🛡️ netzmeldung.com
DE
Risk: Elevated

Phishing attempt steals login credentials for online broker

Category: Phishing · Published: 26/08/2026 · Last updated: 27/08/2026

Summary

What is this about? Current fraud case, reported by Watchlist Internet. For details, see the linked source.
Who is affected? Consumers in Germany.
How high is the risk? Elevated

Why is this warning issued?

This warning has been included because it is based on a report from Watchlist Internet. It is intended to protect other users from this fraud scheme. The assessed risk is elevated.

How the scam works

  • Fraudsters send an SMS in the name of flatex stating that the iTANCard will expire in 30 days and must be reordered free of charge.
  • The SMS contains a link (itancard-flatex.at) that leads to a fake page modeled on the real flatex website.
  • The page displays a login window that cannot be closed and suggests that logging in is absolutely necessary.
  • Those affected enter their login credentials (username and password) believing they are logging into their own account.
  • These credentials are transmitted directly to the criminals.
  • If the login does not work, a second page opens, prompting users to enter their details again in order to harvest additional data.
  • The criminals then use the stolen login credentials to gain access to the real flatex account.

How to recognise it

  • Unsolicited SMS in the name of flatex claiming that the iTANCard will expire in 30 days
  • Link in the SMS leads to the domain itancard-flatex.at – flatex does not use this address for official customer communication
  • On the login page, only the login button works – all other buttons (Open account, Find out more, Imprint, Privacy policy) are mere camouflage with no function
  • The X for closing the login window does not respond
  • The page contains clumsy German and requests login credentials without the user having previously visited the real flatex website
  • Pressure through a time limit (30 days) to trigger quick action without thinking
  • Impersonal greeting and time pressure
  • Link to an external login page

How to protect yourself

  • Do not click on the link in the SMS and do not open the page itancard-flatex.at.
  • Delete the SMS and block the sender's number to prevent further messages from arriving.
  • If you have already entered data: contact flatex customer service immediately and describe the incident.
  • If possible, change your password for the flatex account immediately.
  • Monitor your account closely over the coming days and report any unusual activity to customer service immediately.
  • File a report with the police and contact your local consumer advice centre for guidance.

What you should never do

  • Do not click on the link in the SMS and do not enter any login credentials on the page itancard-flatex.at.
  • Do not reply to the SMS and do not call any phone numbers mentioned in the message.
  • Do not make any payments and do not send any TANs if you are subsequently asked to confirm transfers.
  • Do not ignore the problem if you have already entered data – act immediately.
  • Do not save or note down any new login credentials on the phishing page.

Frequently asked questions

Do I need to pay for or reorder the allegedly expiring iTANCard?

No. The SMS is a fake. flatex does not send such requests by SMS with a link. Do not enter any data and do not respond to the message.

What happens if I have already entered my login credentials?

The criminals now have your login credentials and can use them to log in to your real account. Change your password immediately, contact flatex customer service, and monitor your account closely.

Where did the fraudsters get my mobile number?

This cannot be clarified on a case-by-case basis. Numbers often reach criminals through data leaks, illegal address traders, or random trial. You cannot do anything about it yourself, but vigilance helps.

How can I tell whether an SMS really comes from flatex?

flatex does not ask customers to enter login credentials via an SMS link. When in doubt, always open the official flatex website yourself in your browser and log in there as usual – never via a link from a message.

Should I report the incident to the police?

Yes. File a report with your local police. You can also contact your consumer advice centre, which can advise you free of charge on any further questions.

Affected data

Scam type
Phishing

Comments

No comments yet. Registered users can share their experiences.

Related warnings

Original source

Find more information in the original source.

Watchlist Internet ↗

Update history

  • 27/08/2026Description updated
  • 26/08/2026Warning added from an official source