{"id":4688,"date":"2026-08-21T08:46:28","date_gmt":"2026-08-21T06:46:28","guid":{"rendered":"https:\/\/finanz-forensik.de\/?page_id=4688"},"modified":"2026-08-21T08:53:49","modified_gmt":"2026-08-21T06:53:49","slug":"crypto-fraud-loan-trap","status":"publish","type":"page","link":"https:\/\/finanz-forensik.de\/en\/whitepaper\/kryptobetrug-kreditfalle\/","title":{"rendered":"Crypto fraud with a credit trap"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
WHITEPAPER \u00b7 1ST EDITION \u00b7 2026<\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Crypto fraud with a credit trap<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

When victims should have a loan claim legally reviewed \u2014 manipulated loan applications, video identification, remote maintenance, payment methods and the limits of bank liability.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t
16 chapters<\/span>5 case groups<\/span>As of August 2026<\/span>Case law & evidence plan<\/span><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/path><\/polyline><\/line><\/svg>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tFull white paper (PDF)<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tRead online<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Whitepaper 2026<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

\n\t\t\t\t\t
\n\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Summary \u2014 the seven crucial questions<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t
  1. Did the injured party even submit a statement regarding a loan?<\/li>
  2. If so: Was the credit nature recognizable \u2014 or did it merely confirm, from his perspective, a security, identity or disbursement check?<\/li>
  3. Did the perpetrator act without authority or using misused access data?<\/li>
  4. Was the loan amount paid into the victim's account or directly to the perpetrator or platform?<\/li>
  5. Was the loan broker organizationally integrated into the bank's closing process?<\/li>
  6. Are there rights of revocation, contestation, objection or damages \u2014 and in what order?<\/li>
  7. What technical and communicative evidence confirms the specific history of its creation?<\/li><\/ol>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t
    General information, not legal advice in individual cases<\/div>

    Finanz Forensik GmbH is a forensic services company, not a law firm. This white paper provides general information on a complex legal matter that remains unresolved in key aspects and does not replace legal advice for individual cases. Deadlines are fast approaching; any declaration to a bank or intermediary should be legally reviewed beforehand. Last updated: August 2026, not reviewed by a lawyer.<\/p>

    Meaning<\/b> \u2014 a reliable core statement from the respective case law or norm cited.<\/p>

    transmission<\/b> \u2014 the Finanz Forensik GmbH's own legal interpretation of the crypto loan case \u2014 to be reviewed by a lawyer before implementation.<\/p><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t

    \n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Two separate damages.<\/b> The loan is determined by the conclusion of the contract, attribution, payment method and the role of the bank and intermediary.<\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t
    Key question<\/div>

    The credit claim is not determined by the crypto loss, but by the chain of Conclusion of contract<\/b>, Attribution of the declaration<\/b>, Payment method<\/b> and the Role of bank and intermediary<\/b>. These four points must be examined separately \u2014 and in practice lead to very different results.<\/p><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The result in one sentence.<\/b> The best starting position exists if the injured party has not made their own declaration or if payment was made directly to the perpetrators without effective instructions; the most difficult case is in which they demonstrably took out the loan themselves, received the money in their own account and then transferred it on themselves \u2014 then the examination shifts from loan law to payment services law and to the question of warning and intervention obligations.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t
    Three common misconceptions<\/div>

    \u201e"The investment fraud has been proven, therefore the loan is invalid."\"<\/b> \u2014 Both must be assessed separately from a legal perspective; the platform's fraud only affects the loan agreement through certain attribution channels.   \u201e"The money is gone, so I don't have to pay anything back."\"<\/b> \u2014 The elimination of unjust enrichment is subject to strict conditions and depends on the performance method and the level of knowledge.   \u201e"The bank should have stopped it because of money laundering."\"<\/b> \u2014 Supervisory obligations, in themselves, do not regularly establish an independent claim for payment.<\/p><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    01<\/span> The typical fraud scenario<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Access is gained through social networks, messaging apps, purported financial advisors, or manipulated advertisements that mimic editorial content. After a small initial deposit, a fake trading platform displays profits; subsequently, further capital is requested. If the victim's own funds are insufficient, the supposed advisor offers assistance with financing. At this point, the second, independent form of harm occurs.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t
    <\/marker><\/defs>1<\/text>contact<\/text>Social media,<\/text>Messenger,<\/text>Fake advisors,\u2026<\/text>2<\/text>Fake prizes<\/text>small<\/text>deposit,<\/text>fictitious\u2026<\/text>3<\/text>Loan application<\/text>Perpetrators fill out<\/text>\/ lead by<\/text>Remote maintenance by\u2026<\/text>4<\/text>legitimation<\/text>VideoIdent,<\/text>Link confirmation,<\/text>TAN \u2014 \u201efor\u2026\u201d<\/text>5<\/text>payout<\/text>on their own<\/text>account, foreign<\/text>account or directly\u2026<\/text>6<\/text>Forwarding<\/text>Currency<\/text>Exchange\/Wallet\/Platform<\/text>\u2014 then guess\u2026<\/text><\/svg><\/div><\/figure>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The perpetrators collect ID, income, and account data (pretext: verification\/creditworthiness), fill out loan applications themselves, or guide the victim through the application process remotely. The victim completes a video identification procedure, confirms a link, or releases a TAN\u2014in their understanding, it's about security or identity, not a loan. The bank pays into the victim's account, someone else's account, or directly to a service provider; the funds are then forwarded to an exchange, wallet, or platform. What remains are loan repayments, payment reminders, and often a credit report.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The loan is legally a separate complex of damages.<\/b> Investment fraud does not automatically render the loan invalid. The loan agreement, disbursement, and subsequent payment to the perpetrators are three separate legal relationships, each with its own requirements. This separation determines who is liable, what time limits apply, and what evidence is needed.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    02<\/span> Legal case groups<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The classification categorizes practical cases according to the injured party's contribution and the payment method. Hybrid forms are common; in such cases, the decisive factor is the group that most accurately reflects both the contract conclusion and the payment method.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t
    Case group<\/th>mark<\/th>First legal direction<\/th><\/tr><\/thead>
    A \u00b7 Identity theft<\/td>Perpetrators act without any cooperation; only data and documents are used.<\/td>To deny the existence of a contract; to expressly refuse approval of a transaction involving an agent (\u00a7\u00a7 164 ff., 177 BGB).<\/td><\/tr>
    B \u00b7 Technically controlled by an external party<\/td>The victim identifies themselves; the perpetrators control the application or the end device.<\/td>Check the attribution of the declaration, awareness of the declaration, and authentication protocols.<\/td><\/tr>
    C \u00b7 Deception-related credit<\/td>The victim knows about the loan, but believes it's a genuine investment.<\/td>Review revocation, contestation (\u00a7 123 BGB), attribution of the intermediary and your own banking obligations.<\/td><\/tr>
    D \u00b7 Direct payment to perpetrators<\/td>The foreign currency never comes into the control of the injured party.<\/td>Dispute that the bank has made payment to the borrower; check the payment instruction and account holder.<\/td><\/tr>
    E \u00b7 Payment to the injured party<\/td>Credit to own account, then own transfer.<\/td>Loans are regularly disbursed; the focus is shifting to payment services and warning obligations.<\/td><\/tr><\/tbody><\/table><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    This leads to a clear order: first, clarify whether a valid contract exists at all (A and B), then whether it can be voided (C), and only lastly, whether the bank has breached its own obligations (C to E). Those who begin with bank liability regularly argue against their own strongest position.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    03<\/span> Conclusion of contract and attribution of the declaration<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    3.1 No statement from the injured party<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    If a perpetrator merely uses someone else's personal details, copies of identification documents, or access data, this does not constitute a contractual declaration by the identity holder. If the perpetrator claims to have acted as a representative, the validity depends on the power of representation or ratification (Sections 164 et seq., 177 of the German Civil Code). Practically speaking, it is important to expressly and in writing refuse ratification and clarify to the bank that no contract has been formed. Anyone who instead makes installment payments or agrees to payment plans risks having their actions interpreted as ratification.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Special case of identification: If the victim has undergone a video identification procedure, it is no longer a case of completely undetected identity theft. Whether the loan application can be attributed to them remains to be examined separately: The procedure proves the identity of the participating person, but not that they submitted the subsequent application themselves or authorized someone to do so\u2014nor does it prove what they could see on the screen.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    3.2 Lack of awareness of the need for explanation<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Cases are more complex when the victim themselves activates a button, releases a TAN, or signs electronically, believing that this is a verification of identity, security, or payment. The German Federal Court of Justice (BGH) does not rely solely on the individual's intent: According to its landmark decision of 1984, a declaration of intent exists even without awareness of its legal significance if the declarant, exercising due diligence, could have recognized and avoided that their conduct would be interpreted as a declaration of intent, and the recipient actually understood it as such (BGH, 07.06.1984 \u2013 IX ZR 66\/83).<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    Transfer to the crypto loan.<\/b> Crucial factors are the screens actually visible, document titles, amounts, and warnings, as well as the extent of the perpetrators' influence. A technical log proves that approval was granted\u2014not what the victim could perceive. Conversely, a contract clearly designated as a loan agreement can be attributable to the victim despite deception; the recourse then lies in rescission and revocation, not in the absence of a valid contract.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t
    Question of proof<\/div>

    Who controlled the end device, which texts were visible at the moment of release, and what meaning could the bank reasonably assume from an objective recipient's perspective? These three questions determine case group B \u2014 answerable only with session logs from the remote maintenance software, screenshots, chat histories, and the bank's release texts.<\/p><\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    04<\/span> Deception, error and contestation<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    4.1 Fraudulent misrepresentation (\u00a7 123 BGB)<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    If the victim was induced to take out a loan through false information, a challenge based on fraudulent misrepresentation may be considered. The crucial hurdle lies in Section 123 Paragraph 2 of the German Civil Code (BGB): If a legally independent third party has committed the deception, the declaration made to the bank is only contestable if the bank knew or should have known of the deception. The fraudster on the platform is regularly such a third party\u2014this approach hinges on the question of whether the intermediary can be attributed to the bank.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    4.2 When the intermediary does not act like an outside third party<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    The following factors support attribution: standardized cooperation, bank-provided forms or interfaces, regular customer referrals, coordinated processes, commission relationships, and the intermediary's involvement in the bank's closing process. Someone acting on behalf of the bank is not considered a third party within the meaning of Section 123 Paragraph 2 of the German Civil Code (BGB). Conversely, an intermediary's mere knowledge is not automatically attributed to the bank, and the incidental use of a loan portal is insufficient.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    4.3 Contestation due to mistake (\u00a7 119 BGB)<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    If the injured party has made a declaration but was mistaken about its content or meaning, a challenge under Section 119 of the German Civil Code (BGB) may also be considered. This challenge must be made immediately upon becoming aware of the error (Section 121 BGB) and can trigger a claim by the bank for compensation for reliance damages (Section 122 BGB) \u2013 this obligation to pay compensation does not exist in the case of a challenge based on fraudulent misrepresentation. The legal consequences must therefore be examined before any separate declaration; a challenge based on mistake made without due consideration can worsen the position.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    4.4 Deadlines and order of declarations<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    A challenge based on fraudulent misrepresentation must be declared within one year of discovery; it is barred ten years after the declaration (\u00a7 124 BGB). A staged declaration is advisable: Primarily, the existence of a contract and the existence of a claim are contested; only secondarily are challenges and revocations declared. A challenge declared solely on the grounds of fraudulent misrepresentation can create the impression that an attributable contractual declaration was initially made; therefore, in cases of disputed contract formation, it should expressly be stated as only a secondary measure.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t

    05<\/span> Consumer loans and cancellation<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t

    General consumer loan agreements typically include a right of withdrawal (\u00a7 495 German Civil Code). The withdrawal period does not begin until the consumer has received the contract document or a copy thereof; if mandatory information is missing, the start of the withdrawal period is postponed (\u00a7\u00a7 492, 356b German Civil Code). Particularly in cases where the debtor is at fault, receipt of the documents is often questionable because the contact details on file have been manipulated\u2014in such cases, it must be examined whether the withdrawal period even began to run.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

    \n\t\t\t\t
    \n\t\t\t\t\t\t\t\t\t