Reporting internet fraud

This depends entirely on the payment channel, and the three cases differ fundamentally. If the payment was unauthorised — someone misused your card or your account access — the bank must refund it under § 675u BGB, “at the latest by the end of the business day following” the day on which you reported it. If it was a SEPA direct debit, you can get the money back under § 675x BGB without stating reasons — within eight weeks of the debit. If you made the transfer yourself because you were deceived, neither rule applies: the payment was authorised. All that remains then is a recall, whose success depends on whether the money is still with the recipient.

The bank, without exception. For unauthorised payments, the statutory refund deadline only starts running once you report it there, and for a transfer you made yourself, speed determines whether a recall still finds anything. The police investigate afterwards — but an investigation takes weeks to months and is not a route to a refund. So call your bank’s emergency number or the emergency blocking number 116 116 first, and file the report afterwards, if necessary that same evening via the Online-Wache.

That you did not approve the payment. Typical examples are debits made with stolen card details or transfers from a hijacked online banking account. The distinction is legally decisive: only in this case does the refund obligation under § 675u BGB apply. If, on the other hand, you entered a TAN yourself or confirmed the payment in the app — even if you were deceived in doing so — it was formally authorised. In phishing cases, this is often disputed: it then comes down to whether you can be accused of a gross breach of your duties. So describe what happened precisely and honestly, and do not rush to admit that you “clicked on everything”.

If you paid by direct debit, you can get the money back within eight weeks without giving a reason. For credit card, ask your card provider about its chargeback procedure — the conditions and deadlines follow from its own rules, not from the BGB, which is why you should ask there. For advance payment by bank transfer, the situation is the most difficult: only a recall, and it has to be requested very quickly. In every case, keep screenshots of the page with the URL visible, the Impressum (imprint / legal notice) and the order confirmation, and file a report with the recipient’s IBAN and name — this allows cases to be linked.

Yes, and here the Online-Wache really is the right route: fraud and cybercrime are among the cases these portals are designed for, and practically all federal states offer them. You can upload screenshots and evidence directly. Just check whether your federal state’s form covers the offence — the scope varies. The position is different if there was also a threat involved, for example blackmail using alleged recordings: then the police refer you to reporting in person or calling the emergency number 110.

Do not pay and do not reply. Paying does not end the demands, as experience shows — it confirms that you can be reached and are willing to pay. Instead, secure everything: messages, profiles, payment demands, wallet addresses. Blackmail is a criminal offence, and because a threat is involved, this is the case where the police recommend reporting in person or calling 110 rather than using the online form. Talk to someone about it — shame is exactly the tool these offenders rely on, and it is the reason why many cases are never reported.

First demand a written explanation stating the legal basis. The refusal is often based on the claim that you acted with gross negligence — this is a judgement that can be disputed, and it is for the bank to set out and substantiate the facts on which it relies. The next step is the conciliation body of your banking association or the ombudsman; for consumers, this procedure is generally free of charge and takes far less time than court proceedings. The Verbraucherzentrale (consumer association) can advise you alongside this. If your income is low, Beratungshilfe (advisory assistance for people on low incomes) with a personal contribution of €15.00 may be available for legal advice.

Yes, even if the prospect of a conviction may be low in an individual case. First, many banks and insurers require the reference number before they even investigate. Second, cases are linked via the recipient's IBAN: an account that appears in fifty reports leads to investigations that a single report would never have triggered — and often these are accounts belonging to intermediaries within Germany. Third, the report is the basis for having your own case documented, in case claims are made later. It costs you nothing but half an hour.