If you run a business in South Africa, the compliance ground has moved under you twice this year already, and most of what you'll read about it is either out of date or aimed at somebody much larger than you.
Some of the change is real and immediate. Some of it is a decade away and being reported as though it lands next year. Telling the two apart is worth more to you than any amount of general anxiety about SARS.
So here is the honest triage: what has genuinely changed, what is coming and when, and what you can put down for now.
Key takeaways
- SARS is now an enforcement organisation with a data budget. R316.39 billion of the 2025/26 collection — 15.7% of everything it collected — came from identifiable compliance activities. Roughly one rand in six.
- The e-invoicing date everyone is quoting is wrong. SARS's own consultation paper puts implementation from 2030, running about 36 months, with small and medium businesses third in the queue. Not 2028.
- The changes that actually bite this year are the quiet ones — mandatory tax reference numbers on IRP5s, a hard turn on ETI substance, and a new COIDA penalty regime.
- The VAT threshold jump to R2.3 million is a decision to make, not a gift to accept. Deregistering has a cost that catches asset-heavy businesses.
SARS now collects one rand in six through enforcement
The 2025/26 year was the first time SARS crossed R2 trillion in net revenue. The more useful number sits underneath it: R316.39 billion came from identifiable compliance activities, 15.7% of net collections, including R110.9 billion from enhanced debt-collection work (ITWeb).
That collection is increasingly automated. SARS auto-assessed six million taxpayers in the past year, paying refunds inside 72 hours, using third-party data drawn from employers, banks, medical schemes and insurers, and describing its own toolkit as "technology, machine learning algorithms, agentic AI and sophisticated data science."
Read that list again and note who is on it. Your payroll submissions are the third-party data. What you file about your employees is matched against what they file about themselves, before a human looks at either.
This is not a threat so much as a change in the failure mode. Errors used to sit undetected until an audit. Now they surface as a mismatch, automatically, at scale. And SARS itself expects 28.56% of its revenue target to come from SMMEs, who make up roughly 34% of GDP and employ 60% of the workforce (SARS SMME Connect #13). Small business is not a rounding error in the tax base, and it is not being treated as one.
E-invoicing: the date everyone is quoting is wrong
You have probably read that mandatory e-invoicing arrives around 2028. That was a defensible guess earlier this year — we said something similar ourselves. It is now demonstrably wrong, and the correction is in SARS's own paperwork.
On 17 August 2026 SARS published its Consultation Paper on VAT Modernisation: e-Invoicing, Interoperability and e-Reporting, with comment open until 16 October 2026 (SARS). The paper sets out five phases: preparation in 2026/27, solution development in 2027/28, quality assurance in 2028/29, a voluntary pilot in 2029/30, and then, in the paper's own words, "Implementation is expected to commence during the 2030 calendar year and extend over approximately 36 months."
Within that final phase, the order is large taxpayers and B2B first, then business-to-government, then micro, small and medium enterprises, then business-to-consumer (Consultation Paper, August 2026). If you are an SME, you are third in a queue that starts in 2030.
What you can safely ignore: any urgency around e-invoicing readiness this year. Nobody knows the technical standard yet. There is no legislation, no threshold, and no go-live date binding on anyone.
What is worth ten minutes: the consultation closes on 16 October, and SARS has specifically invited businesses, not just software vendors, to comment. The rules that will govern how you invoice in 2030 are being drafted now, by people who would benefit from hearing what a twelve-person business can realistically do.
And note the direction, because it does not change: Commissioner Dr Johnstone Makhubu describes the goal as moving "from a system that is still too dependent on manual processes and retrospective verification, to one where VAT compliance becomes part of the systems businesses already use every day." Structured data out of your accounting system, not PDFs out of your printer. That is a five-year trend, not a scramble. Our earlier guide to SARS and eInvoicing covers the legal framework already in place.
The changes that actually bite, this year
While the e-invoicing story absorbed the attention, three things changed that affect your next submission.
Tax reference numbers are now mandatory on every IRP5
From the February 2026 reconciliation, employers must include a valid Income Tax Reference Number for every employee on IRP5/IT3(a) certificates or face automatic system rejection (SARS). e@syFile Flex can no longer be used for submissions at all. If you have casual or recently-hired staff without registered tax numbers, that is a data-gathering job to start now, not on 30 October.
The ETI has moved from paperwork to substance
SARS issued Interpretation Note 145 on 27 July 2026, and it asks whether you actually employed the person: whether you supervised and controlled them, whether tasks were assigned and monitored, whether leave was taken and recorded, and whether remuneration was genuinely paid in cash rather than absorbed into a training fee. SARS's line is blunt — "The ETI is not intended to be an incentive for training unskilled workers, but rather to ensure sustainable employment." The penalty stack behind it is serious: understatement penalties up to 200% of the shortfall, plus a dedicated 100% penalty on ETI claimed against disregarded remuneration (Polity).
If you claim ETI on genuinely employed young staff, this changes nothing for you except the standard of your records. If you were sold an ETI "solution" by an intermediary, it changes a great deal. We covered this in detail in SARS turns up the heat on the ETI.
Worth adding: with the national minimum wage at R30.23 per hour from 1 March 2026, paying any employee below it disqualifies your entire ETI claim for that month (SAnews) — and an employer with non-compliant status can forfeit unused ETI outright on non-submission.
And the calendar
The interim EMP501 reconciliation window opens 21 September and closes 31 October 2026 (SARS). Late submission attracts a penalty of 1% of your annual PAYE liability, escalating 1% a month to a maximum of 10%, with wilful or negligent failure to submit carrying a fine or up to two years' imprisonment. That window opens in a month.
The VAT threshold is a decision, not a gift
From 1 April 2026 the compulsory VAT registration threshold rose from R1 million to R2.3 million, with voluntary registration moving from R50,000 to R120,000 (SARS). Turnover tax moved to the same R2.3 million ceiling.
This was widely reported as relief, and for many businesses it is. But if you are already registered and now sit below the threshold, deregistering triggers an exit charge on the assets and stock you hold, and you lose input-tax recovery on everything you buy (Cliffe Dekker Hofmeyr). For an asset-heavy business, or one selling mainly to VAT-registered customers who don't care about your VAT, staying registered is often the better call. It is arithmetic, and it is worth actually doing rather than defaulting either way. Our VAT registration guide walks through the thresholds.
Context for how little VAT the smallest vendors were ever contributing: of 900,285 registered VAT vendors, only 496,858 are active, and sole proprietors make up 10.4% of active vendors while contributing 1.6% of domestic VAT payments (SARS Tax Statistics 2025).
Where AI helps, and where it doesn't
Every software company in this market, including ours, will tell you it is AI-enabled. Here is what can honestly be said.
There is no published South African survey of AI adoption among accountants or small businesses that we could find, and the global figures circulating — one report claims 98% adoption — come from self-selected respondent pools. Treat any statistic on this with suspicion, including ours if we ever publish one without a method.
What is documented is that SARS is automating the compliance layer faster than the profession is automating its own work, and that the accountability question has already been settled. IESBA's July 2026 guidance for professional accountants is explicit: you must be able to explain how an output was reached, professional judgement and accountability remain yours regardless of the level of automation, and professional scepticism now extends to verifying that information is authentic (Accounting Weekly). SAICA's own contribution to South Africa's AI Maturity Assessment found seven of eight domains still at early maturity, with Milton Segal noting the profession is "still in the early stages" while anticipating rapid growth (SAICA).
The practical read: automation that reconciles a bank statement or validates a submission before it goes out is straightforwardly useful. Automation that makes a judgement call you cannot explain is a liability with a friendly interface.
What we build, and why it's built this way
Bluubin has run South African accounting and statutory payroll on a single live ledger for nineteen years. The reason we mention it in an article like this one is that everything above has the same shape: the compliance requirement is national, it is specific, and it changes annually.
So the statutory layer is in the core of the product rather than bolted on at the edge:
- PAYE, UIF and SDL against tax tables maintained as versioned code from 2017/18 to 2026/27.
- EMP201, EMP501 and IRP5, with e@syFile export through eight tax-year-versioned exporters, so a historical period still submits against the specification that applied at the time.
- Pre-submission validation that blocks export until the data is complete and links each error to the screen that fixes it.
- ETI calculated automatically each payrun, with the legislative history encoded as date-gated regimes.
- UIF declarations filed directly to the Department of Labour.
- VAT201 that reconciles against the ledger and drills through to source documents.
- Employment Equity and COIDA reporting, which most SME payroll products simply don't address.
- BCEA-compliant leave administration.
None of that is glamorous. It is the difference between a rejection you fix in an afternoon and one you discover in November.
If you want to see it against your own numbers, there's a thirty-day trial with full access and no credit card. And if you'd rather just take one thing from this article: put 21 September in your diary, and check that every employee on your payroll has a valid tax reference number before then.
This guide is general information to help you get oriented — it isn't formal tax or legal advice. Thresholds, rates and deadlines change, so confirm the current figures on the SARS website or with your accountant before you act.