Time and again, web­sites circulate online that fal­sely claim to be KfW websites or grant portals. They are operated by unknown parties under the name of KfW and ask customers to pro­vide personal data, possibly with the intention of using these data fraudulently.

Phishing emails asking addressees to disclose personal data are also in circulation in this regard. The recipients are prompted to click on a link in the message. These links lead to fake web­sites where the data can be retrieved. Recipients may not be suspicious, as the messages can appear deceptively genuine. Phishing attacks are also increasingly targeting social media. For example, customers are contacted via fake profiles or alleged KfW accounts on plat­forms such as Face­book, LinkedIn or Insta­gram in order to obtain personal data or to feign the con­clusion of a con­tract.

KfW points out that personal data should on­ly be entered into portals that are accessed via the KfW website www.kfw.de. KfW never processes contracts or binding agree­ments via social media channels or individual offers. Particular care must therefore be taken when dealing with offers or enquiries on social networks.