Common Red Flags That Trigger SARS Audits in South Africa

In South Africa, correctly managing your personal tax obligations is essential to remain compliant and reduce the risk of audits, penalties, and disputes with the South African Revenue Service (SARS). With increased use of data matching, third-party reporting, and automated risk profiling, SARS expects a high level of accuracy and transparency from individual taxpayers, including salaried employees, provisional taxpayers, freelancers, sole proprietors, and crypto traders. Below we take a look at the common red flags that trigger SARS audits.

One of the most common audit triggers is a mismatch between income declared by the taxpayer and information received by SARS from third parties. SARS receives data from:

• Employers (IRP5/IT3(a))
• Banks and investment institutions (IT3(b), IT3(c), IT3(s))
• Medical schemes
• Retirement funds
• Crypto asset service providers (both local and offshore)

Common problem areas include:

• Omitting secondary or irregular income (bonuses, commissions, freelance work)
• Failing to declare foreign income
• Not disclosing interest earned across multiple bank accounts
• Under‑reporting crypto trading profits while SARS has third‑party data

Even small discrepancies can trigger a verification, particularly if they occur repeatedly or across multiple tax years.

Provisional taxpayers are a high‑risk group for audits due to the reliance on estimates rather than fixed payroll data. This includes freelancers, sole proprietors, and individuals earning income not subject to PAYE.

Red flags include:

• Consistently underestimating taxable income
• Submitting provisional tax returns that differ significantly from final assessed income
• Not submitting provisional tax returns at all
• Large year‑end tax liabilities relative to provisional payments made

SARS closely monitors whether estimates are “reasonable” based on prior years, lifestyle indicators, and third‑party data. Underestimating income to manage cash flow often leads to penalties and interest.

While deductions are a legitimate way to reduce taxable income, SARS places a strong emphasis on substantiation.

Common deduction‑related audit triggers:

• Claiming home office deductions without meeting the strict requirements
• Inflated travel or vehicle claims
• Repeatedly claiming losses from freelance or sole proprietor activities
• Claiming expenses that are personal rather than income‑producing

Taxpayers often struggle to distinguish between allowable and non‑allowable expenses, particularly where personal and business use overlap.

Typical documents SARS may request:

• Invoices and receipts
• Logbooks (especially for travel claims)
• Proof of payment
• Lease agreements or floor plans for home office claims

Crypto taxation remains one of the fastest‑growing audit focus areas for SARS. Many taxpayers incorrectly assume that crypto activity is anonymous or not visible to SARS.

High‑risk crypto red flags include:

• Not declaring crypto disposals at all
• Declaring only cash withdrawals and not trades or swaps
• Misclassifying trading income as capital gains (or vice versa)
• Failing to account for foreign exchanges and wallets
• Incomplete or inaccurate transaction histories

SARS expects full disclosure of crypto activity, including:

• Trades, swaps, and disposals
• Crypto‑to‑crypto transactions
• Mining, staking, and airdrop income
• Foreign‑sourced crypto income

The most common struggle is accurate reconciliation of thousands of transactions across multiple platforms.

SARS uses lifestyle audits to identify cases where a taxpayer’s standard of living appears inconsistent with their declared income.

Indicators may include:

• High‑value assets (property, vehicles) with relatively low taxable income
• Significant discretionary spending
• Large capital movements through bank accounts
• Frequent foreign travel

These audits often lead to requests for source‑of‑funds explanations, which can be difficult to reconstruct without proper historical records.

Repeated late filings, outstanding returns, or historical non‑compliance significantly increase audit risk.

Common issues:

• Missing tax returns for prior years
• Late submission of income tax or provisional tax returns
• Ignoring SARS correspondence
• Not responding fully to verification requests

SARS views consistent compliance behaviour as a risk indicator, and poor compliance history often results in closer scrutiny going forward. 

Engaging a tax professional is not only for audits or disputes. It is often most effective when done early.

 You should consider professional support if:

• You are a provisional taxpayer with variable income
• You earn income from multiple sources
• You trade or invest in crypto assets
• You have foreign income or offshore accounts
• You have received a SARS verification or audit notice
• You are unsure whether income should be treated as capital or revenue

A suitable tax advisor for individuals and crypto traders should offer:

• Strong understanding of South African income and provisional tax
• Practical experience with SARS audits and verifications
• Clear crypto tax reconciliation and reporting methodology
• Transparent processes and documentation standards
• Ongoing compliance support, not only annual submissions

Q1: Does SARS really track crypto transactions?
A1: Yes. SARS uses data from local and international exchanges, as well as international information‑sharing agreements. Non‑disclosure is a significant audit trigger.

Q2: Can I fix mistakes from previous tax years?
A2: In many cases, yes. Corrections can often be made through revised submissions or voluntary disclosure, depending on the circumstances.

Q3. Are freelancers treated differently from salaried employees?
A3. Yes. Freelancers and sole proprietors are typically provisional taxpayers and carry higher compliance and audit risk due to self‑reported income.

Q4. What happens if I cannot provide documents during an audit?
A4. If documentation is missing, SARS may disallow deductions or raise additional assessments. This often results in higher tax, penalties, and interest.

Q5. How long should I keep my tax records?
A5. SARS generally requires records to be kept for at least five years, but longer retention is advisable for complex matters such as crypto activity.

SARS audits are often triggered by small inconsistencies rather than deliberate mistakes. As data matching and third-party reporting continue to expand, accurate reporting, proper record-keeping, and full disclosure of all income sources have become more important than ever.

Taking a proactive approach to compliance – especially for provisional taxpayers, freelancers, and crypto traders – can significantly reduce the risk of audits, penalties, and unnecessary disputes with SARS.

Need Expert Help?

You are welcome to book a call if you want us to consult on your specific circumstances or complete your calculation and return on your behalf.

You can also email us at info@chconsulting.co.za if you have any questions; or check out our Google Reviews to see what other customers have experienced when working with us.