Phishing letters in Sparkasse name: QR code leads to fake website
Fraudsters are sending counterfeit Sparkasse letters with a QR code that directs to a phishing page. Anyone who has entered their data should immediately contact their branch.
Counterfeit Sparkasse letters with QR code in circulation
Fraudulent letters bearing the name of Sparkasse are currently arriving in a city in western Germany, as chip.de reports. The letters carry the letterhead of a specific branch and include a personalised salutation – making them appear authentic at first glance. The computer emergency team of the Sparkassen-Finanzgruppe has issued a phishing warning about the letters.
Recipients are told they must verify their online banking access – otherwise it will be blocked. To do so, they are asked to scan a QR code printed in the letter and visit the linked website.
However, the code leads to a fake website where online banking access credentials, further personal information and a copy of an identity card are requested. With the data obtained in this way, perpetrators could call on behalf of Sparkasse or independently change account details.
Sparkasse advises not to provide any information on the fake website and not to upload copies of identity documents. Anyone who has already transmitted data should immediately contact the responsible branch. There, online banking access can be blocked and protection of the Sparkasse card and credit card can be arranged.
Regardless of the fraud scheme, chip.de points out a legitimate change: the S-ID-Check app will be discontinued on 31 January 2027. Customers who wish to continue confirming online payments should switch to the S-pushTAN app in good time. An integrated migration assistant is intended to facilitate the transition; those who already use pushTAN can enable it directly via the app.
Source: Google News AT — Crime (de)