the head of the police’s Investigations and Intelligence Division Deputy Commissioner, Boaz Balat, has issued an unusual warning to Israeli technology companies specializing in social media promotion ahead of the 2026 election, urging them not to take part in improper influence operations on behalf of political parties running for the Knesset. Police also plan to meet with those companies and approach additional firms this week.
A letter signed by Balat and obtained by Yedioth Ahronoth and ynet was sent last week to Israeli technology companies specializing in social media promotion. Some services in the field include buying followers and likes, creating an appearance of widespread popularity, or using fictitious users to attack and smear political rivals.
Concern over influence on the coming election
Earlier this month, Israeli watchdog FakeReporter published the findings of an investigation that uncovered a network of fictitious profiles used to promote a candidate in the Likud primaries in Jerusalem-based Facebook groups. Dozens of posts and comments in local Facebook groups called on users to support her and portrayed her as enjoying broad backing among city residents.
The investigation found that the apparent wave of support was actually generated by a coordinated network of fake users. Posts urged people to follow the candidate on social media, and shortly afterward numerous “users” appeared in the comments to lavish her with unusually enthusiastic praise.
An examination of the profiles revealed a clear pattern: Most had been created shortly before the primaries, used AI-generated images and contained almost no personal activity or genuine friends. The accounts were also “friends” with one another and operated in coordination, with one posting content and the others immediately responding with supportive comments. The candidate ultimately failed to win despite the influence campaign.
The main concern now is that parties competing in the coming election will not hesitate to use similar methods, including what police describe as dirty tricks or efforts to artificially boost their own popularity through fake bots and accounts in support of their campaigns.
The Investigations and Intelligence Division has been preparing for months for the election, seeking to identify activity by foreign states or hostile actors attempting to interfere in Israel’s vote, as well as influence operations by Israeli actors seeking to sway voters.
“The 2026 election campaign is expected to present technological and other challenges that we have not faced before regarding the possibility of criminal offenses that could undermine the proper conduct and integrity of the elections, and in doing so damage public confidence in the democratic process,” the division said. “The Israel Police is preparing to address these challenges.”
Boaz Balat
(Photo: Israel Police)
Police warn of legal liability
Israel Police views technology companies as key partners in protecting the digital sphere and public confidence and is encouraging them to operate responsibly and maintain oversight during the election period.
In the letter obtained by ynet and Yedioth Ahronoth, Balat wrote: “I found it appropriate to draw your attention to the potential for unlawful use of technological systems, both for disseminating false content and through unlawful distribution methods that create a false impression regarding the source of the information or its authenticity.
“In addition, I wanted to present you with suspicious indicators and several recommendations for preparation, in order to avoid cooperating with requests that may reach you and could constitute a criminal offense, while using your company as a tool to operate automation systems, bots and multiple accounts that enable the rapid and coordinated distribution of content on a large scale, the dissemination of false information, the creation of artificial displays of support, impersonation and concealment of the identity of those involved.”
Balat also stressed that “assistance in concealing identity, circumventing restrictions or continuing to provide a service after a substantial suspicion has arisen may create legal liability for the company, depending on the circumstances. Likewise, failure to examine a substantial suspicion may be taken into account when assessing responsibility, without detracting from the need for an individual legal examination in accordance with the law.”
The Investigations and Intelligence Division compiled a list of suspicious indicators companies should watch for:
- Engagements or usage patterns involving the coordinated operation of large numbers of accounts, identities or phone numbers that falsely present themselves as something they are not; unusually large volumes of content, comments or messages designed to appear authentic; or political messaging presented as independent human activity even though it originates from an automated or coordinated system rather than real individuals
- Use of fictitious identities or details that do not match the identity of the person commissioning the service; requests to conceal the identity of the client, the party financing the activity or its beneficiary; or arrangements conducted through intermediaries, shell companies, entities outside Israel or a chain of suppliers inconsistent with the type of service requested
- Requests to use personal databases, lists of phone numbers or user data whose origin is unclear and that are not publicly available; activity involving impersonation of an individual, candidate, political party, public authority or news organization; or dissemination of false or misleading information about the election date, polling location, voting procedures or the identities and positions of those participating in the electoral process
- Attempts to circumvent rate limits, verification mechanisms, security measures, platform rules or systems designed to detect inauthentic activity; as well as sudden and unexplained changes in the volume of activity, number of accounts, geographic areas of operation, content being distributed or identity of those managing the engagement
The division stressed that “a single characteristic does not necessarily indicate prohibited activity. However, an accumulation of warning signs, contradictions in a client’s explanations, avoidance of providing basic details or continuation of activity after substantial concern has arisen regarding its purpose require increased scrutiny and, where appropriate, restriction, suspension or termination of the service and reporting, in accordance with the law and the terms of the engagement.”
In cases involving suspected harm to election integrity or computer-related offenses, companies should contact Israel Police or the Cyber Division’s international liaison unit.
Police said cooperation, early identification of suspicious activity and effective oversight mechanisms could help reduce potential harm to the integrity of the democratic process.