Document Fraud and Computer Fraud – Differences Between Articles 212 and 212a of the Bulgarian Criminal Code

Document fraud and computer fraud may cause similar property damage, but they operate through different mechanisms. Correct classification is important for the accusation, the evidence and the defence.

Document fraud under Article 212

In document fraud, the perpetrator uses a document containing false information, a forged document or an altered document to obtain movable property without legal grounds and with intent to appropriate it. The type, authorship, content and use of the document, as well as the causal link with obtaining the property, must be examined.

Computer fraud under Article 212a

Computer fraud involves entering, altering, deleting or suppressing computer data, or using another person’s electronic signature, in order to obtain a benefit and cause damage. The technical interference is central to the criminal result.

The main distinction

Under Article 212, the decisive element is the use of a document as the means of obtaining the property. Under Article 212a, the result is achieved through interference with data or electronic authentication. The fact that communication took place online does not by itself make every fraud a computer fraud.

Can several offences be involved?

A single case may involve more than one offence, such as creating and using a forged document, unauthorised access and a subsequent transfer of funds. Whether the offences are separate or one absorbs another depends on the specific acts.

Evidence in document fraud cases

• the original document and its chain of custody;
• handwriting, technical and accounting expert reports;
• evidence identifying who created and used the document;
• the decision to transfer the property and the causal link.

Evidence in computer fraud cases

• logs, IP addresses and access records;
• forensic copies of devices;
• banking transactions and subsequent movement of funds;
• electronic-signature and trust-service data;
• expert examination of information systems and records.

What should be examined?

Authorship, intent, the purpose of obtaining a benefit, the specific damage and the reliability of digital evidence must be established. Proper seizure, preservation of data integrity and the possibility that another person performed the acts are particularly important.

Related articles

• Fraud under Article 209 of the Bulgarian Criminal Code
• Internet fraud, phishing and bank-transfer scams
• Computer offences outside Chapter Nine “a”

This article provides general information and is not legal advice for a specific case. For a consultation, you may contact attorney Mihail Tomov.