A message saying “SARS refund pending” can look convincing during the 2026 filing season. It may use the SARS name, a tax reference number and a link that appears to lead to eFiling. Treat unexpected refund messages as suspicious until you verify them inside an official SARS channel.
What SARS will never ask for
SARS says it will never request your eFiling password, one-time PIN, banking PIN or login credentials through email, SMS, social media or telephone. SARS also warns taxpayers not to provide banking details through an unsolicited message.
Read the current SARS scams and phishing warnings before responding to any tax-season message. The list includes fake refund notices, settlement notifications, audit messages and demands for payment.
Five signs the message is fake
- It creates panic by saying your refund will be cancelled today.
- It asks for an OTP, password, banking PIN or card details.
- It sends you to a shortened or unfamiliar web address.
- It asks you to pay a release fee into a personal bank account.
- It contains an attachment, especially an HTML file, or uses poor spelling and unusual formatting.
SARS’s official digital services are accessed by opening eFiling, the SARS MobiApp, the SARS website or the verified WhatsApp number yourself. A genuine refund status does not require a private agent to unlock it.
What to do if you clicked
Do not enter further information. Close the page, change your eFiling password from the official site and contact your bank immediately if you entered banking credentials or card details. Ask the bank to secure the account and watch for unauthorised transactions.
Keep screenshots and the sender details. Report the incident through SARS’s official scam-reporting route and your bank’s fraud channel. If you lost money, report it to the South African Police Service as well.
How to verify a real refund
Open eFiling or use SARS WhatsApp on 0800 11 7277. You can also check through the MobiApp or *134*7277#. CodeCash’s guide on spotting phishing scams covers the same safety habits for banking messages.