Festive Season Cybercrime Alert: Tips from SARS

“Cyber Attack: An attack, via cyberspace, targeting an enterprise’s use of cyberspace for the purpose of disrupting, disabling, destroying, or maliciously controlling a computing environment/infrastructure; or destroying the integrity of the data or stealing controlled information.” (CSRC – Computer Security Resource Center)

 

South African businesses, already facing significant risk of cyberattacks, have been warned to step up their cybersecurity as the festive season is expected to see significantly more and increasingly sophisticated cyberattacks. Below are listed some of the common types of cyberattacks.

Common cyberattacks

  • Phishing (random fraudulent emails), spear phishing (emails targeting specific people or companies), vishing (voice phishing) and smishing (SMS phishing) – these all refer to fraudulent communications that appear to come from a reputable source, such as a bank or a government organisation, with the aim of tricking employees or individuals to share data, pay money to criminals or download malware.
  • Malware – including viruses, worms, trojans, spyware, rootkits – typically used to breach a network when a user clicks a link or an email attachment from an apparently trusted source that then installs risky software.
  • Ransomware attacks – ransomware infects networks and encrypts or locks data, allowing attackers to demand a ransom for unlocking or releasing the data.
  • Hacking – including distributed denial-of-service attacks (DDoS) and keylogging.
  • Man-in-the-middle (MitM) or eavesdropping attacks in which attackers insert themselves between a user’s device and a network to filter and steal data, commonly through unsecure public Wi-Fi and compromised devices.

SARS: a favourite cyberattack ruse

SARS says that there is a steady increase in scams and attacks in which the SARS brand is abused, via the Internet, emails, spoofed websites, SMSes, unsolicited telephone calls and even social networking sites such as Facebook, Twitter and others.

A firm criminal favourite are phishing scams involving false “spoofed” emails made to look as if they were sent by SARS. These fraudulent emails contain links to fake forms and malicious websites purporting to be authentic and lure unsuspecting taxpayers to disclose private and confidential information such as bank account details. Examples include emails that appear to be from “returns @sars.co.za” or “refunds @sars.co.za”  indicating that taxpayers are eligible to receive tax refunds.

The latest scams involve smishing, which is phishing via SMSs, and vishing which most recently involves taxpayers being called by a person purporting to be a SARS employee to inform them that SARS owes them money.

Another common cyberattack approach involves refund scams in which identity thieves use a legitimate taxpayer’s identity to file a tax return and claim a refund fraudulently. Yet another threat involves cybercriminals using personal or company information to change the banking details on the taxpayers’ SARS profiles.

A further version involves criminals purporting to be SARS auditors or employees contacting businesses using all the means described above to inform taxpayers that they are under investigation and that an audit will be conducted.

SARS Tips for Improved Cybersecurity

  • Do not open or respond to emails from unknown sources and beware of false SMSes.
  • Be suspicious of emails and/or SMSes that request personal, tax, banking and eFiling details.
  • SARS will not request your banking details, login credentials, passwords, pins, credit/debit card information, or other confidential information by phone, SMS, email or websites.
  • SARS will never notify you about refunds by telephone, SMS or email.
  • Immediately report a notice or letter from SARS that states:
    • More than one tax return has been filed in your name
    • You have a balance due, refund offset or have had collection actions taken against you for a year in which you did not file a tax return
    • SARS records indicate you received a salary from an employer that you don’t work for
    • there has been a payment error or incorrect refund requiring you to deposit the “overpayment” into a bank account.

Speak to your accountant first!

It is easy for criminals to dupe unsuspecting taxpayers, and yet, at the same time, taxpayers should never simply dismiss or ignore a notice or demand from SARS as a scam.

The best line of defence against cyberattacks that misuse the SARS brand is to get advice before taking any action. If you suspect the legality of a particular communication or believe you have been contacted by a fake SARS representative, immediately contact your accountant, who will be able to verify the communication or report suspicious activity for you.

This will ensure that you never fail to respond timeously and correctly to legitimate SARS communications, while also safeguarding you from becoming a victim of a cyberattack, especially during the upcoming festive season which promises to be a busy one for cybercriminals.

What To Do When Preparing to Sell Your Business

“As much as you might love running your business, you must have an end-goal in the plan. At the very least, an exit strategy keeps you from turning your business into a glorified job – working from home, but with longer hours.” (Kevin J. Donaldson)

 

A new year beckons, and you may be thinking that it will soon be time to sell your business. Perhaps you are nearing the age of retirement, or want to move on to a new endeavour? Whatever your reason, your business could well be your most valuable personal asset, and something you have invested in for years, if not decades. The prospect of selling can therefore feel overwhelming, and clearly you want to receive a fair price for the asset you’ve worked so hard to create.

Selling your business is therefore likely to be not only a busy period, but an emotional one too and you’ll need to engage in extensive preparation if you want to come out satisfied at the other end.

These tips will help you to prepare for a business sale and get the price you deserve for your company. 

  1. Have a reason why it is for saleAnyone who is going to buy your business will want to know the reason why it is for sale. Your reason should be clearly thought out and easily explained to avoid spooking potential buyers. Simply saying “It’s time for me to move on” will not build anyone’s confidence. The aim here isn’t to obfuscate your reasons; honesty will always be appreciated.

    A serious buyer will spend time doing their due diligence investigation and so know a fair amount about your business, its reputation and sustainability. So remember that whilst your books are likely to tell them more about the health of your business than your words, your words will give them an idea of what the reputation of the business might be and just what they are likely to be dealing with when it comes time to deal with existing clients and suppliers. Common reasons for exiting a business include retirement, partnership disputes, illness or death, feeling overworked or even plain old boredom. When explaining why you are exiting there is an opportunity to add in some of the strengths of the business. “I am feeling overworked”, becomes a lot stronger from a sales perspective when it’s backed up by, “We have so many orders” or “We have a reputation for never letting our customers down”.

  2. Give yourself timeSelling a business takes time and should not be done in a hurry. Trying to sell in a hurry can only mean the correct things are not in place, and buyers will sense your urgency. In general, you should give yourself at least one year to sell a business and preferably two.
  3. Get your finances in orderA company with clear, legible finances is also going to sell much quicker than one with a drawer full of receipts and a box of demands from SARS. It is essential at this stage to liaise with your accountant to ensure that all financial records are in place, fully up to date and that any outstanding issues are cleared up.

    The more organised and accurate your accounting records are, the easier it is for a potential buyer to assess your company’s value. A potential buyer needs a clear picture of your financial condition, and that includes accurate financial statements for the past several financial years. When someone buys your firm, they may need to integrate your accounting data into their systems, and your accounting transactions must follow industry standards.

    A company’s finances tell potential buyers a lot about a business and very few will take the plunge if things aren’t organised and transparent. For example, a purchaser can review your interest expense to determine if the expense is increasing as a percentage of sales. If interest expense climbs say 5% to 8% of sales, your firm’s total debt is also increasing.

    There is a second, even more important reason your finances need to be accurate, and this is that you will need them to determine the value of your company. It is impossible to sell something if you don’t know what it is worth, and just how much value there is in it. Knowing your bottom-line price will be important come time for negotiations.

    A vital consideration in determining the price is future prospects and profitability. The final purchase price will not be simply based on net asset value but also on likely future profits giving a potential return on investment (the purchase price). There is no substitute for professional advice here! 

    Also, be clear in your mind how you expect the payment to be made – a lump sum, an earn-out over so many years based on the projected profits being realised. A note here – most sale agreements have clawback clauses if the future profits do not materialise. You will need sound advice on what is in the agreement in this and other considerations.

  4. Succession PlanningMaking sure your business can thrive after you have left will make it a far more attractive proposition for a potential buyer. Hopefully you have always had a succession plan in place in the event that something happens to you, but if you don’t it’s time to get to work.

    A succession plan may require you to train and mentor a successor, and to put legal documents in place (be sure to incorporate some flexibility in case a buyer has other ideas!). Both of these tasks are time consuming. If you plan on selling the business on to the employees then an Employee Stock Ownership Plan (ESOP) will need to be developed and, employees funding the ESOP will need a number of years to accumulate the funds to buy out the owner.

    For each of these reasons, you should plan for succession as soon as possible. Putting a detailed plan in place can help you avoid a forced sale. A forced sale occurs when the owner is under pressure to sell the business, or the owner’s heirs are trying to sell the company. The seller does not have any bargaining power and will likely receive far less for the business when the sale is finalised.

    Finally, in this regard: Consider your reaction and plans should the buyer ask you to stay on for a term or two while they prepare their own successors to take over from you.

  5. Increase the value of your businessWhile it may be tempting to take your foot off the gas pedal as you prepare for a sale, this is exactly what you shouldn’t be doing. Businesses whose performance noticeably declines before all the documents are signed only give the impression that the owner is the only thing that matters, and this will give prospective buyers all the excuse they need to make a lowball offer.

    On the contrary now is the perfect time to perform a SWOT (strengths, weaknesses, opportunities, and threats) analysis. Write down the key issues in each of those four areas. Get input from your staff, share your SWOT analysis with your team and ask them for feedback. Once you perform this analysis, you can start focusing on business improvements.

    The aim is to make sure that the year before you sell is a record breaker. Imagine you are starting all over again and spend this year getting the word out about your business, building clientele, cementing long term contracts and relationships and cutting back on costs. So ideally start planning to maximise value at least a year before you sell!

    Make sure that you account for every cost you incur to operate your business and if there are areas of the company that are not profitable, consider closing them. Now is not the time to be keeping your pet projects alive. Having a great year, cleaning out the business chaff and showing investors that the company has a strong future will undoubtedly provide a huge boost to your sales price.

  6. Identify target buyersAs already indicated, selling a business takes time. You can speed up this process if you identify potential buyers and understand exactly why they might be eager to put in an offer. There are generally two types of reasons for buyers to take on a new going concern: financial and strategic.

    Financial buyers treat the purchase as an investment, looking at the potential returns they can achieve. Their aim is to make an acceptable return on their investment and then flip the business either to another buyer or through an IPO. Financial buyers will consider the company’s track record based on a history of strong financial statements, and potential for solid growth. They won’t necessarily worry about flaws in the business as they will see these as opportunities to quickly increase the value before selling it off, but they will haggle every cent on the sales price to ensure the most profit for themselves.

    Strategic buyers look for purchases that will fit into their own long-term business strategy. They may, for example, be competitors who are looking to expand vertically (to different parts of the supply chain) or companies that need to expand horizontally to a new industry to diversify their portfolio. Strategic buyers are typically larger and willing to pay more for the purchase, since they can immediately take advantage of economies of scale.

  7. Bring a good team on board

    The final step before actually putting the business up for sale is bringing in a strong team of experts. At the very least you will need an accountant to handle any financial questions the buyer may have and to advise you on choosing a lawyer to attend to the contractual side.

    Seek advice also on whether you should employ the services of a specialist broker to help oversee and facilitate the sale. Negotiating a sale yourself allows you to save money and avoid paying a broker’s commission, so it may be the best route to take when the sale is to a trusted family member or current employee, but still bounce that off your accountant first.

    In other circumstances, getting a broker on board can help things run more smoothly as the broker will help free up your time to keep the business up and running, will help keep the sale quiet and get the highest price, because brokers are incentivised to maximize their commission.

    At the end of the day, having the right people working toward your sale means that at the very least they will pay for themselves, and more often than not they will increase your profit.

Your Tax Deadlines for November 2021

  • 05 November – Monthly Pay-As-You-Earn (PAYE) submissions and payments
  • 23 November – End of Filing Season 2021 for Individuals (Non-Provisional)
  • 25 November – Value-Added Tax (VAT) manual submissions and payments
  • 29 November – Excise Duty payments
  • 30 November – Corporate Income Tax (CIT) where applicable
  • 30 November – Value-Added Tax (VAT) electronic submissions and payments