Brusselstimes Belfius Bank Faces Criminal Court Over Phishing Refund Case
Article Content
- •Belfius Bank is the first bank in Belgium to face criminal charges for failing to refund a phishing victim.
- •The victim lost €100,000 due to a phishing scam involving a fraudster posing as a Card Stop employee.
- •Recent court rulings support immediate refunds for unauthorized transactions while investigations are ongoing.
Belfius, a Belgian state-owned bank, is set to appear in criminal court in November 2026 for failing to reimburse a customer who lost €100,000 in a phishing scam. The victim, a French-speaking woman, was deceived by a fraudster impersonating a Card Stop employee. Despite the legal obligation for banks to refund unauthorized payments immediately, Belfius denied the refund, leading the victim to pursue civil action and now criminal charges. This case marks the first time a bank has been criminally prosecuted for non-repayment in a phishing incident. Recent court rulings have indicated that banks must make provisional refunds while investigating customer responsibility. The outcome could set a significant legal precedent regarding banks' responsibilities in fraud cases.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Belfius in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…