- The Tax Ombud’s investigation shows a rise in SARS eFiling account hijackings. Fraudsters are stealing tax refunds and personal information.
- Victims deal with slow responses and poor communication from SARS. They often wait months for a resolution while scammers quickly cash out.
- The Ombud is calling for stronger security, better support for victims, and greater accountability from SARS and partner institutions.
The Office of the Tax Ombud is sounding the alarm that more South Africans are having their SARS eFiling profiles hijacked by fraudsters. This not only costs people money but also brings months of stress and uncertainty. Victims feel helpless and let down by the very systems that are supposed to protect them.
The Ombud’s draft investigation, published on 1 October 2025, shows how criminals break into eFiling accounts, change banking details, and redirect tax refunds. For those caught up in these scams, it’s not just a financial hit but also a deeply personal invasion. Many spend months seeking answers, often with little communication or support.
The investigation began after a wave of complaints from both regular taxpayers and tax practitioners managing accounts for clients. The findings expose how vulnerable the system is to fraud and how slow and inconsistent the recovery process can be.
How are people getting caught?
These hijackings don’t always stem from a single large hack. Instead, scammers use phishing emails, fake calls, stolen logins, and sometimes even insider help to access taxpayer profiles. Once inside, they change personal details, submit false returns, and reroute money into accounts, often opened at digital banks. Most victims only realize what has happened after the money is already gone.
One case in the report speaks of a taxpayer who lost over R23 000 after fraudsters filed false returns in their name. Despite notifying SARS, the refund still went to the scammer because bank details weren’t checked quickly enough. It took seven months for the taxpayer to get their money back, and during that time, updates from SARS were few and far between. Stories like this highlight how damaging the combination of fraud and poor communication can be.
Tax practitioners are also feeling the pressure. When a practitioner’s eFiling profile is hijacked, it can freeze their ability to help numerous clients. Every delay from SARS impacts their business and reputation. The report notes that practitioners are often targeted first, with individual taxpayers not far behind.
What needs to change?
SARS has attempted to improve security with two-factor authentication and one-time PINs for certain changes, but the Ombud believes this is not enough. There are still too many loopholes, and the systems designed to catch fraud often react too late. This leaves victims in limbo, unable to submit returns or claim refunds while scammers benefit from the delays.
The Ombud is advocating for a more people-focused approach. This means not just improved security but also clear communication with victims, including regular updates, honest timelines, and practical support. The report also emphasizes that banks, the Companies and Intellectual Property Commission, and the police all have roles to play. Criminals exploit weak points between these systems, and taxpayers are the ones who suffer.
Rebuilding trust in the tax system
Ultimately, this issue is about trust. The Ombud warns that if people don’t feel safe using eFiling, confidence in the entire tax system could decline. In a country where tax revenue is vital, that poses a significant risk. The report argues that better security, quicker fraud resolution, and more education about digital safety are essential next steps.
The Office of the Tax Ombud is inviting written comments on the draft report regarding eFiling profile hijacking. By welcoming public input, it aims to create a stronger, more effective response that protects taxpayers’ rights and rebuilds trust in South Africa’s tax system.
You can access the draft report directly here. Please forward written comments tocommunications@taxombud.gov.za
Get your news on the go. Click here to follow the Conviction WhatsApp channel.
