How the scam works
What happens
A message claims that SARS owes the recipient a refund and provides a link to confirm banking details. The fake page captures identity, banking, and eFiling information.
Example scenario
“SARS: R4 892.40 refund pending. Submit banking verification before 17:00.”Example wording is illustrative and may differ from real scam messages.
Warning signs
Red flags to look for
01
Unexpected tax refund
02
Shortened or misspelled link
03
Request for full banking login details
04
Urgent deadline to claim
Safer response
What to do next
01
Sign in to eFiling by typing the official address yourself
02
Check notices inside the official eFiling profile
03
Do not submit banking passwords or card PINs
04
Report the message through official SARS channels