Here you will find answers to the following questions:
The TAN lists on paper for online banking are obsolete. In the meantime, numerous alternative procedures for confirming transactions have been developed:
mTAN, mobileTAN, smsTAN, pushTAN, chipTAN, smartTAN, photoTAN - many names, but what does each mean? And how safe are these procedures in detail?
How do the individual procedures work?
The terms mTAN, mobileTAN and smsTAN describe the same procedure: TAN transmission via SMS. Upon request, the user is sent a TAN via SMS to the mobile phone. This procedure makes it possible to carry out transactions on the go, since no TAN list and no TAN generator have to be carried.
With the pushTAN procedure , the transaction number required to execute a transaction, or TAN for short, is displayed in a special password-protected and encrypted smartphone app. This can then be transferred to the corresponding field in the online banking mask.
With chipTAN or smartTAN a TAN generator is required. This can be obtained from the house bank for a certain nominal fee. The bank card is inserted into this so that the chip can be read and a TAN can be generated.
The photoTAN Process relies on scanning a specific, encrypted image with a smartphone - similar to the QR code. A colored graphic is displayed and scanned with the photoTAN app (or a corresponding reader). The graphic contains the transfer details and the TAN, which are automatically decrypted by the app.
What are the risks associated with these procedures?
In general, online banking should ensure that two separate media are used for the transaction and TAN - this generally increases security . This means: If the transfer data is entered in the online banking of your online account on the PC, a procedure is available that either sends the TAN to the mobile phone or provides a TAN via the TAN generator.
With mobile banking, i.e. online banking using a smartphone, care should be taken to ensure that a different medium than the smartphone is used for sending TANs: otherwise a fraudulent transaction would be easily possible if everything is lost or stolen one device can be done. It is therefore advisable to create a TAN using a TAN generator for mobile banking.
Conclusion : Which method is ultimately used is a very personal decision. As a rule, however, the house bank does not offer all the TAN procedures on the market anyway, so that the choice is easier to make due to the limitation of options.