SIM swapping: my mobile phone suddenly has no network and someone is using my number.
limited Bank or card first, then the policy
Whoever takes over your number receives your SMS codes for e-banking and accounts. Call your mobile provider and bank immediately and have everything blocked.
Full answer
Some policies expressly name SIM cards: AXA online accounts module (SIM cards, monitoring of phone numbers), Baloise (misuse of SIM cards), Zurich Safe Shop & Pay (extra costs for a misused mobile phone, blocking and replacement costs). For the money debited, the same applies as for an e-banking takeover. We did not find any official guidance specifically on SIM swapping.
Also asked as: «My number was transferred to someone else’s SIM» · «I no longer receive SMS codes, and payments are being made in e-banking»
As of
On this page
What to do now
Contact your mobile provider immediately and have the SIM blocked.
Call the bank and have e-banking and cards blocked.
Change passwords wherever SMS codes are used.
File a criminal complaint and inform your insurer.
Sources (2)
AXA Versicherungen AG / AXA-ARAG Rechtsschutz AG: Allgemeine Vertragsbedingungen (AVB) Haushaltversicherung (Privathaftpflicht, Hausrat, Cyber Plus, Zusatzversicherungen und Services), 16162DE, Ausgabe 10.2021, Ziff. G1.4, PDF-S. 27 · Open document (opens in a new window)
«ist zudem sofort der betreffende Anbieter (z. B. Kreditkartenherausgeber) zu informieren und die sofortige Sperrung zu veranlassen»
Bundesamt für Cybersicherheit BACS: Konto gehackt, abgerufen 06.11.2026, Online-Konto gehackt · Open document (opens in a new window)
«Wenden Sie sich umgehend an den Finanzdienstleister, wenn es sich um ein Konto eines Finanzdienstes handelt.»
Who pays?
-
First
Card issuer or bank under its T&C
unauthorised charge, duties of care complied with, reported in time
-
Then
Cyber or household contents add-on insurance, on a secondary basis
usually only after the bank’s written refusal
-
Then
Legal protection insurance
only lawyer and proceedings, e.g. against the perpetrator or in a dispute with the bank
Nobody pays
those affected bear the loss themselves
33 answers on the shelf
Each jar is a condition we have read.
- covered6
- add-on1
- limited22
- no information4
Bank or card issuer (8)
-
Cembra
Cembra CyberProtect
limited up to CHF 5'000
Condition and source
Covered: misuse after theft or robbery of the card or device and identity theft with card data, up to CHF 5'000 per year. Excluded: skimming and e-banking; secondary to the bank (only after written refusal). The product page advertises «phishing», but GTC section 2.1.1 does not expressly name phishing.
Deductible: none
Cembra Money Bank AG / ERV (Helvetia): Cembra CyberProtect – Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 07/2024, AVB Ziff. 2.1.3 Ausschlüsse · Open document (opens in a new window)
«Skimming; • Schäden im Zusammenhang mit E-Banking;»
-
Cornèrcard
Cyber insurance for Visa, Mastercard and Diners Club cards of Cornèr Bank (individual/family cover)
limited up to CHF 20'000
Condition and source
Banking protection: unauthorised payments up to CHF 20'000 per year, authorised payments after phishing (e-mail) or smishing (SMS) up to CHF 1'000 per year. Only if the bank provides no reimbursement at all (or for its deductible). Obligations: up-to-date security system on the device (proof with logs), notification to Allianz within 3 days and no later than 30 days after the monthly statement, blocking within 24 hours after theft, police report, fraud report from the bank. Phone fraud, love scam and investment fraud are de facto excluded.
AWP P&C S.A. (Allianz) / Cornèr Banca SA: Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz, Ausgabe 06.2026, II C Banking-Schutz, Ziff. 3.4 · Open document (opens in a new window)
«sofern das Finanzinstitut/der Bankkartenherausgeber für diesen Vorfall keinerlei Erstattung leistet»
-
Migros Bank
Card or account terms and conditions
limited
Condition and source
T&C (e-banking takeover by third parties): authentication is checked automatically; anyone who uses the correct means of identification is deemed authorised, and all orders are deemed authorised by the customer (section 2). If the customer breaches duties of care (official app, up-to-date operating system, antivirus, not passing on devices), the bank rejects any liability (section 6). Liability for unlawful interference in telecom networks is excluded (section 7).
Migros Bank AG: Bedingungen für die Benützung des E-Bankings der Migros Bank AG, 3828 – Version 4, Ziff. 6 Sorgfaltspflichten · Open document (opens in a new window)
«Sollte die Nichteinhaltung der folgenden Sorgfaltspflichten zu Schäden führen, lehnt die Bank jegliche Haftung dafür ab.»
-
PostFinance
Card or account terms and conditions
limited
Condition and source
T&C (e-banking takeover by third parties): anyone who logs in with the means of identification is deemed authorised; the customer approves all actions carried out in this way (TNB digital section 2 b). The customer bears the loss resulting from breached duties of care. If nobody breached their obligations, the loss is borne by the party in whose sphere of influence the cause lay (T&C section 2). Obligations: keep codes secret, do not allow remote access, antivirus and updates, report immediately if suspicious, police report. The guarantee of up to CHF 100'000 announced in 2018 is not included in the current conditions of participation (version August 2024).
PostFinance AG: Allgemeine Geschäftsbedingungen der PostFinance AG, Version August 2024, Ziff. 2 Legitimation · Open document (opens in a new window)
«Falls weder die Kund:in noch PostFinance ihre Sorgfaltspflichten verletzt hat, so hat diejenige Partei den Schaden zu tragen, in deren Einflussbereich sich die Ursache»
-
Swisscard
Cyber Security-Versicherung (optional for the Swisscard credit/charge card)
limited up to CHF 20'000
Condition and source
Online account protection: loss through unlawful access to a Swiss postal/bank account, card or mobile device after theft of access data. Only the part that the insured person has to bear themselves; no protection as long as the bank has not refused in writing to cover the loss. Immediate blocking and a police report required.
Swisscard AECS GmbH / AWP P&C S.A.: Versicherungsbedingungen der Cyber Security-Versicherung zu den Charge- und Kreditkarten der Swisscard AECS GmbH, gültig ab Januar 2024, IV. BVB C Online-Kontoschutz, Ziff. 1.3 · Open document (opens in a new window)
«Versichert ist der im Versicherungsfall aufgrund gesetzlicher oder vertraglicher Bestimmungen von der versicherten Person selbst zu tragende Vermögensschaden.»
-
UBS
Card or account terms and conditions
limited
Condition and source
T&C (e-banking takeover by third parties): anyone who logs in with the personal means of access is treated as authorised. The authentication agreement places manipulation of the customer’s device, misuse of means of access, breached duties of care and interference by third parties in data transmission at the customer’s end on the customer. UBS is only liable if it has breached the customary standard of care. Obligations: keep means of access separately and never pass them on, do not respond to e-mails or SMS asking for access data, keep the operating system and browser up to date.
UBS Switzerland AG: Vertragliche Grundlagen für private Kunden – Basisbestimmungen für UBS Digital Banking, Basisbestimmungen Ausgabe Februar 2025 (63615 D 001 07.02.2025), Digital Banking Ziff. 6 Risiken, PDF-S. 11 · Open document (opens in a new window)
«Die Legitimationsabrede (vgl. Ziff. 2) bedeutet, dass die Risiken beim Vertragspartner liegen, die sich (i) aus Manipulationen am IT-System des Zugriffsberechtigten»
-
Viseca
Online account protection and online legal protection (included in the credit card)
limited up to CHF 20'000
Condition and source
Depending on the card CHF 5'000 to 20'000 per event. Only transactions without the consent or approval of the insured person; payments approved by the person themselves (phishing with approval) are not covered. Secondary: only the loss the person has to bear themselves, and only after written refusal by the bank. No deductible (product page).
Deductible: none
Viseca Card Services SA / Allianz: Kundeninformation und Versicherungsbedingungen für Karten der Viseca Card Services SA – Privatkarten, gültig ab 01.06.2025, Online-Kontoschutz, Ziff. 2.1 · Open document (opens in a new window)
«Die finanziellen Transaktionen wurden ohne Einverständnis beziehungsweise Freigabe der versicherten Person durchgeführt.»
-
ZKB
Card or account terms and conditions
limited
Condition and source
T&C (e-banking takeover by third parties): the customer bears the loss if their means of authentication are misused (unlawful access, fraud) and they have breached their duties of care, e.g. responded to phishing e-mails, saved the password or neglected updates and antivirus (section 4). If neither the bank nor the user breached obligations, the loss is borne by the party in whose sphere of influence the misuse occurred. The device is outside the bank’s control (section 7.3).
Zürcher Kantonalbank: Besondere Bestimmungen für Digitale Bankdienstleistungen der Zürcher Kantonalbank, Januar 2025, Ziff. 7.1 und 7.2 Risiken · Open document (opens in a new window)
«Haben weder die Bank noch der Benutzer ihre Sorgfaltspflichten verletzt, trägt den Schaden derjenige, in dessen Einflussbereich sich der Missbrauch oder der Betrug zugetragen hat.»
Insurance (11)
-
Allianz Suisse
Online- und Kaufschutzbrief (cyber protection)
limited up to CHF 20'000
Condition and source
Account protection: financial losses through misuse of accounts (CH, FL, border area 50 km) and cards by third parties, including online banking, card numbers on the internet, cash withdrawals; plus blocking and replacement fees. Only to the extent that the bank has refused in writing. Not: caused by gross negligence, reporting/review deadline missed, mass attack on the financial institution, avoidable through updates. Police report mandatory.
Deductible: none
Allianz Suisse Versicherungs-Gesellschaft AG / CAP Rechtsschutz: Allgemeine Bedingungen (AB) für die Kombi-Haushaltversicherung (B3 Online- und Kaufschutzbrief), Ausgabe 03.2025, Ziff. B3.5.2 lit. d, PDF-S. 9 · Open document (opens in a new window)
«soweit das kontoführende Geldinstitut, der Kartenvertragspartner, bzw. der Anbieter anderer Bezahlsysteme es schriftlich abgelehnt hat»
-
AXA
Cyberversicherung Plus (modules: online accounts & credit cards, online bullying & copyright, online shopping, data recovery/virus removal/IT assistance)
add-on up to CHF 20'000
Condition and source
SIM cards and online accounts are insured items; monitoring of phone numbers; legal protection and subsidiary compensation up to CHF 20'000.
Deductible: CHF 50
AXA Versicherungen AG / AXA-ARAG Rechtsschutz AG: Allgemeine Vertragsbedingungen (AVB) Haushaltversicherung (Privathaftpflicht, Hausrat, Cyber Plus, Zusatzversicherungen und Services), 16162DE, Ausgabe 10.2021, Ziff. G1.1, PDF-S. 27 · Open document (opens in a new window)
«Kredit-, Debit-, Kunden- oder SIM-Karten»
-
Baloise
BaloiseCombi Haushalt, security module Protection – Cyber (F2.1)
limited up to CHF 20'000
Condition and source
Misuse of credit, debit, customer or SIM cards by third parties: legal costs and compensation of the loss up to CHF 20'000, subsidiary.
Basler Versicherung AG (Baloise): BaloiseCombi Haushalt, Produktinformationen und Vertragsbedingungen (F2.1 Sicherheitsbaustein Protection – Cyber), Ausgabe 2025, F2.1.1, PDF-S. 48 · Open document (opens in a new window)
«Ersatz des Schadens aus dem Kartenmissbrauch»
-
Generali
Cyber insurance (part D of the household insurance)
limited
Condition and source
Only misuse of credit and payment card data for payments on the internet (cards from institutions in CH, FL, EU, UK, NO, IS). E-banking is expressly excluded, as are losses after negligent conduct by the insured person. Block cards immediately, police report. Sum insured according to the policy, deductible 10% (min. CHF 50).
Deductible: CHF 50
Generali Allgemeine Versicherungen AG / Fortuna Rechtsschutz-Versicherungs-Gesellschaft AG: Allgemeine Versicherungsbedingungen (AVB) Haushaltversicherung (Teil D Cyberversicherung; Rechtsschutz durch Fortuna), Ausgabe 2026, D2 lit. a, PDF-S. 27 · Open document (opens in a new window)
«dass Dritte die Daten Ihrer Kredit- oder Bezahlkarten für Zahlungen im Internet missbraucht haben»
-
Groupe Mutuel
CyberProtect (internet legal protection + assistance + compensation)
covered up to CHF 300'000
Condition and source
The only product found that expressly names the dispute with the bank: legal protection (Dextra) in disputes with a bank/credit institution after phishing, pharming, skimming and in the event of unlawful card or contactless payment (Twint, Revolut, PayPal, Apple Pay); no waiting period. In addition, the insurance reimburses fraudulent payments up to CHF 10'000 per calendar year if the intervention was unsuccessful (waiting period 7 days); a written refusal from the bank is required. Limit = legal costs CHF 300'000.
Groupe Mutuel Versicherungen GMA AG (Rechtsschutz durch Dextra Rechtsschutz AG, Assistance durch Europ Assistance): Allgemeine Versicherungsbedingungen der Versicherung für Risiken und Rechtsstreitigkeiten im Internet CyberProtect, mit Anhang 1 (Katalog der versicherten Risiken und Leistungen), CYGA01-A5, Ausgabe 01.01.2022, Anhang 1 Ziff. 4, PDF-S. 10 · Open document (opens in a new window)
«Streitigkeiten einer versicherten Person mit einem Bank- oder Kreditinstitut aufgrund eines Diebstahls von Zugangsdaten, Identitätsmissbrauch im Internet (z. B. durch Phishing oder Pharming)»
-
Helvetia
Cyber add-on to the household contents insurance («Cyber: losses arising from the use of internet technologies»)
limited up to CHF 5'000
Condition and source
«Online banking/credit card misuse (phishing, hacking, skimming)» up to CHF 5'000. However, the definition only names credit cards with a payment function at manipulated ATMs, manipulated payment terminals and for mobile payment; whether pure online misuse or e-banking falls under this is unclear. Deductible according to the policy; subsidiary (O11).
Helvetia Schweizerische Versicherungsgesellschaft AG: AVB Helvetia Privatkundenversicherung, Hausrat und Privathaftpflicht, Ausgabe September 2025, O5, PDF-S. 10; Begriff «Online-Banking/Kreditkartenmissbrauch», PDF-S. 22 · Open document (opens in a new window)
«bei widerrechtlichen Abhebungen an manipulierten Geldausgabeautomaten»
-
Mobiliar
Cyberversicherung für Privatpersonen (module of the household and building insurance)
limited up to CHF 20'000
Condition and source
Disputes and financial losses when third parties obtain card, Twint/PayPal or online account data without authorisation. First legal protection (Protekta), then compensation of the remaining loss up to CHF 20'000; subsidiary to the bank and third parties, at most 3 events per year. Not for a physically stolen card, crypto, investment transactions, grandparent scam, love scam, fake police officer.
Schweizerische Mobiliar Versicherungsgesellschaft AG / Protekta Rechtsschutz-Versicherung AG: Haushalt- und Gebäudeversicherung, Kundeninformationen und Allgemeine Bedingungen (Hausrat, Wertsachen, Privathaftpflicht, Gebäude, Haustiere, Cyberversicherung, Vertragsrechtsschutz), Ausgabe 04.2025, Art. A Ziff. 4.1, PDF-S. 41 · Open document (opens in a new window)
«als Folge von unerlaubter Beschaffung folgender Daten der versicherten Personen durch Dritte: Bank- und Kreditkartendaten»
-
Simpego
Household insurance Home (monetary assets: credit, debit and customer cards)
limited up to CHF 10'000
Condition and source
Financial losses from cards up to CHF 10'000 only «as a result of an insured event» (e.g. theft of the card, if insured) and if the duties of care were complied with; only the part that the cardholder bears under the issuer’s T&C is compensated. Hacking or phishing without an insured event is not named.
Simpego Versicherungen AG: Simpego Haushaltversicherung Home, Allgemeine Versicherungsbedingungen (AVB), Ausgabe Dezember 2024, Geldwerte Ziff. 2, PDF-S. 6 · Open document (opens in a new window)
«Vermögensschäden bis CHF 10'000 infolge eines versicherten Ereignisses, wenn die vertraglichen Sorgfaltspflichten eingehalten wurden»
-
smile
smile.home, additional cover Cyber (H.4.5) and optional private legal protection (R)
limited up to CHF 5'000
Condition and source
Misuse of data in private financial and online transactions (online/mobile banking) and misuse by third parties of cards issued in Switzerland: compensation up to CHF 5'000 per event including blocking and replacement costs; subsidiary to the card issuer and bank. The gross negligence protection does not apply to cyber.
Deductible: none
smile.direct versicherungen (Helvetia) / Coop Rechtsschutz AG: AVB zur Haushaltversicherung smile.home (AVB HAU 2024.01), Risikoträger Helvetia; Privatrechtsschutz Coop Rechtsschutz, Ausgabe Januar 2024, H.4.5.3 lit. b, PDF-S. 32 · Open document (opens in a new window)
«(z. B. Kreditkartenherausgeber oder Bank) übernommen werden (Subsidiarität)»
-
Vaudoise
Home in One, additional cover for misuse of credit and debit cards (Art. F4)
limited
Condition and source
Financial losses through misuse of credit/debit cards by third parties up to the agreed sum; subsidiary to the card issuer’s insurance. Excluded: misuse via the internet, card without signature, code kept with the card.
Vaudoise Allgemeine Versicherungs-Gesellschaft AG: Allgemeine Bedingungen Home in One (Hausrat, Privathaftpflicht, Gebäude), Ausgabe 01.01.2023, Art. F4 Ausschlüsse, PDF-S. 32 · Open document (opens in a new window)
«Missbräuche per Internet.»
-
Zurich
Cyber – Safe Shop & Pay
limited up to CHF 50'000
Condition and source
Extra costs due to misuse of the mobile phone as well as blocking and replacement costs for SIM cards; account losses as for phishing, only after written refusal by the bank or network operator.
Deductible: none
Zürich Versicherungs-Gesellschaft AG: Haushaltversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 05/2026, Art. 901.5, PDF-S. 51 · Open document (opens in a new window)
«Mehrkosten, welche durch die missbräuchliche Verwendung (für Gespräche, Mitteilungen, Datenvolumen) von mobilen Kommunikationsgeräten einer versicherten Person entstehen»
Legal protection (7)
-
AXA-ARAG
Private legal protection, «Wohnen & Alltag» module (includes online purchases, card/identity misuse, cyberbullying)
covered : only lawyer and proceedings, not the lost money
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is claiming damages in the event of credit card misuse on the internet (against the party causing the loss). Whether a dispute with the bank or card issuer about the chargeback counts as a «contract for private use» (B2.15) is not expressly regulated; financial transactions are excluded (A7 let. h). Limit = sum insured according to the policy (example on the product page CHF 300'000, max. CHF 1 million per year). No waiting period.
AXA-ARAG Rechtsschutz AG (AXA-Gruppe): Rechtsschutzversicherung Privatpersonen – Allgemeine Vertragsbedingungen (AVB), Module B bis H, Ausgabe 2021 (PDF erstellt 17.12.2024), Ziff. B2.16, PDF-S. 7 · Open document (opens in a new window)
«Einfordern Ihrer ausservertraglichen Schadenersatzansprüche – auch bei Kreditkarten- oder Identitätsmissbrauch im Internet»
-
CAP
privaLex private legal protection with the Multi Risk add-on (Cyber Risk)
covered : only lawyer and proceedings, not the lost money up to CHF 750'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. According to the product page, the basic private legal protection already helps if the merchant and the credit card issuer ignore a complaint about an unauthorised charge (consumer law, Art. A3 let. a). This covers the dispute with the card issuer; e-banking/Twint not expressly mentioned. Limit = Europe CHF 750'000 (world CHF 150'000). Waiting period 90 days; does not apply to contracts concluded after the policy start.
CAP Rechtsschutz-Versicherungsgesellschaft AG: Privatrechtsschutz privaLex, Abschnitt «Wo hilft der Privatrechtsschutz?», Fall «Kreditkarte» · Open document (opens in a new window)
«Ihre Kreditkarte ist mit Dingen belastet, die Sie nie bestellt haben. Der Verkäufer und die Kreditkartenherausgeberin ignorieren Ihre Reklamation.»
-
Coop Rechtsschutz
Legal protection module: basic module «Private and health» (including internet legal protection)
covered : only lawyer and proceedings, not the lost money up to CHF 50'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 50'000.
Deductible: none
Coop Rechtsschutz AG: Privatrechtsschutz – Rechtsschutz für Private, Allgemeine Versicherungsbedingungen (AVB) – Modul (AVBPM24), Ausgabe 2024 (PDF erstellt 07.04.2026), Modul P, Ziff. P8, PDF-S. 10 · Open document (opens in a new window)
«Rechtsstreitigkeiten als Opfer von Kreditkartenmissbrauch, Phishing, Hacking, Skimming»
-
Coop Rechtsschutz
Legal protection package (private, employment, health, housing, traffic, including internet)
covered : only lawyer and proceedings, not the lost money up to CHF 75'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 75'000.
Deductible: none
Coop Rechtsschutz AG: Privatrechtsschutz – Rechtsschutz für Private, Allgemeine Versicherungsbedingungen (AVB) – Paket (AVBPP24), Ausgabe 2024 (PDF erstellt 28.05.2026), Ziff. 16.14, PDF-S. 9 · Open document (opens in a new window)
«Rechtsstreitigkeiten als Opfer von Kreditkartenmissbrauch, Phishing, Hacking, Skimming»
-
Dextra
Private legal protection Private L (package L, area of law «internet law»)
covered : only lawyer and proceedings, not the lost money up to CHF 300'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Area of law internet law: claim for damages and criminal complaint in the event of credit card misuse (skimming) and phishing/hacking. Whether a dispute with the bank/card issuer about reimbursement falls under contract law (section 21) is not expressly regulated. Limit = Private L CHF 300'000 (XL CHF 1.3 million). Waiting period 60 days (XL 30 days).
Deductible: none
Dextra Rechtsschutz AG: AVB Allgemeine Versicherungsbedingungen Pakete für Privatpersonen – Privat- und Verkehrsrechtsschutz, Ausgabe Mai 2022, Art. D1 Ziff. 6 «Internetrecht», PDF-S. 5 · Open document (opens in a new window)
«Geltendmachung von Schadenersatzansprüchen sowie Unterstützung bei der Einreichung einer Strafanzeige bei Kreditkarten- (Skimming) oder Identitätsmissbrauch (Phishing, Hacking).»
-
Orion
Private legal protection Standard (including internet and bullying legal protection)
limited : only lawyer and proceedings, not the lost money up to CHF 5'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Victim of phishing/hacking and credit card misuse (only if committed via the internet). Low sum insured CHF 5'000 (Premium CHF 20'000), waiting period 1 month. If legal assistance is unsuccessful after 60 days, Orion may compensate the proven loss up to CHF 1'000 (Premium CHF 3'000), once per year, subsidiary to household contents insurance. Dispute with the bank not expressly mentioned.
Orion Rechtsschutz-Versicherungsgesellschaft AG: Privat- und Verkehrs-Rechtsschutzversicherung – Kundeninformation nach VVG und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2022 (Druck 4281-07/2022), Art. B1 Abs. 10 «Internet-Rechtsschutz», PDF-S. 10 · Open document (opens in a new window)
«Rechtsschutz als Opfer im Zusammenhang mit: 1. Phishing / Hacking; 2. Kreditkartenmissbrauch.»
-
Protekta
Private legal protection, Comfort package (with «personality rights and internet legal protection»)
limited : only lawyer and proceedings, not the lost money up to CHF 20'000
Condition and source
Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is the assertion of damages claims in the event of misuse of a credit/debit card and card data (against the perpetrator). Contractual disputes arising from the use of the credit/debit card (e.g. with the card issuer) are exempted from the finance exclusion (Art. E1 let. g). A dispute with the bank/payment service about e-banking or Twint, on the other hand, falls under the exclusion «banking, financial and payment services». Only Comfort package; limit = sum insured according to the brochure CHF 20'000, waiting period 3 months.
Deductible: none
Protekta Rechtsschutz-Versicherung AG (Mobiliar-Gruppe): Rechtsschutzversicherung für Privatpersonen – Kundeninformationen und Allgemeine Bedingungen (Privat-, Verkehrs-, Immobilien-Rechtsschutz), Ausgabe 08.2023, Art. B3 Ziff. 5 lit. c, PDF-S. 8 · Open document (opens in a new window)
«Geltendmachung von Schadenersatzansprüchen aus der missbräuchlichen Verwendung Ihrer Kredit- oder Debitkarte und deren Daten.»
Bundle (via a telecom provider or association) (3)
-
Swisscom
Easy Cyber Insurance
limited up to CHF 20'000
Condition and source
SIM cards are insured items, but only legal protection up to CHF 20'000.
Deductible: none
Swisscom (Schweiz) AG / AXA-ARAG Rechtsschutz AG: Bestimmungen Easy Cyber Insurance (Kollektivversicherung, Versicherer AXA-ARAG), Ausgabe 09.2025, B.1.1, PDF-S. 1 · Open document (opens in a new window)
«Streitigkeiten aus Verträgen mit schweizerischen Kreditkartenunternehmen»
-
TCS
TCS Cyber-Schutzbrief (legal protection Assista + compensation TAS + technology bolttech)
limited up to CHF 5'000
Condition and source
In the event of misuse of bank, postal account or card data on the internet, TAS pays the proven financial loss up to CHF 5'000 (subsidiary: only to the extent that the bank, an insurer or third parties are not obliged to pay). For irregularities with card issuers, PayPal, Twint, Apple Pay also up to CHF 5'000, deductible CHF 150. Important: for these cases there is only legal advice by telephone, no lawyer for a dispute with the bank (section 13.2). Misuse after theft/loss of the physical card not covered. Limit = compensation.
Deductible: CHF 150
Touring Club Schweiz (TCS); Rechtsschutz: Assista Rechtsschutz AG; Entschädigung: TAS Versicherungen AG; Technik: bolttech Switzerland AG: TCS Cyber-Schutzbrief – Allgemeine Geschäftsbedingungen (inkl. Geschäftsbedingungen von bolttech), Produktversion 2025, Ausgabe 01.2025, Ziff. 12 lit. c (PDF-S. 6) und Ziff. 13.3 lit. a (PDF-S. 7) · Open document (opens in a new window)
«Unrechtmässige Aneignung der Bank-, Postkonto- oder Zahlungskartendaten (Debit- und Kreditkarten) des Begünstigten durch Dritte und deren anschliessende missbräuchliche Verwendung im Internet.»
-
TCS
TCS Internet-Schutzbrief (product version 2017)
limited up to CHF 300'000
Condition and source
Legal costs for credit card misuse via the internet and skimming (no waiting period) as well as disputes with credit card institutions and payment services (PayPal, Twint, Apple Pay) for online payments (waiting period 3 months). If legal assistance is unsuccessful after 2 months, compensation of the financial loss up to CHF 5'000 (card/skimming) or CHF 1'000 (payment processing). External lawyer’s fees only from an amount in dispute of CHF 2'000. Card misuse after theft not covered.
Assista Rechtsschutz AG (Tochter des TCS): TCS Internet-Schutzbrief – Allgemeine Versicherungsbedingungen, Produktversion 2017, Ausgabe 09.2023, Ziff. 10 lit. i, PDF-S. 7 · Open document (opens in a new window)
«Zivilrechtliche Streitigkeiten des Versicherten bei Unregelmässigkeiten bei der Zahlungsabwicklung mit (abschliessende Aufzählung): Kreditkarteninstituten bei Online-Zahlungen; Betreibern von Mobile- und Online-Bezahlsystemen (Paypal, Twint, Apple Pay etc.).»
No information from 4 providers
- Cembra, Cembra ShoppingProtect: Not regulated in the conditions.
- Swisscard, Shopping-Versicherung (Classic, Premium, Exclusive) with the module «Safe online»: Not regulated in the conditions.
- Zurich, Cyber – Safe Surf: Not regulated in the conditions.
- Zurich, Cyber – Prevention (Zurich Cyber Security App, partner BOXX Insurance): Service without insurance cover; not mentioned on the product page.
Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.
Where it gets stuck
-
Insurance pays on a secondary basis: usually only after written refusal by the bank or card issuer.
Where does it say so?
Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz, Ausgabe 06.2026, II C Banking-Schutz, Ziff. 1 (ebenso Swisscard Cyber Security C 3.4, Viseca Online-Kontoschutz Ziff. 5, Cembra CyberProtect Ziff. 1.3)
«die nicht durch die Erstattung ihrer Verluste durch das Finanzinstitut/den Bankkartenherausgeber auf subsidiärer Basis gedeckt sind.»
Open document: Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz (opens in a new window), retrieved 06.11.2026
-
Duties of care breached (PIN written down, codes passed on, device without lock/updates/antivirus): card issuers only pay if all obligations were complied with.
Where does it say so?
Jahresbericht 2020, 2020 (publiziert Juni 2021), S. 14, «2020 in Kürze»
«Zusätzlich werden diese Sorgfaltspflichten zulasten der Kunden zunehmend strenger interpretiert.»
Open document: Jahresbericht 2020 (opens in a new window), retrieved 06.11.2026
-
In Switzerland there is as a rule no legal obligation for the bank to compensate fraud victims; goodwill gestures are becoming rarer.
Where does it say so?
Jahresbericht 2024, 2024 (publiziert Mai 2025), S. 8, «2024 in Kürze»
«Eine rechtliche Verpflichtung der Finanzinstitute, die Kunden in solchen Fällen zu entschädigen, ist aufgrund der heutigen Rechtslage in der Schweiz regelmässig nicht gegeben.»
Open document: Jahresbericht 2024 (opens in a new window), retrieved 06.11.2026