Dutch police collar teen over string of bank card frauds • The Register

Dutch police have arrested a 17-year-old boy suspected of orchestrating a nationwide string of bank card frauds that netted tens of thousands of euros from victims across the Netherlands.

The arrest came after detectives from the police department of Woerden municipality linked the teenager to 16 separate cases of bank employee fraud dating back to September 2025. According to police, the accused, who resides in Utrecht, allegedly impersonated bank staff to trick victims into surrendering their payment cards, then used them to withdraw large sums of cash from ATMs.

Police colleagues from other units recognized the boy from similar cases they had dealt with and shared their information with their Woerden colleagues. The Woerden detectives collected all the reports and took over investigations from the rest of the Netherlands. They ultimately identified 16 bank employee fraud cases from across the country in which this suspect was likely involved.

The specific techniques used to acquire the physical payment cards were not detailed in the police announcement. However, the wording suggested that the suspect was caught on camera while withdrawing cash using the illicitly acquired cards, leading to his identification through surveillance footage.

This case highlights the ongoing challenge of social engineering fraud, where criminals impersonate trusted institutions to gain victims' confidence. The teenager allegedly convinced victims they were victims of fraud - ironically making them victims by convincing them to hand over their cards to someone they believed was a bank employee.

In the Netherlands, the age of criminal responsibility begins at 12, with offenders tried as juveniles between ages 12 and 17. This distinction could prove important as prosecutors decide how to proceed with the case.

The arrest follows a similar pattern seen in other European countries. Just days earlier, Polish authorities arrested seven young people aged 12 to 16 for allegedly selling DDoS tools for profit. Both the Netherlands and Poland favor re-education over punishment for young cyber offenders, at least in initial instances.

Between 2019 and 2021, the Netherlands ran the Hack_Right program, established by the Public Prosecution Service as a pilot scheme for young cyber offenders aged 12 to 23. The program sought to provide an alternative to legal punishments by favoring re-education rather than prison time. While later evaluations noted that young offenders were generally encouraged to pursue legitimate cybersecurity careers, some participants were disillusioned by the lack of technical knowledge held by program supervisors.

The case serves as a reminder of the sophisticated social engineering tactics employed by modern fraudsters and the particular vulnerability of elderly or less tech-savvy individuals to impersonation scams. Financial institutions continue to warn customers about the importance of never sharing banking credentials or cards with anyone claiming to represent their bank, regardless of how convincing the caller may seem.

The investigation remains ongoing as police work to determine the full extent of the teenager's alleged activities and whether additional victims may come forward.