This Halloween, Stay Safe From eFiling Profile Hijackings

Gerrit Weideman • October 7, 2025

“Profile hijacking points to pervasive cybercrime with global links.” (Edward Kieswetter, SARS Commissioner)

The Tax Ombud has again warned South Africans about the concerning increase in eFiling profile hijackings, which has spurred the Office of the Tax Ombud (OTO) to launch a survey of taxpayers' experiences and a systemic investigation into SARS. 


What is eFiling profile hijacking? 

eFiling profile hijacking involves cybercriminals gaining unauthorised access to taxpayers' SARS eFiling accounts. Once inside, they change the security details and banking information, and submit fraudulent tax returns to redirect the refunds into their own accounts. 

Methods such as SIM swaps and phishing are commonly employed to get access to taxpayers’ eFiling profiles. Using calls and fraudulent SARS text messages, emails and letters of demand, scammers pose as SARS officials or tax advisors, often pretending to want to assist taxpayers to get their SARS refunds.

Concerns have also been raised about possible internal fraud and insider involvement at SARS and certain banks.


SARS systemic investigation

While SARS acknowledges the rise in eFiling profile hijackings, it emphasises that although individual profiles have been compromised, the SARS system itself has not been breached.

SARS adds that additional security measures have been implemented and that it is collaborating with financial institutions and the OTO to combat the scourge of profile hijacking.


How to safeguard your eFiling profile

SARS has issued the following advice:

  • Avoid sharing your eFiling login details. SARS will never request OTPs, passwords or bank details via calls, emails or text messages.
  • Use strong and unique passwords and update them regularly.
  • Enable two-factor authentication for an additional layer of security.
  • Regularly check your eFiling profile and submitted returns for any unauthorised changes.
  • Verify your bank account on eFiling before a refund is paid, even if there was no change to the banking details.
  • If you suspect your profile has been hijacked, change your login credentials promptly using another device, and report it immediately to SARS and to the SAPS as an identity theft case.

Rely on the expertise of a SARS registered tax practitioner such as ourselves.


How we help keep your eFiling profile safe

As your accounting and tax partner, we help you keep your eFiling profile safe by, for example, keeping abreast of all the latest scams, validating the status of your tax affairs and any SARS enquiries or requests, and by using only official channels for interacting with SARS, especially when making payments.

If you are concerned about the security of your SARS eFiling profile, or if you have been contacted by anyone offering assistance to obtain a SARS refund, contact us immediately.

We are the ally you need in the fight against profile hijacking.


By Gerrit Weideman October 7, 2025
07 October – Monthly Pay-As-You-Earn (PAYE) submissions and payments 20 October – End of Filing Season 2025 for Individual taxpayers 24 October – Value-Added Tax (VAT) manual submissions and payments 30 October – Excise Duty payments 31 October – VAT electronic submissions and payments and CIT Provisional Tax payments.
By Gerrit Weideman October 7, 2025
“Accounting is the language of business.” (Warren Buffett) Increasingly, banks and other organisations are requiring businesses to submit up-to-date management accounts when applying for finance. This is because these compact financial reports enable business analysis even when the latest annual financial statements are not yet available. Management accounts also offer owners and managers timely, accurate and actionable financial insights that facilitate performance evaluation, smart management decisions and informed planning – all of which can transform how your business operates and grows. What are management accounts? Management accounts are a set of summarised financial reports. They’re similar to annual financial statements but they aren’t as formal, and they’re produced much more frequently – usually monthly or quarterly. They’re all about providing relevant financial data for informed business decision-making. As such, there’s no fixed format. Instead, management accounts should summarise and combine the financial reports you need to make smarter decisions. These financial reports might include some or all of the following.
By Gerrit Weideman October 7, 2025
“Taking bold action on climate change simply makes good business sense. It's also the right thing to do for people and the planet.” (Richard Branson) Climate change impacts the fundamentals of business operations. Rising heat affects productivity, floods and storms damage infrastructure, droughts disrupt supply chains, and new regulations increase compliance costs. Many leaders still believe their sector will be spared, but no industry is truly insulated. Just as one-third of startups fail because they never properly defined their target market, businesses that fail to assess climate risks may find their models undermined by forces beyond their control. The message is clear: failing to future-proof your business, will result in extremely hard times ahead. Start with the risks you’re facing The first step is to identify which climate risks could most directly affect your operations. These can be physical (think floods, wildfires, and extreme temperatures), or transitional, such as regulatory changes and shifts in customer expectations. According to the latest prediction models, South Africans can expect a hotter, more erratic climate with the country warming at about twice the global average. This means more very hot days that will hurt worker productivity and equipment reliability. On top of this, the country is also experiencing heavier downpours with increased flood damage. These damaging floods, such as those seen KwaZulu-Natal in April 2022 and the Western Cape in September 2023, will result in enormous insurance and economic losses and prolonged business disruption. Despite the flooding, the country is also not in the clear when it comes to water stress. The 2015–2018 Cape Town “Day Zero” drought was devastating for car wash businesses but a boon for borehole drillers. Day Zero may have been avoided, but there will be more droughts in the future. All of these issues can lead to stock and agriculture failures, infrastructure collapse and process interruptions. A lack of water, for example, creates cleaning and hygiene issues as well as lower staff productivity. Insurers in SA have been reporting increasing weather losses and rising catastrophe claims, which will continue to feed through to higher premiums and excesses and tougher underwriting in high-risk zones. You can only build a realistic plan once you understand exactly where your exposures lie. Build a climate profile for your business Once you understand the risk categories, create a profile detailing how they intersect with your company. You need to consider your location, your sector, your suppliers and your employees. A warehouse on a floodplain carries different risks from a retail store in a heat-stressed city. Manufacturing firms may depend on inputs that are vulnerable to drought or fire, and employees may struggle in adverse weather conditions. Many exposures sit within the supply chain, where a small disruption upstream can ripple through global markets. For example, higher than usual temperatures may result in crops failing, or greater costs for HVAC and cold logistics services. Have you factored in these costs being passed on to your business? This profile should be updated regularly, as conditions, regulations, and technologies evolve and more is learnt about the severity of future weather patterns. Segment your strategy Not every part of your business will need the same response. While operations may require investments in resilient infrastructure or more efficient energy use, supply chains might need diversification or tighter contracts with suppliers to ensure continuity. Products and services may need to change as customers shift their preferences toward sustainable options. Segmenting your approach enables you to focus on the areas that matter most. Use data to drive decisions Climate planning is most effective when it’s based on evidence rather than assumptions. It is vital that any planning you do is based on the data from climate models, insurance assessments, and financial analyses. Tracking information like rising temperatures, energy costs, and new compliance regulations will turn climate risk from an abstract concern into a measurable factor in your strategy. In South Africa, municipal climate plans are being adjusted to redraw floodplain rules and heat-safety requirements. Is your business going to even be compliant when they come in? Talk to your stakeholders Your customers, employees, suppliers, and investors are able to offer different perspectives that could keep you ahead of any climate disasters. Customers can tell you what matters most in their purchasing decisions, employees may note practical changes to streamline daily operations and suppliers can share concerns that could highlight problems you had not foreseen. Talking to all of your stakeholders is more important than it’s ever been. Climate planning is an ongoing process Preparing for climate change is not something you can set and forget. It requires regular review and adjustment as risks, regulations, and technologies change. Businesses that take structured action now don’t just reduce their exposure – they’ll also become more attractive to capital investment and build long-term resilience. Climate change is already reshaping the way companies operate. The question is no longer whether it will affect your business but whether you are ready to respond. Speak to us if you need help allocating budget for climate resilience strategies.
More Posts