BaFin Warns of Fraudulent Calls Spoofing Its Phone Number to Demand Consumer Transfers

Key Takeaways

• BaFin has warned that unknown callers are spoofing its telephone number to pressure consumers into transferring money.
• BaFin states it never contacts private individuals unsolicited by phone to request or demand transfers, and it does not use third parties to do so.
• Compliance teams should treat this as an impersonation-fraud and consumer-protection signal that calls for customer communication and updates to fraud controls.

Deep Dive

BaFin has warned that unknown callers are spoofing its telephone number to pressure consumers into transferring money. BaFin states it never contacts private individuals unsolicited by phone to request or demand transfers, and it does not use third parties to do so. Compliance teams should treat this as an impersonation-fraud and consumer-protection signal that calls for customer communication and updates to fraud controls.

The key message is that BaFin does not contact private individuals unsolicited by telephone to request or demand money transfers, and it does not commission third parties to do so. Consumers are advised to stay vigilant and report such calls to the police or public prosecutor's office. The release sets no deadlines or compliance dates. It is a point-in-time alert dated September 15, 2026, and the campaign may continue or evolve.

Compliance teams should take several steps. First, add this typology (regulator impersonation with a spoofed number) to fraud risk assessments, scenario libraries, and transaction monitoring rules. Look for first-time or unusual transfers, particularly by older or vulnerable customers, that follow a phone call. Second, issue customer alerts through the website, app, email, and branch or call center scripts. These should state that neither BaFin nor the firm will demand urgent transfers by phone, and they should advise customers to hang up and call back on a verified number. Third, train frontline and payment staff to identify customers who may be mid-scam and to apply friction, such as confirmation prompts, payment delays, or enhanced questioning, in line with the firm's policies.

The risk implications are moderate but real. Exposure includes customer financial loss, reputational damage, complaint and redress volumes, and heightened scrutiny of firms' fraud prevention and customer-protection practices. Firms should also check that their own outbound communications cannot be mistaken for scams and that they have clear escalation paths for suspected fraud. They should also make sure suspicious activity reporting and law enforcement referral processes operate promptly where scam proceeds may be laundered through mule accounts. Finally, firms should monitor BaFin communications for further warnings.

Source: Federal Financial Supervisory Authority