The Commerzbank photoTAN app from Commerzbank AG - separate device, bright colors and extra security

Reviewed: ad hoc news Lifestyle & Consumer desk. Edited and checked on 2026-06-26, 07:17. Details in the imprint.

Commerzbank photoTAN app greets you with a bright, almost playful code tile that flickers like a digital stained-glass window on your display. You hold it under your phone's camera, feel the tiny vibration on scan, and your transfer suddenly looks a lot more controlled.

What photoTAN actually does

At its core, Commerzbank photoTAN app is a transaction-authorization tool for online and mobile banking based on colored matrix codes. Instead of SMS TANs, customers scan a multi-colored graphic that encodes the specific transaction details.

The bank pairs the app or a separate photoTAN reader with the customer's account, so the generated TAN is tied to that device. This second factor aims to harden common attack vectors like intercepted SMS or phishing forms that request generic one-time codes.

App or separate reader

Product manager Sabine Schmitt from Commerzbank often highlights that the product is deliberately dual-track: smartphone app for most users, dedicated photoTAN reader for those who prefer a physical device. The plastic reader sits light in the hand, with a clicky keypad and a calm, high-contrast display.

For transfers, users either open the Commerzbank banking app and call photoTAN directly, or point the separate reader's camera at the colorful mosaic on their laptop screen. In both cases, the device generates a TAN that must be entered to complete the transaction.

Daily use at the kitchen table

In everyday life, the most visible change with photoTAN is how quickly routine transfers become muscle memory. You sit at the kitchen table, laptop open, raise your phone for a second, the camera locks onto the mosaic, and the confirmation code appears without any typing.

Compared with mobile TAN via SMS, users often report fewer delays and less juggling between message app and banking app. However, the system does require a clean display and good lighting, especially for the separate reader, otherwise the scanning process can stall.

Security design choices

Security experts appreciate that each photoTAN graphic encodes transaction-specific details such as IBAN and amount before generating the approval code. That means the visible confirmation on the device should match the intended payment, giving users an extra chance to catch manipulation.

Because the app is tied to a specific device and needs activation through Commerzbank's onboarding process, attackers would have to control both banking credentials and the registered device. This layered approach follows common European PSD2 strong-customer-authentication requirements.

Where friction remains

That said, photoTAN does introduce its own minor frictions. New customers must complete an activation process that includes receiving an initial activation letter or using an alternative identification route, which can feel cumbersome compared with instant-app offerings from fintech competitors.

And if a user loses their smartphone or the photoTAN reader, they need to deactivate the old device and register a new one, a step that can temporarily block access to certain online-banking functions until the new pairing goes through.

How it fits into the app

Inside the Commerzbank banking app, photoTAN is embedded as a separate component rather than a fully invisible background process. For each transfer or standing-order change, the interface clearly switches into authorization mode and shows the mosaic or a confirmation text, which supports transparency.

Users can also manage their photoTAN settings in the app, including device management and fallback options. Push notifications announce when a new authorization is needed, giving a quiet but persistent reminder if a pending transaction waits for confirmation.

Risk, regulation and customers

From Commerzbank's perspective, photoTAN serves several purposes at once: meeting regulatory demands for strong customer authentication, reducing fraud losses, and enabling more self-service for customers who handle their payments without branch visits.

For retail investors watching the bank, products like photoTAN are part of the broader digital transformation story. They show whether Commerzbank can keep established customers loyal while aligning its systems with more agile digital competitors in Germany and beyond.

Context and a look at the share

Overall, photoTAN has become a quiet backbone tool in the Commerzbank ecosystem, not a marketing star but a daily touchpoint whenever money leaves an account, especially in German retail banking. Digital chief Thomas Schauf trusts that this combination of comfort and control will keep customers inside the Commerzbank app rather than drifting to external payment services.

Commerzbank shares (ISIN DE000CBK1001) trade on Xetra in euros as part of the DAX index, with the share price closely watched as the bank pushes its digital and cost-cutting strategy.

This article was AI-assisted and editorially reviewed. Product information without guarantee; prices and availability may change at short notice. No investment advice, no buy or sell recommendation. Stock-market transactions involve risks up to total loss.