[CLSTR]
< Back to all clusters
[BUSINESS] · Poland, EU · 17 sources

started · updated

Part of situation: CJEU ruling on bank liability for phishing fraud (3 clusters)

European Court of Justice mandates immediate bank refunds for phishing victims

European Court of Justice phishing banking regulations PSD2 consumer rights

The European Court of Justice (ECJ) has issued a landmark ruling in Case C-70/25, Tukowiecka, significantly strengthening the rights of banking customers across the European Union. The court determined that financial institutions must immediately reimburse victims of unauthorized transactions, such as those resulting from phishing attacks, even if the bank suspects the customer acted with gross negligence.

Under the ruling, banks are required to complete the reimbursement by the end of the next business day following the notification of the fraud. The court established a clear procedural distinction: the bank must first return the funds to the victim and can only seek to recover those funds later if it can prove the customer acted with intent or gross negligence. The burden of proof for such negligence rests entirely on the financial institution.

The decision stems from a case in Poland involving a customer of PKO BP who lost approximately 700 euros after falling victim to a phishing link. The bank had initially refused reimbursement, citing the customer's negligence in protecting her credentials. This ruling effectively shifts the paradigm, ensuring that victims are not forced into lengthy legal battles to recover stolen funds before receiving initial compensation.

Entities

Court of Justice of the European Union · European Court of Justice · European Union · Febelfin · Financial Ombudsman · PKO BP · Poland · Polish Bank Association · Tukowiecka · Związek Banków Polskich

Claims

What the coverage asserts, and how many sources carry each claim.

Sources

Phishing tømte din konto: Ny EU-dom tvinger banken til straks at betale pengene tilbage [trend.dk]
Gik målrettet efter ældre: Nu har falsk bankbud fået sin straf [migogaarhus.dk]
Banki muszą rekompensować straty klientów z powodu oszustw - Nasza-holandia. pl [nasza-holandia.pl]
ECJ Forces Banks to Immediately Refund Phishing Victims [world-today-journal.com]
Wyrok TSUE: banki mają najpierw oddawać pieniądze oszukanym klientom, a winę ustalać później [www.donald.pl]
ZBP po wyroku TSUE wskazuje na odpowiedzialność klienta za rażące niedbalstwo [prnews.pl]
La Cour de justice européenne estime que les banques doivent rembourser immédiatement les victimes d'hameçonnage [fr.businessam.be]
700 € weg: EuGH zwingt Banken zur Phishing-Erstattung [wortfilter.de]
Si caus en una estafa bancària, t'han de tornar els diners? Això diu la nova sentència de la justícia europea [www.elnacional.cat]
Els SMS fraudulents de la CASS pretenien robar les dades dels usuaris de cara a futurs atacs [www.diariandorra.ad]
El TJUE obliga a los bancos a devolver ya el dinero de las ciberestafas: qué cambia para el ahorrador [www.merca2.es]
La justícia europea diu que el banc hauria de tornar immediatament els diners de les ciberestafes - 3CatInfo [www.3cat.cat]
Nach Betrug: Auch in diesem Fall muss dir deine Bank jetzt Geld zurückzahlen [www.futurezone.de]
Banken: Standard-Ausrede am Ende [www.lawblog.de]
Ortega y García Abogados analiza el fallo del TJUE sobre el obligado reembolso bancario por phishing [www.diariosigloxxi.com]
EuGH entscheidet: Banken müssen bei Kontobetrug erstatten – außer in diesem Fall [www.berliner-zeitung.de]
Geld nach Phishing weg? EuGH-Urteil stärkt Opfer von Banking-Betrug [www.bild.de]