Sparkasse customers hit by phishing emails demanding data verification
Criminals are sending phishing emails that appear to come from the Sparkasse, urging recipients to confirm their online‑banking data via a link. The messages use a generic greeting such as “Hallo”, a suspicious sender address and the subject line “Verification Required” (German: “Verifizierung erforderlich”). They set a deadline of 2 August 2026, after which the email claims a branch visit will be required, creating pressure to act quickly.
The Verbraucherzentrale (consumer advice centre) warns that legitimate Sparkasse communications do not request data through such links and advises customers to ignore or delete the mail, verify any request only through the official Sparkasse app or website, and contact the bank directly if in doubt. The Federal Office for Information Security (BSI) recommends that anyone who has clicked the link block online banking immediately via the emergency hotline 116 116 and report the incident to the police.
The campaign is affecting Sparkasse customers in Germany and Austria, targeting personal login credentials, PINs and other banking details for fraudulent use.
Entities: Austria · Bundesamt für Sicherheit in der Informationstechnik (BSI) · Federal Office for Information Security · Federal Office for Information Security (BSI) · Finance Ministry of Baden-Württemberg · German police · German tax authority · Sparkasse · Verbraucherzentrale
Claims
What the coverage asserts, and how well corroborated each claim is across sources.
- [● 4 SOURCES] The email subject line is “Verification Required”. (multiple)
- [● 4 SOURCES] The phishing e‑mail sets a deadline of 2 August and threatens a branch visit if not complied. (multiple)
- [○ 1 SOURCE] The fake e‑mails claim to issue a tax‑audit order under §193 of the Fiscal Code. (e9810970-73fd-4b28-952a-ea0a4e8512a3)
- [○ 1 SOURCE] Real tax‑audit notices are normally sent in paper form by the responsible tax office. (e9810970-73fd-4b28-952a-ea0a4e8512a3)
- [○ 1 SOURCE] The Finance Ministry of Baden‑Württemberg warned that fake e‑mails impersonating the tax administration are being sent nationwide. (e9810970-73fd-4b28-952a-ea0a4e8512a3)
- [○ 1 SOURCE] The Federal Office for Information Security advises victims to block online banking via the hotline 116 116. (multiple)
- [○ 1 SOURCE] The Verbraucherzentrale warned about fraudulent fixed‑term deposit offers on fake comparison websites that misuse official registry data. (094393c5-0a1d-4d77-9a7d-becee5100f70)
- [○ 1 SOURCE] The Verbraucherzentrale recommends using its Fakeshop‑Finder tool and verifying offers on official bank websites. (094393c5-0a1d-4d77-9a7d-becee5100f70)
- [○ 1 SOURCE] The phishing campaign targets Sparkasse customers in Germany and may also affect Austria. (new)
- [● 5 SOURCES] The consumer advice centre (Verbraucherzentrale) warns customers to ignore and delete the email. (new)
- [● 5 SOURCES] A phishing email with subject “Verification Required” was sent to Sparkasse customers. (new)
- [● 4 SOURCES] The email threatens that without verification the account will be blocked. (new)