Israeli Police Warn of Widespread Scam Targeting Residents

Israel Police issued a warning on Wednesday, October 7, regarding a widespread fraudulent email and text message campaign targeting citizens. The scam messages, falsely purporting to be from the Lahav 433 cyber unit, accuse recipients of viewing child pornography and demand a response within 24 hours. Police officials emphasized that they have no connection to these messages and confirmed it is a scam. The warning came after numerous Israelis reported receiving these communications. The fraudulent emails typically feature subject lines such as "We have become aware that you have viewed material depicting minors engaged in explicit sex." They then provide instructions for replying and include threats of a prison sentence of up to three years if no response is given. Police are urging the public not to reply, click on any links, or download attachments from these messages, and to block the sender's contact information. This type of fraud, which aims to frighten individuals into paying to make a supposed investigation disappear, is not new and has been reported in Europe as well. Scammers exploit fear and shame, hoping recipients will hesitate to discuss the accusations with others or contact the real police. The fake messages are often styled as official notices from police or prosecutors, sometimes specifying child pornography to increase fear. Scammers may also use the names of real officials. While the initial contact might not demand money, its purpose is to draw the victim into correspondence. The Israeli scam, for instance, gives recipients 24 hours to respond before escalating pressure and demanding a fine under threat of prosecution, with payments going directly to the criminals. In some cases, fraudsters also attempt to steal personal data, such as passport photos, or use malicious links and attachments to install spyware or phishing software. Police noted that receiving such a letter does not necessarily mean their browsing history has been accessed or their devices compromised; obtaining an email address is often sufficient for the scam.