Federal Court of Justice on Push-TAN Fraud: Bank Duties When App Activation Is Manipulated
Hechos validados
If fraudsters use social engineering to activate a second Push-TAN app on a stranger's smartphone, the bank is liable if its approval process has security gaps.
Explicación sencilla
The double TAN barrier: The bank must not make it too easy for criminals to unlock a new phone for transfers.
Relevancia de seguridad y consejo práctico
Banks must establish stricter two-factor hurdles for device registrations.