1 October 2025 — The South African Revenue Service (SARS) notes the publication of the Office of the Tax Ombudsman’s (OTO) draft report, for public comment, on cases of eFiling profile compromise.
While SARS notes the OTO’s recommendations, the organisation would like to assure taxpayers that most of these have been integral to the modernisation programme over a number of years. SARS remains committed to strengthening the critical areas that have been highlighted. These include enhancing its authentication protocols; improving fraud-risk detection; optimising refund-verification systems; and strengthening collaboration with banks, the Companies and Intellectual Property Commission (CIPC), and South African Police Service (SAPS).
SARS believes that OTO plays a crucial role in the tax ecosystem and safeguarding and promoting tax and fiscal system for the country. Promotion of cooperation between these vital institutions, SARS and OTO, is critical for the functioning of the tax system. In this regard, SARS will be making inputs into the draft report like all other interested parties. Additionally, SARS believes its constructive contribution will help to continue to deepen confidence to all taxpayers that its electronic platforms are secure and safe for engagement with the organisation.
SARS acknowledges that cybercrime is an evolving and growing risk, requiring significant and ongoing investment into modernisation of its tax administration platform as included in its current 5-year strategic plan. Many of the recommendations in the OTO report have already begun and will be continually reviewed and enhanced as the goal posts shift. These are intended to strengthen our security layer, and this was occasioned by our concerns about the evolving nature of cybercrime. As an organisation that is operating in a rapidly changing technologically environment, SARS continuously reviews strategic risks, so that it can react to these changes and stay ahead of the curve. SARS will be sharing these insights with the OTO.
SARS believes that any compromised profile is one too many. All role players must play their part to prevent criminals from accessing taxpayers’ information. It is worth repeating that taxpayers must keep their confidential details safe and never exposed to unauthorised individuals. Taxpayers must use secure internet platforms to access electronic services such as eFiling. SARS will never ask taxpayers to click any link to access its services.
For further information, please contact [email protected].
