Tax Evasion in Integrated Fiscal and Electronic Payment Systems: Vulnerabilities, Detection, and Mitigation in the Greek Digital Tax Ecosystem
This paper presents a technical analysis of Greece's integrated digital tax ecosystem, identifying specific vulnerabilities in the interaction between fiscal devices, ERP systems, and EFTPOS terminals that enable tax evasion, and proposes a multi-layered mitigation strategy combining cryptographic enhancements, regulatory unification, and AI-driven reconciliation to ensure end-to-end payment integrity.
Original paper licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
In the modern economy, every time a credit card is swiped, a digital promise is made. The bank agrees to move money, and the shop agrees to record the sale. For tax authorities, this digital trail is vital; it is the only way to know if a business is reporting its true income or hiding cash under the counter. To stop people from evading taxes, many countries have built systems where the machine that prints the receipt is physically locked to the machine that processes the card. This ensures that if a payment happens, a receipt must be created. However, as technology evolves, new layers of software are inserted between these machines to make business management easier. The question facing modern tax systems is whether these convenient middlemen create a hidden backdoor where money can disappear before the taxman ever sees it.
A team of researchers from Greek universities has taken a deep look at exactly this problem within Greece's highly digitized tax system. They examined how the country connects its certified tax machines, its card payment terminals, and the various software programs businesses use to manage their accounts. Their investigation reveals that while the core system is built with strong, tamper-proof safeguards, a specific way of connecting these systems through third-party software creates a dangerous gap. They found that a dishonest business owner, working with a compromised software system, could successfully take a credit card payment but prevent the tax machine from ever knowing the transaction happened. The money would sit in the bank, but the tax record would remain blank.
The researchers began by explaining how the Greek system is supposed to work. At the heart of the process are special tax machines, such as cash registers and printers, that are sealed and certified by the government. These devices have a unique feature: they keep a permanent, unchangeable log of every sale. When a sale is made, the machine creates a digital fingerprint of the receipt and links it to the previous sale, forming a chain. If anyone tries to delete or alter an old record, the chain breaks, and the system knows something is wrong. This chain of digital fingerprints is sent to a central government server, creating an undeniable record of what happened. When a customer pays with a card, the tax machine is supposed to talk directly to the payment terminal. The tax machine tells the terminal exactly how much to charge, and the terminal sends a confirmation back. This direct conversation ensures that the payment and the receipt are locked together.
However, the study focused on a newer method allowed by the government, where a business's main accounting software sits in the middle of this conversation. Instead of the tax machine talking directly to the payment terminal, the tax machine sends a request to the accounting software, which then forwards it to the terminal. The researchers identified a critical flaw in this arrangement. Because the accounting software is not a certified, tamper-proof device like the tax machine, it has the power to decide what messages get through. If a business owner wants to hide a sale, they could instruct their software to accept the credit card payment but simply delete the confirmation message before it reaches the tax machine. The bank would see the money arrive, but the tax machine would never print a receipt or send a record to the government. The researchers call this a "suppression" of the result, and it leaves the tax authorities with a blind spot where a successful payment exists without a corresponding tax record.
To understand the scale of this risk, the team looked at real data from hundreds of tax machines across Greece. They compared the sales recorded in these machines over several years. They found that while sales generally grew, there were periods where the growth seemed to slow down or even reverse. The researchers noted that this could be partly because some businesses were switching to different types of software that recorded sales outside the traditional tax machine logs. While this data did not prove that tax evasion was happening, it highlighted that the system's ability to track every single transaction was becoming fragmented. The study then used computer simulations to show what would happen if the proposed fixes were put in place. In these simulations, when the system was forced to create a secure, unbreakable link between the payment and the receipt, the number of "missing" transactions dropped significantly. The simulations suggested that if the government could force the accounting software to act as a transparent messenger rather than a gatekeeper, they could recover a substantial amount of unreported tax revenue.
The researchers proposed a clear path forward to close this gap. They argued that the rules need to be updated so that every time a payment is made, the result must be signed with a digital seal that cannot be forged, and this seal must be visible to the government regardless of which software is in the middle. They also suggested that the tax authorities should automatically compare the list of payments made by banks with the list of receipts sent by businesses. If a bank says a payment was successful but the tax system has no record of it, that should trigger an immediate alert. This approach does not rely on trusting the business owner; it relies on the math of the digital signatures and the power of automated comparison.
The study concludes that while Greece has built one of the most advanced digital tax systems in the world, its strength depends on the weakest link in the chain. Currently, that weak link is the software that sits between the tax machine and the payment terminal. By tightening the rules so that this software cannot block or hide successful payments, the system can regain its full power. The researchers emphasize that their work is not just about fixing a technical glitch; it is about ensuring that the digital economy remains fair. If a payment is made, a record must exist. If that record can be hidden by a piece of software, the entire system of trust begins to crumble. The solution lies in making sure that every digital handshake between a bank and a shop leaves a permanent, unalterable mark that the government can see.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.