An email from your bank arrives: your account is supposedly blocked, you must log in through a link straight away and confirm a TAN. Phishing emails that pose as banks are well made and often sound urgent. If you know the typical features, you usually spot them before you click.
Short answer: Legitimate banks do not ask for a PIN or TAN by email or through a link in a message. Warning signs are urgency, a request to enter login details and links that do not lead to the bank. According to the consumer advice centre Verbraucherzentrale Rheinland-Pfalz (German source, as of 26 May 2026), keeping your PIN carefully matters for whether the bank refunds money. Status: November 2026.
Key points at a glance
- If a message asks for PIN, TAN or login details, it is almost always fraud.
- The greeting is often generic and the text relies on time pressure.
- Links lead to pages with a slightly altered address.
- Open the bank app or type the address yourself instead of following the link.
- If you are suspicious, contact your bank at once and secure the message.
Why do phishing emails look so credible?
Criminals use current topics that you actually know: an account change, a new security feature or a supposed check after a payment. Anyone who uses a banking app expects notifications, and the email relies on that expectation. That is why it seems credible.
The layout adds to this. Logos, colours and standard phrases are copied, and footers with data protection notes look reliable. The request itself should decide what you do, not the design. A bank that wants to reach you can tell you where to look in its app or on its website.
How do you recognise a fake bank email?
Fake bank emails copy the logos, colours and layout of the institution. Errors or irregularities often remain, and they can be checked systematically. The table below lists the main features.
| Feature | Warning sign | What is right |
|---|---|---|
| Sender | Address differs, for example a foreign domain or a free email address | Use only the contact routes you know the bank officially publishes |
| Greeting | Generic, such as “Dear customer”, although the bank knows you | A personal greeting is no guarantee, but it is a hint |
| Urgency | Threat of a block, termination or loss of money within hours | Legitimate banks do not work with this kind of pressure |
| Link | Address with extra words, misspelt name or unfamiliar ending | Type the address yourself or use the app |
| Input | Request to enter PIN, TAN or card details | You never enter these details anywhere outside your banking |
Especially deceptive are emails that announce a supposed security check or a reversal of a transfer. They often ask you to confirm a transaction you never started. That is the moment to stop.
Which details to give your bank when you report
- Date and time of the email
- Full sender address
- Subject and wording of the message
- The link as text, without clicking it
- Amount and timing of any possible payment
These details make the check easier and help warn other customers. Delete the email only once the bank has recorded the information.
What should you do before clicking?
Take a moment and check the email calmly. The most important rule: the way to the bank runs through you, not through the email. Log in through the app or the website you know yourself and check there whether any messages exist. If nothing is there, the email was probably fake.
- Do not reply and do not open links or attachments.
- Open the bank app or type the website address yourself and check the messages there.
- If in doubt, call the bank on the number printed on your card or shown on its official website.
- Keep the email rather than deleting it, as evidence for the bank and the police.
What if you have already entered data?
If you entered login details on a false page or confirmed a TAN, act at once. Inform your bank and have the account blocked or your access set up again. According to the Verbraucherzentrale Rheinland-Pfalz, keeping your PIN carefully is important. If you pass it on, you may not get money back from the bank.
In cases of fraud involving your money, the authors also advise going to the police and filing a report. Note the date, time, amount and wording of the email. For an overview of claims after a loss, see phishing losses and whether insurance pays.
Frequently asked questions about phishing emails from banks
May my bank ask me for my PIN by email?
You should not expect that. A request to disclose your PIN or TAN by email or through a link is a clear warning sign. If you are unsure, contact the bank through the route you know.
What if the email looks genuine at first glance?
Layout alone proves nothing. Copies are often deceptively similar. The sender, the link and the request are what matter. Check these three points before you rely on appearance.
Must I inform my bank if I suspect something?
Yes, as soon as possible. The bank can check payments, block access and take notes. The sooner you report, the more can usually still be secured.
Does this also apply to text messages and messengers?
Yes. The same patterns appear in text messages and messengers. There too, do not enter data through a link, but check through the official app or website yourself.
What to do now
- Do not open a suspicious email, but treat it as a warning.
- Check your bank through the app or a website you typed yourself.
- In case of loss, inform your bank at once and have the account blocked.
- Secure the email and, if money is lost, file a police report.
What should you know about bank messages?
Banks usually communicate with you through the app, a secure inbox or their official website. A message outside these channels is therefore suspicious from the start. Calls are another route: criminals phone, pretend to be bank staff and refer to an email. Hang up and dial the number yourself, using the one on your card or the official website.
Related guides
- Phishing at university: how to check emails properly
- Parcel phishing: how to recognise fake delivery notices
- Identity theft for students: protection and immediate steps
- Phishing losses: does insurance pay the money back?
- Consumer rights in everyday life: protection against fraud and unfair contracts
Sources: Verbraucherzentrale Rheinland-Pfalz: Insurance and internet fraud (German, as of 26 May 2026).
Last updated: November 2026. This guide is general information, not individual advice.
