The South African Revenue Service (SARS) and the Office of the Tax Ombud (OTO) have raised concerns over growing reports of hijacked eFiling profiles, saying they are working together to protect taxpayers and safeguard the integrity of South Africa’s tax system.
In a joint statement on Friday, the two institutions responded to a recent Sowetan article highlighting a spike in cybercriminals targeting taxpayer accounts, often resulting in financial losses and identity theft.
They stressed that while the OTO’s draft report on compromised taxpayer profiles has not yet been released, it will be published for public comment on 1 October 2025, following “extensive engagement with all stakeholders.”
Distinct but Complementary Roles
SARS and the OTO underscored that although they have different mandates, both institutions play a mutually reinforcing role in South Africa’s tax administration.
“SARS not only respects but considers the role of the OTO as an indispensable partner to ensure the functioning of the tax ecosystem is fair and beyond reproach. In this regard SARS has and continues to work hard to address whatever complaints that have been laid with the OTO,” the statement said.
The two bodies described themselves as the cornerstone of South Africa’s fiscal integrity, saying they remain committed to working collaboratively to ensure fairness and security in tax administration.
Rising Cybercrime Threats
The OTO confirmed it has been investigating compromised eFiling profiles for more than a year after receiving numerous complaints from both taxpayers and practitioners.
“In today’s digitally interconnected environment, cybersecurity risks have escalated dramatically. Malicious actors exploit vulnerabilities in authentication protocols, data-sharing mechanisms, and user behaviour to perpetrate identity theft, fraud, and unauthorised system access,” the statement noted.
It added that SARS, as the custodian of revenue collection and refunds payment, is a prime target for cybercriminals seeking to exploit weaknesses in online systems.
Strengthened Security and Cooperation
SARS said it continues to roll out enhanced security protocols to mitigate cyber risks and urged taxpayers to:
- safeguard their login details,
- avoid sharing credentials, and
- report suspicious activity via official SARS channels.
The OTO’s draft report has been delayed to allow SARS to provide input on preliminary findings. Both institutions said this consultative process will help ensure a comprehensive and balanced analysis, even if “areas of difference” remain.
Commitment to Taxpayers
SARS Commissioner Edward Kieswetter reassured taxpayers that the organisation is working diligently to restore confidence in its digital platforms.
“The public must be assured that SARS continues to work with diligence to ensure the highest level of integrity and protection for taxpayers using the SARS digital platform,” Kieswetter said.
The Tax Ombud added that the hijacking of eFiling profiles is taken “very seriously” and promised practical solutions in its upcoming report.
“As an independent institution, the OTO ensures objective oversight and the fair treatment of taxpayers. The draft report reflects extensive stakeholder engagement and is aimed at driving real, practical solutions,” the OTO said.
