Is That Email From BDO About Your Starlink Account Real? Here’s What Zimbabwean Users Need to Know

Last Updated: February 13, 2025By Tags: , , ,

If you are a Starlink user in Zimbabwe, you might have received an email recently from BDO Kudenga, an accounting firm, requesting you to update your information. The email, complete with a subject line that may raise eyebrows, includes a link to what appears to be a rather suspicious website, http://103.145.37.23:805. This has understandably caused concern and confusion amongst many users, with some immediately marking it as a potential phishing attempt.

However, before you hit the delete button, we can confirm that this email is, in fact, legitimate. Our sources at both BDO and Starlink have verified its authenticity. Starlink Zimbabwe is currently undertaking a fiscalisation exercise mandated by the Zimbabwe Revenue Authority (ZIMRA), and BDO has been engaged to assist in this process. The email is part of that effort, seeking necessary individuals and business details from Starlink subscribers, including Tax Identification Numbers (TINs) or Value Added Tax (VAT) information, if applicable.

Starlink, given its limited physical presence in Zimbabwe, relies significantly on partnerships with local contractors. A prime example is their collaboration with DHL, responsible for the shipping and logistical aspects of the service. It seems they have extended this reliance by partnering with BDO, a reputable accounting firm, to manage their fiscalisation requirements.

Communication Breakdown

The primary issue arising from this situation is the manner in which the information was communicated. The email, although lengthy, fails to provide a clear and concise explanation of why users are receiving correspondence from a third party, rather than directly from Starlink.

A more prudent approach would have involved Starlink first sending an official email from their recognised domain, alerting Zimbabwean users to the partnership with BDO and explaining that the accounting firm would be handling the fiscalisation process. This proactive measure would have mitigated the element of surprise and alleviated the initial concerns regarding the email’s legitimacy. Instead, subscribers were greeted with an unexpected message from an unfamiliar entity, requesting personal and potentially sensitive information, which naturally raised red flags.

Navigating the Update Form: TINs, VAT, and That Ominous Link

The Form you need to fill

Compounding the issue is the email’s lack of clarity concerning the Tax Identification Number (TIN) field. The message does not explicitly state that users without a TIN can leave this section blank. While those who have a TIN, commonly issued to formally employed individuals as part of ZIMRA’s new employee module, or self-employed individuals who have already obtained one, can update the information, the email fails to reassure those without a TIN.

The link provided in the email is another source of concern. Instead of a domain name, it directs users to an IP address, an uncommon practice that instantly raises suspicion. Clicking the link leads to a pre-filled form containing existing Starlink user information, including their coordinates, email address, full name, and Customer ID. Users are then prompted to enter their TIN or VAT details, and finally, click the “Update” button.

While these concerns are understandable, such fiscalisation practices are not unique. Other internet service providers (ISPs) in Zimbabwe, such as Liquid Home and Econet, require similar information upon sign-up to ensure tax compliance and the issuance of fiscal invoices.

It appears that due to its global approach, Starlink’s online portal was not initially customised for Zimbabwe and lacked the necessary information required by ZIMRA. This fiscalisation exercise seeks to rectify that. ZIMRA has been increasingly focused on enforcing tax compliance across various sectors, as the government seeks to maximise its revenue collection.

This drive for compliance includes initiatives such as ZIMRA’s new Employee Management Module, which aims to streamline the registration of employees, declaration of earnings, and automatic calculation and filing of PAYE returns. For more information on this, you can read our previous article here.

The Bottom Line: Proceed with Caution, But Don’t Ignore It

While the email from BDO might have been poorly executed in terms of communication, it is a legitimate request from Starlink to comply with Zimbabwean tax regulations. If you are a Starlink user in Zimbabwe, you will need to complete the form. However, as always, exercise caution when clicking links and providing personal information online. If you are unsure about the email’s legitimacy, contact Starlink support directly to confirm.

By partnering with local firms like BDO, Starlink aims to operate within the legal framework of Zimbabwe and ensure tax compliance. While the execution might have been less than ideal, it is a necessary step in the long run.

As tax compliance increases in Zimbabwe, it is useful to know what the requirements are for ZIMRA. This includes things such as PAYE as we outlined in a previous article.

FAQ:

Q: Is the email from BDO Kudenga legitimate?

A: Yes, our sources at BDO and Starlink have confirmed that the email requesting updated information for fiscalisation purposes is genuine.

Q: Why am I receiving this email from BDO and not Starlink directly?

A: Starlink has partnered with BDO to assist with their ZIMRA fiscalisation process in Zimbabwe due to their limited physical presence in the country.

Q: What if I do not have a TIN or VAT number?

A: You can leave the TIN/VAT fields blank if you do not possess this information.

Q: The link in the email looks suspicious. Is it safe to click?

A: While the IP address link might appear unusual, it leads to the legitimate update form. However, exercise caution and ensure you are on the correct page before entering any personal information.

Q: I am still unsure. How can I verify the email’s authenticity?

A: Contact Starlink support directly through their official website to confirm the email’s legitimacy.

Q: What is fiscalisation and why is Starlink doing this?

A: Fiscalisation is the process of ensuring tax compliance by implementing systems that accurately record and report financial transactions to the relevant tax authorities, in this case, ZIMRA. Starlink is undertaking this exercise to comply with Zimbabwean tax regulations.

Q: Will updating my information lead to increased Starlink costs?

A: This exercise is primarily for tax compliance purposes and should not directly affect your Starlink subscription costs.

We hope this information clarifies the situation surrounding the email from BDO. Remember to stay informed, exercise caution, and take the necessary steps to ensure your online security.

4 Comments

  1. Keith Rose February 14, 2025 at 8:37 am - Reply

    There’s more here that should be addressed before ANY customers touch that form.

    1. It’s on an IP, not a domain name – so cannot verify it is indeed BDO. Not to mention its running on a nonstandard reserved port.
    2. It’s completely insecure – non HTTPS
    3. Starlink have put out zero comms about this.
    4. The IP mentioned is hosted by a random service provider in India.

    As a security professional, this all has a very bad taste to it.

  2. Robert Ndlovu February 15, 2025 at 9:54 am - Reply

    Rubbish.

    I am not sending any info to no one over an insecure connection i.e. http as opposed to https.

    And who gave them permission to access my personal data without my express concern ?

    if indeed we a Data Protectiion Act how do we explain this.

    My contract is with Starlink not some auditing joint that can not deploy a secure portal online.

    POTRAZ must fine and block these clowns for taking us for granted.

    Not my data . Forget it.

  3. George Mathe February 15, 2025 at 2:23 pm - Reply

    it’s not late for Starlink to directly advise their subscribers about this. This explanation should be coming from Starlink and not yet another third party

  4. Wanguda February 18, 2025 at 11:11 am - Reply

    I inboxed support and they said its legit but to be wary of which email address it comes from. Yet to find out if i can submit the information directly to BDO though, might be the safest option.

Leave A Comment