Dutch cybercrime hit 2.5 million in 2025 — and expats are prime targets

If you moved to the Netherlands on a residence permit, you may have already received a suspicious text message supposedly from your ‘bank’ or a ‘package delivery company’. New data from the Dutch police and the Public Prosecution Service (OM) shows that an estimated 2.5 million people in the Netherlands fell victim to cybercrime or online fraud in 2025 — and the methods are getting harder to spot, especially for internationals who may not yet know the standard procedures of Dutch institutions.

The figures come from the biannual Cybercrimebeeld Nederland report, published on 3 September 2026 by the OM and the police. The report warns that the threat is “changing rapidly” thanks to cybercrime-as-a-service, artificial intelligence, and a new generation of young, Western criminals who meet in online gaming communities. Even state actors — including those linked to Russia — are blurring the line between espionage and profit-driven crime.

What does this mean for you as an expat?

Fraudsters often impersonate Dutch banks, the Belastingdienst (tax authority), or gemeente (municipality) services. If you are not yet fluent in Dutch, you may rely on English-language versions of official websites — which scammers also fake. The report notes that criminals combine data from earlier hacks with newly stolen data to create highly targeted attacks, often posing as a bank or crypto platform to pressure victims into acting quickly.

Christa de Pagter, the national public prosecutor for cybercrime, told reporters: “Criminals combine data from earlier hacks with newly stolen data.” They use it to make more targeted attacks, she said, often posing as a bank or crypto platform to pressure the victim into acting. The report also highlights that AI now allows scammers to generate convincing phishing emails, voice clones, and even manipulated influencer content — making it harder to distinguish real from fake.

Young adults overconfident — and overexposed

A separate study by ABN Amro, released on 5 September, found that one in seven young adults (ages roughly 18–30) was hit by online fraud last year. The bank’s Fraud Helpdesk manager Marco Hendricks said: “Young adults spend a lot of time online, buy through social media, and often act quickly. That makes them attractive targets. And the more strongly you believe you can always spot AI, the greater the chance that it will catch you out.”

The study, conducted with the Global Anti-Scam Alliance, also found that six in ten young adults do not verify the contact details of online stores. Only 42% check the contact details of an online shop before buying. This overconfidence is especially dangerous for international students and young professionals who may be more likely to use unfamiliar platforms.

In response, ABN Amro has launched the ‘Just Begin Safe’ campaign, aimed at helping young adults recognise scams. The bank’s expert Kathelijne Swaak warned: “Fraudsters are now using AI to make their scams increasingly sophisticated. Examples include manipulated influencer content, voice clones, and fake text messages.”

State actors and teenage hackers

The police and OM report also reveals a growing entanglement between criminal groups and state actors. “States are increasingly using hybrid warfare, combining classic military actions with covert influence, cyberattacks, and disinformation,” the OM said. In May 2026, Dutch investigators arrested two men over servers used for Russian-linked cyberattacks. The report also cites two 17-year-olds detained last year for mapping wifi networks around government buildings in The Hague — a reminder that even teenagers can be recruited into serious cyber operations.

Children as young as 11 are being lured through online games, police cybercrime lead Stan Duijf told broadcaster NOS. They range in age from 11 to 25, he said, and are driven by money and status rather than ideology.

Practical steps for expats

• Never click on links in unsolicited messages claiming to be from your bank, the IND (immigration service), or a delivery company. Instead, type the official website address yourself.
• Use two-factor authentication on every account that offers it.
• Check contact details of online shops before buying — a simple Google search can reveal scam reports.
• If something seems too good to be true, it probably is. Report suspicious messages to your bank and to Fraudehelpdesk.nl.

The OM stresses that international cooperation is key: “These developments underscore the need for a broad approach in which public and private parties cooperate nationally and internationally.” For expats, that means staying informed is your best defence.

---

Sources:

• DutchNews.nl: Cybercrime and online fraud hit 2.5 million people in 2025
• NL Times: Dutch authorities warn of 'rapidly changing' cybercrime
• NL Times: Online scammers finding more success targeting young adults