Chapter 82: The First Day: Filing a Police Complaint and Reporting to Authorities
The sun that rises the morning after discovering a fraud is unlike any other. It does not herald a new beginning, but rather casts a cold and cruel light on the wreckage of the previous day. If in the first hour you acted on survival instinct—blocking, calling, reaching out to the bank's security desk—then the first day is when you must transform from victim into warrior. This is the day when paperwork replaces the screaming, and bureaucracy becomes a significant tool at your disposal.
Over the years of his professional practice, an attorney in the field has encountered many inquiries from people asking: "What for? Surely the police won't actually chase a hacker in a foreign country or an international fraud ring. It's a waste of my time." The professional answer to this is always one of principle: The police complaint is not merely an attempt to catch the perpetrator. It is a legal document of great importance. It constitutes an official record of the incident for the banking system, insurance companies, and the courts. Without it, it may be difficult to prove that this was a criminal incident rather than a financial transaction that the customer simply regretted.
The following scenario is an educational example based on common fraud patterns. The characters and events are for illustration purposes only.
Adam (hereinafter: "the Victim"), a 62-year-old history teacher, stood outside the police station early in the morning. The night he had endured was particularly difficult. Only a few hours earlier, he had watched his savings—significant sums of money—transferred in a series of rapid transactions after he received a phishing SMS message from the bank and clicked the link. In a conversation with a bank representative, he was told that without proof of filing a police complaint, it would be impossible to begin reviewing his refund request.
The Victim entered the station and waited for an investigator. He felt a sense of guilt for having "given them the key" via his phone screen. When he was finally summoned to the interrogation room, he was asked to recount the sequence of events.
"I received a message," the Victim described. "It said my account was blocked and I needed to update my details. It looked exactly like the bank's website. I entered my identification details, and then someone called claiming to be from the bank's security department. He sounded very professional and explained there was suspicious activity and that I needed to move the money to a secure account..."
The investigator asked for screenshots, the caller's phone number, and the details of the account to which the money was transferred. In many cases, victims delete the message out of fear or rage the moment they discover the fraud. Fortunately for the Victim, he had managed to document the transfer details. Without this evidence, the complaint might be considered lacking the "digital footprints" necessary for further handling.
The Police Complaint: The Legal Purpose
When examining the issue of filing a complaint, it is important to understand its true purpose. In many cases of digital fraud, money is quickly transferred to mule accounts or channels that make tracking difficult. If so, why insist on a complaint?
First, the duty to report and prove good faith. The Payment Services Law, 2019, regulates relations in these cases. The law places liability on the payment provider, but requires the customer to act with reasonable diligence. Filing a complaint is evidence that a crime was allegedly committed, and it helps distinguish between a crime victim and other cases of attempted fraud.
Second, the bank's requirement. Banks in Israel operate according to regulatory procedures. For the purpose of reviewing an internal "fraud file," they usually require a police case number. Without this document, the financial institution's legal department may not review the possibility of compensation or settlement.
Third, intelligence gathering. An accumulation of similar complaints may help cyber units identify patterns of operation (Modus Operandi) and act to dismantle the infrastructure behind the fraud.
What is recommended to bring to the station?
It is advisable to prepare an initial "evidence folder" that includes:
- Screenshots of the suspicious SMS messages or emails.
- An account transaction statement showing the unauthorized transfers.
- A log of calls—the fraudster's phone number, time of the call, and duration.
- Any URL address (link) used, if available.
- Correspondence in messaging apps, if any.
Beyond the Police: Reporting to Regulatory Bodies
It is important to remember that the process does not end with the police and the bank. There are other bodies that can and should be updated in the event of a fraud incident.
The National Cyber Directorate (Hotline 119)
This is an operational body that can assist in cases involving the takeover of digital assets. The Directorate sometimes works to block active phishing sites to prevent harm to others and can provide initial technical guidelines.
The Privacy Protection Authority
If personal information (such as an ID card photo or login details) was exposed during the incident, reporting to the Authority should be considered. Sometimes fraud is enabled due to a data leak from a third party that did not maintain information as required, and this may have implications for liability.
The Credit Data Sharing System
To prevent identity theft for the purpose of taking out loans, one can contact credit bureaus and request to restrict access to the credit report or add a note regarding suspicion of identity theft.
The Legal Aspect: Payment Services Law and Liability Review
Legally, the case review focuses on whether the victim acted with "gross negligence."
Section 25 of the Payment Services Law states that in certain circumstances of misuse of a payment instrument, the customer may be exempt from liability, unless it is proven that they provided their authentication details under circumstances of gross negligence. While financial institutions may attempt to claim such negligence in every case where a code is provided, it can be legally argued that with sophisticated "social engineering" methods, it may be a human error that the system should have prevented, rather than gross negligence.
On the first day, every piece of documentation is significant. It is important to describe the event as it happened, emphasizing the sophisticated manipulation performed by the perpetrator.
Reviewing Bank Liability
One can examine the bank's compliance with the "duty of care" and "fiduciary duty" toward its customers. If, after reporting, the bank did not act with the required speed to block the account or stop the funds, its liability for damages incurred from the moment of reporting may be examined. It is recommended to document every communication with the bank, including the time and the representative's name.
Educational Scenario: Reviewing the Process with Bureaucratic Bodies
The following scenario is an educational example based on common fraud patterns. The characters and events are for illustration purposes only.
A fraud victim lost a significant sum of money following a message posing as a postal service. She turned to the police, where she initially encountered a reluctance to handle the complaint due to the workload. After she insisted that the confirmation was necessary for her inquiry with the bank and the credit card company, her complaint was accepted.
When the credit card company attempted to claim that there was a delay in reporting, the victim presented the police confirmation with the timestamp indicating an immediate action. This document was a significant tool in reviewing the case, and eventually, under the possible circumstances of the scenario and after examining the evidence, the parties might reach a settlement regarding the reimbursement of part of the amount.
Points to note on the first day
- Insist on receiving a complaint confirmation: Filing a complaint is a legal right and a legal necessity. Do not give up on receiving the official confirmation.
- Document communications with the bank: Ensure there is written proof that you notified the bank of the fraud.
- Beware of promises: The chance of recovering funds depends on the specific circumstances of each individual case, and one should not rely on promises of a certain outcome in the early stages.
Checklist for immediate actions
- Filing a police complaint: Physically at a station or online, and obtaining a signed confirmation.
- Report to Hotline 119: Update the National Cyber Directorate with the fraud details.
- Checking credit data: Monitor the credit report to ensure everything is in order.
- Formal and documented contact with the bank: Sending a written notice describing the event and demanding a freeze on funds.
- Securing accounts: Changing passwords and performing security measures on all relevant accounts.
Legal aspects and fundamental terms
- "Notice without delay": The Payment Services Law requires quick reporting of misuse. Acting on the first day helps meet this requirement.
- Duty to mitigate damages: The victim must act with reasonable measures to prevent the increase of damages, and reporting to the official authorities is part of this duty.
- Possibilities for recovery: The Payment Services Law outlines a framework for reviewing the recovery of funds. Having a police complaint makes it difficult for the financial body to claim that no fraud incident occurred.
The first day is a significant and demanding stage. You may encounter bureaucratic barriers, but it is important to remember that every document, record, or confirmation you obtain on this day constitutes a central part of building the evidentiary infrastructure for handling the case in the future. The effort invested in documentation and reporting is the first step on the path to asserting your rights.
1586 words · 8 min read