SARS Warns of Tax Refund Phishing E-mail

According to the reports published in The Independent on December 29, 2009, an e-mail posing as a message from the SARS (South African Revenue Services) is circulating to capture people's banking information through a practice called 'Phishing.'

The e-mail has used a SARS letterhead as well as shows genuine web-links. It notifies the recipient that he is entitled to receive tax reimbursement of about a R3 482.50. The text of the e-mail provides a web-link where the user is asked to apply for the tax refund. Meanwhile, the address from where the e-mail appears, though seems to be of SARS, is actually phony.

The link leads the user to a copycat of the actual SARS website and exhibits some bank logos such as First National Bank, Absa, Nedbank and Standard Bank. Users are requested that they hit the suitable web-link, but it redirects them to a fake banking page, which asks for passwords and account numbers to get the refund.

Adrian Lackay, SARS Spokesman, said the basic structure of the e-mail was same as a typical scam e-mail. Lackay added that the SARS would always deposit money straight into the taxpayer's bank account for which there wasn't any need to reveal private banking details, as reported by The Independent on December 29, 2009.

Thus, the security researchers advise that if any user receives the above type of e-mail, he should delete it instantly. He should inform his friends about the scam so that they too remain protected while doing net-banking.

To foil phishers' attacks, net-banking users should be especially watchful. They should remain very cautious against e-mails that have a different-from-standard formatting, spelling or grammatical errors, or poor English. It is safe to go directly to the website and always confirm the numbers for customer service from the actual website, the specialists add.

Eventually, phishers have not just targeted SARS. In the US, the Internal Revenue Service reports that it is still getting complaints from people receiving fraudulent e-mails, which while pretending to be IRS messages, actually direct them to reply with personal details for the receipt of a so-called tax re-imbursement.

Related article: Surge in Spam attack

» SPAMfighter News - 1/6/2010