Your security is important to us

Cybercrime warning

Fraud attempts via digital communication channels are continuously increasing and therefore still require a high level of alertness. Cybercriminals are increasingly adapting to technical, regulatory and application-specific underlying conditions in a rapid manner. The constant use of new methods, sometimes based on spying on personal behavioural patterns or data, necessitates a prudent and vigilant approach to digital channels and the required login data at all times.

Phishing notification

Fraudsters often try to exploit current developments, such as the spread of coronavirus and the associated uncertainty, to gain access to sensitive bank data through fake emails. Bank customers, for example, receive a link in an email redirecting them to an authentic-looking website that sends the data entered straight to the fraudster or that asks them to send sensitive data by email to a fake email address.

Please always note that we will never ask you to disclose sensitive data by email.

General security information

General security information on handling emails can be found, for example, on the website of the Federal Office for Information Security at:

https://www.bsi.bund.de/EN/Themen/Verbraucherinnen-und-Verbraucher/verbraucherinnen-und-verbraucher_node.htmlhttps://www.bsi-fuer-buerger.de/

What to do in an emergency

If in doubt or if you have already shared sensitive data, please contact your adviser at the bank or via one of the following telephone numbers or email addresses:

Free of charge throughout Germany: tel. 0800 72 33 982

If calling from abroad: +49 40 3282 2332

Email: electronicbanking@mmwarburg.com

Further information on phishing

Phishing: access data captured via email

Phishing involves, for example, a link in an email or text message redirecting targets to an authentic-looking website that sends their data straight to the fraudster once it has been entered or a message that asks them to send sensitive data by email to a fake email address.

Spear phishing and pharming: phishing 2.0

Further developments of this method include even more effective spear phishing, in which deliberately incorporated personal data of the target person and possibly the insertion of a fake email thread are intended to dispel doubts about the authenticity of the input interface, and pharming, which is based on the targeted manipulation of domain names in Web browsers.

Search engine phishing: stay alert when performing familiar steps

Search engines can also be manipulated and can lead unsuspecting users to fake pages, sometimes with the first hit. This often results in purported blocking messages or a prompt to reinstall. Here, too, sensitive data may be revealed and later misused. You should therefore always check the address of your online banking platform very carefully or bookmark it from the outset.

Current warning: fraud attempts now also analogue / quishing

In what is known as ‘quishing’, you receive a deceptively genuine-looking paper letter that claims to be from your bank. The letter contains a QR code that you will be asked to scan to confirm your photo TAN procedure, for example. Again, your data can fall into the hands of fraudsters and, in the worst-case scenario, direct money transfers may result. Do not follow the instructions in these letters under any circumstances and, if in doubt, contact your client adviser.

‘Godfather’– entire fake websites

The German Federal Financial Supervisory Authority (BaFin) is currently warning Android users of malware called Godfather, which records data entries from banking or crypto applications. Godfather also makes use of professionally fraudulent websites and also sends fake push messages to gain access to authentication codes. It is not yet known exactly how the software reaches the end devices.

Be vigilant

01

Fraud over the phone via grandparent and CEO scams

The popular grandparent trick (calling a supposedly close relative asking for short-term assistance in an emergency) and variants of the same are also still being perpetrated. The CEO scam is also repeatedly tried: here, a supposedly high-ranking/important person puts you personally under pressure to disclose data and ‘not to ask stupid questions now.’ Even fake bank employees or police officers appear again and again, urging targets, for example, to hand over cash and valuables for ‘safekeeping’.

02

Don’t let yourself be pressured!

These fraud attempts often result in artificial pressure being put on the user to act quickly. Hybrid forms of cyberattacks and requests to call a supposed hotline are also becoming increasingly common. Professionally trained people then increase the pressure to disclose sensitive data in order, for example, to avert alleged damage.

03

Protect yourself and your data

Please always note that the bank and its employees will never ask you to disclose sensitive login data by email. Therefore, always be careful and follow the general security instructions for handling emails, e.g. at https://www.bsi.bund.de/DE/Home/home_node.html.

What to do if something has already happened

If in doubt or if you have already shared sensitive data, please contact your client adviser at the bank or via one of the following telephone numbers or email addresses immediately:

Online banking hotline (6 a.m. to 10 p.m. daily):
Free of charge throughout Germany: tel. 0800 72 33.982
If calling from abroad: tel. +49 (0)40 3282 2332

General cross-bank girocard and Mastercard blocking hotline (around the clock):
Free of charge throughout Germany: tel. 116 116
If calling from abroad: Tel. +49 116 116

Email: service@mmwarburg-service.com

Keep your devices up to date

Make sure that your firewalls and virus scanners are activated and always up to date.

Only download banking apps from authorised app stores

To download or update apps for your smartphone or tablet, please only use the authorised app stores (Apple: App Store / Android: Google Play Store). Do not follow prompts to download apps via email.

Do not store PINs, TANs or other login details

Passwords, personal identification numbers (PINs) and transaction numbers (TANs) should never be stored unencrypted in apps, the cloud or on your hard drive. Login details should also be changed regularly.

Check the bank websites

Before logging in, check whether you are really on the official website / official online banking platform. One way you can recognise this is by the ‘lock’ symbol in the browser and the URL starting with ‘https’. If you are unsure, go directly via our website. You can find our online banking platform via the following link: https://www.warburg-bank.de

Stay alert to cybercrime!

Banks never ask their customers to update sensitive data by email, text message or telephone. If a purported employee of a bank urges you to make transactions relating to your account, end the call immediately and contact your bank directly.

Cybercrime flyer