I clicked on a phishing link and entered my card details or a code.

The product page advertises phishing protection; the GTC 07/2024 do not expressly name phishing and already exclude disregard of the general duty of care.

Deductible: none

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Stolen or copied card data must be reported immediately (section 3.3); section 4.1 then applies. However, Cembra rejects any liability for transactions after unlawful access to the holder’s device and for losses caused by spying out data or careless handling of means of authentication. Where 3-D Secure is offered, it must be used (section 3.9).

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): No coverage: transactions via card data, PIN or means of authentication (3-D Secure, app) are deemed authorised by the holder, even if another person initiated them. With 3-D Secure, the merchant and amount must be checked (section 3.5); codes must never be disclosed in response to an e-mail or SMS request (section 3.6).

Authorised fraudulent payments after phishing (e-mail) or smishing (SMS) up to CHF 1'000 per year; security software must be installed and up to date; secondary to the bank.

• Disclosure of PIN, TAN, CVV is excluded (relationship to the phishing cover unclear)
• gross negligence excluded

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): The risk of misuse lies in principle with the cardholder (authentication, section 5). Coverage only under the conditions of section 7 and only if merely card data without an additional means of authentication was used. Expressly excluded are losses through manipulation of mobile phones and SIM cards (section 7 g) and through electronic means of communication.

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): The bank is not liable as soon as at least one further means of authentication was used in addition to the card data (PIN, mTAN, 3-D Secure, app approval). Anyone who discloses their PIN or card data is liable for all consequences under section 3. Only those with the separate Cornèrcard cyber insurance receive up to CHF 1'000 per year for phishing or smishing (e-mail/SMS).

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Even for transactions with PIN or 3-D Secure, Migros Bank covers the charges if it is proven that third parties unlawfully interfered with networks, telecom facilities or the customer’s infrastructure (e.g. malware on the device). Requirement: dispute in time and duties of care complied with. This clause is more customer-friendly than with most other issuers examined.

Deductible: none

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): Any authorised use with PIN, 3-D Secure code, Click to Pay or other means of authentication is deemed to have been made by the holder; the holder then bears the risk of misuse.

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): PostFinance credit cards: the risk lies in principle with the customer. If no means of identification or security element was used, PostFinance covers the loss, provided the customer has complied with all conditions and is not at fault. Dispute within 30 days of the invoice, form within 10 days. Compensation may be limited or excluded, for example in the event of lack of cooperation or repeated cases.

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): Credit card: if the customer approves transactions with a means of identification or security element, they bear the loss in any case. E-Finance: confirmations may only be given if they correspond to the customer’s own will (TNB digital section 5 e); PostFinance never asks for codes (section 5 a).

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Data theft and counterfeiting by third parties not close to the cardholder are expressly covered, provided no obligation was breached and the payment was not approved with PIN, 3-D Secure or mobile payment. For mobile payment losses, the conditions of the third-party provider must also have been complied with.

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): No coverage of transactions that the cardholder (or persons close to them) approved with one of the methods named in section 6. 3-D Secure may only be confirmed if the details are correct; never pass codes on to third parties (section 8).

Online account protection: loss through unlawful access to a Swiss postal/bank account, card or mobile device after theft of access data. Only the part that the insured person has to bear themselves; no protection as long as the bank has not refused in writing to cover the loss. Immediate blocking and a police report required.

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Swisscard covers pure card data transactions without an additional means of authentication under section 11.3 if the customer has fulfilled all obligations (among others, protecting the device with a lock, an up-to-date operating system and antivirus, section 10.1 k). The 3-D Secure conditions additionally require that the misuse is proven. Skimming with PIN entry falls under the exclusion in section 11.4 a.

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): No coverage. Transactions approved with 3-D Secure are deemed authorised; the T&C exclude losses if at least one additional means of authentication was used. Swisscard rejects any responsibility for the transaction itself (e.g. investment fraud) (section 11.2).

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Credit card: the risk lies in principle with the cardholder. If no means of access was used, UBS covers the loss if disputed in time (immediately, no later than 30 days from the statement date), provided all T&C provisions were complied with and there is no fault.

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): No coverage: credit card transactions approved with a means of access (Access App, PIN, one-time codes) are borne by the cardholder in any case. In digital banking, the correct confirmation of orders lies solely with the customer (basic provisions section 5).

The online account protection only applies to transactions without the consent or approval of the insured person.

Deductible: none

T&C (unauthorised payment, card data hacked/copied (card-not-present, skimming)): Expressly covered are counterfeits and data theft by third parties not close to the cardholder, provided the payment was not authenticated with PIN, 3-D Secure or SMS code and the customer has fulfilled their obligations (among others, protecting devices with antivirus and updates, not disclosing card data).

Deductible: none

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): No coverage: transactions that the customer (or third parties close to them) authenticated with PIN, 3-D Secure, SMS code or biometrics are excluded. The customer alone is responsible for the underlying transaction (section 1.6.1). The online account protection also only covers transactions without approval.

T&C (payment approved by the customer (3-D Secure approval after phishing, code passed on, investment fraud, love scam)): E-banking: anyone who does not check the data displayed when confirming a transaction and confirms anyway bears the loss (sections 5 and 7.1 b).

Card misuse by third parties covered (after written refusal by the bank); losses caused by gross negligence and actions commissioned by the insured person are excluded.

Deductible: none

Online accounts & credit cards module: checking suspicious e-mails, legal protection, subsidiary compensation up to CHF 20'000; reduction according to fault and for gross negligence possible.

Deductible: CHF 50

Misuse of credit, debit, customer or SIM cards and misuse of data in private financial and online transactions (online and mobile banking): legal costs against perpetrators and compensation of the loss up to CHF 20'000 per event. Subsidiary: first the bank or third parties; cash, e-money and crypto excluded.

Card data misuse on the internet is insured, but losses after negligent conduct by the insured person are excluded; whether entering data on a phishing page is assessed as such is decided by Generali case by case.

Deductible: CHF 50

The only product found that expressly names the dispute with the bank: legal protection (Dextra) in disputes with a bank/credit institution after phishing, pharming, skimming and in the event of unlawful card or contactless payment (Twint, Revolut, PayPal, Apple Pay); no waiting period. In addition, the insurance reimburses fraudulent payments up to CHF 10'000 per calendar year if the intervention was unsuccessful (waiting period 7 days); a written refusal from the bank is required. Limit = legal costs CHF 300'000.

Title «Online banking/credit card misuse (phishing, hacking, skimming)» up to CHF 5'000; the definition is narrower (manipulated machines/terminals, mobile payment).

Disputes and financial losses when third parties obtain card, Twint/PayPal or online account data without authorisation. First legal protection (Protekta), then compensation of the remaining loss up to CHF 20'000; subsidiary to the bank and third parties, at most 3 events per year. Not for a physically stolen card, crypto, investment transactions, grandparent scam, love scam, fake police officer.

Misuse of data in private financial and online transactions (online/mobile banking) and misuse by third parties of cards issued in Switzerland: compensation up to CHF 5'000 per event including blocking and replacement costs; subsidiary to the card issuer and bank. The gross negligence protection does not apply to cyber.

Deductible: none

Misuse via the internet is excluded.

Phishing of e-banking and mobile payment access data is expressly named; what the bank has refused in writing is compensated. The text does not regulate whether a 3-D Secure payment confirmed by the customer counts as «misuse by third parties».

Deductible: none

Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is claiming damages in the event of credit card misuse on the internet (against the party causing the loss). Whether a dispute with the bank or card issuer about the chargeback counts as a «contract for private use» (B2.15) is not expressly regulated; financial transactions are excluded (A7 let. h). Limit = sum insured according to the policy (example on the product page CHF 300'000, max. CHF 1 million per year). No waiting period.

Only legal costs (lawyer, court, expert opinions), not the lost amount itself. According to the product page, the basic private legal protection already helps if the merchant and the credit card issuer ignore a complaint about an unauthorised charge (consumer law, Art. A3 let. a). This covers the dispute with the card issuer; e-banking/Twint not expressly mentioned. Limit = Europe CHF 750'000 (world CHF 150'000). Waiting period 90 days; does not apply to contracts concluded after the policy start.

Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 50'000.

Deductible: none

Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 75'000.

Deductible: none

Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Area of law internet law: claim for damages and criminal complaint in the event of credit card misuse (skimming) and phishing/hacking. Whether a dispute with the bank/card issuer about reimbursement falls under contract law (section 21) is not expressly regulated. Limit = Private L CHF 300'000 (XL CHF 1.3 million). Waiting period 60 days (XL 30 days).

Deductible: none

Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Victim of phishing/hacking and credit card misuse (only if committed via the internet). Low sum insured CHF 5'000 (Premium CHF 20'000), waiting period 1 month. If legal assistance is unsuccessful after 60 days, Orion may compensate the proven loss up to CHF 1'000 (Premium CHF 3'000), once per year, subsidiary to household contents insurance. Dispute with the bank not expressly mentioned.

Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is the assertion of damages claims in the event of misuse of a credit/debit card and card data (against the perpetrator). Contractual disputes arising from the use of the credit/debit card (e.g. with the card issuer) are exempted from the finance exclusion (Art. E1 let. g). A dispute with the bank/payment service about e-banking or Twint, on the other hand, falls under the exclusion «banking, financial and payment services». Only Comfort package; limit = sum insured according to the brochure CHF 20'000, waiting period 3 months.

Deductible: none

Only legal protection (AXA-ARAG) up to CHF 20'000, also in disputes with Swiss credit card companies after card misuse; no compensation of the lost money. Not: voluntarily made payments (romance scam, grandparent scam), crypto.

Deductible: none

In the event of misuse of bank, postal account or card data on the internet, TAS pays the proven financial loss up to CHF 5'000 (subsidiary: only to the extent that the bank, an insurer or third parties are not obliged to pay). For irregularities with card issuers, PayPal, Twint, Apple Pay also up to CHF 5'000, deductible CHF 150. Important: for these cases there is only legal advice by telephone, no lawyer for a dispute with the bank (section 13.2). Misuse after theft/loss of the physical card not covered. Limit = compensation.

Deductible: CHF 150

Legal costs for credit card misuse via the internet and skimming (no waiting period) as well as disputes with credit card institutions and payment services (PayPal, Twint, Apple Pay) for online payments (waiting period 3 months). If legal assistance is unsuccessful after 2 months, compensation of the financial loss up to CHF 5'000 (card/skimming) or CHF 1'000 (payment processing). External lawyer’s fees only from an amount in dispute of CHF 2'000. Card misuse after theft not covered.