The first loss is not always money leaving the account. A bank statement shows income timing, account details and debit-order patterns. A pension document or payslip reveals source of funds. An ID copy, proof of address, tax number and eFiling detail can turn a simple phishing attempt into a complete taxpayer file.