A French appeals court has ruled that Caisse d’Epargne must reimburse a customer who fell victim to a “fake bank advisor” spoofing scam — rejecting the bank’s argument that the customer was negligent. The Bordeaux Court of Appeal ruling sets an important precedent for how liability is handled when sophisticated social engineering empties someone’s account.
How the Scam Worked
The victim was targeted by a classic “fake advisor” scheme: scammers impersonated bank representatives, manipulated the customer into authorizing transactions, and drained the account. It’s a tactic that’s surged across Europe in recent years, and it works because the scammers convincingly replicate the look, feel, and language of legitimate banking communications. In some cases, they even spoof phone numbers to make calls appear to come from the bank itself.
When the victim sought reimbursement, Caisse d’Épargne pushed back — claiming the customer had been negligent by falling for the scam. It’s a common defensive play: blame the victim, avoid the payout.
The Legal Framework
French commercial law actually has a clear answer to this. The Code monétaire et financier stipulates that unauthorized payment transactions must be refunded by the payment service provider immediately. The burden isn’t on the customer to prove they weren’t careless — it’s on the bank to demonstrate the customer acted fraudulently or with gross negligence.
The Bordeaux appeals court sided firmly with the victim, ordering Caisse d’Épargne to reimburse the stolen funds. While the exact amount isn’t specified in the reporting, the principle matters more than the number: banks can’t dodge responsibility just because a scammer was convincing.
Why This Matters Beyond France
Spoofing and impersonation scams are a growing problem globally. In the UK, losses from authorized push payment (APP) fraud reached hundreds of millions of pounds in recent years. In the US, the FTC reports that impersonation scams consistently rank among the top categories for consumer losses.
Legal frameworks vary, but the trend is shifting toward holding financial institutions more accountable for protecting customers — including from sophisticated social engineering that even wary consumers struggle to detect. This French ruling adds momentum to that trend.
What Consumers Should Know
No court ruling replaces personal vigilance. Verify caller identities independently, never authorize transactions based solely on an incoming call or message, and treat urgency as a red flag — scammers rely on panic to override judgment. But this ruling does mean that if you do get caught by an increasingly sophisticated scam, the law may be on your side. Banks can’t just shrug and point at you.
