Polish Banks to Refund Customers for Unauthorized Payments

Poland's Office of Competition and Consumer Protection (UOKiK) has ruled that four leading banks must revise their policies and return funds to customers for any transactions executed without the account holder's knowledge. The decision targets BNP Paribas, mBank, Bank Millennium, and Alior Bank, requiring them to guarantee reimbursement when money is debited from accounts or cards without the owner's awareness — for example, after a third party obtains banking credentials.

The regulator's intervention addresses a growing wave of digital fraud in which criminals gain access to client data and initiate unauthorized transfers. Under the new rules, the banks are obligated to adjust their terms and conditions to ensure that victims of such schemes receive prompt restitution.

UOKiK emphasized that financial institutions bear responsibility for protecting consumers against operations conducted without explicit consent. The ruling sets a precedent for the broader Polish banking sector, reinforcing the principle that banks must absorb losses from unauthorized transactions rather than passing them on to customers.

The affected banks, which collectively hold a significant share of the Polish retail market, must now implement compliance measures to meet the regulator's requirements. The move strengthens consumer confidence in the financial system and aligns with wider European efforts to enhance payment security.