Deception (social engineering): Association and foundation, Germany
A supposed employee of the Sparkasse called the treasurer and got him to disclose TAN numbers.
- Incident · date unknown · Germany
- Evidence: one media report
- Deception (social engineering)
- Account takeover
As of
What happened
Shortly afterwards, the club account was debited. The loss was covered by the club’s financial loss liability insurance.
- Affected
- Company (anonymous)
- Industry
- Association and foundation
- Loss
- EUR 1'900
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- true
- Bankruptcy
- no
- Entry point
- Call from a fake Sparkasse employee who asked for TAN numbers
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: yes, according to the source.
-
A hacker triggers payments from e-banking
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
-
CEO fraud, diverted payment, fake invoice
Mostly add-on 5 of 9 business products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
A bank never asks for a TAN or login data over the phone; hang up and call the bank yourself.