South Africa's tax administration has changed more in the past decade than in the four decades before it. What was once a largely paper-based, reactive system has been transformed into a data-rich, algorithmically enhanced compliance environment. SARS now receives financial data from hundreds of third-party sources before a single taxpayer files a return. It pre-populates assessments with information it already holds. It cross-references declared income against lifestyle indicators, property registrations, vehicle purchases, and banking data. The era of the information gap between the taxpayer and the tax authority is effectively over.
This is not an abstract threat. It is the operating environment in which every South African taxpayer now exists. Understanding how SARS operates in the modern era is not paranoia. It is basic financial literacy.
Third-Party Data and the Pre-Assessment Process
SARS receives third-party data from financial institutions, medical scheme administrators, retirement fund administrators, employers, and other government departments. This data is used to pre-populate individual income tax returns through the auto-assessment system and to identify discrepancies where declared income does not match the information SARS already holds. For the 2024 tax year, SARS auto-assessed more than three million taxpayers without requiring them to file a return. For those whose affairs were more complex, accepting an auto-assessment based on incomplete third-party data may have resulted in an incorrect tax liability.
SARS does not publicly disclose the exact criteria used to select cases for review or audit. But the patterns are well understood by practitioners who work in the space. Material discrepancies between declared income and lifestyle indicators are among the primary triggers. Owning property, driving an expensive vehicle, or taking significant foreign travel while declaring minimal income creates an incongruence that algorithmic risk-scoring is specifically designed to identify.
For businesses, the triggers are different. Unusually low effective tax rates for an industry, consistently claiming VAT refunds, large unexplained year-on-year variations in revenue or expenses, and sector-level benchmarking comparisons all form part of SARS's risk assessment framework. An audit does not necessarily mean wrongdoing has occurred. But it does require that every position taken can be substantiated with documentation.
For taxpayers with undisclosed income or errors in prior years, the Voluntary Disclosure Programme offers a structured path to regularising their tax affairs with reduced penalties and protection from criminal prosecution in most circumstances. The VDP is available for both individuals and companies and covers income tax, VAT, PAYE, and customs and excise. The key requirements are that the disclosure must be voluntary, it must be complete covering all periods and all obligations, and it must involve full payment of the underlying tax and a negotiated portion of interest. Partial or incomplete disclosures are rejected and may actually trigger the audit process they were intended to avoid.
The most effective defence against a SARS audit is not sophisticated tax structuring. It is documentation. Invoices, contracts, bank statements, travel logbooks, proof of business purpose for entertainment expenses, and supporting schedules for all deductions claimed should be maintained for a minimum of five years. SARS is legally entitled to request records going back this far. An audit conducted on five-year-old transactions where the supporting documentation has been discarded or lost will, in almost every case, result in disallowance of the relevant deductions and the imposition of understatement penalties.
The practical implication of SARS's modernised data infrastructure is that the cost of non-compliance has increased substantially. The probability of detection is higher, the penalty framework is more aggressive for repeat or deliberate offenders, and the process of resolving disputes is time-consuming and expensive. For taxpayers who are already substantially compliant, the new environment is largely benign. It simply requires that the same care taken in structuring affairs be extended to documenting them. For those who have relied historically on the practical difficulty of SARS detecting discrepancies, the calculus has changed fundamentally.