How N26 contacts you — and how we won’t

Telling the difference between a real N26 message and a scam attempt isn't always easy. This guide gives you a side-by-side comparison of how we'll communicate with you — and how we won't — across every channel we use.

If you get a cold call from N26, it's a scam. N26 will never call you out of the blue. When a phone call is necessary, we'll always arrange it first through Messages from N26 in the app. You'll see that message before we call.

• Requests for your account information or personal details
• Any call about suspicious activity or unauthorized payments on your account
• Any call from someone claiming to be part of a "fraud prevention team" or "fraud specialist"
• Any unsolicited call claiming to be from N26 — at all

• If we need to speak with you by phone, we'll set it up in advance through Messages from N26 in your N26 app. You'll see the message there before we call.

N26 uses text messages primarily to send you verification codes. You enter these codes directly in the N26 app, or through a support chat with a Customer Support specialist. We'll never ask you to share a verification code by email or social media.

We may also send an SMS to let you know about changes to your personal data. If that happens, the message will direct you to contact Customer Support through your banking app. It won't ask you to take any action via SMS itself. N26 will never send clickable links or demands by SMS, ask you to download software, or contact you through WhatsApp.

• WhatsApp messages of any kind — N26 will never contact you via WhatsApp
• "Urgent" messages asking you to take action on your account, or to respond with account details or personal information
• Any suspicious link or download request

• A verification code for logging in, confirming an action in the N26 app, or updating your account details with Customer Support — for example, adding a new phone number
• A message notifying you about changes to your personal data, with a prompt to contact Customer Support through the N26 app if you have any concerns

N26 sends emails from a small set of known addresses only. Here's what each one is for:

• Marketing emails come from newsletter@emails.n26.com or newsletter@email.n26.com — these keep you informed about new features and articles.
• Account alerts come from noreply@emails.n26.com or noreply@email.n26.com — these notify you about new messages in Messages from N26, data changes, surveys, or account security updates.
• Sanctions-related information — if you need to communicate about sanctions regulations (new tab), send an email to gsec@n26.com.
• Account access issues — if you can't access your N26 account, send an email to support@n26.com.

When we have a sensitive request for you, we'll reach out through the in-app Messages from N26 feature. You'll get an email confirming that a new message is waiting in your inbox. If you have push notifications turned on, you'll get one of those too. That's all we'll do.

N26 will never ask you for information by email, ask you to reply with personal data, or send you links to download anything.

• Asks you to reply with sensitive or personal information
• Uses urgent or threatening language to pressure you into acting immediately
• Opens with a generic greeting like "Dear N26 Customer"
• Contains misspelled words or odd phrasing
• Comes from a suspicious address with a mix of upper and lower-case letters and numbers
• Appears to come from support@n26.com but asks for personal information — scammers can easily spoof email addresses, so the sender's name alone doesn't confirm legitimacy

• Never ask for sensitive or personal information. Any request for information directs you to log in through the N26 app.
• Related to a message waiting for you in Messages from N26 in the app
• Addresses you by your first name
• Clear and easy to read
• Sent from one of these addresses: support@n26.com, noreply@n26.com, or noreply@email.n26.com. If you're signed up for marketing emails, you'll also hear from newsletter@email.n26.com.

N26's official website is n26.com and our support page is support.n26.com. Some phishing scams use fake URLs that look similar to ours. Here are three ways to check whether a link is real:

• Hover over the link — without selecting it — so the full web address appears at the bottom of your screen. Look for anything unusual in the URL.
• Search for the URL or domain in Google, or use a tool like urlscan.io to check whether it has been flagged as malicious.
• Look for the padlock symbol next to the URL in your browser. Select the padlock to verify the website credentials and check whether the SSL certificate is valid and who it was issued to.

• Doesn't contain "n26"
• Extra long
• Contains odd or unusual characters

Here are examples of fake N26 URLs:

• http://n26-webapp-online.preview-domain.com
• https://n26.com.simply.site
• https://n26contact.com/

• Our main website: n26.com
• Our support page: support.n26.com
• Our online banking app: app.n26.com/login
• These addresses may include simple additions for country, language, or page topic.

Here are examples of legitimate N26 URLs:

• n26.com/en-fr
• n26.com/en-de/bank-account-switching
• https://support.n26.com/en-eu/app-and-features/spaces/what-are-cards-for-spaces

Scammers are sophisticated. Staying protected means staying informed. Here are 11 practical steps you can take.

1. Keep your N26 app and device updated with the latest software and security fixes.
2. Use fingerprint or facial recognition to log in to your account.
3. Create strong passwords using letters, numbers, and symbols — and never reuse the same password across multiple accounts.
4. Always check where an email comes from before you act on it. Pay close attention to the sender's address and any URLs that look unusual.
5. Be cautious on public or shared Wi-Fi — choose secure WPA2 connections over WEP, and use a VPN where possible.
6. Turn on location tracking in your N26 app so we can flag payments that don't look like you made them.
7. If a message feels urgent, slow down. Creating a sense of panic or excitement is one of the most common tactics scammers use — they want you to act before you think.
8. If an offer seems too good to be true — online or offline — it probably is.
9. Use multi-factor authentication (also called Two-Factor Authentication or 2FA), which uses your phone or another device to confirm your identity when you log in.
10. Always double-check links sent in emails. If you're unsure, search for the website directly rather than selecting the link.
11. Never download files, share personal information, or select links from unknown senders.