There is an unknown charge on my credit card, and I still have the card. Is this covered?
limited Bank or card first, then the policy
As a rule, the card issuer pays first. If the issuer refuses, cyber insurance pays on a secondary basis up to the limit, usually only after a written refusal.
Full answer
As a rule, the card issuer pays first: if only your card details were used without PIN, 3-D Secure or SMS code, you disputed the charge in time (usually 30 days) and complied with all duties of care, Swisscard, Viseca, Cornèr, Cembra, UBS, Migros Bank, Raiffeisen and ZKB cover the loss according to their T&C. We found no deductible with any issuer. If the issuer refuses, cyber insurance pays on a secondary basis up to the limit, usually only after a written refusal.
Also asked as: «There is an amount on my credit card statement that I do not recognise» · «Someone used my card details to shop online» · «Credit card fraud, who pays?»
As of
On this page
What to do now
Have the card blocked immediately (issuer’s emergency number).
Dispute the charge in writing with the card issuer, at the latest within the deadline in the T&C (usually 30 days from the invoice date).
In the event of financial loss, file a criminal complaint with the police; many insurers require the police report.
Keep the card issuer’s answer in writing; if it refuses, inform the insurer immediately.
If the data was stolen online: check the device and change passwords.
Sources (3)
Bundesamt für Cybersicherheit BACS: Phishing, Vishing, Smishing, abgerufen 06.11.2026, Konkrete Massnahmen · Open document (opens in a new window)
«Sollten Sie Kreditkartendaten angegeben haben, wenden Sie sich umgehend an Ihren Kreditkartendienstleister, damit dieser die Kreditkarte sperren kann.»
Raiffeisen Schweiz Genossenschaft / Raiffeisenbanken: Bedingungen für die Benützung der Raiffeisen Debitkarten, Version 1.2 – Januar 2026, Ziff. 12 · Open document (opens in a new window)
«spätestens aber 45 Kalendertage nach Erhalt des monatlichen Kontoauszugs»
AWP P&C S.A. (Allianz) / Cornèr Banca SA: Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz, Ausgabe 06.2026, II C Banking-Schutz, Ziff. 1 (ebenso Swisscard Cyber Security C 3.4, Viseca Online-Kontoschutz Ziff. 5, Cembra CyberProtect Ziff. 1.3) · Open document (opens in a new window)
«die nicht durch die Erstattung ihrer Verluste durch das Finanzinstitut/den Bankkartenherausgeber auf subsidiärer Basis gedeckt sind.»
Who pays?
-
First
Card issuer or bank under its T&C
unauthorised charge, duties of care complied with, reported in time
-
Then
Cyber or household contents add-on insurance, on a secondary basis
usually only after the bank’s written refusal
-
Then
Legal protection insurance
only lawyer and proceedings, e.g. against the perpetrator or in a dispute with the bank
Nobody pays
those affected bear the loss themselves
37 answers on the shelf
Each jar is a condition we have read.
- covered6
- add-on1
- limited23
- not covered1
- unclear1
- no information5
Bank or card issuer (12)
-
Cembra
Cembra CyberProtect
limited up to CHF 5'000
Condition and source
Covered: misuse after theft or robbery of the card or device and identity theft with card data, up to CHF 5'000 per year. Excluded: skimming and e-banking; secondary to the bank (only after written refusal). The product page advertises «phishing», but GTC section 2.1.1 does not expressly name phishing.
Deductible: none
Cembra Money Bank AG / ERV (Helvetia): Cembra CyberProtect – Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 07/2024, AVB Ziff. 2.1.3 Ausschlüsse · Open document (opens in a new window)
«Skimming; • Schäden im Zusammenhang mit E-Banking;»
-
Cembra
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Stolen or copied card data must be reported immediately (section 3.3); section 4.1 then applies. However, Cembra rejects any liability for transactions after unlawful access to the holder’s device and for losses caused by spying out data or careless handling of means of authentication. Where 3-D Secure is offered, it must be used (section 3.9).
Cembra Money Bank AG: Allgemeine Geschäftsbedingungen für die Kreditkarten von Cembra, V1/03.2025, Ziff. 4.6 · Open document (opens in a new window)
«Die Herausgeberin lehnt jegliche Haftung für Transaktionen ab, welche aus einem unrechtmässigen Zugriff auf das Endgerät des Inhabers oder dessen Verwendung resultieren.»
-
Cornèrcard
Cyber insurance for Visa, Mastercard and Diners Club cards of Cornèr Bank (individual/family cover)
limited up to CHF 20'000
Condition and source
Banking protection: unauthorised payments up to CHF 20'000 per year, authorised payments after phishing (e-mail) or smishing (SMS) up to CHF 1'000 per year. Only if the bank provides no reimbursement at all (or for its deductible). Obligations: up-to-date security system on the device (proof with logs), notification to Allianz within 3 days and no later than 30 days after the monthly statement, blocking within 24 hours after theft, police report, fraud report from the bank. Phone fraud, love scam and investment fraud are de facto excluded.
AWP P&C S.A. (Allianz) / Cornèr Banca SA: Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz, Ausgabe 06.2026, II C Banking-Schutz, Ziff. 3.4 · Open document (opens in a new window)
«sofern das Finanzinstitut/der Bankkartenherausgeber für diesen Vorfall keinerlei Erstattung leistet»
-
Cornèrcard
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): The risk of misuse lies in principle with the cardholder (authentication, section 5). Coverage only under the conditions of section 7 and only if merely card data without an additional means of authentication was used. Expressly excluded are losses through manipulation of mobile phones and SIM cards (section 7 g) and through electronic means of communication.
Cornèr Bank AG: Allgemeine Geschäftsbedingungen für die Classic, Gold und Platinum Karten Visa, Mastercard und Diners Club der Cornèr Bank AG, Ausgabe 01.2025, Ziff. 5 Legitimation · Open document (opens in a new window)
«Die Risiken aus der missbräuchlichen Verwendung der Karte liegen somit grundsätzlich beim Haupt- und Begleitkarteninhaber.»
-
Migros Bank
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Even for transactions with PIN or 3-D Secure, Migros Bank covers the charges if it is proven that third parties unlawfully interfered with networks, telecom facilities or the customer’s infrastructure (e.g. malware on the device). Requirement: dispute in time and duties of care complied with. This clause is more customer-friendly than with most other issuers examined.
Deductible: none
Migros Bank AG: Bedingungen für die Nutzung von Kreditkarten für Privatpersonen der Migros Bank AG, Version 01/2026, Ziff. 4.5 · Open document (opens in a new window)
«Bei nachweislich rechtswidrigen Eingriffen von Dritten in die Einrichtungen von Netzwerk- und/ oder Telekommunikationsbetreibern oder in die von der inhabenden Person genutzten Infrastruktur»
-
PostFinance
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): PostFinance credit cards: the risk lies in principle with the customer. If no means of identification or security element was used, PostFinance covers the loss, provided the customer has complied with all conditions and is not at fault. Dispute within 30 days of the invoice, form within 10 days. Compensation may be limited or excluded, for example in the event of lack of cooperation or repeated cases.
PostFinance AG: Teilnahmebedingungen PostFinance-Kredit- und -Prepaidkarten, Version August 2024, Ziff. 6 c (Frist Ziff. 4 d) · Open document (opens in a new window)
«In allen übrigen Fällen übernimmt PostFinance Schäden aus missbräuchlicher Verwendung der Karte durch Dritte»
-
Raiffeisen
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Data theft and counterfeiting by third parties not close to the cardholder are expressly covered, provided no obligation was breached and the payment was not approved with PIN, 3-D Secure or mobile payment. For mobile payment losses, the conditions of the third-party provider must also have been complied with.
Raiffeisen Schweiz Genossenschaft / Raiffeisenbanken: Bedingungen für die Benützung der Raiffeisen Kreditkarten (Kredit- und Prepaid-Karten für Privatpersonen), Ausgabe 2026, Ziff. 10 · Open document (opens in a new window)
«Dies sind beispielsweise Schäden aufgrund von Fälschungen oder Verfälschungen der Karte oder Datendiebstahl durch nicht nahestehende Dritte.»
-
Swisscard
Cyber Security-Versicherung (optional for the Swisscard credit/charge card)
limited up to CHF 20'000
Condition and source
Online account protection: loss through unlawful access to a Swiss postal/bank account, card or mobile device after theft of access data. Only the part that the insured person has to bear themselves; no protection as long as the bank has not refused in writing to cover the loss. Immediate blocking and a police report required.
Swisscard AECS GmbH / AWP P&C S.A.: Versicherungsbedingungen der Cyber Security-Versicherung zu den Charge- und Kreditkarten der Swisscard AECS GmbH, gültig ab Januar 2024, IV. BVB C Online-Kontoschutz, Ziff. 1.3 · Open document (opens in a new window)
«Versichert ist der im Versicherungsfall aufgrund gesetzlicher oder vertraglicher Bestimmungen von der versicherten Person selbst zu tragende Vermögensschaden.»
-
Swisscard
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Swisscard covers pure card data transactions without an additional means of authentication under section 11.3 if the customer has fulfilled all obligations (among others, protecting the device with a lock, an up-to-date operating system and antivirus, section 10.1 k). The 3-D Secure conditions additionally require that the misuse is proven. Skimming with PIN entry falls under the exclusion in section 11.4 a.
Swisscard AECS GmbH: Besondere Bedingungen der Swisscard AECS GmbH für die Benutzung von 3-D Secure, Version 05/2024, Ziff. 4.5 · Open document (opens in a new window)
«übernimmt die Herausgeberin Belastungen aus nachgewiesener missbräuchlicher Verwendung der Karte durch Dritte»
-
UBS
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Credit card: the risk lies in principle with the cardholder. If no means of access was used, UBS covers the loss if disputed in time (immediately, no later than 30 days from the statement date), provided all T&C provisions were complied with and there is no fault.
UBS Switzerland AG: Vertragliche Grundlagen für private Kunden – Allgemeine Geschäftsbedingungen für die Benützung der UBS Kreditkarten, Kreditkarten-AGB Ausgabe September 2024, Kreditkarten Ziff. 8.2 (Frist Ziff. 7.4), PDF-S. 23 · Open document (opens in a new window)
«In allen übrigen Fällen übernimmt UBS bei rechtzeitiger Beanstandung (Ziffer 7.4) Schäden aus missbräuchlicher Verwendung der Karte durch Dritte»
-
Viseca
Online account protection and online legal protection (included in the credit card)
limited up to CHF 20'000
Condition and source
Depending on the card CHF 5'000 to 20'000 per event. Only transactions without the consent or approval of the insured person; payments approved by the person themselves (phishing with approval) are not covered. Secondary: only the loss the person has to bear themselves, and only after written refusal by the bank. No deductible (product page).
Deductible: none
Viseca Card Services SA / Allianz: Kundeninformation und Versicherungsbedingungen für Karten der Viseca Card Services SA – Privatkarten, gültig ab 01.06.2025, Online-Kontoschutz, Ziff. 2.1 · Open document (opens in a new window)
«Die finanziellen Transaktionen wurden ohne Einverständnis beziehungsweise Freigabe der versicherten Person durchgeführt.»
-
Viseca
Card or account terms and conditions
limited
Condition and source
T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Expressly covered are counterfeits and data theft by third parties not close to the cardholder, provided the payment was not authenticated with PIN, 3-D Secure or SMS code and the customer has fulfilled their obligations (among others, protecting devices with antivirus and updates, not disclosing card data).
Deductible: none
Viseca Card Services SA: Allgemeine Geschäftsbedingungen für Zahlkarten der Viseca Card Services SA (Private), Version Januar 2026, Ziff. 1.6.2 · Open document (opens in a new window)
«Dies umfasst beispielsweise Schäden aufgrund von Fälschungen oder Verfälschungen der Karte oder Datendiebstahl durch nicht nahestehende Dritte.»
Insurance (10)
-
Allianz Suisse
Online- und Kaufschutzbrief (cyber protection)
limited up to CHF 20'000
Condition and source
Account protection: financial losses through misuse of accounts (CH, FL, border area 50 km) and cards by third parties, including online banking, card numbers on the internet, cash withdrawals; plus blocking and replacement fees. Only to the extent that the bank has refused in writing. Not: caused by gross negligence, reporting/review deadline missed, mass attack on the financial institution, avoidable through updates. Police report mandatory.
Deductible: none
Allianz Suisse Versicherungs-Gesellschaft AG / CAP Rechtsschutz: Allgemeine Bedingungen (AB) für die Kombi-Haushaltversicherung (B3 Online- und Kaufschutzbrief), Ausgabe 03.2025, Ziff. B3.5.2 lit. d, PDF-S. 9 · Open document (opens in a new window)
«soweit das kontoführende Geldinstitut, der Kartenvertragspartner, bzw. der Anbieter anderer Bezahlsysteme es schriftlich abgelehnt hat»
-
AXA
Cyberversicherung Plus (modules: online accounts & credit cards, online bullying & copyright, online shopping, data recovery/virus removal/IT assistance)
add-on up to CHF 20'000
Condition and source
Online accounts & credit cards module: monitoring, legal protection (AXA-ARAG) up to CHF 20'000 and, after unsuccessful legal action, compensation of the loss up to CHF 20'000, subsidiary to the card issuer/bank. Deductible CHF 50–5'000. Gross negligence leads to a reduction. Not: voluntarily made payments (romance scam, grandparent scam), crypto.
Deductible: CHF 50
AXA Versicherungen AG / AXA-ARAG Rechtsschutz AG: Allgemeine Vertragsbedingungen (AVB) Haushaltversicherung (Privathaftpflicht, Hausrat, Cyber Plus, Zusatzversicherungen und Services), 16162DE, Ausgabe 10.2021, Ziff. G1.3, PDF-S. 27 · Open document (opens in a new window)
«Die Deckung gilt ergänzend (subsidiär) für den Teil des Schadens, für den die versicherten Personen gegenüber den Anbietern»
-
Baloise
BaloiseCombi Haushalt, security module Protection – Cyber (F2.1)
limited up to CHF 20'000
Condition and source
Misuse of credit, debit, customer or SIM cards and misuse of data in private financial and online transactions (online and mobile banking): legal costs against perpetrators and compensation of the loss up to CHF 20'000 per event. Subsidiary: first the bank or third parties; cash, e-money and crypto excluded.
Basler Versicherung AG (Baloise): BaloiseCombi Haushalt, Produktinformationen und Vertragsbedingungen (F2.1 Sicherheitsbaustein Protection – Cyber), Ausgabe 2025, F2.1.1, PDF-S. 48 · Open document (opens in a new window)
«Ersatz des Schadens aus dem Kartenmissbrauch»
-
Generali
Cyber insurance (part D of the household insurance)
limited
Condition and source
Only misuse of credit and payment card data for payments on the internet (cards from institutions in CH, FL, EU, UK, NO, IS). E-banking is expressly excluded, as are losses after negligent conduct by the insured person. Block cards immediately, police report. Sum insured according to the policy, deductible 10% (min. CHF 50).
Deductible: CHF 50
Generali Allgemeine Versicherungen AG / Fortuna Rechtsschutz-Versicherungs-Gesellschaft AG: Allgemeine Versicherungsbedingungen (AVB) Haushaltversicherung (Teil D Cyberversicherung; Rechtsschutz durch Fortuna), Ausgabe 2026, D2 lit. a, PDF-S. 27 · Open document (opens in a new window)
«dass Dritte die Daten Ihrer Kredit- oder Bezahlkarten für Zahlungen im Internet missbraucht haben»
-
Groupe Mutuel
CyberProtect (internet legal protection + assistance + compensation)
covered up to CHF 300'000
Condition and source
The only product found that expressly names the dispute with the bank: legal protection (Dextra) in disputes with a bank/credit institution after phishing, pharming, skimming and in the event of unlawful card or contactless payment (Twint, Revolut, PayPal, Apple Pay); no waiting period. In addition, the insurance reimburses fraudulent payments up to CHF 10'000 per calendar year if the intervention was unsuccessful (waiting period 7 days); a written refusal from the bank is required. Limit = legal costs CHF 300'000.
Groupe Mutuel Versicherungen GMA AG (Rechtsschutz durch Dextra Rechtsschutz AG, Assistance durch Europ Assistance): Allgemeine Versicherungsbedingungen der Versicherung für Risiken und Rechtsstreitigkeiten im Internet CyberProtect, mit Anhang 1 (Katalog der versicherten Risiken und Leistungen), CYGA01-A5, Ausgabe 01.01.2022, Anhang 1 Ziff. 4, PDF-S. 10 · Open document (opens in a new window)
«Streitigkeiten einer versicherten Person mit einem Bank- oder Kreditinstitut aufgrund eines Diebstahls von Zugangsdaten, Identitätsmissbrauch im Internet (z. B. durch Phishing oder Pharming)»
-
Helvetia
Cyber add-on to the household contents insurance («Cyber: losses arising from the use of internet technologies»)
unclear up to CHF 5'000
Condition and source
The title names phishing, hacking, skimming (up to CHF 5'000); the definition only covers manipulated ATMs/terminals and mobile payment. Whether pure online misuse of card data is covered is unclear.
Helvetia Schweizerische Versicherungsgesellschaft AG: AVB Helvetia Privatkundenversicherung, Hausrat und Privathaftpflicht, Ausgabe September 2025, O5, PDF-S. 10; Begriff «Online-Banking/Kreditkartenmissbrauch», PDF-S. 22 · Open document (opens in a new window)
«bei widerrechtlichen Abhebungen an manipulierten Geldausgabeautomaten»
-
Mobiliar
Cyberversicherung für Privatpersonen (module of the household and building insurance)
limited up to CHF 20'000
Condition and source
Disputes and financial losses when third parties obtain card, Twint/PayPal or online account data without authorisation. First legal protection (Protekta), then compensation of the remaining loss up to CHF 20'000; subsidiary to the bank and third parties, at most 3 events per year. Not for a physically stolen card, crypto, investment transactions, grandparent scam, love scam, fake police officer.
Schweizerische Mobiliar Versicherungsgesellschaft AG / Protekta Rechtsschutz-Versicherung AG: Haushalt- und Gebäudeversicherung, Kundeninformationen und Allgemeine Bedingungen (Hausrat, Wertsachen, Privathaftpflicht, Gebäude, Haustiere, Cyberversicherung, Vertragsrechtsschutz), Ausgabe 04.2025, Art. A Ziff. 4.1, PDF-S. 41 · Open document (opens in a new window)
«als Folge von unerlaubter Beschaffung folgender Daten der versicherten Personen durch Dritte: Bank- und Kreditkartendaten»
-
smile
smile.home, additional cover Cyber (H.4.5) and optional private legal protection (R)
limited up to CHF 5'000
Condition and source
Misuse of data in private financial and online transactions (online/mobile banking) and misuse by third parties of cards issued in Switzerland: compensation up to CHF 5'000 per event including blocking and replacement costs; subsidiary to the card issuer and bank. The gross negligence protection does not apply to cyber.
Deductible: none
smile.direct versicherungen (Helvetia) / Coop Rechtsschutz AG: AVB zur Haushaltversicherung smile.home (AVB HAU 2024.01), Risikoträger Helvetia; Privatrechtsschutz Coop Rechtsschutz, Ausgabe Januar 2024, H.4.5.3 lit. b, PDF-S. 32 · Open document (opens in a new window)
«(z. B. Kreditkartenherausgeber oder Bank) übernommen werden (Subsidiarität)»
-
Vaudoise
Home in One, additional cover for misuse of credit and debit cards (Art. F4)
not covered
Condition and source
Card misuse is insured, but misuse via the internet is excluded; an online charge with stolen card data is not covered.
Vaudoise Allgemeine Versicherungs-Gesellschaft AG: Allgemeine Bedingungen Home in One (Hausrat, Privathaftpflicht, Gebäude), Ausgabe 01.01.2023, Art. F4 Ausschlüsse, PDF-S. 32 · Open document (opens in a new window)
«Missbräuche per Internet.»
-
Zurich
Cyber – Safe Shop & Pay
limited up to CHF 50'000
Condition and source
Financial losses through misuse by third parties of private accounts, custody accounts, credit balances (CH/FL) and credit cards after card, access or identification data was obtained without authorisation, expressly including phishing of e-banking and mobile payment access data and skimming. Only to the extent that the bank has refused in writing. Not: PIN written down, reporting obligation breached, review deadline missed. In addition, extra costs in the event of misuse of the mobile phone (901.5) and blocking/replacement costs for cards (901.6).
Deductible: none
Zürich Versicherungs-Gesellschaft AG: Haushaltversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 05/2026, Art. 901.4, PDF-S. 50 · Open document (opens in a new window)
«Darunter fallen beispielsweise Vermögensschäden durch Phishing von Zugangsdaten von E-Banking- und Mobiltelefon-Zahlungssystemen sowie Skimming von Kreditkarten.»
Legal protection (7)
-
AXA-ARAG
Private legal protection, «Wohnen & Alltag» module (includes online purchases, card/identity misuse, cyberbullying)
covered : only lawyer and proceedings, not the lost money
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is claiming damages in the event of credit card misuse on the internet (against the party causing the loss). Whether a dispute with the bank or card issuer about the chargeback counts as a «contract for private use» (B2.15) is not expressly regulated; financial transactions are excluded (A7 let. h). Limit = sum insured according to the policy (example on the product page CHF 300'000, max. CHF 1 million per year). No waiting period.
AXA-ARAG Rechtsschutz AG (AXA-Gruppe): Rechtsschutzversicherung Privatpersonen – Allgemeine Vertragsbedingungen (AVB), Module B bis H, Ausgabe 2021 (PDF erstellt 17.12.2024), Ziff. B2.16, PDF-S. 7 · Open document (opens in a new window)
«Einfordern Ihrer ausservertraglichen Schadenersatzansprüche – auch bei Kreditkarten- oder Identitätsmissbrauch im Internet»
-
CAP
privaLex private legal protection with the Multi Risk add-on (Cyber Risk)
covered : only lawyer and proceedings, not the lost money up to CHF 750'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. According to the product page, the basic private legal protection already helps if the merchant and the credit card issuer ignore a complaint about an unauthorised charge (consumer law, Art. A3 let. a). This covers the dispute with the card issuer; e-banking/Twint not expressly mentioned. Limit = Europe CHF 750'000 (world CHF 150'000). Waiting period 90 days; does not apply to contracts concluded after the policy start.
CAP Rechtsschutz-Versicherungsgesellschaft AG: Privatrechtsschutz privaLex, Abschnitt «Wo hilft der Privatrechtsschutz?», Fall «Kreditkarte» · Open document (opens in a new window)
«Ihre Kreditkarte ist mit Dingen belastet, die Sie nie bestellt haben. Der Verkäufer und die Kreditkartenherausgeberin ignorieren Ihre Reklamation.»
-
Coop Rechtsschutz
Legal protection module: basic module «Private and health» (including internet legal protection)
covered : only lawyer and proceedings, not the lost money up to CHF 50'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 50'000.
Deductible: none
Coop Rechtsschutz AG: Privatrechtsschutz – Rechtsschutz für Private, Allgemeine Versicherungsbedingungen (AVB) – Modul (AVBPM24), Ausgabe 2024 (PDF erstellt 07.04.2026), Modul P, Ziff. P8, PDF-S. 10 · Open document (opens in a new window)
«Rechtsstreitigkeiten als Opfer von Kreditkartenmissbrauch, Phishing, Hacking, Skimming»
-
Coop Rechtsschutz
Legal protection package (private, employment, health, housing, traffic, including internet)
covered : only lawyer and proceedings, not the lost money up to CHF 75'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 75'000.
Deductible: none
Coop Rechtsschutz AG: Privatrechtsschutz – Rechtsschutz für Private, Allgemeine Versicherungsbedingungen (AVB) – Paket (AVBPP24), Ausgabe 2024 (PDF erstellt 28.05.2026), Ziff. 16.14, PDF-S. 9 · Open document (opens in a new window)
«Rechtsstreitigkeiten als Opfer von Kreditkartenmissbrauch, Phishing, Hacking, Skimming»
-
Dextra
Private legal protection Private L (package L, area of law «internet law»)
covered : only lawyer and proceedings, not the lost money up to CHF 300'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Area of law internet law: claim for damages and criminal complaint in the event of credit card misuse (skimming) and phishing/hacking. Whether a dispute with the bank/card issuer about reimbursement falls under contract law (section 21) is not expressly regulated. Limit = Private L CHF 300'000 (XL CHF 1.3 million). Waiting period 60 days (XL 30 days).
Deductible: none
Dextra Rechtsschutz AG: AVB Allgemeine Versicherungsbedingungen Pakete für Privatpersonen – Privat- und Verkehrsrechtsschutz, Ausgabe Mai 2022, Art. D1 Ziff. 6 «Internetrecht», PDF-S. 5 · Open document (opens in a new window)
«Geltendmachung von Schadenersatzansprüchen sowie Unterstützung bei der Einreichung einer Strafanzeige bei Kreditkarten- (Skimming) oder Identitätsmissbrauch (Phishing, Hacking).»
-
Orion
Private legal protection Standard (including internet and bullying legal protection)
limited : only lawyer and proceedings, not the lost money up to CHF 5'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Victim of phishing/hacking and credit card misuse (only if committed via the internet). Low sum insured CHF 5'000 (Premium CHF 20'000), waiting period 1 month. If legal assistance is unsuccessful after 60 days, Orion may compensate the proven loss up to CHF 1'000 (Premium CHF 3'000), once per year, subsidiary to household contents insurance. Dispute with the bank not expressly mentioned.
Orion Rechtsschutz-Versicherungsgesellschaft AG: Privat- und Verkehrs-Rechtsschutzversicherung – Kundeninformation nach VVG und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2022 (Druck 4281-07/2022), Art. B1 Abs. 10 «Internet-Rechtsschutz», PDF-S. 10 · Open document (opens in a new window)
«Rechtsschutz als Opfer im Zusammenhang mit: 1. Phishing / Hacking; 2. Kreditkartenmissbrauch.»
-
Protekta
Private legal protection, Comfort package (with «personality rights and internet legal protection»)
limited : only lawyer and proceedings, not the lost money up to CHF 20'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is the assertion of damages claims in the event of misuse of a credit/debit card and card data (against the perpetrator). Contractual disputes arising from the use of the credit/debit card (e.g. with the card issuer) are exempted from the finance exclusion (Art. E1 let. g). A dispute with the bank/payment service about e-banking or Twint, on the other hand, falls under the exclusion «banking, financial and payment services». Only Comfort package; limit = sum insured according to the brochure CHF 20'000, waiting period 3 months.
Deductible: none
Protekta Rechtsschutz-Versicherung AG (Mobiliar-Gruppe): Rechtsschutzversicherung für Privatpersonen – Kundeninformationen und Allgemeine Bedingungen (Privat-, Verkehrs-, Immobilien-Rechtsschutz), Ausgabe 08.2023, Art. B3 Ziff. 5 lit. c, PDF-S. 8 · Open document (opens in a new window)
«Geltendmachung von Schadenersatzansprüchen aus der missbräuchlichen Verwendung Ihrer Kredit- oder Debitkarte und deren Daten.»
Bundle (via a telecom provider or association) (3)
-
Swisscom
Easy Cyber Insurance
limited : only lawyer and proceedings, not the lost money up to CHF 20'000
Condition and source
Only legal protection (AXA-ARAG) up to CHF 20'000, also in disputes with Swiss credit card companies after card misuse; no compensation of the lost money. Not: voluntarily made payments (romance scam, grandparent scam), crypto.
Deductible: none
Swisscom (Schweiz) AG / AXA-ARAG Rechtsschutz AG: Bestimmungen Easy Cyber Insurance (Kollektivversicherung, Versicherer AXA-ARAG), Ausgabe 09.2025, B.1.1, PDF-S. 1 · Open document (opens in a new window)
«Streitigkeiten aus Verträgen mit schweizerischen Kreditkartenunternehmen»
-
TCS
TCS Cyber-Schutzbrief (legal protection Assista + compensation TAS + technology bolttech)
limited up to CHF 5'000
Condition and source
In the event of misuse of bank, postal account or card data on the internet, TAS pays the proven financial loss up to CHF 5'000 (subsidiary: only to the extent that the bank, an insurer or third parties are not obliged to pay). For irregularities with card issuers, PayPal, Twint, Apple Pay also up to CHF 5'000, deductible CHF 150. Important: for these cases there is only legal advice by telephone, no lawyer for a dispute with the bank (section 13.2). Misuse after theft/loss of the physical card not covered. Limit = compensation.
Deductible: CHF 150
Touring Club Schweiz (TCS); Rechtsschutz: Assista Rechtsschutz AG; Entschädigung: TAS Versicherungen AG; Technik: bolttech Switzerland AG: TCS Cyber-Schutzbrief – Allgemeine Geschäftsbedingungen (inkl. Geschäftsbedingungen von bolttech), Produktversion 2025, Ausgabe 01.2025, Ziff. 12 lit. c (PDF-S. 6) und Ziff. 13.3 lit. a (PDF-S. 7) · Open document (opens in a new window)
«Unrechtmässige Aneignung der Bank-, Postkonto- oder Zahlungskartendaten (Debit- und Kreditkarten) des Begünstigten durch Dritte und deren anschliessende missbräuchliche Verwendung im Internet.»
-
TCS
TCS Internet-Schutzbrief (product version 2017)
limited up to CHF 300'000
Condition and source
Legal costs for credit card misuse via the internet and skimming (no waiting period) as well as disputes with credit card institutions and payment services (PayPal, Twint, Apple Pay) for online payments (waiting period 3 months). If legal assistance is unsuccessful after 2 months, compensation of the financial loss up to CHF 5'000 (card/skimming) or CHF 1'000 (payment processing). External lawyer’s fees only from an amount in dispute of CHF 2'000. Card misuse after theft not covered.
Assista Rechtsschutz AG (Tochter des TCS): TCS Internet-Schutzbrief – Allgemeine Versicherungsbedingungen, Produktversion 2017, Ausgabe 09.2023, Ziff. 10 lit. i, PDF-S. 7 · Open document (opens in a new window)
«Zivilrechtliche Streitigkeiten des Versicherten bei Unregelmässigkeiten bei der Zahlungsabwicklung mit (abschliessende Aufzählung): Kreditkarteninstituten bei Online-Zahlungen; Betreibern von Mobile- und Online-Bezahlsystemen (Paypal, Twint, Apple Pay etc.).»
No information from 5 providers
- Cembra, Cembra ShoppingProtect: Not regulated in the conditions.
- Simpego, Household insurance Home (monetary assets: credit, debit and customer cards): Card losses only as a result of an insured household contents event (e.g. theft of the card); copied card data is not such an event.
- Swisscard, Shopping-Versicherung (Classic, Premium, Exclusive) with the module «Safe online»: Not regulated in the conditions.
- Zurich, Cyber – Safe Surf: Not regulated in the conditions.
- Zurich, Cyber – Prevention (Zurich Cyber Security App, partner BOXX Insurance): Service without insurance cover; not mentioned on the product page.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
Where it gets stuck
-
Reporting deadline missed: a dispute is usually required within 30 days of the invoice or account statement (Raiffeisen debit card 45 days), otherwise the charge is deemed approved.
Where does it say so?
Bedingungen für die Benützung der Raiffeisen Debitkarten, Version 1.2 – Januar 2026, Ziff. 12
«spätestens aber 45 Kalendertage nach Erhalt des monatlichen Kontoauszugs»
Open document: Bedingungen für die Benützung der Raiffeisen Debitkarten (opens in a new window), retrieved 06.11.2026
-
Duties of care breached (PIN written down, codes passed on, device without lock/updates/antivirus): card issuers only pay if all obligations were complied with.
Where does it say so?
Jahresbericht 2020, 2020 (publiziert Juni 2021), S. 14, «2020 in Kürze»
«Zusätzlich werden diese Sorgfaltspflichten zulasten der Kunden zunehmend strenger interpretiert.»
Open document: Jahresbericht 2020 (opens in a new window), retrieved 06.11.2026
-
Insurance pays on a secondary basis: usually only after written refusal by the bank or card issuer.
Where does it say so?
Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz, Ausgabe 06.2026, II C Banking-Schutz, Ziff. 1 (ebenso Swisscard Cyber Security C 3.4, Viseca Online-Kontoschutz Ziff. 5, Cembra CyberProtect Ziff. 1.3)
«die nicht durch die Erstattung ihrer Verluste durch das Finanzinstitut/den Bankkartenherausgeber auf subsidiärer Basis gedeckt sind.»
Open document: Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz (opens in a new window), retrieved 06.11.2026
-
The card conditions in turn exclude losses for which an insurer has to pay; the bank and the insurer refer to each other.
Where does it say so?
Allgemeine Geschäftsbedingungen für Kreditkarten der Swisscard AECS GmbH im Bereich Privatkunden, 01/2021, Ziff. 11.4 Bst. b
«Schäden, für die eine Versicherung aufzukommen hat, sowie indirekte Schäden oder Folgeschäden irgendwelcher Art (z. B. entgangener Gewinn).»
Open document: Allgemeine Geschäftsbedingungen für Kreditkarten der Swisscard AECS GmbH im Bereich Privatkunden (opens in a new window), retrieved 06.11.2026
-
Perpetrators in the same household (partner, children, flatmates) are excluded.
Where does it say so?
Haushalt- und Gebäudeversicherung, Kundeninformationen und Allgemeine Bedingungen (Hausrat, Wertsachen, Privathaftpflicht, Gebäude, Haustiere, Cyberversicherung, Vertragsrechtsschutz), Ausgabe 04.2025, Art. A Ziff. 4 lit. a, PDF-S. 41
«welche durch die im gleichen Haushalt lebenden Personen und Inhaber einer Zweitkarte verursacht werden»