Chapter 84: The Map of Entities: Who to Contact and in What Order

The following scenario is a pedagogical example based on common fraud patterns. The characters and events are for illustration purposes only.

It was two in the morning when Sarah felt the familiar vibration of her phone on the nightstand. She was a seventy-two-year-old widow, a retired literature teacher who always prided herself on the sharpness of her mind. But at two in the morning, with the room shrouded in shadows and sleep still clinging to her eyelids, that sharpness is a luxury no one possesses. The message "Message from the Bank" appeared on the screen.

"Dear customer," it read, "suspicious activity has been detected in your account. If you are not currently executing a transfer of 14,500 NIS, click here for immediate cancellation." Sarah, with a pounding heart, clicked. She was directed to a page that looked exactly—but exactly—like her bank's website. She entered a username, password, and the verification code sent to her via SMS a second later. Only when the screen went white and the phone fell silent did she realize something was amiss. When she logged into the real account in the morning, she discovered in this scenario that her balance had dropped by 80,000 NIS. All her savings for the kitchen renovation and her grandson's Bar Mitzvah had disappeared within six minutes of nocturnal terror.

When Sarah's son, Oren, arrived an hour later, he found her in the kitchen, trembling, holding the phone as if it were a ticking bomb. "We need to call the police," he said. "No, the bank!" Sarah replied. "Maybe a lawyer? Maybe the news?" This confusion, the helplessness in the face of the bureaucratic maze, is the scammers' most powerful weapon. They bank on the fact that while you run in circles between one clerk and another, your money will already be undergoing laundering cycles in foreign countries.

This chapter is intended to bring order to the chaos. It is your map in the hostile territory of "the day after." It will define who it is recommended to contact, why you contact them, and what the sequence of actions is that might influence the chances of recovering the funds.

The Chaos Before Order: The Case of Sarah and the Tactical Error

In the pedagogical scenario, Sarah and Oren did what most people do: they started from the end. Oren first called his friend who works in the police cyber unit. The friend, with all the good intentions, was on vacation. Afterward, they tried to reach the bank's general customer service center, where they waited a long time on the line, only to hear from the representative that she was "not authorized to handle fraud incidents" and that they needed to call the security department—which had closed ten minutes earlier.

During this time, Sarah's money made its way to an unidentified digital wallet. Sarah and Oren's mistake in this scenario stemmed from a lack of a "roadmap." They acted out of emotion, not out of strategy. In the world of digital fraud, time is a significant factor. Every minute that passes is a minute in which the bank may later argue that "the customer was negligent in reporting," a claim often raised in an attempt to reduce liability under the Payment Services Law, 5779-2019.

Sarah's feeling—a mixture of shame, rage, and despair—is natural. But we must separate the emotion from the legal and technical action. The goal is to create documentation of every stage and to exert pressure on the relevant entities to fulfill their duties. The law in Israel imposes duties on banking corporations and credit card issuers, but to trigger these duties, it is recommended to act according to an organized protocol.

The Operational Hierarchy: The Bank and the Credit Card Issuer on the Front Line

The first entity to contact is the financial institution where the money is managed. If the money left the bank account, contact the bank. If credit purchases were made, contact the credit card issuer. These entities have the technical ability to perform immediate stop actions.

In this conversation, you must be brief and concise. The representative facing you is looking for keywords: "fraud," "unauthorized transaction," "account blocking." According to the Payment Services Law, after the payer (the bank or credit card issuer) is notified of theft or misuse of a "payment instrument" (which includes authorization to access an application), the division of liability for future transactions can be examined.

It is important to remember that a claim may sometimes arise that this involves "delivering the payment instrument to others under unreasonable circumstances," which may affect the question of liability. Therefore, in the conversation with the bank, documentation is extremely important. It is recommended to record the representative's name, the exact time of the call, and request a "case number" or "incident number." Recording the conversation may assist in proving the immediate report.

What can you request from the bank?
1. Immediate blocking of access to the website and application.
2. Examination of the possibility of performing a "Recall" of transfers that have not yet been completed. In the banking system, there is sometimes a very narrow window of opportunity to stop transfers pending final clearing.
3. Inquiry into the destination details of the money—beneficiary name, account number, and destination bank. This information may assist in further processing.

Professional Analysis: The Role of the Bank in the Process

It is important to understand that the bank is a business institution operating according to procedures and economic interests. If it is identified that there was negligence on the part of the customer, the information may be used by the bank in a future proceeding. Therefore, it is recommended to describe the facts accurately: "I received a message that appeared to be an official message, I acted according to instructions that seemed legitimate, and I discovered that the account was breached."

The Sovereign and the Law: The Israel Police and the Privacy Protection Authority

After blocking the account, the next body on the list is the Israel Police. Over the years, a sense of skepticism has often arisen among victims regarding the police's ability to actually recover the funds. However, from a legal perspective, the confirmation of filing a complaint with the police is an essential document. Many banks require seeing such confirmation as part of the process of reviewing a request for fund recovery.

The complaint to the police constitutes a formal declaration of the commission of a crime. Today, one can file an online complaint on the police website, but in cases of fraud involving significant amounts, one should consider arriving physically at the station. In the complaint, it is important to provide technical details: the account numbers to which the money was transferred, the phone number from which the message was sent, and the address of the fraudulent website. This information may assist in identifying behavioral patterns that repeat themselves with other victims.

The Privacy Protection Authority

Another body to which one can turn is the Privacy Protection Authority at the Ministry of Justice. If the fraud occurred following a data breach from another entity, it may be appropriate to report it. In cases where companies did not protect information properly, questions may arise regarding their professional liability.

Supervision and Support: The Bank of Israel and the Israel Securities Authority

In cases where a claim of negligent handling by the bank arises—for example, if the systems did not detect an unusually abnormal transfer—one can turn to the Banking Supervision Department at the Bank of Israel.

The Supervision Department operates a public inquiries unit that deals with regulatory clarification. This is a process that allows for examining whether the bank complied with procedures and the supervisor's circulars (such as the "Management of Banking via Communication" circular). The findings of the supervision may serve as significant evidence in future legal proceedings.

In cases of investment fraud promising abnormal profits in Forex or gold trading, the relevant body is the Israel Securities Authority. The Authority maintains lists of entities that are not authorized to operate in Israel, and turning to them may lead to enforcement actions against local intermediaries if they exist.

It must be remembered that the responsibility of these bodies is supervisory in nature. They may instruct the bank to re-evaluate its position if a breach of a regulatory instruction is proven.

Strategy of the Struggle: Crisis Management in Real Time

When building an action plan in the event of suspected fraud, several critical stages can be defined:

First minutes: Operational blocking. Immediate contact with the bank's emergency hotline to stop transfers and block digital access.
First hour: Collecting documentation. Saving screenshots of messages, website addresses, and transfer details in a secure folder.
First hours: Formal reporting. Filing a complaint with the police and obtaining a case number.
Continued handling: Formal written request. Filing a detailed letter to the bank's public inquiries department demanding the review of fund recovery in accordance with the Payment Services Law.
If necessary: Turning to regulators. If the bank's response is insufficient, one can turn to the Banking Supervision Department.

In Sarah's pedagogical scenario, after a professional examination of the sequence of events, a claim could have been raised that the bank did not activate appropriate verification mechanisms for a transfer of such magnitude to a new beneficiary. In such a case, after examining the evidence, the parties might reach a settlement returning part of the amount, while taking into account the circumstances of the case and the duty of care of the banking corporation.

The Role of Legal Representation

During years of professional work, it is evident that many victims wonder about the necessity of legal representation. Professional support may assist in translating events into legal and regulatory language, while addressing the bank's fiduciary duties, potential monitoring failures, and the division of liability under the law. The more the initial actions are documented and organized, the better the legal options available to the victim can be examined.

Warning Signs (When is it recommended to start acting?)

• Receiving a verification code via SMS for an action you did not initiate.
• A phone call from someone presenting themselves as a bank representative and asking for a code sent to the mobile device.
• A notification about "account locking" that includes an external link.
• Identifying unfamiliar movements in small amounts in the account.

What to Do Immediately (Operational Checklist)

1. Disconnect from the network: Putting the device in airplane mode if there is a fear of remote hacking.
2. Contact the bank: Immediate calling to the fraud hotline and requesting a block.
3. Documentation: Screenshots of all relevant information.
4. Securing accounts: Changing passwords for essential services from another, clean device.
5. Reporting: Filing a complaint with the police as soon as possible.

Legal Aspect: Payment Services Law, 5779-2019

This law constitutes a central legal framework in fraud incidents. It stipulates that in the case of "misuse" of a payment instrument, the customer's liability may be limited, unless it is proven that the customer acted with fraudulent intent or delivered the payment instrument under unreasonable circumstances.

The question of what is considered "unreasonable circumstances" has been examined over the years in the courts, especially as social engineering frauds become more complex. A legal argument that can be examined is that even if the customer erred, the banking system has a duty to operate technological measures to prevent abnormal activity. The map presented in this chapter is intended to assist in centralizing the data required for examining these claims.

The discovery of fraud requires calculated action. Acting according to the hierarchy of authorized bodies, while meticulously documenting, may improve the ability to handle the event on the legal and economic level.