Federal Court of Justice on Push-TAN Fraud: Bank Duties When App Activation Is Manipulated
Factos validados
If fraudsters use social engineering to activate a second Push-TAN app on a stranger's smartphone, the bank is liable if its approval process has security gaps.
Explicação simples
The double TAN barrier: The bank must not make it too easy for criminals to unlock a new phone for transfers.
Relevância de segurança e dica prática
Banks must establish stricter two-factor hurdles for device registrations.