Most EU Workers Encountered Suspicious Digital Messages
A new Eurobarometer survey reveals the prevalence of cyber threats and evolving AI-driven scams among the European workforce.
Updated on Oct. 10, 2026 in Cybersecurity
Live Poll
Do you feel confident in your ability to identify fraudulent emails and deepfake videos?
Three-quarters of European Union employees reported encountering suspicious emails, messages, or links, according to a recent Eurobarometer survey. The data highlights a significant increase in sophisticated threats, including AI-powered scams targeting corporate environments.
Why it matters
The findings underscore the persistent challenge of digital hygiene as attackers increasingly leverage artificial intelligence to execute social engineering. Rapid identification and transparency are critical, as Article 34 of the General Data Protection Regulation (GDPR) mandates that organizations inform individuals when a breach creates high risk.
While 72% of respondents claim they can identify suspicious emails and 54% verify senders before clicking, 15% have encountered AI-powered scams. These threats manifest as fraudulent messages, images, voices, and videos designed to bypass traditional human scrutiny.
The players
European Union
A political and economic union that sets regional standards for data protection through the GDPR.
Eurobarometer
A public opinion monitoring service that conducts regular surveys on behalf of European institutions.
The details
Attackers utilize generative AI — machine learning models capable of creating new text, audio, or visual content — to synthesize realistic, yet fraudulent, messages. These campaigns frequently involve deepfake technology, where AI is used to manipulate videos to mimic individuals, a threat that only 48% of surveyed employees feel confident recognizing. Despite these risks, only 18% of respondents reported attempts at personal data theft, and 17% experienced direct malware attacks.
Timeline
September 30, 2026: Eurobarometer survey results were published.
October 2026: European Cybersecurity Month provides a focus for awareness initiatives.
The Tech Race
This research highlights the ongoing tension between advanced social engineering techniques and corporate security awareness. It follows the precedent established by Article 34 of the General Data Protection Regulation, which centers organizational accountability in the face of escalating digital threats.
For the average worker, these findings highlight the necessity of verifying sender identities and remaining skeptical of unsolicited communications. Organizations must now prepare for more frequent breach disclosure processes as required by regulation when AI-driven attempts successfully penetrate security layers.
The takeaway
The data confirms that human vigilance remains a primary line of defense against increasingly sophisticated AI-generated attacks. Readers should watch for forthcoming awareness campaigns during European Cybersecurity Month this October to improve their ability to spot emerging deepfake and phishing indicators.
Further reading
For broader trends in digital safety, visit the Cybersecurity section.
Live Poll
Do you feel confident in your ability to identify fraudulent emails and deepfake videos?
