Overview
- Sparkasse’s incident response team reports fake Sparkasse ads and profiles on Instagram and Facebook that funnel users into WhatsApp groups run by impostor “experts.”
- Parallel phishing emails and texts use credible subjects such as “Ihre Aktualisierung ist erforderlich – Ref: 8731399” or “pushTAN‑Wartungsarbeiten durchführen” to lure clicks to credential‑harvesting sites.
- Attackers frequently follow up with phone calls that display forged Sparkasse numbers and pressure victims to approve transactions or share TANs for fraudulent transfers.
- Sparkasse stresses it does not promote investments on social media or invite customers into WhatsApp groups, urging users to report suspicious accounts to platform operators.
- Recommended actions include not clicking links, verifying messages via the official app or website, immediately changing credentials, contacting the bank to block access, running a device security check, and filing a police report if money or identity data was compromised.