Incident·WS-0137·Oct 6, 2026·disclosed Oct 20, 2026 (14 days later)·in the wild·Deepfakes & fraud

Dutch police arrest two over bank-helpdesk fraud that used AI-generated calls and a card-cloning app: about 170 victims, about €380,000 in three weeks

Two suspects, 23 (Vaassen) and 25 (Ede), and accomplices; Rotterdam police cybercrime team and the Electronic Crimes Task Force; Dutch bank customers

32/100
WS-2 Moderate
Harm score 45, signal score 16. Autonomy: tool (a person misused it). How the scores work.
Harm 2/5
damage actually done
Reach 2/5
who was affected
Autonomy 0/4
how much the AI did on its own
Novelty 2/5
how new the behavior was
Permanence 3/5
how hard it is to undo

Rotterdam police arrested two men on Oct 6 over what they call a new form of bank-helpdesk fraud, per the police statement of Oct 20 and NL Times (Oct 21). Victims received automated calls with AI-generated recordings, dozens of variants with different voices, banks and scenarios, warning of suspicious account activity; those who pressed 1 were connected to a person posing as a bank employee who pressured them to 'secure' their cards by installing an app and holding the card to the phone. Police say the app relayed the card's contactless (NFC) data to an accomplice's app at a cash machine or payment terminal, who then withdrew thousands of euros. Server monitoring over three weeks documented about 170 victims across the Netherlands, dozens in their twenties and thirties, and about €380,000 in losses. Police describe the technical method as one they had not seen before. A Rotterdam court ordered both suspects held for at least another 90 days.

Damage

About €380,000 taken from about 170 people in three weeks

Sources

NL Times, second source. Dated to the arrests (Oct 6); the police statement is dated Oct 20. The AI's role is the mass-produced voice recordings that open the scam (passive tool, A=0); the card-relay app is conventional malware. politie.nl's page refused this run's fetch (403) and is linked as the primary; figures are as relayed by NL Times. Added to the AI Incident Database as incident 1788 on Oct 24.

Factor ratings and the score are this index’s judgments by a published formula; facts, dates and figures come from the linked sources. Where a lawsuit is pending, the summary reports allegations, not findings.