What happened
Germany's financial regulator BaFin published a warning dated 13 November 2026 about the website dickemann-ag.org and emails from the domain @dickemann-ag.org. According to BaFin, financial and securities services are offered there without the required permission. In the site imprint the operators also use the company data of Dickemann Capital Aktiengesellschaft, which BaFin describes as identity misuse. BaFin says that anyone offering financial or securities services in Germany needs its permission, that whether a company is authorised can be checked in its company database, and that the warning is based on section 37(4) of the German Banking Act (KWG) and section 18(3) sentence 1 of the Securities Prospectus Act (WpPG). Dickemann Capital AG is the company whose identity is being misused; it is not the operator of dickemann-ag.org.
How the scam works
Impersonation schemes borrow a trusted name — a school, a police force, a bank, a well-known person or a regulator-registered firm — so that a message, a website or a phone number looks official. The real organisation is not involved and will not ask you to pay, log in or send money through a surprise link or an unlisted number. Look up the official contact details yourself and call or write there. If you have already paid or given personal information, contact your bank and report the incident to the police or your national cyber-crime service.
If a message, a page or a caller creates urgency about money, a login or a legal threat, pause and check the claim through a contact method you already trust. Keep screenshots, reference numbers and the exact addresses or phone numbers you were given, and tell your bank early if money has already left the account. Official brands and authorised firms named in a lure are not involved unless a primary source says otherwise.
Source
Source: https://www.bafin.de/SharedDocs/Veroeffentlichungen/DE/Verbrauchermitteilung/unerlaubte/2026/meldung_2026_11_13_dickemann-ag.html
