Polish entrepreneur wins court case, recovers over 114k zł from bank over cyber‑fraud losses

A Warsaw court ruled that a bank failed to detect a series of suspicious card transactions carried out on several continents, leading to a loss of about 95,000 zł for a gastronomy company. The court ordered the bank to pay the entrepreneur more than 114,000 zł and highlighted serious negligence, including the use of a private phone number linked to an employee’s spouse and transactions that exceeded daily limits.

The fraud involved nightly purchases of 80–450 euros in countries such as Estonia, Kenya, Uganda, Uzbekistan, France, the United Kingdom, Belgium, Nigeria and Cambodia. Despite Visa’s warning in May 2023 about a possible data breach, the bank did not block the operations or trigger additional verification. The entrepreneur’s claim for a refund had been rejected by the bank, which argued that the losses were discovered too late and that the client could have limited risk by setting an online‑transaction limit of zero.