Dutch law enforcement has arrested two men suspected of orchestrating a sophisticated banking fraud scheme that leveraged artificial intelligence to deceive 170 victims. According to The Daily Hodl, the Rotterdam police cybercrime team took the suspects into custody on October 6, alleging they drained approximately €380,000, or $423,114, from victims' accounts in a span of just three weeks. The case highlights a new vector for financial crime that combines automated voice synthesis with physical payment terminal manipulation.

BTC / USD
Source: CoinGecko. Prices are indicative.

AI-Driven Deception Method

The investigation revealed that the suspects employed AI technology to generate dozens of audio recordings featuring various voices, bank names, and corporate scenarios. Victims received phone calls containing these recordings, which warned of suspicious activity on their accounts. When victims pressed a specific key, they were connected to a fake bank employee who followed a scripted dialogue. The Daily Hodl reports that the impersonators urged victims to act quickly to block their cards, creating a sense of urgency that bypassed typical security checks.

Contactless Card Data Extraction

The fraud extended beyond the initial phone call. Victims were instructed to download a specific application and hold their bank card against their smartphone. Police state that this action allowed the app to transmit data from the card's contactless chip to a separate application used by an accomplice. This accomplice, positioned at an ATM or payment terminal, could then withdraw substantial sums of money without the victim's knowledge. The victims, who ranged in age and came from all over the Netherlands, were unaware that their card details had been cloned for immediate use.

Investigation and Detention Status

The probe initiated in mid-September after Dutch banks reported the novel method to the Electronic Crimes Task Force, a collaborative body involving banks, police, and prosecutors. The 23-year-old suspect from Vaassen is believed to have developed the technical infrastructure and directed the group, while the 25-year-old from Ede coordinated the operations. Authorities have seized the servers, phones, and laptops associated with the scheme. A Rotterdam court ordered on October 20 that both men remain in custody for a minimum of 90 days. Ruben van Well of the Rotterdam cybercrime team noted that this professional-sounding caller represents a new technical threat that banks have not previously encountered.

What to Watch Next

As the case proceeds through the Dutch judicial system, attention will turn to whether additional accomplices are identified. Financial institutions are likely to review their customer communication protocols to distinguish legitimate security alerts from AI-generated impersonations. Furthermore, the Electronic Crimes Task Force may issue broader advisories to the public, emphasizing that banks will never request customers to download apps or hold cards against phones for verification purposes.