# German consumer fraud and phishing warnings

> Live situation record from CLSTR: https://clstr.news/situations/german-consumer-fraud-warnings
> Updated: 2026-08-31T04:22:00.000Z. Sources: 69. Developments: 11.

Since late July 2026, German authorities have warned of a wave of phishing emails masquerading as Sparkasse communications, using threats of account blockage to steal credentials. By mid-August, fraudulent activity expanded to include Deutsche Bank ‘quishing’ tactics involving manipulated QR codes in physical letters, as well as deceptive Microsoft Teams notifications designed to steal corporate credentials. On 23 August 2026, a new phishing campaign emerged targeting taxpayers by impersonating the ELSTER tax portal. These fraudulent emails often use the subject line ‘Ihr Steuerbescheid 2025 – Erstattung bestätigt’ to lure victims with the promise of a tax refund. The scam employs the official ELSTER logo and creates a sense of urgency through strict deadlines to facilitate a fake identity verification process. The Saarland Ministry of Finance has noted that the official Elster service never requests online banking connections or sensitive information like PINs via email. By 31 August 2026, the scope of fraud expanded further. The Deutsche Rentenversicherung issued an alert regarding scammers using manipulated videos and fake communications to demand ‘proof of life’ from pension recipients via SMS, email, or calls. Additionally, fraudulent investment platforms have been observed mimicking news outlets like Tagesschau to solicit deposits. The Verbraucherzentrale has also warned of WhatsApp phishing messages threatening immediate account deactivation within 24 hours. In addition to these German trends, authorities in Italy and Austria have reported related activity. The Polizia di Stato identified ‘zero-click’ WhatsApp attacks in Italy, where hijacked accounts send fraudulent money requests to contacts. In Austria, scammers are impersonating the Austrian Health Insurance Fund (ÖGK) with messages promising specific refunds to steal banking credentials. In Konstanz, Germany, police reported a fraud case involving a fake bank letter with a QR code and spoofed phone calls.

## Claims

- A phishing email with subject “Verification Required” was sent to Sparkasse customers. (corroborated by 5 sources)
- The email demands customers confirm their online‑banking data via a link. (corroborated by 5 sources)
- The email sets a deadline of 2 August 2026, after which a branch visit is required. (corroborated by 5 sources)
- The email uses an unprofessional sender address and generic greeting “Hello”. (corroborated by 5 sources)
- The consumer advice centre (Verbraucherzentrale) warns customers to ignore and delete the email. (corroborated by 5 sources)
- Phishing email impersonating Sparkasse asks recipients to verify online‑banking data via a link. (corroborated by 5 sources)
- Verbraucherzentrale warns customers and advises ignoring or deleting the mail, and checking any request only via official Sparkasse channels. (corroborated by 5 sources)
- Legitimate Sparkasse communications do not request personal data via such links; official requests are sent by paper or secure channels. (corroborated by 5 sources)
- The email subject line is “Verification Required”. (corroborated by 4 sources)
- The phishing e‑mail sets a deadline of 2 August and threatens a branch visit if not complied. (corroborated by 4 sources)
- The email threatens that without verification the account will be blocked. (corroborated by 4 sources)
- The email uses a generic greeting “Hallo” and a suspicious sender address. (corroborated by 4 sources)

## Timeline

### 2026-08-31: Cybercriminals launch diverse phishing and WhatsApp fraud campaigns across Europe

Authorities in Europe are warning of diverse cyberattacks, including zero-click WhatsApp account hijacking, fake bank QR codes, and phishing campaigns impersonating health insurance providers.

14 sources. https://clstr.news/cluster/germany-warns-of-rising-digital-fraud-and-phishing-waves

### 2026-08-23: Germany warns of Elster tax portal phishing and AI-driven fraud

German authorities are warning of a massive phishing wave impersonating the Elster tax portal to steal banking data, alongside a rise in AI-driven social engineering and fake president fraud.

8 sources. https://clstr.news/cluster/elster-tax-portal-targeted-by-phishing-scams-in-germany

### 2026-08-18: Germany faces surge in phishing and various fraud schemes

Germany faces a surge in various scams, including phishing emails targeting banks and government agencies, impersonation of TV show stars, and phone fraud targeting seniors.

14 sources. https://clstr.news/cluster/fraud-alerts-issued-for-bares-fr-rares-fans-and-sparkassen-customers

### 2026-07-29: Sparkasse customers hit by phishing emails demanding data verification

Phishing emails impersonating Sparkasse demand data verification by 2 Aug 2026, threaten branch visits, and use generic greetings. Verbraucherzentrale advises ignoring the mail; BSI urges blocking online‑bank ‑

16 sources. https://clstr.news/cluster/germany-warns-of-surge-in-phishing-and-fake-investment-scams

### 2026-07-26: Germany warns of phishing and fake toll‑vignette scams

German authorities warn that fake Sparkasse emails and counterfeit half‑price digital vignette portals are scamming consumers, stealing credentials or money and risking fines.

7 sources. https://clstr.news/cluster/germany-warns-of-phishing-and-fake-tollvignette-scams

### 2026-07-26: Sparkasse alerts seniors to phishing scams targeting online banking

Sparkasse held a seniors' internet‑security event and warned customers about a phishing email impersonating the bank, urging them to ignore and report the fake message.

2 sources. https://clstr.news/cluster/sparkasse-alerts-seniors-to-phishing-scams-targeting-online-banking

### 2026-07-23: Sparkasse phishing emails threaten account lockout in Germany

Fake Sparkasse emails threaten online‑banking lockout, lure users to counterfeit sites for credentials; warned by Mimikama and BSI, customers should delete and use official channels.

13 sources. https://clstr.news/cluster/megan-fox-dismissed-from-transformers-after-comparing-michael-bay-to-hitler

### 2026-07-11: DKB warns of new phishing email demanding account re‑authentication

DKB alerts customers that a phishing email titled “Ihre DKB‑App‑Registrierung lauft am 15. Juli 2026 ab” is attempting to steal login data; the bank says it never sends such messages and advises users to ignore

3 sources. https://clstr.news/cluster/dkb-warns-of-new-phishing-email-demanding-account-reauthentication

### 2026-07-03: Germany alerts public to BKA‑impersonating phishing scam demanding passport copies

German consumer watchdog warns that scammers are sending fake BKA emails with arrest‑warrant threats and a 72‑hour demand for passport copies, urging victims not to respond and to report the fraud.

3 sources. https://clstr.news/cluster/germany-alerts-public-to-bkaimpersonating-phishing-scam-demanding-passport-copies

### 2026-07-02: German Patent Office warns travelers of counterfeit goods and online phishing scams

DPMA warns travelers of counterfeit goods harming businesses and health, while experts alert consumers to phishing scams from fake online shops, urging strong passwords and 2FA.

2 sources. https://clstr.news/cluster/german-patent-office-warns-travelers-of-counterfeit-goods-and-online-phishing-scams

### 2026-06-15: Germany's consumer protection agency warns of phishing impersonation

Germany's consumer protection agency warns scammers are using fake calls and a replica website to steal personal data, urging the public not to share information and to monitor accounts.

3 sources. https://clstr.news/cluster/germanys-consumer-protection-agency-warns-of-phishing-impersonation

---
Cite as: German consumer fraud and phishing warnings. CLSTR, https://clstr.news/situations/german-consumer-fraud-warnings
