Overview
- Spanish courts are broadly applying the 2025 Supreme Court standard this week, placing the burden on banks to reimburse customers unless they show gross negligence.
- Phishing scams use copied logos, spoofed SMS, emails and calls with urgent texts such as “Your account was blocked” to trick customers into giving passwords, tokens or PINs.
- Authorities tell victims to contact their bank immediately, preserve screenshots and file an extrajudicial complaint that typically takes 30 to 90 days before pursuing a civil suit.
- Banks and industry groups stress that each case is decided on its facts and that reimbursement can be denied if the bank proves 'negligencia grave' or customer fraud, though ordinary clicks or phone deception usually do not meet that bar.
- Fraudsters now also activate pre‑approved loans from customer portals to drain accounts, regulators in Spain and Mexico are issuing guidance, and expanding court rulings may force banks to strengthen fraud detection and customer protections.