Federal Court of Justice on Push-TAN Fraud: Bank Duties When App Activation Is Manipulated
Validated facts
If fraudsters use social engineering to activate a second Push-TAN app on a stranger's smartphone, the bank is liable if its approval process has security gaps.
In plain language
The double TAN barrier: The bank must not make it too easy for criminals to unlock a new phone for transfers.
Security relevance & practical tip
Banks must establish stricter two-factor hurdles for device registrations.