Image: AI-generated
Author profile picture

In the Netherlands, millions of people receive fraudulent emails or messages from cybercriminals every year. In 2023, 1 in 10 Dutch people were scammed, resulting in emotional and financial harm. As part of the cybersecurity month, the Dutch government has launched the “Don’t be scammed” campaign to help people against online fraud. We spoke with expert Patrick Jordens about this initiative. He is the director of Trusted Third Party (TT3P): a Dutch company specializing in cybersecurity.

Patrick Jordens

Patrick Jordens (b. 1969) is an entrepreneur with a heart for digital security. He is the director of Trusted Third Party and founder of DMCC Group, which helps organizations comply with all external laws regulations, and internal policies in the field of privacy and consumer law. He is also a guest lecturer in marketing, data privacy, and ethics at the Hogeschool van Rotterdam.

Should the government be involved in preventing online fraud, or is it the responsibility of companies and individuals themselves?

“Yes, I believe it is essential for the government to take an active role in this area. They have been doing so for quite some time, which is commendable. Initiatives like the Digital Trust Center provide valuable resources and educational materials. Additionally, the platform Veilig Ondernemen, which receives funding from the Ministry of Security and Justice, where I serve on the steering committee, addresses cybercrime and offers resources to help protect entrepreneurs. For citizens, there are platforms like fraudhelpdesk.nl and numerous awareness campaigns aimed at educating the public about online fraud.”

Why are these campaigns necessary?

“In the Netherlands, the total damage caused by cybercrimes amounts to billions, affecting both consumers and companies that have been hacked. However, there is also emotional damage. You can compare it to a scammer showing up at your door. Imagine someone ringing your doorbell and pulling off a scam. It creates a sense of insecurity. Digital scams are no different. It’s like someone being inside your house but behind a computer screen.”

Is it people’s fault when they fall for online fraud or are phishing and other tactics becoming very sophisticated?

“It’s a combination of both. All types of people – whether tech-savvy or not, young or old – are being deceived, phished, or scammed through different kinds of platforms, including WhatsApp. Even smart individuals, including CEOs, fall victim.. However, people who are not good with computers are more easily targeted. On the other hand, criminals are using increasingly sophisticated techniques, and with advances like AI and tools like ChatGPT, anyone can write a convincing phishing email.”

Have you ever fallen for a scam yourself?

“Yes, I’ve been scammed once too. I ordered some pants online that looked great but didn’t arrive as expected. I returned them and was waiting for a replacement from abroad. Then I got a text from ‘UPS’ about import duties. While at the gas station, I clicked the link and paid a small fee. Immediately after, I realized it was phishing. I quickly contacted ICS Cards, and luckily, they blocked my card just in time.

Even though I teach about scams, I fell for it. In my case, the combination of being on the road and the time pressure made me less alert. Phishing works because it’s well-timed and targets people under pressure or those less familiar with technology.”

Do you have tips for people to reduce their chances of falling victim to fraud?

“Phishing emails are getting harder to spot based on text alone, as they are often well-written. You can’t just rely on finding spelling mistakes anymore. While errors should raise suspicion, it’s more important to check, among others, the sender. Is it someone you don’t recognize? Be cautious. Even familiar senders require caution.  For example, if you get a message saying, ‘Dad, I’ve got a new phone, reply to this number,’ verify with them directly before engaging.  

There are some handy tools available as well. For instance, you can use the ‘Have I Been Pwned‘ or the Dutch police websites to see if your email has been part of any data breaches.”