SARS Addresses Concerns Over Taxpayer Profile Hijacking and Reinforces Cybersecurity Measures

In the wake of recent media reports on taxpayer profile hijacking, the South African Revenue Service (SARS) has publicly addressed the issue, clarifying its position and efforts to counter such criminal activities. The statement comes after a Sunday Times article outlined a case where a taxpayer’s profile was unlawfully accessed and manipulated.

SARS Commissioner Edward Kieswetter dispelled concerns by stating that the investigation found no negligence on SARS's part. With advanced, user-centric systems in place, SARS maintains stringent oversight and control over taxpayer transactions, ensuring the confidentiality and security of personal and financial information.

The commissioner emphasized that SARS cannot be held responsible for the criminal hijacking reported, highlighting the broader challenges posed by organized cybercrime. In response to these challenges, SARS has significantly invested in its technological infrastructure, adopting stringent cybersecurity measures such as Multi-factor Authentication, improved password protocols, and biometric authentication, thus fortifying its defenses against the evolving sophistication of cybercrime.

Kieswetter also underscored that the restoration of public trust is essential, particularly after the period of "state capture," which saw a decline in confidence in the organization. The strides taken by SARS in recent years have been toward regaining this trust and the incident of profile hijacking does not detract from the progress made.

The Office of Tax Ombudsman (OTO) is conducting its investigation into these incidents, and SARS has welcomed this probe, committing to full cooperation. The recommendations from the OTO’s review are anticipated to further SARS's strategies in preventing and managing the risks associated with profile hijacking.

Moreover, SARS is reviewing its authorization processes related to the updating of banking details and is engaging closely with banking institutions to address potential vulnerabilities.

Through these concerted efforts, SARS aims to enhance its service offerings, providing a secure platform for taxpayers to fulfil their legal requirements, while actively working to safeguard the system against the perils of cybercrime.