A letter from the "bank" or Finanzamt with a QR code
A letter or email that looks like it's from Sparkasse — or even the Finanzamt, offering a tax refund — includes a QR code, inviting you to scan it to "confirm your details," "reactivate" your account, or "claim your money." Scanning takes you to a copycat login page that steals your banking details.
A QR code is just a hidden link. It deserves the same caution as any link in a message you didn't expect — and arriving on paper doesn't make it genuine.
What to do: don't scan QR codes from letters or emails to reach your bank or the Finanzamt. Open your banking only through the official app or by typing the address yourself, and check any tax notice by contacting the office directly.
Threat examples
Tap the outlined parts of the message to see the red flags
Dear customer, due to a security update you must confirm your online banking. Please scan the QR code in this letter and log in to keep your account active.