How to verify a SARS demand or debt-collector message safely
A message about tax debt can be genuine - or it can be an attempt to scare you into paying the wrong account. This guide explains how to check a demand or debt-collector message safely, using contacts and sources you obtain yourself rather than the links inside the message. It does not automatically validate any collector, and it never asks you to share passwords, OTPs or full personal identifiers.
Verify before you pay - using your own contacts
The safest response to any unexpected tax-demand message is to verify it independently before acting. Use the official SARS website and your own records to confirm the debt, the collector and the payment instructions - never the contact details supplied inside the message itself.
Four safety-first checks
Work through these before you respond to or pay anything. Each check uses information you obtain yourself, not details taken from the message.
Do not click links in the message
Do not follow links or open attachments in a suspicious SMS, email or WhatsApp message. Type the official SARS web address into your browser yourself to reach the genuine site.
Use independently obtained contacts
Look up the official SARS contact details from a source you trust - the official SARS website or a printed statement you already hold - not the phone number or email inside the message.
Cross-check against your own records
Compare the amount, tax type and period in the message against your own statement of account and prior correspondence. A genuine demand should match your actual SARS record.
Never share passwords or OTPs
No genuine SARS or collection process requires your eFiling password, one-time PIN, or full banking login. Treat any request for these as a warning sign, not a step to complete.
Confirming a debt collector
SARS may hand debt to third parties for collection. To confirm whether a collector is genuinely acting for SARS, check the official SARS guidance on owing money and the collection process, and confirm any handover against your own statement of account. Do not rely on a name, reference number or letterhead supplied only in the message.
Do not publish complete identifiers: this guide does not ask you to forward full ID numbers, tax numbers, passwords or OTPs to anyone. If a message demands those, treat it as a warning sign. A genuine review begins with a short description of what happened - not a batch of sensitive details.
Verify on the official source: confirm current collection arrangements and payment instructions on the official SARS website before acting on this summary. SARS guidance and approved collectors can change, so an evergreen third-party list is not reproduced here.
Before you pay
Confirm the debt is yours and correct: match the amount, tax type and period to your own statement of account. If the figures do not match, do not pay until the discrepancy is understood. The statement of account guide explains how to read it.
Confirm the payment instructions: verify the approved banking details through the official SARS website, not the banking details in a message. Avoid payments to unverified accounts or to an individual rather than an approved recipient.
Keep a record: retain the message, your verification steps and any payment confirmation. If you have already been contacted by a collector, the debt collector page explains what to check next.
What this guide provides
- Safety-first verification steps using independently obtained contacts.
- Pointers to the statement of account, debt-collector and letter-of-demand routes.
What is not promised
- Automatic validation of any collector. You must confirm independently.
- A request for passwords, OTPs or full personal identifiers. Those are never required.
Questions about verifying a demand
Should I click the message link?
No. Do not follow links or open attachments in an unexpected demand message. Type the official SARS web address into your browser yourself. If the message is genuine, the information will also be visible through your own SARS record and official channels.
Where do I confirm the collector?
Through the official SARS guidance on owing money and the collection process, and by matching the handover against your own statement of account. Do not rely on contact details supplied only inside the message. If you have been contacted by a collector, the debt collector page sets out what to check.
What should I do before paying?
Confirm the debt is yours and the amount is correct against your own records, verify the approved payment instructions through the official SARS website, and keep a record of the message and your verification. If anything does not match, do not pay until it is understood - or contact us for help reviewing it.
Unsure whether a demand is genuine?
A confidential assessment reviews the message against your own SARS record and the official collection process - before you pay. No passwords, OTPs or sensitive documents are required to begin.