As of: 1–6 Oct 2026
Summary
Fake messages in the name of banks and PayPal use security updates, refunds or threatened account restrictions as a pretext.
What happened?
The German consumer advice centre's Phishing Radar documents early-October messages impersonating Volksbank, Sparkasse, Comdirect and PayPal. They use supposed security updates, refunds or threatened account restrictions to encourage rushed clicks.
Why does it matter?
Banks and payment services are attractive bait because victims can lose real money and security notices from banks seem plausible.
Who is most affected?
Customers of the named banks and PayPal – but the pattern applies to any institution.
What does it mean for individuals?
Verify messages through the known app or by entering the provider's address yourself. If you disclosed credentials or authorised a payment, contact the provider through a verified channel.
What can you do now?
- 1Don't open links or QR codes from such messages
- 2Verify notices only in the known banking app
- 3If you disclosed data, contact your bank immediately via its known number
Editorial assessment
Our conclusion
For private users the main takeaway is that supposed security updates and refunds are currently being used as a targeted pretext. Banks do not request such steps via links in email or SMS – checking every request in your own app protects you well against this wave.
Source
Verbraucherzentrale, Phishing-Radar (geprüft am 06.10.2026) · Source date
Continuously updated warnings page; entries considered as of 6 Oct 2026.
Status / reviewed on: