Overview
- Mass emails and texts cite fake pushTAN or S‑ID‑Check updates and link to cloned Sparkasse sites that harvest logins.
- Some messages claim transfers have been blocked since October 3 without a pushTAN update, using urgency and errors to pressure clicks.
- Stolen details are used for follow-up phone scams in which criminals pose as bank staff and display local branch numbers via caller‑ID manipulation.
- Banks and consumer groups urge customers to avoid embedded links, use official apps or websites, block online banking immediately if data was entered, and keep suspicious messages as evidence.
- The Sparkassen association also flags separate brand abuse in bogus fixed‑term investment offers, stating no connection to entities such as BS51‑Financial.