Incident
Published 2026-10-21 New
Verified 2026-10-28

Dutch police arrest two over new bank-helpdesk fraud that used AI-generated voice calls and an NFC relay app to empty accounts: about 170 victims and €380,000 in three weeks

Dutch police (politie.nl, 21 October 2026) said Rotterdam's Team Cybercrime arrested two men, aged 23 from Vaassen and 25 from Ede, on 6 October in an investigation led by the Public Prosecution Service into a new form of bank-helpdesk fraud.

According to the police, victims received calls playing AI-generated voice clips about suspicious activity on their account; those who pressed 1 were put through to a fake bank employee who pressured them to download an app and hold their bank card to their phone to 'block' it. The app relayed the card's NFC chip data to an accomplice standing at an ATM, who withdrew thousands of euros. In the three weeks the team had sight of the group's servers, police saw about 170 victims and about €380,000 in losses, with victims of all ages from across the Netherlands.

Police had the servers taken offline. The 23-year-old is suspected of being the technical lead, the other of a coordinating role; on 20 October a Rotterdam court ordered them held for at least 90 more days.

Security Affairs reported the case on 26 Oct.

Product
Bank cards (contactless NFC) and Android phones — social engineering
Versions
n/a — law-enforcement action
Exploited in Australia?
unknown
Patch to
Your bank will never ask you to download an app, hold your bank card against your phone or give your PIN (Dutch police). Hang up and call your bank on its official number; if you were caught, contact your bank immediately and report it to police.

breaches ai