Chapter 63: Impersonating the Tax Authority and Government Institutions – When the State Becomes a Weapon in the Hands of a Fraudster

Throughout my professional career as an attorney and notary, I have accompanied many people during their most difficult moments. I have encountered numerous cases of crime victims who lost their property, their trust in people, and sometimes even their will to keep fighting. However, there is a specific type of fraud that provokes a special outrage, one that goes beyond the typical shock of a criminal act. This involves scams where the fraudster dons the mantle of the sovereign – the State.

When a person receives a message from a bank, they might be suspicious. When they receive an "enticing" investment offer, they might hesitate. But when they receive a notification from the Tax Authority, the National Insurance Institute, or a government ministry, something in their natural defense mechanism shuts down. It is an unwritten "social contract": we fear the State, respect its authority, and above all – we are afraid of getting into trouble with it. The digital fraudster knows this. They are not just stealing money; they are stealing governmental authority to paralyze the victim's judgment.

In this chapter, we will analyze the depths of one of the most common and cruel scams in the digital age: impersonating government institutions. We will understand how the psychology of compliance works in favor of the criminal, examine the legal framework of bank and credit card company liability, and learn how to distinguish between a legitimate payment demand and a sophisticated honey pot (or fear trap).

The "Little Citizen" vs. the Bureaucratic Apparatus

Why is impersonating the Tax Authority so successful? The answer lies in the complex relationship between the citizen and the State. For most of us, an encounter with tax authorities is an anxiety-inducing event. Tax laws are complex, terminology is professional and foreign, and the penalties for non-compliance are perceived as particularly daunting. The fraudster steps exactly into this vacuum of ignorance and fear.

There are two main ways the government impersonator operates: the "stick" and the "carrot." The "stick" comes in the form of a notification about an urgent debt, an imminent garnishment, or a fine for non-reporting. Here, the driver is pressure. The "carrot" is more sophisticated – a notification of a "tax refund" awaiting the citizen. The euphoria of a small "victory" over the system may sometimes lead to less calculated action, and the victim rushes to enter personal and credit card details in order to "receive the money."

It is precisely the State's efforts to make its services digitally accessible – the "Digital Israel" initiative, the Gov.il website, and payment apps – that have provided fraudsters with the perfect visual infrastructure. They copy the logo, the colors, and the exact fonts, creating a false facade that is very difficult to refute at a quick glance on a phone screen.

The following scenario is an educational example based on common fraud patterns. The characters and events are for illustration purposes only.

The Case of Dalia: A Dream of a Refund That Turned Into a Financial Nightmare

Dalia (pseudonym), the owner of a small flower studio, was in the middle of a busy workday. Her phone vibrated on her desk, and an SMS message appeared on the screen from a sender identified as "IL-TAX".

"Hello Dalia, it has been found that you are eligible for a tax refund of 2,450 NIS for the previous tax year. To receive the refund directly to your account, please update your payment method details in the attached link: https://gov-il-tax-refund.top/login"

"Finally, something is going my way," Dalia thought. She remembered hearing in the past about eligibility for refunds, and the amount seemed reasonable to her. She clicked the link. The page that opened looked identical to the government website. There was the State emblem, links to "Contact Us" and "Citizen Information," and an air of complete reliability.

Dalia was asked to enter her ID number, date of birth, and then – her credit card details, including the CVV code on the back of the card, "for verification and credit transfer purposes." She typed the details quickly, confirmed, and received a message: "Your request has been received and will be processed within 3 business days. Thank you."

Dalia's smile disappeared two hours later. While she was working, SMS messages began arriving from the credit card company regarding significant purchases and cash withdrawals made from her account. Dalia's heart sank. She tried to call the credit card company, but with every passing minute, more transactions were performed on the account. By the time the card was blocked, heavy financial damage of tens of thousands of shekels had been caused – funds meant for the ongoing operation of the business.

In such a scenario, a person might feel great guilt and ask themselves how they fell into such an apparently obvious trap. However, it is important to understand that this is not a simple mistake, but rather the result of social engineering at its best. The fraudsters exploited the daily workload, the trust in State institutions, and the basic human desire to receive what is rightfully owed to the citizen.

Legal Analysis: Can Options for Recovering the Funds Be Examined?

In such cases, the legal battle may be fought on two fronts: against the criminals (who are usually difficult to track) and against the financial institution – the bank or the credit card company. This is where the Payment Services Law, 5779-2019 comes into play.

The central question is whether the event is considered "unauthorized use" of a payment instrument. The law stipulates that if a payment instrument was used by a person who was not authorized to do so, the customer might be entitled to significant protection. However, there is a caveat: if it is determined that the customer provided their details out of "gross negligence," the liability may be placed on them.

In similar scenarios, credit card companies might argue that providing details on a fake website constitutes gross negligence. Conversely, one can examine whether the financial institution met the heightened duty of care imposed upon it. Did the systems detect an unusual purchasing pattern? Was Strong Customer Authentication performed before significant purchases? The legal outcome depends on the specific circumstances of each case.

The Anatomy of Government Fraud

To defend ourselves, we must understand the technique. Impersonation scams targeting government authorities are usually built from defined stages:

1. Choosing the Government "Brand"

Fraudsters choose institutions that have a direct financial touchpoint with the citizen:

• Tax Authority: Tax refunds, fines, or debts.
• National Insurance Institute: Benefits or updating details for payment purposes.
• Israel Post: Notifications about packages waiting at customs that require a fee payment.
• Ministry of Transport: Notifications about urgent traffic fines.

2. Creating Urgency

The most critical psychological element is time. A message that sets a very short deadline, such as "the account will be garnished tomorrow," causes the victim to act out of pressure and a sense of emergency, which disrupts critical judgment.

3. Technological Forgery – Phishing

Fraudsters use a Phishing technique. They build a website that simulates Gov.il. Sometimes a domain address is used that is very similar to the original, but contains a small change that is hard to notice at a quick glance on a phone screen.

4. Harvesting Information

The goal is broad data collection: credit card number, ID number, and additional details. This information may allow for further actions to be performed in the victim's name later on.

Legal Liability: Between Customer Negligence and the Bank's Duty of Care

In cases where victims of scams seek to examine their options, the legal structure protecting consumers in Israel comes into discussion.

The Payment Services Law and the Definition of "Unauthorized Use"

The law limits the customer's liability for use made of their payment instrument without their authorization to a certain extent. However, the issuer may attempt to prove that there was negligence on the part of the customer in order to absolve itself of the liability to return the funds.

In these legal disputes, it can be argued that in a world of sophisticated social engineering, it is not always possible to expect a citizen to identify every attempt at fraud. Case law examines the "heightened duty of care" of financial institutions – whether they should have identified unusual activity and stopped it in real-time. If the financial institution failed to identify suspicious patterns, there may be grounds to hold it liable.

Is There Liability for the Government Authority?

This question arises frequently. As a rule, the State does not bear liability for the actions of fraudsters who forge its name. However, it can be examined whether the authority met its duty to properly warn the public against known waves of fraud. This involves a complex legal analysis of the duties of care of government authorities.

How Does the State Actually Operate? The Difference Between Truth and Forgery

Understanding the work procedures of government institutions is a key defense tool:

1. Domain Suffix

An official government website in Israel will always end with the .gov.il suffix. Addresses ending in other suffixes should raise immediate suspicion.

2. Requesting Credit Card Details

Authorities such as the Tax Authority or the National Insurance Institute do not usually request credit card details via SMS for the purpose of "receiving a refund." Credits are usually made directly to the bank account known in the system. Updating sensitive details is usually done through the secure personal area that requires official government authentication.

3. Personal Address

Official messages tend to include an address by full name, although it should be remembered that fraudsters may also obtain this information in some cases.

4. The Government Personal Area

In any case of doubt, it is recommended not to click on links in messages, but to independently enter the www.gov.il website and check the details in the secure personal area. Real payment demands or eligibility will appear there.

What to Do When a Scam Is Suspected?

In case of falling into a trap, the speed of response is of critical importance:

1. Immediate Cancellation: An urgent call to the credit card company or bank’s service center to cancel the payment instrument.
2. Documentation: Saving screenshots of the message, the website, and the suspicious transactions in the account for evidence purposes.
3. Police Complaint: Filing a complaint (which can also be done online), which is an essential step in clarifying matters with financial institutions.
4. Information Security: Changing passwords on sensitive websites if identifying information was provided.
5. Examining Legal Options: If significant damage has been caused and the financial institution refuses to return the funds, it is recommended to examine the available legal tools according to the circumstances.

Summary: Vigilance Against Impersonation

Impersonation fraud targeting authorities is a cynical exploitation of trust in the governing system. As public services become more digital, greater vigilance is required. It is important to remember that the State usually operates through regulated channels and allows for appropriate response time, and does not require sensitive details via unsecured methods.

The best weapon is knowledge and delaying the immediate reaction to the pressure created by fraudsters. In the next chapter, we will analyze additional operational patterns based on creating a sense of artificial urgency.

Red Flags

• A message from a government body that includes a direct link to enter payment details.
• A website address that does not end in .gov.il.
• Use of threatening language or a promise of a quick financial refund in exchange for providing details.
• A request for a security code (CVV) for receiving a financial credit.
• Unofficial phrasing or linguistic errors.

What to Do Immediately

• Avoid clicking the link or entering details.
• Independent check in the personal area on the official government website.
• In case of exposing details: blocking the payment instrument and reporting to the bank's security center.
• Filing an official complaint with the police.

Legal Aspect

• Payment Services Law: Constitutes a framework for protecting the customer in cases of unauthorized use.
• Duty of Care: Examining the ability of the financial institution to prevent the damage through monitoring means.
• Limitation of Liability: Examining the customer's eligibility for recovering funds in accordance with the circumstances of the case and compliance with the duty to report.