"SARS: you have a refund / a summons"
Messages claiming to be from SARS come in two flavours: a happy one (*"you have a tax refund — verify your banking details to release it"*) and a frightening one (*"audit," "summons," "final demand"*). Both contain a link to a fake eFiling login page that steals your details.
The rule is simple: SARS never sends links to other websites, and never asks for your banking or card details by email, SMS or post. Refunds go only to the bank account already on your SARS profile.
What to do: don't click. Log in by typing the official SARS address yourself, or use the official SARS app. Forward suspicious messages to phishing@sars.gov.za.
Threat examples
SARS: Your tax refund of R4,320 is approved. To release payment, confirm your banking details at the secure link below within 48 hours.