Federal Court of Justice on Push-TAN Fraud: Bank Duties When App Activation Is Manipulated
Faits validés
If fraudsters use social engineering to activate a second Push-TAN app on a stranger's smartphone, the bank is liable if its approval process has security gaps.
En termes simples
The double TAN barrier: The bank must not make it too easy for criminals to unlock a new phone for transfers.
Pertinence sécurité & conseil pratique
Banks must establish stricter two-factor hurdles for device registrations.