AI-Powered Phishing Scams Are Targeting SARS Taxpayers: What South Africans Need to Know

South Africa’s tax season has always attracted opportunistic scammers, but 2026 has brought a new and more convincing threat. The South African Revenue Service has flagged a wave of phishing attempts that use artificial intelligence to produce polished, professional-looking messages impersonating official SARS communication — and taxpayers are being caught out in growing numbers.

What’s Different This Time

Phishing scams targeting SARS taxpayers are nothing new. Fake refund notifications, bogus penalty letters and fraudulent “final demand” emails have circulated for years. What has changed is the quality of the fakes.

Previously, many scam emails gave themselves away through poor spelling, awkward phrasing or obviously incorrect logos and formatting. Generative AI tools have removed most of those tell-tale signs. Scammers can now produce emails with correct grammar, professional tone, and layouts that closely mirror genuine SARS correspondence — making it significantly harder for the average taxpayer to separate a real notice from a fake one at a glance.

How the Scam Typically Works

The most common version of this scam follows a familiar pattern, now dressed up more convincingly:

Other variations impersonate audit notices, penalty demands, or account statements, relying on urgency and fear rather than the promise of a refund to prompt quick action.

Why This Matters More During Filing Season

Scammers deliberately time these campaigns to coincide with SARS’s filing season, when large numbers of taxpayers are actively expecting some form of correspondence from the revenue service. Anyone who has recently submitted a return, or who is anticipating a refund, is a natural target — they are primed to open messages that look official and are less likely to pause and scrutinise them.

This seasonal spike is compounded by the fact that many taxpayers simply don’t know what genuine SARS communication looks like, making it easier for a well-crafted fake to slip through.

Warning Signs to Watch For

While AI has made these scams harder to spot, a few consistent red flags remain:

What To Do If You Receive a Suspicious Message

If you receive a message you suspect is fraudulent, the safest response is straightforward:

1. Do not click any links, scan any QR codes, or reply to the message.
2. Do not call any phone number provided in the message itself.
3. Forward the suspicious email or SMS to SARS’s dedicated phishing reporting address so it can be investigated and added to their public list of known scams.
4. Delete the message once reported.
5. If you’re ever unsure whether a piece of correspondence is genuine, log into eFiling or the SARS MobiApp directly — never through a link in an email or SMS — to check your account status.

Protecting Your eFiling Profile

Beyond spotting individual scam messages, taxpayers should treat their eFiling credentials with the same level of care as their online banking details.

If you believe your eFiling profile has already been compromised, change your password immediately, enable multi-factor authentication, and contact SARS to flag the potential breach.

The Bigger Picture

The rise of AI-generated phishing isn’t unique to SARS — tax authorities and financial institutions worldwide are grappling with the same shift as generative tools make convincing fraud cheaper and easier to produce at scale. For South African taxpayers, the practical takeaway is simple: the usual advice to “look out for bad spelling and dodgy logos” is no longer a reliable filter. The safest approach is to treat every unsolicited SARS-branded message with the same scepticism, regardless of how polished it looks, and to always verify independently through official channels rather than trusting a link.

As filing season deadlines approach and refund anxiety peaks, staying alert to these evolving tactics is one of the simplest ways South African taxpayers can protect both their money and their tax profile.

This article is for general information purposes only and does not constitute tax or legal advice. For guidance specific to your situation, consult a registered tax practitioner or contact SARS directly through official channels.