Phishing Fraud Liability Clarified as Banks May Share Responsibility

A recent German court ruling has clarified that banks can be held partially liable for phishing fraud when their fraud‑monitoring systems are insufficient, even if customers authorize the payments. The case involved a victim who clicked a fraudulent email link, disclosed banking credentials, and then transferred funds after being contacted by someone posing as a bank employee.

In parallel, data from the United States shows that internet‑related crime caused losses of €20.9 billion in 2025, up from €16 billion in 2024. More than one million incidents were reported, with seniors particularly vulnerable to phishing, spoofing and investment scams. The report also notes that Open Banking transactions in Britain have a lower fraud rate (0.024 % in early 2026) than traditional payments, and that personal bank‑branch contact remains a key protective factor.

Industry groups such as the American Bankers Association have lodged briefs concerning the liability of payment services like Zelle, arguing that excessive responsibility could destabilise the financial system.