Sandak Lewin Trust

After deducting PAYE from one of our employees but not handing it over to SARS every month as they should, Sandak Lewin Trust have now billed our Body Corporate 4 years later for their mistake. Surely that's not right?