Rotterdam's Team Cybercrime says banks flagged a new fraud pattern in mid-September through the Electronic Crimes Task Force. Victims got calls with AI-generated voice clips (dozens of voices, banks and scenarios) warning of suspicious account activity. Pressing 1 connected them to a fake bank employee, who had them install an app and hold their bank card against the phone to "block" it. The app relayed the card's contactless NFC data in real time to a money mule's phone at an ATM, and thousands of euros were withdrawn per victim.

While police watched the group's servers for three weeks, it made about 170 victims of all ages and stole roughly €380,000. Two men (23, Vaassen, suspected technical lead; 25, Ede, suspected coordinator) were arrested on Oct 6, the servers were taken offline, and on Oct 20 a court extended their detention by 90 days.

For security teams and banks: NFC relay to an ATM defeats "the card never left my hand." Tell users that no bank asks them to install an app, tap their card on their phone or share a PIN. On managed Android fleets, block sideloaded apps that request NFC and accessibility permissions.