Skip to content
ECJ Ruling Strengthens Refund Rights for Phishing Victims

ECJ Ruling Strengthens Refund Rights for Phishing Victims

First seen 30 Oct 2026, 17:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 19:16 UTC
  • •ECJ mandates immediate refunds for phishing victims under PSD2.
  • •Banks can only deny refunds if fraud is suspected and reported.
  • •The ruling enhances consumer protection across the EU.

The European Court of Justice (ECJ) ruled on October 15, 2026, that banks must immediately refund customers who fall victim to phishing attacks, even if gross negligence is alleged. This ruling stems from a case involving a Polish bank customer who lost approximately €705 after entering her login details on a spoofed banking site. The ECJ clarified that banks can only deny refunds if they have reasonable grounds to suspect fraud and must communicate these grounds to the relevant authority. The decision reinforces the rights of banking customers across the EU under the Payment Services Directive (PSD2), ensuring that victims of online banking fraud are better protected. The ruling is significant for consumers, as it shifts the burden of proof to banks regarding claims of customer negligence. The case highlights the ongoing issues with phishing scams and the need for robust security measures in online banking.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-15
ECJ ruling on phishing refunds
The European Court of Justice ruled that banks must refund unauthorized transactions immediately, regardless of alleged customer negligence.
Freshfields
2026-10-30
Articles published on ECJ ruling
Two articles were published discussing the implications of the ECJ ruling for banking customers and payment service providers.
Teltarif.De

More articles in this cluster (5)

Following this threat?

Track PKO BP in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3

Common questions

What does the ECJ ruling mean for banks?
Banks are required to refund customers immediately for unauthorized transactions unless they can prove fraud.
How does this ruling affect consumers?
Consumers are better protected against losses from phishing attacks, as banks cannot refuse refunds based on alleged negligence.
What should banks do in response to this ruling?
Banks should review their fraud detection processes and ensure compliance with the ECJ's requirements for refunds.