BaFin Warns Against Unauthorized Deposit Offers on Three Websites and Associated Email Domains

Key Takeaways

• BaFin has warned against bi-ventures(.)de, biventures-kundenportal(.)de, and berlinventures(.)com, along with emails from the associated domains, for offering overnight and fixed-term deposit accounts without authorization.
• The warning is issued under Section 37 Paragraph 4 of the Banking Act.
• Compliance teams should treat it as a fraud typology and screening input, because it signals impersonation and unauthorized deposit-taking risk affecting customers, counterparties, and payment flows.

Deep Dive

BaFin has warned against bi-ventures(.)de, biventures-kundenportal(.)de, and berlinventures(.)com, along with emails from the associated domains, for offering overnight and fixed-term deposit accounts without authorization. The warning is issued under Section 37 Paragraph 4 of the Banking Act. Compliance teams should treat it as a fraud typology and screening input, because it signals impersonation and unauthorized deposit-taking risk affecting customers, counterparties, and payment flows.

No new compliance obligations, deadlines, or reporting requirements are introduced. The notice restates the principle that anyone offering banking, financial, or securities services in Germany requires BaFin authorization. It points to the BaFin company database as the verification source. It also notes that BaFin, the Federal Criminal Police Office (BKA), and the state criminal police offices are jointly cautioning the public about online financial fraud. The legal basis, Section 37 Paragraph 4 of the Banking Act, concerns BaFin's public communication on unauthorized business. The warning therefore does not amount to an enforcement finding against named individuals.

Recommended actions for compliance professionals:
- Add the three domains and the associated email domains to fraud, sanctions-adjacent, and adverse-information watchlists, and to email and web filtering controls.
- Screen customer, counterparty, and payee data for links to these domains. This includes incoming payments to or from accounts tied to these offers, where identifiable.
- Review transaction monitoring for patterns consistent with fraudulent deposit schemes, such as retail customers sending funds to unfamiliar accounts, and file suspicious activity reports where warranted.
- Brief customer-facing teams and update customer fraud-awareness communications.
- Confirm that the institution's own brand, domains, and legitimate customer portal are not being spoofed, and prepare takedown and reporting procedures if they are.
- Document the review as evidence of an effective, risk-based control environment.

Risk implications: The direct regulatory exposure for regulated institutions is low, but fraud, reputational, and customer harm risks are material. Victims may blame their banks for processing payments to fraudulent deposit providers, which raises complaint, reimbursement, and conduct risk. Impersonation of deposit providers can also be a vehicle for money laundering through mule accounts. Institutions should therefore treat the notice as an indicator for AML and fraud typologies, since the warning does not disclose victim numbers or amounts involved.

Source: Federal Financial Supervisory Authority