Data protection official warns of AI-generated phishing emails in Germany
A German data protection official warned of a wave of phishing attacks using AI-generated emails and deepfakes to steal personal data and financial information. The attacks employ psychological manipulation rather than technical exploits, with potential consequences including identity theft and significant financial losses for individuals and organizations.
What happened
The Landesdatenschutzbeauftragte (data protection official) of Mecklenburg-Vorpommern, Sebastian Schmidt, warned of phishing campaigns using AI-generated emails, deepfakes, and AI-synthesized voices in voicemail messages.
The attacks use fabricated bank and service provider websites to extract personal data, targeting human behavior through psychological pressure and curiosity rather than technical vulnerabilities.
Reported impact
Successful phishing victims risk identity theft, financial loss, and exposure of sensitive information.
For businesses and government agencies, successful phishing attacks could result in loss of trust, financial damage, and legal consequences.
Index analysis
AI-generated emails, voice imitations and deepfakes make it difficult even for professionals to detect fraud attempts.
An Upper Regional Court (Oberlandesgericht) in Oldenburg ruled in April that a couple in Lower Saxony could not recover money stolen through their own negligent handling of phishing email links.
Governance controls
Schmidt recommended regular phishing awareness training including simulated phishing attacks, verification of transmitted links, and use of saved bank links as browser favorites.
Additional protective measures include two-factor authentication using app codes, push notifications, or biometric scans.
Classification
Sources and evidence
Sources not yet published
This record was researched and written by the Index from original reporting. Its sources are still being verified by an editor, and they are listed here once that check is complete. Until then the record carries no reviewer.