A subset of problems would be "how to differentiate citizen's agents from scammers/DoS attacks".