By Zuko Komisa

- Fraudsters are using AI to generate sophisticated email and SMS tax refund scams.
- Phishing links direct targets to realistic fake sites to steal banking and login details.
- The revenue service will never request PINs, passwords, or banking details via links or unsolicited messages.
The South African Revenue Service (SARS) has issued an urgent warning regarding a sophisticated scam attempting to mislead taxpayers through fraudulent SMSs and emails.
Scammers are luring targets with promises of tax refunds, directing them to fake websites designed to extract sensitive personal and banking information.
Crucially, the revenue collector highlighted that cybercriminals are leveraging modern tools to make their communications appear genuine.
“SARS said that scammers are now using artificial intelligence (AI) to generate professional-looking email templates that are harder to identify as fraudulent.”
Messages often appear to originate from address handles like [email protected] or [email protected].
SARS reiterated that it will never request passwords, one-time PINs (OTPs), banking credentials, or credit card information via email, SMS, or social media. It also warned against opening attachments with .htm or .html extensions and stressed that official communications never include hyperlinks to external websites.
If you receive a suspicious message, delete and block it immediately. Taxpayers can report phishing attempts to [email protected], verify current scams on the official SARS website, or contact the Fraud and Anti-Corruption Hotline on 0800 00 2870.
Additionally, members of the public are urged to use only official SARS channels and ensure any tax practitioner they engage is registered with SARS and a Recognised Controlling Body.
READ NEXT: SARS Commissioner reflects on record-breaking R2 trillion net revenue collection