This Halloween, Beware: SARS eFiling Profile Hijackings Are on the Rise
South Africans are being hit with a chilling new cybercrime wave – SARS eFiling profile hijackings. The Tax Ombud is now investigating this as a possible systemic issue after a flood of complaints from taxpayers.
SARS Commissioner Edward Kieswetter says it plainly:
“Profile hijacking points to pervasive cybercrime with global links.”
And with October marking Cybercrimes Month, there’s no better time to wise up and lock down your online tax profile.
What is eFiling profile hijacking?
Criminals break into your SARS eFiling account, swap out your security details and banking info, and then submit fraudulent returns – pocketing refunds meant for you.
How do they get in?
SIM swaps
Phishing emails, calls, SMSs
Fake SARS letters of demand
Posing as “helpful” SARS officials or tax advisors
Even whispers of insider fraud at SARS and banks have surfaced.
SARS fights back
SARS insists its system hasn’t been breached – just individual profiles. Extra security layers are being rolled out, and SARS is working with banks and the Tax Ombud to clamp down.
How to protect yourself
Never share eFiling login details. SARS will never ask for OTPs, passwords, or banking info via call, SMS, or email.
Use strong, unique passwords – and update them often.
Enable two-factor authentication.
Check your profile regularly for unauthorised changes.
Always verify your banking details on eFiling.
If hacked: change credentials immediately on another device, report to SARS and open an identity theft case with SAPS.
Why you need a tax partner
Scammers are getting smarter. That’s why working with a SARS-registered tax practitioner is your best defence. We:
Track the latest scams before they reach you
Confirm your tax affairs directly with SARS
Use official channels only when handling payments or enquiries
If you’ve had a suspicious call, SMS, or email about your SARS refund – don’t engage. Contact us immediately.
We’re the ally you need in the fight against profile hijacking.