The Tutela Digitalis Impersonation Index

A structured record, in 27 entries, of what the most frequently-impersonated organisations publish about how they will and will not contact you — set against what the scam impersonating them actually does. Reviewed June 2026. 27 records across 6 categories: • Government & tax: 7 • Banks & transfers: 3 • Payment apps: 2 • Delivery & post: 8 • Tech, email & streaming: 6 • Crypto: 1 An entry is not always a single company. Five entries group closely related bodies that publish the same position — Venmo & Cash App; Australia Post & Linkt; ATO & myGov; Zoll, Finanzamt & Österreichische Post; and Meta (Facebook & Instagram) — and one entry, your bank (any bank), is deliberately generic because the never-statement holds across retail banks rather than naming one. So the 27 entries cover roughly thirty named organisations. Counting entries rather than companies is what the data actually supports. Every one of the 27 entries records an organisation that publishes a statement of what it will never do — never text a payment link, never phone asking you to move money, never ask for a full card number. The guidance already exists, published by the very institutions being impersonated. What does not exist is distribution: almost no consumer has seen it at the moment it would matter. That reframes impersonation fraud as a distribution problem wearing an awareness problem's clothes. • name, aliases — the organisation and the search terms scammers exploit • cat — category (gov, bank, app, delivery, tech, crypto) • regions — where the guidance applies • position — the organisation's own published stance • never — the specific things it states it will never do • verify — the channel it directs you to instead • source_label, source_url — the organisation's own page the row is taken from • pattern — the scam pattern that contradicts the stated position 27 of 27 records carry a source URL to the organisation's own published guidance or a named regulator. No quotes are fabricated: where an organisation publishes an exact line it is kept verbatim; otherwise its documented guidance is paraphrased and attributed. Compiled and published by Tutela Digitalis, an independent fraud-education project with no vendor, platform or advertiser funding. Live version: https://www.tuteladigitalis.com/impersonation-index Every count in this README is DERIVED from the records in the accompanying files, not entered by hand. If a figure here disagrees with the data, the data is correct. This is a point-in-time record. Regimes, policies and corporate guidance change; the review date is stated above and each record carries its own source URL so any claim can be checked at source rather than taken on trust. Licence: CC BY 4.0. Free to reuse with attribution. Corrections are welcomed and acted on — contact [e-mail].