Reaches you by sms · Public web warning · 08 Oct
Nedbank’s SARS scam alert describes fake SMS or email messages claiming to process an income tax refund; links lead to a fake eFiling site with bank links, then to a fake Nedbank login page that requests Nedbank ID credentials and an Approve-it or OTP.
Fake SARS refund SMS/email directs users to a fake eFiling page and then fake Nedbank login, harvesting banking credentials and OTP/Approve-it approval.
Different pages, same playbook — matched by what they do, not just the brand.
SARS warns of spoofed emails made to look like SARS refund messages, including messages that direct taxpayers to false forms and fake websites to capture bank account details. No specific phishing URL was visible in the source excerpt.
SARS’s scams and phishing page, crawled on 2026-10-06, warns taxpayers that SARS will never request passwords, OTPs, banking PINs or eFiling credentials through email, SMS, social media or telephone. SARS lists recent scam examples such as fake High Court summonses and assessment notices, and describes spoofed emails that claim refunds and lead to fake forms/websites collecting banking and tax details.