TLDR
Fraudsters take over the mobile phone number via SIM swap (call to the provider with a forged ID), then log into N26 and approve transfers themselves via the push TAN app. Damage usually 5,000 15,000 euros within hours. Indicators: 1)...
How it works
Fraudsters take over the mobile phone number via SIM swap (call to the provider with a forged ID), then log into N26 and approve transfers themselves via the push TAN app. Damage usually 5,000 15,000 euros within hours. Indicators: 1)...
Red flags
- Urgent pressure to click, pay, or share codes immediately.
- A link or sender that does not match the official organization.
- Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What to do
- 1WHAT TO DO: Immediately call the provider (Telekom: 0800 33 02202, Vodafone: 0800 172 1212, O2: 0800 525 0500), N26 hotline +49 30 364286880, block the card.
- 2IN CASE OF FRAUD: File a report with the LKA, file a complaint with BaFin, report the damage to N26 within 13 months.
Source
BSI
Source reviewed by Mythos Forensic Team
https://www.bsi.bund.de/DE/Themen/Verbraucherinnen-und-Verbraucher/Cyber-Sicherheitslage/Methoden-der-Cyber-Kriminalitaet/Online-Betrug/online-betrug_node.htmlFAQ
Is N26 Account Takeover via SIM Swap and Push Confirmation a real scam pattern?
Yes. Treat the message, call, or payment request as suspicious until you verify it through an official channel.
What are the first warning signs?
Urgent pressure to click, pay, or share codes immediately.; A link or sender that does not match the official organization.; Requests for card data, passwords, OTPs, wallet signatures, or bank transfers.
What should I do first?
WHAT TO DO: Immediately call the provider (Telekom: 0800 33 02202, Vodafone: 0800 172 1212, O2: 0800 525 0500), N26 hotline +49 30 364286880, block the card.; IN CASE OF FRAUD: File a report with the LKA, file a complaint with BaFin, report the damage to N26 within 13 months.
Can LegalAudit check my case?
Yes. Start a free chat and paste the message, link, sender, or payment details for triage.