Federal Court of Justice on Push-TAN Fraud: Bank Duties When App Activation Is Manipulated
Fatti validati
If fraudsters use social engineering to activate a second Push-TAN app on a stranger's smartphone, the bank is liable if its approval process has security gaps.
Spiegato in modo semplice
The double TAN barrier: The bank must not make it too easy for criminals to unlock a new phone for transfers.
Rilevanza per la sicurezza e consiglio pratico
Banks must establish stricter two-factor hurdles for device registrations.