Anyone who authorizes a payment via pushTAN in online banking legally agrees to a specific order – at least, that’s the banks’ ideal scenario. In practice, however, perpetrators exploit security vulnerabilities to push through transactions. The question then is no…