Phishing: Private individual, Germany
A customer entered login data and PIN on a fake Sparkasse page and then, on the instructions of a fake bank employee, confirmed several «orders» in the pushTAN app.
- Incident · date unknown · Saxony (OLG Dresden), Germany
- Evidence: confirmed by an authority
- Phishing
- Account takeover
- Deception (social engineering)
As of
What happened
This raised the daily limit, and around 50'000 euros were debited; he only noticed two weeks later. The OLG Dresden (judgment of 5.6.2025, 8 U 1482/24) considered his conduct grossly negligent; the bank bears only 20% because of the lack of strong authentication at login, and he gets just under 10'000 euros back.
- Affected
- Private individual (anonymous)
- Industry
- Private individual
- Loss
- around EUR 50'000 (of which just under EUR 10'000 reimbursed by the bank)
- Business interruption
- unknown
- Ransom demanded / paid
- unknown / unknown
- Data affected
- true
- Bankruptcy
- no
- Entry point
- Phishing email about a supposed online banking update, followed by a call from a fake bank employee
What would cyber insurance have paid?
That depends on the terms. Whether those affected were insured: unknown.
-
Misuse of card, Twint, e-banking
Strangers pay with your money
Mostly limited 25 of 29 private products cover it fully, as an add-on or with limits.
-
Lawyer and proceedings in an online dispute
Mostly covered 22 of 29 private products cover it fully, as an add-on or with limits.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
What we can learn
According to the court, anyone who enters login data on a fake page and confirms approvals on the phone acts with gross negligence and bears most of the loss themselves.
Sources
- Phishing: Bank und Kunde haften beide (OLG Dresden, 8 U 1482/24) (opens in a new window) Deutsches Handwerksblatt · 2025-07
«Die Sparkasse habe daher einen Schadensersatzanspruch gegen ihn, mit dem sie aufrechnen könne.»