emails doing the rounds re: SARS refunds - SPAM?

[Imp]

Hi
I have received 3 emails in as many days from what seem like banking email addresses, stating that SARS need you to follow a link to either verify a refund or payment. I think they are spam. Does anyone know?
Thank you

[Newretailer]

SPAM!!! Do not follow any links in emails. Ever. They are getting more and more clever. They now send many spams with nothing in the title or message, or send it from a "customer service" address.

[Dave A]

It's probably worse than spam - it's usually phishing. They're after your online banking log in details.

Some even go to the effort of setting you up for a confirmation SMS from your bank.

[Savyra]

That's a coincidence. I just got one of those too. With a reproachful subject heading stating this was the third time they've contacted me.

[Rafael]

Dont open link, they after your banking details,
If you ever need to confirm just call SARS on 0800 00 7277

[Dave A]

I got what looks like a phishing attempt yesterday (and so did my wife).

Good Day

We have attached to this email your tax report please download immediately and confirm is up to date.

The Electronic Tax Payment System® tax payment service is provided free by the South African Tax Department of the Treasury. After you've enrolled and received your credentials, you can pay any tax due to the Internal Revenue Service (IRS) using this system.

The National Treasury and SARS jointly publish tax statistics annually. These aggregated statistics are compiled from SARS’s registers of taxpayers and from tax returns. These statistics complement other published social and economic data. The statistics are finding wide use within government, business, academia and non-governmental organizations.

We welcome feedback on the publications and their use. Please email us on taxtatistics@sars.gov.za.

Thank You.
Boriana Hristova

SARS

The fascinating part is the sender is entirely traceable when I dig into the email header - a student at Wits University.

[Danielle MM]

I have gotten emails from clients asking me the same thing - they have even received "account verification" emails from "SARS".. something to look out for is odd email addresses, it will usually be missing a digit like the "a" in the ".co.za", or it will have an additional digit like "@SARS2.co.za". Just block these email addresses, never click on any links, and never give away personal information!

[CLIVE-TRIANGLE]

I got what looks like a phishing attempt yesterday (and so did my wife).


The fascinating part is the sender is entirely traceable when I dig into the email header - a student at Wits University.

Mine even included the Wits disclaimer and footer