It’s that time of the year when our mailboxes are infiltrated by messages from SARS and we start making sums and filling out forms. Unfortunately elusive cyber criminals also know that this is the perfect time to prey on our gullibility.
So it’s most likely that you will be receiving (if you haven’t already) a so-called e-mail from SARS asking you either to verify your information or to let you know that a much-welcomed amount has been paid into your account. (see example below) Don’t get excited – it’s not really SARS.
Clicking on the hyperlink in the email takes you to a fake “e-filing” site that has hyperlinks for the four big South African banks and instructions to log on to your Internet banking site for “confirmation of your details”. When you follow the Nedbank link (as an example), you are taken to a copy of the Nedbank internet banking site that asks for profile, pin and password. Supplying these takes you to a second page that asks you for your mobile number. Submitting information on this page takes you to a page that requests the reference number sent to your cellphone.
Do not authorise any cellphone message that comes through if you end up in the above situation. Furthermore, do not click on any hyperlinks in emails or divulge your account or mobile number details to anyone over the phone or via email. Banks will never ask you to access internet banking through a link in an email, neither will banks ever ask for your mobile number when you access internet banking.
Look out for the following tell-tale signs:
– when you move with your pc’s mouse over the link, it won’t be the official, correct web address
– the e-mail isn’t addressed to you personally – your name isn’t mentioned anywhere
– the address it was sent from is a generic one that doesn’t exist
– there is no reference or account number
– no contact person is mentioned
If you’re unsure, rather go directly to the SARS e-filing web site (type in http://www.sarsefiling.co.za/) and see if there were any payments made to your account.
———————————————————————————————–
From: Sars Efiling <message@sars.co.za>
Date: 30 July 2013 19:37:38 EDT
To: <fakeaddress@sun.ac.za>
Subject: You have a new transaction message
We have filed your return and made a deposit of R3,650.80 into your account.
Confirm your filing
This is an automated email, replies sent to this address will not be received.
Sars eFiling
Dis weer die gevreedse tyd van die jaar wanneer ons posbusse geinfiltreer word deur boodskappe van SARS en ons paniekerig begin sommetjies maak en vorms invul. Ongelukkig besef die bedrieglike kuberkriminele ook dat dit die perfekte tyd is om misbruik te maak van mense se goedgelowigheid.
Die kans is dus goed dat jy binnekort (indien jy nie reeds het nie) `n sogenaamde e-pos van SARS sal ontvang wat jou vra om jou inligting te verifieer of om jou te laat weet dat daar vir jou `n gawe bedraggie in jou rekening inbetaal is. (sien voorbeeld onder) Moenie opgewonde raak nie – dis nie SARS nie.
As jy kliek op die skakel, neem die e-pos jou waarskynlik na `n vals “e-filing” webwerf wat skakels het na vier groot Suid-Afrikaanse banke en instruksies om aan te teken op deur middel van internet bankdienste om jou details te “bevestig”.
As jy (byvoorbeeld) die Nedbank-skakel volg, word jy geneem na `n kopie van nie Nedbank internetdienste webwerf wat vra vir jou profiel, pin en wagwoord. As jy hierdie inligting verskaf, word jy geneem na `n tweede blad waar daar vir jou selnommer gevra word. Deur die inligting te verskaf, word jy weereens na `n volgende blad geneem wat versoek dat die verwysingsnommer na jou selfoon gestuur word.
Moet onder geen omstandighede enige magtiging gee per selfoonboodskap as jy in bogenoemde situasie beland nie. Moet ook nie kliek op enige skakels in e-posse of rekeningbesonderhede of selfoonnommer-details aan enigiemand verskaf per e-pos of telefonies nie.
Kyk uit vir die volgende:
– as jy met jou rekenaar se muis oor die skakel beweeg en dis nie die amptelike adres nie.
– die e-pos is nie aan jou geaddresseer nie – maw jou naam word nerens in die e-pos genoem nie.
– die adres waarvan dit gestuur het, is `n generiese adres wat nie bestaan nie.
– daar is geen verwysings- of rekeningnommer nie.
– geen kontakpersoon word genoem nie.
Indien jy twyfel, gaan eerder na SARS se eie e-filing webwerf (tik http://www.sarsefiling.co.za/ in) en gaan kyk of daar inderdaad vir jou ‘n inbetaling is.
———————————————————————————————–
From: Sars Efiling < message@sars.co.za>
Date: 30 July 2013 19:37:38 EDT
To: @sun.ac.za>
Subject: You have a new transaction message
We have filed your return and made a deposit of R3,650.80 into your account.
Confirm your filing
This is an automated email, replies sent to this address will not be received.
Sars eFiling
