Shocking Breach: Osaka Tax Official Leaks 259 Taxpayer Records in Police Impersonation Scam

On April 15, the Osaka Regional Taxation Bureau announced and profoundly apologized to the public after a male employee in his 20s leaked a total of 259 taxpayer records externally via LINE, following instructions from someone impersonating a police officer. This incident has drawn severe criticism from various quarters, as it significantly undermines trust in tax administration.

According to the Taxation Bureau's announcement, the incident occurred on April 13. The employee received a call on his personal smartphone from an individual claiming to be an officer with the Chiba Prefectural Police. The caller stated the employee's full name and informed him he was suspected in a case. Distraught, the employee, in an attempt to prove his innocence, followed the caller's instructions. He photographed 259 documents—179 individual taxpayer records and 80 corporate taxpayer records—displayed on his work computer screen with his camera and sent them through LINE. The employee stated he believed the caller after they showed what appeared to be a “police ID” via the screen.

After transmitting the information, while still on the phone with the caller, the employee consulted a colleague. It was then discovered that the phone number was associated with a known scam. The employee immediately ended the call. Regarding his actions, the employee explained, “I was shaken and just did as I was told to prove my innocence.”

Manabu Yamamoto, General Affairs Director of the Osaka Regional Taxation Bureau, issued a statement saying, “It is truly regrettable that an incident occurred that undermines the public's trust in tax administration, and we deeply apologize.” He further stated that the Bureau is committed to implementing preventative measures and establishing a robust system for the appropriate management of taxpayer information to prevent recurrence. The Taxation Bureau has already filed a police report and is individually contacting affected taxpayers to apologize, explain the situation, and advise them on precautions to prevent secondary damage.

On social media, the incident has provoked a flurry of angry and incredulous reactions, with comments such as “What about compliance?”, “Beyond foolish!”, and “The absolute worst thing to do.” Conversely, some comments showed an understanding of the specific tactics of “special fraud,” noting, “When rushed, authority is used, and thinking time is taken away, ordinary people fall for it,” and “Those with no prior exposure to crime are often easier targets.” However, criticism is strong regarding a public official falling for such a straightforward trick, with harsh opinions emerging like, “Handing over personal information while entrusted with national taxes is tantamount to complicity in fraud,” and “Immediate disciplinary dismissal is warranted.”

Experts also point to a growing trend of scams specifically targeting public officials, making it an urgent priority to further strengthen security awareness and information management systems across all organizations.

The context

The Osaka Regional Taxation Bureau is a branch of Japan's National Tax Agency, responsible for tax collection and administration in the Kansai region, including Osaka. It handles highly sensitive personal and corporate financial data, making this data leak a severe breach of public trust.

LINE is the most popular messaging app in Japan, similar to WhatsApp or WeChat, widely used for personal and sometimes informal work communication. The fact that sensitive data was transmitted via a personal account on this app highlights a significant security lapse.

“Special fraud” (特殊詐欺, tokushu sagi) is a common term in Japan for a variety of sophisticated scams, often involving impersonation (like police, government officials, or family members) and psychological manipulation to trick victims into transferring money or providing sensitive information. These scams are a significant social issue, particularly targeting vulnerable populations.

The public's strong reaction stems from the high expectations placed on government officials in Japan regarding integrity and data security. The concept of omotenashi (wholehearted hospitality) and meticulousness is often associated with public service, making such a lapse particularly shocking. The criticism also reflects a common concern that individuals working in public service, despite handling sensitive information, may sometimes lack adequate training or awareness regarding modern cyber threats and social engineering tactics. The reference to “police ID” (警察手帳, keisatsu techo) is important, as Japanese police officers carry a distinctive booklet used for identification, which a scammer might fake to establish credibility.