{"id":4725,"date":"2025-05-02T16:44:23","date_gmt":"2025-05-02T16:44:23","guid":{"rendered":"https:\/\/fernandezboira.com\/2025\/05\/02\/what-happens-if-your-account-is-emptied-due-to-online-fraud-the-supreme-court-makes-it-clear-that-the-bank-must-respond\/"},"modified":"2025-08-06T15:14:54","modified_gmt":"2025-08-06T15:14:54","slug":"what-happens-if-your-account-is-emptied-due-to-online-fraud-the-supreme-court-makes-it-clear-that-the-bank-must-respond","status":"publish","type":"post","link":"https:\/\/fernandezboira.com\/en\/2025\/05\/02\/what-happens-if-your-account-is-emptied-due-to-online-fraud-the-supreme-court-makes-it-clear-that-the-bank-must-respond\/","title":{"rendered":"What happens if your account is emptied due to online fraud? The Supreme Court makes it clear that the bank must respond"},"content":{"rendered":"\n<h3 class=\"wp-block-heading\">SIM Swapping, phishing, smishing&#8230;<\/h3>\n\n<p>In a recent case decided by the <a href=\"https:\/\/www.poderjudicial.es\/search\/AN\/openDocument\/c26766f2870f44cfa0a8778d75e36f0d\/20250425\" target=\"_blank\" rel=\"noopener\" title=\"\">Supreme Court (STS 571\/2025)<\/a>, an unfortunately increasingly common situation was addressed: a customer saw his bank account emptied through transactions he had not authorized. The ruling sets an important precedent in favor of electronic banking users. <\/p>\n\n<p>The victim, an Ibercaja customer, suffered what is known as <em>&#8220;SIM swapping&#8221;.<\/em> This type of fraud allows criminals to duplicate the SIM card of the victim&#8217;s cell phone and thus receive the verification codes needed to make transfers. Although the customer had already warned the bank weeks before about suspicious movements and had requested security measures, the bank did not react.  <\/p>\n\n<p>In a single night, <strong>15 transfers<\/strong> were made from his account totaling more than <strong>83,000 euros<\/strong>, without the bank&#8217;s system detecting any anomaly. Worse still: it was another bank that alerted of a possible fraudulent operation. Not Ibercaja.  <\/p>\n\n<p>Both the Court of First Instance and the Provincial Court of Zaragoza convicted the bank, and now the Supreme Court has confirmed that conviction, reaffirming that:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>The bank must act with a <strong>high level of diligence<\/strong> in the detection of anomalous operations.<\/li>\n\n\n\n<li>It is not enough to prove that the transaction was technically authenticated (e.g. with the SMS code).<\/li>\n\n\n\n<li>If the client denies having authorized a transaction, it is up to the bank to <strong>prove<\/strong> fraud or gross negligence on the part of the user. And in this case, <strong>it was not proven<\/strong>. <\/li>\n<\/ul>\n\n<p>The Supreme Court has been clear: digital banking cannot hide behind the fact that the intended systems were used if there is no guarantee that this authentication really protects the user against sophisticated attacks.<\/p>\n\n<h3 class=\"wp-block-heading\">What does this mean for the banking customer?<\/h3>\n\n<p>If you have been the victim of online fraud, and charges or transfers have been made from your account that you did not authorize, the bank <strong>may be obliged to return the money to you<\/strong>, unless it can prove that you acted with gross negligence.<\/p>\n\n<p>And remember: if you have reported suspicious movements and the bank has not taken action, this is clearly in your favor.<\/p>\n\n<p><strong>If you liked this article, let me know by following me on Instagram (you can ask me any questions or help me improve the article with any interesting question I left) , sharing the article and subscribing to the Blog. Thank you!  <\/strong><\/p>\n\n<ul class=\"wp-block-social-links has-large-icon-size is-layout-flex wp-block-social-links-is-layout-flex\"><li class=\"wp-social-link wp-social-link-instagram  wp-block-social-link\"><a href=\"https:\/\/www.instagram.com\/fb.legal\/\" class=\"wp-block-social-link-anchor\"><svg width=\"24\" height=\"24\" viewBox=\"0 0 24 24\" version=\"1.1\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><path d=\"M12,4.622c2.403,0,2.688,0.009,3.637,0.052c0.877,0.04,1.354,0.187,1.671,0.31c0.42,0.163,0.72,0.358,1.035,0.673 c0.315,0.315,0.51,0.615,0.673,1.035c0.123,0.317,0.27,0.794,0.31,1.671c0.043,0.949,0.052,1.234,0.052,3.637 s-0.009,2.688-0.052,3.637c-0.04,0.877-0.187,1.354-0.31,1.671c-0.163,0.42-0.358,0.72-0.673,1.035 c-0.315,0.315-0.615,0.51-1.035,0.673c-0.317,0.123-0.794,0.27-1.671,0.31c-0.949,0.043-1.233,0.052-3.637,0.052 s-2.688-0.009-3.637-0.052c-0.877-0.04-1.354-0.187-1.671-0.31c-0.42-0.163-0.72-0.358-1.035-0.673 c-0.315-0.315-0.51-0.615-0.673-1.035c-0.123-0.317-0.27-0.794-0.31-1.671C4.631,14.688,4.622,14.403,4.622,12 s0.009-2.688,0.052-3.637c0.04-0.877,0.187-1.354,0.31-1.671c0.163-0.42,0.358-0.72,0.673-1.035 c0.315-0.315,0.615-0.51,1.035-0.673c0.317-0.123,0.794-0.27,1.671-0.31C9.312,4.631,9.597,4.622,12,4.622 M12,3 C9.556,3,9.249,3.01,8.289,3.054C7.331,3.098,6.677,3.25,6.105,3.472C5.513,3.702,5.011,4.01,4.511,4.511 c-0.5,0.5-0.808,1.002-1.038,1.594C3.25,6.677,3.098,7.331,3.054,8.289C3.01,9.249,3,9.556,3,12c0,2.444,0.01,2.751,0.054,3.711 c0.044,0.958,0.196,1.612,0.418,2.185c0.23,0.592,0.538,1.094,1.038,1.594c0.5,0.5,1.002,0.808,1.594,1.038 c0.572,0.222,1.227,0.375,2.185,0.418C9.249,20.99,9.556,21,12,21s2.751-0.01,3.711-0.054c0.958-0.044,1.612-0.196,2.185-0.418 c0.592-0.23,1.094-0.538,1.594-1.038c0.5-0.5,0.808-1.002,1.038-1.594c0.222-0.572,0.375-1.227,0.418-2.185 C20.99,14.751,21,14.444,21,12s-0.01-2.751-0.054-3.711c-0.044-0.958-0.196-1.612-0.418-2.185c-0.23-0.592-0.538-1.094-1.038-1.594 c-0.5-0.5-1.002-0.808-1.594-1.038c-0.572-0.222-1.227-0.375-2.185-0.418C14.751,3.01,14.444,3,12,3L12,3z M12,7.378 c-2.552,0-4.622,2.069-4.622,4.622S9.448,16.622,12,16.622s4.622-2.069,4.622-4.622S14.552,7.378,12,7.378z M12,15 c-1.657,0-3-1.343-3-3s1.343-3,3-3s3,1.343,3,3S13.657,15,12,15z M16.804,6.116c-0.596,0-1.08,0.484-1.08,1.08 s0.484,1.08,1.08,1.08c0.596,0,1.08-0.484,1.08-1.08S17.401,6.116,16.804,6.116z\"><\/path><\/svg><span class=\"wp-block-social-link-label screen-reader-text\">Instagram<\/span><\/a><\/li><\/ul>\n<div class=\"wp-block-jetpack-subscriptions__supports-newline wp-block-jetpack-subscriptions\">\n\t\t<div>\n\t\t\t<div>\n\t\t\t\t<div>\n\t\t\t\t\t<p >\n\t\t\t\t\t\t<a href=\"https:\/\/fernandezboira.com\/en\/?post_type=post&#038;p=4725\" style=\"font-size: 16px;padding: 15px 23px 15px 23px;margin: 0; margin-left: 10px;border-radius: 0px;border-width: 1px; background-color: #113AF5; color: #FFFFFF; text-decoration: none; white-space: nowrap; margin-left: 0\">Subscribe<\/a>\n\t\t\t\t\t<\/p>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/div>\n\t<\/div>","protected":false},"excerpt":{"rendered":"<p>What happens if your account is emptied due to online fraud? The Supreme Court makes it clear that the bank must respond <\/p>\n","protected":false},"author":1,"featured_media":4651,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"edge","default_image_id":0,"enabled":false},"version":2}},"categories":[421,479,1],"tags":[481,480,482],"class_list":["post-4725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-banking","category-penal-en","category-sin-categorizar","tag-phishing-en","tag-sim-swapping-en","tag-smishing-en"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/fernandezboira.com\/wp-content\/uploads\/2025\/05\/phishing-smishing-simswapping.webp","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/posts\/4725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/comments?post=4725"}],"version-history":[{"count":1,"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/posts\/4725\/revisions"}],"predecessor-version":[{"id":4726,"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/posts\/4725\/revisions\/4726"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/media\/4651"}],"wp:attachment":[{"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/media?parent=4725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/categories?post=4725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fernandezboira.com\/en\/wp-json\/wp\/v2\/tags?post=4725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}