Chapter 10: How Victims Are Selected: Profiling and Targeting

Many people dealing with the repercussions of fraud, stunned by the discovery that their bank account has been emptied, ask the same question over and over: "Why me? Why did they choose me specifically?". They feel as if lightning struck them on a clear day, as if it were a matter of fate or extreme bad luck. They imagine the fraudster as a fisherman casting a wide net into the sea, waiting to see what he catches. And indeed, in some cases—mass phishing scams—this is the reality. But when it comes to sophisticated fraud, in cases of significant scams where substantial sums of money are stolen, the reality shows that in some cases, victims are not chosen at random, but are marked in advance.

In the previous chapters, we analyzed the psychological mechanisms and complex scripts, but in this chapter, we will get to the root of the matter—the "intelligence" phase. In the intelligence world, this is called OSINT (Open Source Intelligence). In the world of digital crime, this is the preparatory work that turns a total stranger into a target. To understand how to protect ourselves, we must first understand how a victim's profile might be built, how the window of opportunity is identified, and how private information can become a tool in the hands of fraudsters.

The following scenario is an educational example based on common fraud patterns. The characters and events are for illustration purposes only.

Target Engineering: Educational Scenario - The Story of Amos and the Apartment in Haifa

Amos (a pseudonym), 67, was far from the classic image of an "innocent victim." He retired after a long career as a VP of Operations at a large logistics company. He knew computer systems, knew how to negotiate, and always considered himself a cautious person who checks every document. In this scenario, Amos's mistake was not carelessness, but the assumption that his online actions remained anonymous.

It all started when it was decided to sell an investment apartment to help the family. An advertisement was posted on a sales site, photos were uploaded, and contact details were provided. For criminal elements, such an ad may constitute marking a target.

For two weeks, information was collected. A fraudster might use the full name to find social media profiles, identify interests, affiliations, or professional background. The information accumulates and turns into a full-fledged intelligence file.

In a possible scenario, the phone rings and a number that looks official appears on the screen. The voice on the other end may introduce itself as a representative of the security department at a bank, in an authoritative and calm tone, reporting a "suspicious transfer attempt."

When the victim reacts with stress, the fraudster may use the information collected in advance: "Did you recently post a real estate ad? This is a known pattern of hackers who scan these sites." The accurate information creates a very high level of trust. Inside this "pressure tunnel," the victim may follow the fraudster's instructions, transfer funds to a supposed "protection account," and discover later that the funds were transferred to shell accounts and that there is significant complexity in attempting to recover them.

The Myth of Randomness: How Information Might Leak

Amos's scenario illustrates a critical point: the selection of the victim is sometimes a screening process. Fraudsters sometimes look for a "ripe fruit"—people who are at a point in time where they are executing large transactions or experiencing life changes.

There are various ways in which information can reach the wrong hands:

1. Data Breaches

Every time a website where registration exists is hacked, personal information may end up in criminal hands. These lists are sometimes segmented by age, type of credit card, or other characteristics, which allows for the creation of a list of potential targets.

2. Social Networks

Oversharing on social networks can be an invitation to hostile elements. A post about selling a property, a photo of a flight ticket, or an update about moving house provides information on financial liquidity or absence from the country, making the person more vulnerable to targeted fraud.

3. Databases

Over the years, there have been reports of leaks from official and public databases. Information including ID numbers, addresses, and family connections allows fraudsters to create a very credible presentation in a phone call, which increases the level of trust given to them at the beginning of the interaction.

Victim Profile: Who Might Be on the Crosshairs?

During years of professional work and reviewing many cases, it emerges that victims do not belong to just one group. Among them can be found freelancers, technology professionals, and people with rich life experience. However, there are characteristics that may turn a person into a preferred target:

• Those with temporary financial liquidity: People after selling a property, receiving an inheritance, or opening a study fund.
• People at decision crossroads or under stress: Those who are in complex personal processes such as divorce or moving, situations where cognitive attention may be divided.
• Freelancers and small business owners: Who are accustomed to making many money transfers and taking calls from unknown numbers.
• The elderly: People who are tech-savvy but may hold great respect for authority (such as a bank or police) and tend to believe an authoritative voice on the phone.

The Legal Arena: Examining the Responsibility of the Financial Institution

At this point, the complex legal issue is examined. The central question in these cases is not just how the fraud was carried out, but what was the degree of care taken by the "gatekeepers." In Israel, the relationship between a bank and a client is based on a duty of loyalty and care.

The Payment Services Law, 2019, regulates the issue of liability. As a rule, in the case of an unauthorized transaction, there is a duty of restitution. The complexity increases in cases of "social engineering," where the client is the one who approved the transaction due to a misrepresentation. Here, the balance between "contributory negligence" and the bank's duty of care is examined.

Within the framework of analyzing legal options, the question arises whether the bank should identify unusual fraud patterns. If a client performs an action that is radically different from their normal management habits, it is possible that there is an expectation for the bank's monitoring systems to stop the operation or perform additional verification.

Professional experience shows that financial institutions may try to disclaim responsibility by claiming that the client acted of their own volition. However, one can examine whether, under the circumstances, the bank was obligated to identify "red flags." In some cases, there may be a cause of action for negligence in risk management.

It is important to emphasize: There is no blanket guarantee for the return of funds. Each case is examined on its merits according to its unique circumstances. The courts examine whether the client's conduct amounted to "gross negligence." Providing a personal code against explicit warnings complicates the legal situation, but does not necessarily block the possibility of examining the bank's failures in providing comprehensive protection.

Case Analysis: Why Was the Target Chosen?

Back to the educational scenario, it can be seen that the intelligence work was based on accessible tools:

1. Information gathering: A sales ad providing a name, phone number, and location.
2. Data cross-referencing: Using search engines and social networks to identify professional background and age.
3. Identity verification: Using caller ID apps to confirm the target's identity.
4. Timing: Choosing a time when the victim might be busy but available.
5. Creating authority: Using professional terminology tailored to the victim's background.

Warning Signs: When Does a Suspicion Arise That You Are a "Target"?

Early identification of warning signs may prevent financial loss:

• Proactive calls from the bank about an action you did not know about: It is important to remember that banks do not ask to transfer money to "protection accounts."
• Prior knowledge of personal details: When the speaker knows details about assets, family members, or recent actions, this is not necessarily a sign of reliability, but evidence of early intelligence gathering.
• Creating urgency: The use of time pressure ("must act now") is intended to prevent rational thinking or consultation.
• A request for secrecy: An instruction not to disconnect the call or not to tell anyone about what is happening.

Immediate Steps in Case of Suspicion

1. Disconnect the call: In case of doubt, you should disconnect the call immediately.
2. Independent contact: Dial the official number of the bank's call center or credit card company, and do not return to the number from which the call was received.
3. Independent account check: Access the account from a secure device and check transactions.
4. Documentation: Saving phone numbers, messages, and call times as potential evidentiary material.
5. Reporting to authorities: Filing a complaint with the police.

Legal Aspect: Summary of Responsibility

In cases of "social engineering," the legal situation is complex and evolving. The Payment Services Law determines the liability of the client if they acted with fraudulent intent or with "gross negligence."

The legal interpretation of the term "gross negligence" is examined in light of the fact that fraudsters use advanced techniques. There is a trend to recognize that the average client may be at a disadvantage against well-oiled fraud systems.

Alongside this, banks have duties to prevent fraud. In certain circumstances, if it can be shown that the financial institution failed to identify a known fraud pattern or did not prevent an extraordinarily unusual action without explanation, legal liability may arise.

In conclusion, protecting personal information and reducing digital traces are the first layer of defense. In the event of a breach, there are legal options that can be explored, with the understanding that the result depends on the specific circumstances of each and every case.