Search I’ve been hacked Advice Menu

What does PostFinance cover?

PostFinance AG (PostFinance Card, credit and prepaid cards, E-Finance/app) (Bank): we read no business products and no private products, plus 4 rules on refunds.

As of

On this page
  1. Refunds

When do you get your money back?

This is how the terms of PostFinance deal with misuse of a card, account or app.

The bank first: private products pay only what the bank or card issuer does not cover (Mobiliar at most 3 events per year; Zurich only after the bank’s written refusal). Block the card immediately and file a report.

Where does it say so?

Haushalt- und Gebäudeversicherung, Kundeninformationen und Allgemeine Bedingungen (Hausrat, Wertsachen, Privathaftpflicht, Gebäude, Haustiere, Cyberversicherung, Vertragsrechtsschutz), Ausgabe 04.2025, Art. B Ziff. 5, PDF-S. 42

«Versichert sind maximal 3 Schadenereignisse pro Versicherungsjahr.»

Open document: Haushalt- und Gebäudeversicherung, Kundeninformationen und Allgemeine Bedingungen (Hausrat, Wertsachen, Privathaftpflicht, Gebäude, Haustiere, Cyberversicherung, Vertragsrechtsschutz) (opens in a new window), retrieved 06.11.2026

  • unauthorised payment, card stolen/lost

    Deadline: not stated Deductible: not stated

    The rule in full

    PostFinance Card (debit): PostFinance covers losses from misuse by third parties if the customer proves that the T&C and conditions of participation were complied with and she is not at fault. Persons close to the customer are not considered third parties; insured losses and consequential losses are excluded. Conditions: block the card immediately, police report in the case of criminal offences, use 3-D Secure where offered; loss form within 10 days. There is no dispute deadline in days for the debit card; the T&C require a dispute «immediately».

    Where does it say so? (unauthorised payment, card stolen/lost)

    Teilnahmebedingungen physische und digitale Karten von PostFinance, Version August 2024, Ziff. 11 Haftung (Sorgfalt Ziff. 4 j)

    «PostFinance übernimmt Schäden, die der Kund:in aus missbräuchlicher Verwendung der Karte durch Dritte entstehen, sofern sie nachweisen kann, dass sie»

    Open document: Teilnahmebedingungen physische und digitale Karten von PostFinance (opens in a new window), retrieved 06.11.2026

  • unauthorised payment, card data hacked/copied (card-not-present, skimming)

    Deadline: 30 days Deductible: not stated

    The rule in full

    PostFinance credit cards: the risk lies in principle with the customer. If no means of identification or security element was used, PostFinance covers the loss, provided the customer has complied with all conditions and is not at fault. Dispute within 30 days of the invoice, form within 10 days. Compensation may be limited or excluded, for example in the event of lack of cooperation or repeated cases.

    Where does it say so? (unauthorised payment, card data hacked/copied (card-not-present, skimming))

    Teilnahmebedingungen PostFinance-Kredit- und -Prepaidkarten, Version August 2024, Ziff. 6 c (Frist Ziff. 4 d)

    «In allen übrigen Fällen übernimmt PostFinance Schäden aus missbräuchlicher Verwendung der Karte durch Dritte»

    Open document: Teilnahmebedingungen PostFinance-Kredit- und -Prepaidkarten (opens in a new window), retrieved 06.11.2026

  • payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)

    Deadline: 30 days Deductible: not stated

    The rule in full

    Credit card: if the customer approves transactions with a means of identification or security element, they bear the loss in any case. E-Finance: confirmations may only be given if they correspond to the customer’s own will (TNB digital section 5 e); PostFinance never asks for codes (section 5 a).

    Where does it say so? (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam))

    Teilnahmebedingungen PostFinance-Kredit- und -Prepaidkarten, Version August 2024, Ziff. 6 c

    «In jedem Fall sind sie von der Kund:in zu tragen, wenn die Transaktionen unter Verwendung eines Identifikationsmittels oder Sicherheitselements»

    Open document: Teilnahmebedingungen PostFinance-Kredit- und -Prepaidkarten (opens in a new window), retrieved 06.11.2026

  • e-banking takeover by third parties

    Deadline: not stated Deductible: not stated

    The rule in full

    Anyone who logs in with the means of identification is deemed authorised; the customer approves all actions carried out in this way (TNB digital section 2 b). The customer bears the loss resulting from breached duties of care. If nobody breached their obligations, the loss is borne by the party in whose sphere of influence the cause lay (T&C section 2). Obligations: keep codes secret, do not allow remote access, antivirus and updates, report immediately if suspicious, police report. The guarantee of up to CHF 100'000 announced in 2018 is not included in the current conditions of participation (version August 2024).

    Where does it say so? (e-banking takeover by third parties)

    Allgemeine Geschäftsbedingungen der PostFinance AG, Version August 2024, Ziff. 2 Legitimation

    «Falls weder die Kund:in noch PostFinance ihre Sorgfaltspflichten verletzt hat, so hat diejenige Partei den Schaden zu tragen, in deren Einflussbereich sich die Ursache»

    Open document: Allgemeine Geschäftsbedingungen der PostFinance AG (opens in a new window), retrieved 06.11.2026

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.