“WhatsApp and similar messages and SMSs may contain links which you are encouraged to click on. These links may contain Trojans which fraudsters will use to gain access to your device to steal personal information from you.
“These links can be marked as 'Outstanding Debt', 'Final Demand' or anything which will compel you to click on the link and may also contain Trojans to gain illegal access to your device.”
What about other social media platforms?
Sars said another way fraudsters were tricking taxpayers was by advertising their services on social media platforms such as Facebook.
The adverts may have the Sars logo and fictitious or real company names and addresses.
“Rates charged for services are either very low or it may be based on a percentage of refunds obtained. These rates are often outside the range changed by legitimate tax practitioners.
“The fraudsters will ask you for personal information to enable them to assist you and then use the information to defraud you and/or Sars,” it said.
How can I avoid being scammed?
Sars said taxpayers' information held by the service can only be accessed using proven authentication methods, such as access using unique usernames and passwords and access confirmation using one-time passwords (OTPs).
“Sars officials will not ask you for information such as ID numbers or tax numbers. Neither will it ask you for your banking details and bank account access details such as PIN numbers or for your eFiling password.
"If a person contacts you claiming to be from Sars, taxpayers are advised to ask them for their contact details — e-mail address (which must be in the format firstname.lastname@example.org) and office telephone numbers.
“Ask the caller to send you an e-mail using their Sars e-mail address. Contact Sars using contact numbers provided on the website and ask to speak to the person who called you.”
Support independent journalism by subscribing to the Sunday Times. Just R20 for the first month.