Every year, thousands of taxpayers review their tax information before submitting their annual tax return. For some, the surprise comes when the Spanish Tax Office (AEAT) attributes gambling winnings to them from online betting platforms they have never used. Behind this situation may lie an increasingly common problem: identity theft in online gambling accounts.
When Fraud Ends Up in Your Tax Records
Criminals may use personal documents obtained through data breaches, phishing scams or identity theft to open online gambling accounts in someone else’s name. Once the account has been created, they deposit funds, place bets and withdraw money using the victim’s identity.
The problem does not end there. Licensed gambling operators are required to provide certain information to the relevant authorities. As a result, winnings generated through these fraudulent accounts may become linked to the victim’s tax identification number and subsequently appear in the tax data made available by the Spanish Tax Office.
When this happens, the victim is faced with a bewildering situation: the tax authorities attribute gambling income to them that they never earned.
The Role of the Directorate General for the Regulation of Gambling
In cases such as these, the Directorate General for the Regulation of Gambling (DGOJ), which operates under Spain’s Ministry of Social Rights, Consumer Affairs and the 2030 Agenda, has specific mechanisms in place to protect citizens.
One of the most important is the Taxpayer Identity Theft Action Protocol, commonly known as the PACS system.
This procedure has been designed for individuals who discover that online gambling activity has been reported under their name despite having been carried out by someone fraudulently using their identity.
What Is the PACS System?
The PACS system enables an affected individual to report the incident to the DGOJ and request an investigation into the gambling accounts responsible for generating the disputed information.
Its purpose is to determine whether the taxpayer’s personal details were used fraudulently and to obtain relevant information from the gambling operators involved.
Through this procedure, the DGOJ may request documentation from operators in order to examine matters such as:
- The date on which the account was opened.
- The documents used during the identity verification process.
- The payment methods employed.
- The access records associated with the account.
- The gambling activity carried out by the alleged user.
This information is essential in establishing whether the affected individual genuinely conducted the activity or whether the case involves identity theft.
Steps an Affected Individual Should Take
Experts recommend acting swiftly as soon as the issue is identified.
1. Review Your Tax Information
The first step is to identify the gambling winnings or transactions attributed to you and gather all available documentation.
2. Report the Matter to the Police
Although a police report is not always a mandatory prerequisite for administrative action, it is strongly advisable to report the suspected identity theft to the relevant law enforcement authorities.
Such a report may serve as valuable supporting evidence throughout the investigation.
3. Request Action Through the PACS System
The affected individual may submit a request to the DGOJ explaining the circumstances and providing all relevant documentation.
Once the request has been received, the DGOJ will assess the information and may initiate enquiries with the gambling operators involved.
4. Keep Records of All Communications
It is advisable to retain copies of all correspondence, complaints, resolutions and communications exchanged with both the authorities and the gambling operators.
What About Your Tax Return?
The appearance of gambling winnings in your tax information does not necessarily mean that you must automatically accept them as your own.
Tax records are informational in nature and may contain inaccuracies or data that has not yet been fully verified. If an investigation into possible identity theft is underway, the affected individual may present supporting evidence to the tax authorities demonstrating that the gambling activity was not theirs.
As every case has its own particular circumstances, professional advice is strongly recommended, especially where significant sums of money are involved or there is a risk of a tax assessment being issued.
A Growing Problem in the Digital Age
The increasing digitisation of financial and entertainment services has created new opportunities for criminals specialising in identity theft. The online gambling sector is no exception.
For this reason, regularly reviewing tax information, monitoring suspicious activity involving personal data and taking immediate action when irregularities are detected have become essential safeguards.
When gambling winnings appear in your tax records despite never having placed a bet, you are not without recourse. The PACS system operated by the Directorate General for the Regulation of Gambling provides a dedicated mechanism for investigating such cases and helping to establish whether the reported activity genuinely belongs to the taxpayer or is the result of identity theft.
