Procedure for online banking
A TAN or other encryption is required to confirm a transfer.
The following methods are available to generate these:
- chipTAN QR
- sm@rtTAN photo
- HBCI
- EBICS
- pushTAN
- photoTAN
- eTAN
- QR-TAN
- mTAN or smsTAN
How safe are the procedures?
The procedures each offer a different level of security.
The most secure procedure at present is the HBCI procedure, which requires financial software, a chip card reader and an HBCI chip card.
The best combination of convenience and security is offered by the , where a QR code or color matrix code is read from the screen with a TAN generator to generate a TAN. The two separate devices mean that fraudsters have no chance of interfering.
The mTAN procedure, which has already been cracked several times and no longer offers the necessary security, is no longer considered secure. The SMS messages sent for authentication may be intercepted or redirected by criminals. As a result, there is a risk that the TAN contained in the SMS will be misused.
