Identity Theft Leads to Massive Tax Bill, Highlighting Consumer Protection Gaps

A man was hit with a nearly 1.05 million shekel tax assessment after fraudsters used his stolen identity to open a business account. The incident, which began in 2019, involved the opening of an authorized dealer account with the Tax Authority under the victim's name for a fuel and oil business. The Tax Authority subsequently issued assessments of approximately 520,000 shekels in 2019 and another 525,000 shekels in 2020.

The victim, who was abroad for about two years, discovered the issue upon his return. His civil lawsuit was dismissed by the Tel Aviv District Court, with the judge ruling that tax assessments must be challenged through formal appeals to the Tax Authority within statutory deadlines. The court emphasized that the debt remains valid until such legal avenues are pursued.

This case highlights a critical gap in consumer protection, particularly concerning new accounts or loans opened using stolen identities. While existing credit card or bank account misuse has limited liability for the customer (capped at 450 shekels under specific conditions), new financial products opened fraudulently fall outside this protection. Resolving these requires direct, written communication with the credit-granting institution, supported by a police report.

The article also details a data leak from the fintech company Revolut in September 2026, where customer data, including transaction histories and identification documents, was obtained by fraudsters who impersonated a government agency. This information was then used to open fraudulent accounts and loans. The report outlines ten steps individuals should take if their identity is compromised, including notifying financial institutions, blocking cards, changing passwords, filing a police report, and checking credit reports.

It was also noted that the Israeli banking system is working to prevent SIM-swapping fraud, where fraudsters take over a victim's phone number to bypass authentication codes. A joint task force has mandated explicit customer consent for number porting and established a central server for banks to verify ported numbers.