I’ve been ranching numbers since the Reagan years, and I’ve seen every brand of cattle rustler the bookkeeping world can throw at you. But this latest stunt out of Israel—crooks busting into good-faith companies and planting million-dollar phony invoices like ticks on a hound—well, that’s a new low. If the big boys can get skinned, what chance does a one-chair freelancer have? Plenty, if you quit trusting luck and start locking the gate.
The New Cattle Rustle: Ghost Invoices
How the Swindle Works
Hackers worm into the GOV.IL portal, swipe a CEO’s login, then slide counterfeit invoices straight into the company’s accounting cycle. The invoices look legit, carry real VAT numbers, and ride the same digital trail as honest bills. Months later the tax man knocks asking why you claimed a ten-million-shekel expense you never heard of. By then the thieves are gone and you’re left holding the branding iron.
Why It Costs Everyone
Every fake invoice steals tax offsets that honest folks rely on to stay competitive. Israel’s “Israel Invoices” program blocked NIS 25 billion in ghost deductions last year alone—money that would’ve otherwise vanished from schools, roads, and defense. When the till runs short, governments raise rates or crank up audits. Either way, the small operator pays the difference.
Freelancers: The Next Easy Mark
You might think, "I’m just a solo designer, too small to matter." Nonsense. Identity thieves love low-profile targets because you rarely reconcile books until April. One planted invoice for a $30k "software license" can double your VAT refund and wave a red flag in every revenue computer from Austin to Tel Aviv. The first time you hear about it is when the letter shows up demanding penalties and interest.
Lock the Barn Before the Horse Bolts
1. Use a Single, AI-Guarded Invoice Door
Stop juggling spreadsheets and five different PDF templates. Run every invoice through one system that timestamps, hashes, and stores a tamper-proof copy. Invoice Gini does exactly that: you speak the details, it spits out a numbered PDF, and nobody—especially not some Ukrainian keyboard cowboy—can slip in a fake later.
2. Turn on Real-Time Approval Numbers
Israel’s tax cops now demand an approval number before you can deduct VAT. Even if your country hasn’t followed suit, adopt the habit. Any invoice lacking a live, traceable number is guilty until proven innocent.
3. Reconcile Weekly, Not Yearly
Pick Friday afternoon, pour a cup, and match every invoice to a bank swipe. Ten minutes beats ten months of heartburn. If an invoice shows up you didn’t issue, you’ll smell it while the trail is still warm.
4. Freeze Your Gov Login Like It’s Your Credit
Two-factor authentication isn’t for big shots anymore; it’s for anyone with a password. Use an app, not SMS, and keep the backup codes in a firebox. If the tax office offers biometric login, take it. Convenience won’t pay your legal fees.
What the Pros Say
“Company owners and CFOs have reported discovering invoices in their systems that were not issued by them, sometimes for huge amounts of tens of millions of shekels.”
That line comes straight from the Israeli officials on the front line. When the big ranchers are crying wolf, the small grazers better circle the wagons.
Bottom Dollar
Invoice fraud moved from back-alley printers to back-office servers, and the freelancer typing in a coffee shop is now on the same battlefield as the Fortune 500. You can’t stop hackers from trying, but you sure can make your pasture harder to cross. Get one reliable invoicing gatekeeper, reconcile early, and keep your government keys under lock. Do that, and you’ll sleep sound even when the cyber coyotes howl.
Source: Tax Authority combats fake invoices linked to identity theft