{"id":926,"date":"2026-05-14T10:23:32","date_gmt":"2026-05-14T08:23:32","guid":{"rendered":"https:\/\/sentinelegal.ch\/bank-impersonation-fraud-is-the-bank-required-to-reimburse-you\/"},"modified":"2026-10-23T15:41:30","modified_gmt":"2026-10-23T13:41:30","slug":"bank-impersonation-fraud-reimbursement","status":"publish","type":"post","link":"https:\/\/sentinelegal.ch\/en\/bank-impersonation-fraud-reimbursement\/","title":{"rendered":"Bank Impersonation Fraud: Is the Bank Required to Reimburse You?"},"content":{"rendered":"

Fake bank advisor fraud, often referred to as spoofing<\/em>, has become a common scam in Switzerland. Individuals, SMEs, self-employed: no one is safe, and the amounts involved run into tens, sometimes hundreds of thousands of francs. After the shock, almost always the same question arises: Does the bank have to reimburse you? <\/p>\n

The Federal Supreme Court has established a precise analytical framework, which can rule in favor of either the victim or the bank, depending on the case. The answer depends on three factors, namely what the general terms and conditions stipulate, the severity of the institution’s fault and the client’s behavior. There are therefore legal arguments to be made, and it is best to know them before signing a waiver. <\/p>\n

The mechanism in brief<\/h2>\n

A call, an interlocutor who introduces themselves as the bank’s “security service” or “anti-fraud service,” an invented threat to the account. The voice is calm, professional, urgent. Under the pretext of protecting assets, remote control software is installed, or authentication codes are extorted. From there, the fraudster controls the victim’s banking environment. <\/p>\n

One obstacle remains, the validation. When the bank requests confirmation, the victim, manipulated and under pressure, provides it, sometimes by reciting a text dictated over the phone. It is precisely this confirmation that the bank will then use to absolve itself. The funds, meanwhile, have already left: fragmented, sent to relay accounts (in a recent case, a transfer of CHF 280,000 split into three orders to Hong Kong and Cyprus in less than an hour), then dispersed. <\/p>\n

What the Federal Supreme Court really says<\/h2>\n

Two misconceptions to dispel. The bank does not reimburse automatically, nor does the confirmation you provided suffice to release it. <\/p>\n

Since 2019-2020, the First Civil Law Division has established a now stable method, through three landmark rulings: ATF 146 III 121 (general framework), ATF 146 III 326 (fraudulent orders sent by email, in the presence of a risk transfer clause), and ATF 146 III 387 (CEO fraud, the 4 million ruling I will return to). The reasoning unfolds in three stages. <\/p>\n

First stage: Was the order given by the client, or without them? When a third party places the order fraudulently, or when the agreed signature method (typically collective signature by two) is not respected, there is no valid mandate. The damage is then, in the legal system, that of the bank, not the client, since the money in the account belongs to the institution, the client having only a claim for restitution, which arises from the mere opening of the account (ATF 146 III 387, consid. 4.1 and 4.3). <\/p>\n

Second stage, and this is often where everything changes: do the general terms and conditions contain a risk transfer clause, and is it enforceable? Such a clause is in principle valid. It yields when the bank has committed a serious fault (Art. 100 para. 1 CO). It follows that if your GTCs transfer the risk to you and the bank has not committed a serious fault, you bear the loss. <\/p>\n

Third stage: Does the bank have a claim for damages against its client for their concurrent fault (Art. 97 para. 1 CO), which it offsets? The bank’s own fault then plays a dual role. If it is serious enough to relegate the client’s fault to the background, it breaks the chain of causation and the bank bears the loss alone. Otherwise, it reduces by a corresponding amount the claim that the bank sets off against the client (Arts. 44(1) and 99(3) CO). <\/p>\n

The 4 million ruling illustrates a favorable outcome. In ATF 146 III 387 (TF 4A_178\/2019 of August 6, 2020), an employee of a company, holding a collective signature by two, falls victim to CEO fraud. Falsified orders are sent by email, outside the agreed method. No risk transfer clause in this case. The Federal Supreme Court rules that the serious fault of the bank and its auxiliaries breaks the causation, and orders the institution to reimburse EUR 4,041,537.61, with 5% interest from October 16, 2014. A spectacular decision, but one that hinges on its facts: absence of a risk clause, clear fault on the bank’s part. <\/p>\n

The specific trap of the fake advisor<\/h2>\n

The reasoning does not carry over automatically. The major rulings primarily concern falsified orders or orders placed outside procedure by a third party. In the fake advisor scenario, the victim authenticates the operation themselves. They enter, they validate, they confirm. Where the client has validated the order personally, the bank acts under a mandate and may in principle debit the account, so that the risk transfer clause no longer plays a role (ATF 146 III 326, consid. 4). The victim must then show that the bank breached its duty of care in performing the mandate (Arts. 398(2) and 97(1) CO), in particular by executing without verification an order that serious indications made suspicious. The victim’s own carelessness may lead to a reduction of the compensation (Arts. 44(1) and 99(3) CO). <\/p>\n

Nevertheless, the angle exists, and it is solid when the facts lend themselves to it. An instruction obtained through a third party’s deception generally remains binding on the client as against the bank, unless the bank knew or ought to have known of the deception (Art. 28(2) CO by analogy). The discussion therefore turns on what the bank knew or should have seen, so that the signals presented by the operation are central to the assessment of its duty of care. Amounts disproportionate to the account’s history. Unknown beneficiaries, recently formed companies, high-risk jurisdictions. Rapid-fire orders where the account was dormant. An account holder whose profile called for increased vigilance. <\/p>\n

Faced with unusual operations, the bank must clarify, and serious clarification is not limited to a call on a line that the fraudster may already control. Where it appears that the bank had itself detected signs of fraud before executing the orders, such an element carries considerable weight in the assessment of its fault. <\/p>\n

The red flags of serious fault a bank should not miss<\/h3>\n

The Federal Supreme Court requires the bank to carry out additional checks only where there are serious indications of fraud, where the order departs from the transactions usually requested or where particular circumstances give rise to doubt, and it is for the client to prove the bank’s fault (ATF 146 III 326, consid. 6.2). The signals that follow, which can be grouped into four families, are used to make that showing. The more they accumulate, the more compelling the bank’s duty to clarify becomes, and the heavier execution without reaction weighs.<\/p>\n

Transaction anomalies.<\/strong> Amounts out of step with the account’s history, rapid-fire transfers on a usually quiet account, operations at unusual hours, structuring designed to slip below control thresholds.<\/p>\n

Geographic anomalies.<\/strong> Beneficiary located in a jurisdiction with no connection to the client, or one known for money-laundering exposure, destination account recently opened, beneficiary company newly incorporated.<\/p>\n

Technical anomalies.<\/strong> Login from a device or location never seen before, recent installation of remote-control software, a change of contact details shortly before the order.<\/p>\n

Profile anomalies.<\/strong> An operation inconsistent with the client’s known financial knowledge and risk profile, the textbook case being an elderly person, unfamiliar with digital tools, suddenly making complex transfers abroad.<\/p>\n

No single indicator is decisive, but their convergence shifts the debate away from the client’s own validation, often a losing battle, toward the institution’s serious fault, which is the realistic line of attack.<\/p>\n

You are a victim: the right reflexes<\/h2>\n

The later the alert, the more likely the funds are to have left the first destination accounts, which makes blocking them uncertain. <\/p>\n

Within the hour, cut off e-banking access from a healthy device (not the compromised one), uninstall any software added during the incident, and demand from the bank, on its official number, the freezing of ongoing orders and the activation of a fund recall<\/em> procedure with the beneficiary banks.<\/p>\n

Within two days, file a criminal complaint for fraud (Art. 146 SCC). The criminal route opens tracing and blocking levers that civil law alone does not offer, including international mutual assistance. Keep everything: calling numbers, screenshots, SMS, emails, logs of installed software. <\/p>\n

Without delay, file a written objection, by registered mail, within the claim period set by your bank’s general terms and conditions, which is often short, sometimes immediate, and must be checked on the first day. And assert your claims on the merits. A formal notice constructed according to the Federal Supreme Court’s framework, and not a letter of grievances, changes the nature of the discussion, since it confronts the bank with a quantifiable procedural risk. <\/p>\n

The first steps, blocking the card and e-banking, keeping the evidence, reporting, are set out on arnaques-suisse.ch<\/a>, the information site run by Mr. Traussnig.<\/p>\n

If the fake advisor had you buy and then transfer cryptocurrency, see Stolen crypto in Switzerland<\/a>.<\/p>\n

If the bank refuses<\/h2>\n

You should expect the bank to deny liability at first. Several avenues remain open. Civil action for restitution or damages (Art. 97 et seq. CO). Referral to the Banking Ombudsman, which is free and non-binding, requires that the complaint first have been submitted to the bank and that no conciliation authority or court has been seized of the dispute (Art. 75 para. 4 let. b and d of the Financial Services Act). It therefore comes before civil action. And, depending on the case, a report to FINMA regarding organizational obligations and fraud detection systems. This last lever will not get you reimbursed directly, as the authority does not rule on individual disputes, but it sometimes influences the institution’s stance. <\/p>\n

Frequently asked questions<\/h2>\n

Can the bank hold my own mistakes against me?<\/h3>\n

The bank will probably invoke your own carelessness. This does not close the debate. If its own fault is serious, typically the failure to react to obvious warning signs, the judge may find, after weighing the circumstances, that it breaks the chain of causation and relegates your imprudence to the background. <\/p>\n

What is the deadline to react?<\/h3>\n

The deadline to object is set by your own bank’s general terms and conditions. It is often short, sometimes immediate, and must be checked on the first day. Beyond that, legal action remains open (the ordinary contractual limitation period is ten years), but the balance of power deteriorates. Act quickly. <\/p>\n

Should I file a complaint even if the bank agrees to discuss?<\/h3>\n

Yes. Criminal proceedings provide access to blocking and tracing tools that civil law does not, and they document your good faith. <\/p>\n

Legal basis and case law<\/h2>\n

Contractual liability and concurrent fault: Art. 97(1), 99(3) and 44(1) CO. Risk-transfer clause and serious fault: Art. 100(1) CO. Fraud: Art. 146 SCC.<\/p>\n

Leading Federal Supreme Court decisions: ATF 146 III 121 (general framework for risk allocation), ATF 146 III 326 (fraudulent orders by email and risk-transfer clause), ATF 146 III 387 \/ TF 4A_178\/2019 of August 6, 2020 (CEO fraud, interruption of the causal link by the bank’s serious fault).<\/p>\n

On this type of case<\/h2>\n

Sentinel Legal, a law firm in Geneva, assists victims of this type of fraud in dealing with their bank and before the criminal authorities.<\/p>\n

The criminal side of these frauds, from complaint to freezing the funds, falls within our practice as a criminal lawyer in Geneva<\/a>.<\/p>\n

To recover the diverted funds, see also our page fraud and asset recovery in Geneva<\/a>.<\/p>\n

These cases are handled at the intersection of civil law (restitution) and criminal law (tracing), often in the urgency of the first few days. This is the working approach of Sentinel Legal, which acts in banking law and white-collar criminal proceedings. To discuss a situation: +41 22 512 76 00 or via the contact form. <\/p>\n

\n

This article is purely informative and does not constitute legal advice. Each situation requires its own analysis. For a specific case, consult a lawyer. <\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Bank impersonation fraud: whether the bank must reimburse depends on its terms and each party’s fault, per the Federal Supreme Court. Geneva lawyer.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[30,32],"tags":[],"class_list":["post-926","post","type-post","status-publish","format-standard","hentry","category-contracts-litigation","category-economic-crime-fraud"],"acf":[],"_links":{"self":[{"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/posts\/926","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/comments?post=926"}],"version-history":[{"count":23,"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/posts\/926\/revisions"}],"predecessor-version":[{"id":2163,"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/posts\/926\/revisions\/2163"}],"wp:attachment":[{"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/media?parent=926"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/categories?post=926"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sentinelegal.ch\/en\/wp-json\/wp\/v2\/tags?post=926"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}