Sparkasse Ends Separate Card-Payment App: Millions Must Migrate Cards by January 2027

Why Sparkasse Is Consolidating Its App Line-Up — and What Customers Must Do

Sparkassen customers in Germany will soon need to confirm their online card purchases through a different app. From 31 January 2027, the 3-D Secure check that verifies an online card payment will run through the S-pushTAN app instead of a separate card-confirmation application. The change means customers will need two apps on their phone rather than the current three — typically a banking app, a TAN app and the card-confirmation app.

The catch is that the switch is not automatic. Customers must move their credit, Giro or EC cards into the new setup using a dedicated migration assistant built into the app. Anyone who has not completed that step by the deadline will no longer be able to use their cards for online payments without further action. The migration is designed to be done entirely inside the app.

That last point matters because fraudsters have already begun exploiting the transition. According to the report, criminals are sending emails and messages that impersonate Sparkasse and ask customers to "migrate" their cards, aiming to capture personal data. The guidance is unambiguous: the card move should only be carried out in the app itself, never through a link in an email or SMS, however genuine it looks.

For customers who would rather avoid the migration altogether, the article notes that switching to a different current account or credit card — potentially cheaper and simpler — is an option, and points readers to comparison tools for both.

App Consolidation, Fraud Risk and the Competitive Opening for Rival Banks

What Sparkasse Actually Gains From Cutting an App

Running three separate applications for a single current account is expensive and confusing. Every app needs development, security patching, customer support and store maintenance. Folding card-payment confirmation into S-pushTAN reduces that overhead and gives customers a simpler set-up — two apps instead of three. It also concentrates a sensitive security function (3-D Secure authentication) into one hardened channel, which is easier to monitor and update than two parallel systems.

The trade-off is a hard deadline. A fixed cut-off of 31 January 2027 forces millions of customers to take an active step, and any friction in that process lands directly on Sparkasse's service reputation.

Why the Phishing Wave Is Predictable — and Dangerous

Any large, mandatory migration creates a perfect phishing pretext: a plausible reason for the bank to contact customers, an urgent deadline, and a concrete action to request. The report confirms fraudsters are already using fake migration emails and texts. For Sparkasse, the reputational exposure is real — customers who fall victim may associate the loss with the bank's communication, even though the fraud is external. Clear, repeated messaging that the migration happens only inside the app is the main defence.

The Competitive Opening for Rival Banks

The article explicitly notes that customers unwilling to deal with the switch can move to other current accounts or credit cards, which may be cheaper and simpler. That is a genuine competitive risk for Sparkasse: a forced technical migration is exactly the moment when inertia — normally the strongest force in retail banking — weakens. Neobanks and other German banks with simpler app stacks have an obvious window to pitch switching offers during the migration period.

What to Watch Through 2027

The key questions are how smoothly the in-app migration assistant works at scale, whether phishing attempts increase as the deadline approaches, and whether Sparkasse sees measurable customer attrition. For context, German retail banking is already in a slow consolidation phase, with customers increasingly willing to hold accounts at more than one institution — which makes a friction-heavy migration more consequential than it would have been a decade ago.

What Sparkasse Customers Should Do Before 31 January 2027

The single most important point: the card migration must be done inside the Sparkasse app itself — never through a link in an email or text, no matter how official it looks.

• Before 31 January 2027: open the S-pushTAN app and use the built-in migration assistant to move your credit, Giro and EC cards. Confirm the move is complete for every card you use online.
• Treat all migration emails and SMS as suspect: the report confirms fraudsters are already impersonating Sparkasse with fake migration requests. Do not click links or enter data outside the app.
• If you hold multiple cards: check each one individually — a card left behind will stop working for online payments after the deadline.
• If the migration or the app set-up does not suit you: the article notes that switching to a different current account or credit card — potentially cheaper and simpler — is a legitimate alternative worth comparing before the deadline.