more...
Almost 50% of companies choose to pay the ransom
News & Events Information Security
This year’s Sophos State of Ransomware 2025 report found that nearly 50% of companies paid the ransom to get their data back, the second-highest rate of ransom payment for ransom demands in six years.

Read more...
Value and industry insight
Securex South Africa Training & Education News & Events
Securex South Africa 2025, co-located with A-OSH EXPO, Facilities Management Expo, and Firexpo, drew thousands of security professionals from across the continent and beyond, offering a platform for networking, product discovery, and knowledge sharing.

Read more...
Gallagher Security achieves ISO 27001 recertification
News & Events Training & Education
Gallagher Security has successfully achieved certification to the updated ISO/IEC 27001:2022 standard for Information Security Management Systems (ISMS). This accomplishment builds on previous certifications and reflects a continued commitment to the highest standards of information security.

Read more...
Survey highlights cost of cyberdamage to industrial companies
Kaspersky Information Security News & Events
The majority of industrial organisations estimate their financial losses caused by cyberattacks to be over $1 million, while almost one in four report losses exceeding $5 million, and for some, it surpasses $10 million.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.