Chapter 15: Sequential Bank Transfers: The Silent Escape

In movies of the last century, a bank robbery was a loud affair. There were ski masks, drawn weapons, bags with dollar signs, and wailing police sirens closing in on the building. Today, the most sophisticated robbery happens in absolute silence. It requires no weapons, only a smartphone, an internet connection, and a victim under intense psychological pressure. The modern robber does not break into a physical vault; they convince you to open the digital gates and hand them the money on a silver platter, bit by bit, until the account is empty.

This chapter deals with one of the most painful and effective techniques in the world of digital fraud: bank transfers in sequence. This is a method where the money does not disappear all at once in a big blow—which could trigger immediate red flags in the bank's monitoring systems—but rather flows out in a series of relatively 'small' transfers, performed one after the other. It is a process of attrition and bypassing defense mechanisms, at the end of which the client finds themselves empty-handed, and the bank, many times, argues: 'But you authorized every single transaction.'

The Anatomy of Silence: How the Sequential Trap is Built

When we talk about the 'silent escape,' we are talking about the critical time gap between the execution of the action and the realization that it is a fraud. In the sequential transfer technique, scammers exploit the trust they have built with the victim to make them perform a recurring series of actions. Sometimes this is an authentication code that the client provides, and sometimes it is a transfer operation that the client performs themselves from their app, under the instructions of a 'bank representative.'

Why is this sequence so critical for scammers? There are two main reasons. The first is technical limitations. Most bank accounts have a daily transfer limit or a single transfer limit in the app. To steal one hundred thousand shekels from an account limited to twenty thousand shekels a day, the scammer must operate over several days, or convince the client to raise the limit (an action suspicious in the eyes of the bank), or simply perform many transfers of amounts that appear 'standard.' The second reason is psychological: once the victim has performed the first transfer and the sky has not fallen, their fear barrier drops. They are already 'in the process,' and they tend to cooperate with subsequent transfers out of a desire to end the stressful situation they are in.

The following scenario is an educational example based on common fraud patterns. The characters and events are for illustration purposes only.

Itamar, a retiree from the Ministry of Education, was sitting on his porch on a Tuesday morning when his phone rang. The screen displayed the familiar number of his bank's call center. On the other end was 'Roi,' a representative from the security department. Roi's voice was calm, professional, and trustworthy. 'Itamar, we are currently detecting an unauthorized access attempt to your account from an IP address abroad. Someone is trying to withdraw a large sum. We have temporarily blocked the action, but to protect your balance, we must transfer the money to a temporary 'protection account' at the bank, until we issue you a new card and code.'

Itamar became distressed. All his savings were in that account. 'What do I need to do?' he asked with trembling hands. Roi instructed him to open the banking app. 'We will do this in small batches so as not to trigger the systems of the hackers who are on your line,' the 'bank representative' explained with a technically absurd excuse, but one that sounded logical to a person under pressure. 'Perform a transfer of 15,000 NIS to the account I am reading to you now. It is a bank escrow account.'

Itamar complied. 'Excellent,' said Roi, 'the first one went through safely. Now let's do another one, the same amount. We must hurry before the hackers try again.' For forty minutes, Itamar performed five different transfers. Each time to a different account ('These are sub-accounts of the security department,' Roi explained). At the end of the process, 75,000 NIS had left Itamar's account. 'That's it, Itamar, the money is safe. Tomorrow morning someone from the branch will call you to coordinate opening a new account and returning the funds.' Itamar breathed a sigh of relief, thanked Roi for the dedicated service, and went to sleep. Only in the morning, when he called the branch and realized there was no 'protection account,' no 'Roi,' and no 75,000 NIS, did he understand he had fallen victim to the 'silent escape.'

The Digital 'Salami' Mechanism: Why Does It Work for Them?

The use of sequential transfers is a type of 'salami slicing' tactic. Instead of cutting one thick slice that would draw attention, the scammer cuts thin slices. In terms of the banks' automatic monitoring systems (Anti-Fraud systems), a single transfer of 15,000 NIS might not be considered abnormal activity for a specific client. However, when five such transfers are made within an hour to different people to whom money has never been transferred before—that is where a bright red light should turn on.

The problem is that in many cases, scammers know exactly where the line is. They ask the client to perform the transfers at a pace that does not always trigger the system in real-time, or they use 'Money Mules'—accounts of innocent people or accomplices in various banks in the country, which makes tracking more difficult for the sending bank. Once the money hits the mule account, it is immediately withdrawn as cash at an ATM or converted into cryptocurrencies, thus disappearing from the banking radar.

Another critical aspect of the sequence is the victim's perceived 'sense of control.' When a person performs the action in the app themselves, they feel they are in control of the situation. They are not giving away their password (although in previous chapters we saw that this happens too), but rather they are the one authorizing the transfer. The scammers use standard banking language; they talk about 'security protocols,' 'transit accounts,' and 'two-factor authentication.' They build a cover story where the illegal action (withdrawing money from the account) is disguised as the most legitimate action (protecting the money).

Legal Obligation: Where Was the Bank?

When examining such a case over the years in the context of professional work, the central question to examine is not just the actions of the client, but also the potential failures of the bank. The Payment Services Law, 2019, is our starting point. The law establishes arrangements regarding 'misuse' of payment instruments, but the case of bank transfers initiated by the client under fraud is more complex than simple carelessness.

In the relationship between a bank and a client, there is a heightened 'duty of care.' The bank is not just a 'conduit' for transferring funds; it is a gatekeeper. It can be analyzed based on accepted legal principles that the bank has a duty to monitor abnormal activities and stop them, even if the client themselves asked to perform them. When we come to examine the liability of a bank in the case of sequential transfers, we will ask several key questions:

• The Anomaly Test: Was the sequence of transfers abnormal for the client's usual activity patterns? If a person who has never transferred more than 2,000 NIS a month suddenly transfers 75,000 NIS in five installments within an hour—this is a red light that the system should identify.
• The Prevention Test: Did the bank make contact with the client in real-time? Did it attempt to stop the subsequent transfers in the sequence? In many cases, the automatic system blocks only at a late stage, and the early readiness of the systems must be examined.
• Real-Time Alerts: Did the client receive clear alerts on their mobile phone warning of possible fraud while performing the actions?

Banks tend to defend themselves with the claim of negligence on the part of the client. However, professional analysis shows that these frauds do not necessarily stem from carelessness, but from highly sophisticated Social Engineering. The responsibility of the financial institution, which possesses the most advanced technological systems, is to act as a first line of defense in these situations.

The Thin Line Between Negligence and Fraud

The issue of 'gross negligence' is the central legal battlefield. Under the Payment Services Law, if the client acted with gross negligence, the bank's liability may be reduced. But the question of what constitutes gross negligence in the circumstances of digital fraud remains open to interpretation. Does trusting a person who sounds like a bank representative, who calls from a phone number that appears to be the bank's, count as gross negligence? Sometimes this is a reasonable human reaction to an extreme stress situation.

It is important to understand: transferring money in sequence is a tactic designed to reduce the bank's vigilance. If the client had asked to transfer a huge sum at once to a stranger, it is likely that human authorization would have been required. By breaking down the amount, the scammers try to bypass the system. In many cases where the conduct of banks has been examined over the years, situations have arisen where systems allowed a sequence of actions without sufficient intervention, which may indicate a failure in security systems.

During years of professional work and examining similar cases, situations have been observed where the bank sent only a laconic SMS message. The absence of specific and prominent warnings in real-time may be significant in examining legal liability. The bank can and should present clear warnings that prevent the client from performing actions under the instructions of external parties.

Case Analysis: The Crisis Point and Disclosure

Let's return to Itamar from the educational scenario. His crisis point was not just the moment he discovered the money was gone, but the moment the bank refused to take responsibility, claiming the actions were performed by him. Itamar felt betrayed by the institution where he had deposited his money for many years.

Within the framework of the scenario analysis, it can be seen that sometimes some of the transfers are made to accounts that have already been flagged in the banking system as suspicious. Had there been better synchronization or a more in-depth examination of the transfer destination, it might have been possible to stop the sequence. This is the 'prevention failure' that constitutes a key point in examining liability.

Ultimately, in such cases, the goal is to examine whether the bank violated its professional duties. There is no automatic guarantee here for the restitution of funds, as each case is examined according to its specific circumstances: the content of the conversation, warning signs, and the speed of reporting. But professional experience shows that when it comes to an extremely abnormal sequence of actions, there are legal tools for examining the bank's liability as a gatekeeper.

Warning Signs: How to Identify You Are Inside a 'Silent Escape'?

• A request to transfer funds 'to protect them': This is the most distinct sign. A bank will never ask you to transfer money to another account to keep it safe. Concepts like 'protection account' do not exist in banking practice.
• Pressure to perform actions in sequence: If any party urges you to perform more and more transfers quickly, they are trying to deprive you of time to think and prevent the bank's systems from reacting.
• Use of complex technical terms: The goal in using terms like 'encryption protocols' is to make you feel insecure and comply with instructions.
• 'Correct' phone number: Do not rely on caller ID. Spoofing is a common technique. If a demand for financial action arises—hang up and proactively contact the bank's official number.

What to Do Immediately If You Fell Victim to Sequential Transfers?

1. Immediate Stop: As soon as suspicion arises—stop everything and hang up.
2. Real-time reporting to the bank: Contact the bank's emergency hotline immediately and ask to stop any transfer that has not yet been completed.
3. Documentation: Keep all details: phone numbers, names presented, times, and account numbers to which the money was transferred.
4. Filing a police report: An essential step for substantiating claims in the future.
5. Seeking legal advice: It is possible to examine the circumstances of the case in-depth to see if there is grounds for a claim for restitution from the bank.

Legal Aspect: The Monitoring Obligation of the Banking Corporation

Banks are subject to clear instructions from the Bank of Israel regarding risk management and cybersecurity. They are obligated to operate advanced monitoring systems that should identify abnormalities in client behavior. When a legal claim is filed against a bank in such cases, the argument is often raised that the bank's technological systems did not provide the required protection or that their configurations were flawed.

In addition, we examine the legal principle of the 'cheapest cost avoider.' The question is who had the best ability to prevent the damage with minimal cost and effort. In many cases, legal analysis may indicate that the bank, as a professional body with technological tools, is the one with the primary ability to prevent such frauds.

In conclusion, sequential bank transfers are the result of sophisticated psychological exploitation. Your awareness is the first line of defense, but in the case of failure, there are legal options for examining the liability of financial institutions to protect client funds.