Be wary of these scams this tax season

August 2024 News & Events, Security Services & Risk Management

As we approach the end of August, millions of South Africans will log onto the SARS eFiling website or visit their closest branch to complete their tax returns.

"While this is a very busy time for the South African Revenue Service (SARS), it is also a very busy time for scammers," says Manie van Schalkwyk, the CEO of the Southern African Fraud Prevention Service (SAFPS). "Over the past five years, the SAFPS has noticed a growing trend of tax scams which are targeting individuals who are desperate for cash."

Beware of auto-assessments

Van Schalkwyk warns the public against taking a SARS auto-assessment at face value. "SARS is increasingly gravitating towards an auto-assessment system for qualifying taxpayers. This means that SARS has already done the tax return on behalf of the individual. They then either qualify for a rebate or pay money back to SARS," says Van Schalkwyk.

While this is legitimate, he warns that scammers have also gotten on board with this trend. "Scammers, impersonating SARS, are contacting taxpayers. When targeted taxpayers log on to complete their auto-assessment, they are redirected to a proxy website where scammers will use the information they fill in on the form. The scammers will even produce a fake proof of payment document indicating that a rebate has been paid into the taxpayer's bank account," warns Van Schalkwyk.

Additional SARS scam

SARS also warns the public of an additional scam perpetrated by scammers impersonating SARS officials.

Scammers are posing as SARS, luring taxpayers into a trap with an Outstanding Tax Payment notice. The notice, sent via email, replicates SARS' logo and formatting, and warns taxpayers that they will be unable to file their tax return for the 2024 tax season until they pay an outstanding amount attached to their tax profiles.

The scammers warn that failing to pay the amount by a specific date will result in fines, penalties, and potential assessments on a taxpayer's affairs, which could result in conviction and prison time.

"As you can see, scammers are using sophisticated tactics," warns Van Schalkwyk, who adds that before taxpayers act in a panic, they should contact SARS and clarify the situation with them before taking action.

Additionally, SARS has a comprehensive list of the scams that involve SARS. This can be found at https://www.sars.gov.za/targeting-tax-crime/scams-and-phishing/

Spotting a scam

While a scammer's work is opportunistic in nature, Van Schalkwyk urges the public not to become complacent. Scammers are well-educated in current fraud tactics and are part of large syndicates that make a living from targeting individuals. Because of this, scams are becoming increasingly difficult to identify. The following points were made by SARS a recent media article, which is supported by Van Schalkwyk.

To avoid getting caught by these scammers, taxpayers need to pay attention to the following red flags:

• Be wary if the auto-assessment notice does not come from a @sars.gov.za address. The email should not come from a sub-domain (eg. SARS.Assessment.gov.za). If it does, do not open it.

• The auto-assessment email may contain hostile and threatening language.

• Be wary if the auto-assessment notice is not directly addressed to you or your business and does not contain your unique tax number.

• Be wary if the email demands an urgency on your part to avoid penalties.

• Be wary if the notice contains spelling and grammar mistakes. This is an immediate red flag but is becoming less prevalent as generative AI makes writing correspondence on behalf of users easier.

• Be wary if the email contains a strange link that you need to click on.

Immediately contact the authorities if:

• You receive this type of correspondence, have already filed your tax return, and do not owe SARS anything.

• The payment directive refers to specific bank account numbers and not SARS-approved bank references.

To make SARS payments easier, all banks already have SARS banking details under the public recipient details. Taxpayers won't have to enter the number. Rather, they can select the relevant account and add their payment reference number.

A helpful tool

Van Schalkwyk points out that the SAFPS launched Yima in response to the growing need for a proactive approach to fraud prevention.

"Yima is a one-stop-shop website for South Africans to report scams, secure their identity, and scan any website for vulnerabilities related to scams. They can also educate themselves on how to identify a scam. These tools will enable consumers to surf the internet, access key products such as online banking and money transfers more confidently and empower them to make informed decisions in their daily lives. These are just some exciting elements South Africans can access through the site for free," says Van Schalkwyk.

Alerting authorities

The website's main element will be the ability to report a scam incident or any suspicious activity to the SAFPS. This suspicious activity includes fake or suspect-looking online shopping and investment websites or portals, and instances where the user has received phoney banking information.

These reports will be collated and shared with law enforcement. Users will also be provided with a scam hotline to report a fraud incident directly to their banks, retailers, or insurance companies via a single number. Thus, users only need to remember one number rather than search for each institution's contact numbers online.

Additionally, Yima users will have access to the consumer products and services offered by the SAFPS.

We need to increase reporting

Manie van Schalkwyk, CEO of the SAFPS, warns that while the SAFPS and CSIR stats paint a picture of the growing nature of this crime, it is only a fraction of the crime's full impact.

"Unfortunately, there is a growing trend of victims not reporting these types of crimes to the authorities and the SAFPS. This is concerning, as we cannot become proactive in the fight against scams and fraud if crimes are not reported. The SAFPS reminds all victims that they are compelled to report a crime if one has been committed. This has been made very easy by Yima," says Van Schalkwyk. He adds that the process of being protected against these crimes and the fallout from these crimes are available through the click of a button and calling the Yima hotline.

The Yima website address is www.yima.org.za and the Yima Hotline number is +27 83 123 7226.




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

SMARTpod talks to Sophos and Phishield
SMART Security Solutions Technews Publishing Sophos Videos Information Security News & Events
SMARTpod recently spoke with Pieter Nel, Sales Director for SADC at Sophos, and Sarel Lamprecht, MD at Phishield, about ransomware and their new cyber insurance partnership.

Read more...
Cybersecurity and insurance partnership for sub-Saharan Africa
Sophos News & Events Information Security Security Services & Risk Management
Sophos and Phishield Announce first-of-its-kind cybersecurity and insurance partnership for sub-Saharan Africa. The SMARTpod podcast, discussing the deal and the state of ransomware in South Africa and globally, is now also available.

Read more...
Nice unveils MyNice Smartgo
News & Events Access Control & Identity Management
Nice SA has announced the release of MyNice Smartgo, a compact access automation solution, designed specifically for the South African market, combining an easy-to-install device with a user-friendly smartphone application.friendly smartphone application.

Read more...
Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
Corporate and academic teams can register for Kaspersky contest
Kaspersky News & Events Information Security
Kaspersky has announced the registration opening for its new Kaspersky{CTF} (Capture the Flag) competition, inviting academic and corporate teams from around the globe to compete in a battle of skill, strategy and innovation.

Read more...
SA businesses embrace GenAI, but strategy and skills lag
News & Events AI & Data Analytics
South African enterprises are rapidly integrating Generative AI (GenAI) into their operations, but most are doing so without formal strategies, dedicated leadership, or the infrastructure required to maximise value and minimise risk.

Read more...
Continuous security optimisation.
News & Events Information Security
Cymulate has announced its partnership with SentinelOne, a threat exposure validation and AI-powered cybersecurity platform. The collaboration delivers self-healing endpoint security that empowers businesses to increase protection for every endpoint on their network.

Read more...
ISPA’s take-down process protects from local scams
News & Events Information Security
During the recent school holidays, parents could rest a little easier knowing that ISPA, SA’s official internet industry representative body, is removing an average of three to four problematic websites from the local internet every week.

Read more...
The power of PKI and private sector innovation
Access Control & Identity Management News & Events Government and Parastatal (Industry)
At the recent ID4Africa 2025 Summit in Addis Ababa, the spotlight was firmly on building secure, inclusive, and scalable digital identity ecosystems for the African continent.

Read more...
Bosch Security renamed Keenfinity
News & Events
Globally renowned brands for video systems, access control and intrusion alarm systems, as well as communication systems, unite under the roof of the new company Keenfinity Group.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.