EU Court Adviser Rules Banks Must Provide Immediate Refunds to Phishing Victims

Euro Court Adviser Calls for Immediate Refunds for Phishing Victims

A recent opinion by Athanasios Rantos, the Advocate General of the Court of Justice of the EU (CJEU), has brought attention to the issue of unauthorized transactions affecting bank account holders. Rantos suggests that banks should promptly refund individuals impacted by such incidents, even if the fault lies with the account holder.

This opinion came in response to a request for a preliminary ruling from the District Court in Koszalin, Poland, concerning a dispute between the PKO BP S.A. bank and one of its customers.

The case revolved around a phishing scam where a customer, while selling an item on an auction platform, fell victim to a fraudster who lured them into divulging their bank account details through a fake login page.

Despite reporting the unauthorized transaction to both the bank and the police the following day, the customer faced resistance from the bank in terms of refunding the lost amount. This led to a legal battle initiated by the customer against the bank.

The crux of the dispute lay in the bank’s argument that it could deny the refund if the customer’s negligence contributed to the loss.

Rantos emphasized that according to the EU Payment Services Directive (2015/2366 / PSD2), banks are obligated to issue immediate refunds to victims unless there are reasonable grounds to suspect fraud on the customer’s part.

The Advocate General’s opinion highlights that while banks must refund unauthorized transactions promptly, they retain the right to recover losses from the customer if they can prove gross negligence or intentional misconduct leading to the security breach.

It is important to note that the opinion provided by Rantos does not constitute a definitive ruling by the CJEU but serves as a guiding insight into the potential direction the court may take in addressing similar cases. The final ruling by the CJEU will hold legal authority across all EU courts.

Protecting Against Malware Threats

As cyber threats evolve, the Red Report 2026 sheds light on how malicious entities are leveraging sophisticated techniques to evade detection. Stay informed by downloading our analysis of 1.1 million malicious samples to uncover the top 10 strategies employed by cybercriminals and assess the effectiveness of your security measures.

Download The Report