diff --git a/auth/callback.go b/auth/callback.go
index 34f8eb064222a1d02a899a1e96b72e7a785b501d..20073dfc3eff7feb808d81b48a2b7d5f40853022 100644
--- a/auth/callback.go
+++ b/auth/callback.go
@@ -326,8 +326,8 @@ func (m *Manager) handleRequest(cmixMsg format.Message,
 
 	//create the contact, note that no facts are sent in the payload
 	c := contact.Contact{
-		ID:             partnerID,
-		DhPubKey:       partnerPubKey,
+		ID:             partnerID.DeepCopy(),
+		DhPubKey:       partnerPubKey.DeepCopy(),
 		OwnershipProof: copySlice(ecrFmt.ownership),
 		Facts:          facts,
 	}