SARS eFiling profile hijackings are becoming an increasingly concerning and common hazard. Reports of this type of cybercrime have peaked in recent months and both individuals and businesses must take proactive steps to prevent an attack. This Cyber Security Awareness Month, it’s vital to understand how you could fall prey to cybercriminals. Improving your cybersecurity processes and relying on a trusted accountant can go a long way towards protecting you and your business.
What could happen if my SARS eFiling profile is hacked?
Fraudsters can access and modify your details (e.g. contact number, password) without your knowledge or consent – with serious consequences for your tax compliance and financial security.
They can then also change the bank details to divert a SARS refund due to you into their own accounts. And they can even submit fraudulent returns on your behalf to claim refunds.
How Can I Prevent Profile Hijacking?
❎Use a strong and unique password for your eFiling profile. Change it regularly.
❎ Don’t use the same password for other online accounts or services.
❎ Never share your login credentials, OTP, or personal information with anyone, even if they claim to be from SARS.
❎ If you hear about a security compromise at any organisation you deal with, immediately log in to your account and update your password.
❎Always access eFiling through the official website (https://www.sars.gov.za) or the SARS eFiling mobi app.
❎ Do not click on any links or attachments in emails, SMSes or WhatsApps that claim to be from SARS, and never “confirm” or submit your login details after clicking on a link.
❎ Keep your computer and mobile devices updated with the latest security software and antivirus programs.
❎Activate multi-factor or “app” authentication on your eFiling profile. This will authenticate you every time you log in by sending an OTP message to your registered mobile number or email address or requesting you to authorise the action via your mobile phone.
We Can Help To Keep You Safe
✅ As your accountants, we are well versed in avoiding these scams. Whenever you receive communications that seem to be from SARS, simply contact us.
✅ We are alerted to all known scams claiming to be from SARS, so we can quickly help you to identify phishing attempts.
✅ We can check your eFiling profile and tax information regularly and report any discrepancies or unauthorised changes to SARS immediately.
✅We constantly update our security details to ensure the safety of our profile and our clients’ profiles.
SARS recognises that profile hijacking is a serious crime that harms taxpayers. But prevention is always better than cure. Take proactive steps to protect your security and contact us whenever you receive communications that seem to be from SARS.