Online Scams X: "SARS eFiling EMP Statement" Scam
You get an email:
From: South
African Revenue Service (SARS) [mailto:ivan@wchn.com.tw]
Sent: 30 April
2019 11:47
To: Recipients
Subject: SARS eFiling EMP
Statement of Account Issued
Dear Tax Payer,
An EMP Statement of Account for the tax payer listed below
has been issued by SARS.
Click here to
Download your documents, fill it and send back for urgent
release.
EMP Statement for Period 01/04/2019 -30/04/2019
Best Regards
The SARS eFiling Team
https://www.SARS.eFiling.co.za
OR:
From: noreply@sars.gov.za
[mailto:noreply@sars.gov.za]
Sent: 12 March
2019 10:10
To: info@megaplex.co.za
Subject: SARS eFiling EMP
Statement of Account Issued
Dear Mr RI Raubenheimer
An EMP Statement of Account for the tax payer listed below
has been issued by SARS.
Please log into the SARS eFiling system, and navigate to the
EMP 201 Work Page to view it.
* 725171860 - MEGAPLEX CC - EMPSA for Period 2018/03/01 -
2019/02/28
If you have any queries please contact our helpdesk on 0800
00 SARS (7277).
Best Regards
The SARS eFiling Team
http://www.sarsefiling.co.za
OK, so which one is the
scam? (Hint: No, "SARS
is the biggest criminal syndicate in South Africa, so they
are both scams"
is not the correct answer)
Think a bit before you scroll down...
There is no doubt that the scammers are getting more
authentic.
However, you can still tell that the top one is the scam by
looking at it carefully:
-
It allegedly comes from ivan@wchn.com.tw (Taiwan) – the
genuine one comes from noreply@sars.gov.za
-
It has a helpful link for you to click on (if you hover
your pointer over the link, notice that it goes to http://www.miniawy.com/wp-content/...//document/PDF/)
–hardly anything to do with SARS (the https:// link at
the end also goes there)
-
The genuine email, on the other hand, tells you to
laboriously "log into the SARS eFiling system, and
navigate to the EMP 201 Work Page to view it", something
that even trained SARS helpdesk agents fail to manage!
-
The entire scam email is underlined, whereas the real
one is in blue.
-
The scam is sent to "Recipients", where the real one has
your email address.
-
The scam addresses you as "Dear Tax Payer", the real one
has your name.
-
The scam refers to "An EMP Statement ... for the tax
payer listed below", but then, strangely, never lists
the tax payer!
If you correctly identified the scam, well done! We could
say that if the sender makes things easy for us (reply
address, link to click on) then it's probably a scam,
whereas if they make it as difficult as possible (noreply@; find
the letter yourself in the eFiling labyrinth) then that
looks like the SARS we know! But perhaps that's a little
cynical!