Search I’ve been hacked Advice Menu

Twint fraud on Ricardo or Tutti: an alleged buyer emptied my account.

limited Approved by you: usually nobody pays

TWINT and the banks attribute actions in your TWINT app to you; confirmed payments are irrevocable. TWINT AG is only liable for its own gross negligence, up to a maximum of CHF 3'000.

Full answer

At the Swiss Banking Ombudsman, such cases in 2024 and 2025 ended with goodwill payments of up to around 50%. Insurance: AXA and Mobiliar expressly name TWINT, Zurich names mobile payment phishing; the consumer protection foundation Stiftung für Konsumentenschutz advises checking your household contents and legal protection policies. The NCSC has reported significantly more TWINT phishing since May 2026.

Also asked as: «I wanted to sell something and was asked to confirm a code to receive money» · «Fraudsters activated Twint on their phone with my account» · «Classified ad fraud with Twint»

As of

On this page
  1. What to do now
  2. Who pays?
  3. Answers
  4. Where it gets stuck

What to do now

  1. Call the bank that issues your TWINT app immediately and have TWINT blocked.

  2. Stop communicating with the «buyer» and report them to the classified ads platform.

  3. File a criminal complaint with the police.

  4. If you sent a copy of your ID: report this to the identity card office of your municipality.

  5. Check your household contents, cyber and legal protection policies.

Sources (6)

Bundesamt für Cybersicherheit BACS: Kleinanzeigenbetrug, abgerufen 06.11.2026, Konkrete Massnahmen · Open document (opens in a new window)

«Informieren Sie die Kleinanzeigen-Plattform über den Vorfall.»

Bundesamt für Cybersicherheit BACS: Kleinanzeigenbetrug, abgerufen 06.11.2026, Konkrete Massnahmen · Open document (opens in a new window)

«melden Sie den Vorfall der ID- respektive Passausgabestelle Ihrer Gemeinde»

Bundesamt für Cybersicherheit BACS: Halbjahresbericht 2026/I (Januar–Juni), 24.08.2026, Kapitel Phishing · Open document (opens in a new window)

«Auch TWINT-Phishing ist seit Mai 2026 deutlich angestiegen»

Schweizerischer Bankenombudsman: Jahresbericht 2025, 2025 (publiziert Mai 2026), S. 15, Fall 2025/07 (Grundsatz S. 8) · Open document (opens in a new window)

«Der Ombudsman konnte erreichen, dass die Bank ihr Vergleichsangebot auf rund 50 % des Schadensbetrags erhöhte.»

Schweizerischer Bankenombudsman: Jahresbericht 2024, 2024 (publiziert Mai 2025), S. 15, Fall 2024/06 · Open document (opens in a new window)

«erachtete er es als fraglich, dass die Bedingungen für TWINT … von der Kundin rechtsgültig akzeptiert worden waren.»

Stiftung für Konsumentenschutz (SKS): Kleinanzeigen-Betrug, zuletzt aktualisiert 04.11.2026, Abschnitt Vorgehen im Betrugsfall · Open document (opens in a new window)

«Prüfen Sie, ob Ihr Schaden versichert ist (Hausratversicherung, Rechtsschutzversicherung).»

Who pays?

  1. First

    Call the bank immediately

    stop the payment or try to recall it (no obligation to reimburse)

  2. Then

    Bank or card issuer

    as a rule no reimbursement, because the payment is deemed approved; a goodwill gesture or the Swiss Banking Ombudsman possible

  3. Then

    Insurance

    only a few products pay for approvals obtained by deception (e.g. Cornèrcard up to CHF 1'000 for phishing/smishing); many exclude voluntary payments

Nobody pays

in most cases those affected bear the loss themselves

32 answers on the shelf

Each jar is a condition we have read.

32 answers: 6 covered, 1 add-on, 14 limited, 4 not covered, 2 unclear, 5 no information AXA-ARAG: coveredCAP: coveredCoop Rechtsschutz: coveredCoop Rechtsschutz: coveredDextra: coveredGroupe Mutuel: coveredAXA: add-onMobiliar: limitedZurich: limitedAllianz Suisse: limitedHelvetia: limitedBaloise: limitedsmile: limitedSwisscom: limitedProtekta: limitedOrion: limitedTCS: limitedTCS: limitedSwisscard: limitedViseca: limitedCembra: limitedVaudoise: not coveredRaiffeisen: not coveredZKB: not coveredTWINT: not coveredGenerali: unclearCornèrcard: unclearZurich: no informationZurich: no informationSimpego: no informationSwisscard: no informationCembra: no information
  • covered6
  • add-on1
  • limited14
  • not covered4
  • unclear2
  • no information5

Bank or card issuer (7)

  • Cembra

    Cembra CyberProtect

    limited up to CHF 5'000

    Condition and source

    Covered: misuse after theft or robbery of the card or device and identity theft with card data, up to CHF 5'000 per year. Excluded: skimming and e-banking; secondary to the bank (only after written refusal). The product page advertises «phishing», but GTC section 2.1.1 does not expressly name phishing.

    Deductible: none

    Cembra Money Bank AG / ERV (Helvetia): Cembra CyberProtect – Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 07/2024, AVB Ziff. 2.1.3 Ausschlüsse · Open document (opens in a new window)

    «Skimming; • Schäden im Zusammenhang mit E-Banking;»
  • Cornèrcard

    Cyber insurance for Visa, Mastercard and Diners Club cards of Cornèr Bank (individual/family cover)

    unclear up to CHF 20'000

    Condition and source

    Banking protection for unauthorised payments; authorised payments only after e-mail or SMS phishing up to CHF 1'000. Whether a classified ad chat falls under this is open.

    AWP P&C S.A. (Allianz) / Cornèr Banca SA: Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz, Ausgabe 06.2026, II C Banking-Schutz, Ziff. 3.4 · Open document (opens in a new window)

    «sofern das Finanzinstitut/der Bankkartenherausgeber für diesen Vorfall keinerlei Erstattung leistet»
  • Raiffeisen

    Card or account terms and conditions

    not covered

    Condition and source

    T&C (TWINT misuse / TWINT fraud with classified ads): Raiffeisen TWINT: confirmed payments are irrevocable (section 7.1); P2P payments only go to the mobile number entered (section 7.3). The bank excludes any warranty and liability, including for unauthorised access to the device and for breaches of the duties of care. There is no rule on covering losses. Report misuse immediately, written dispute no later than 30 days from the account statement or credit card invoice, criminal complaint at the bank’s request.

    Raiffeisen Schweiz Genossenschaft / Raiffeisenbanken: Raiffeisen TWINT – Allgemeine Geschäftsbedingungen, AGB Version 6.0 – Dezember 2024, Ziff. 14 Gewährleistung und Haftung (Frist Ziff. 9) · Open document (opens in a new window)

    «Die Bank schliesst jede Gewährleistung und Haftung im Zusammenhang mit der Benützung der TWINT App aus»
  • Swisscard

    Cyber Security-Versicherung (optional for the Swisscard credit/charge card)

    limited up to CHF 20'000

    Condition and source

    Online account protection: loss through unlawful access to a Swiss postal/bank account, card or mobile device after theft of access data. Only the part that the insured person has to bear themselves; no protection as long as the bank has not refused in writing to cover the loss. Immediate blocking and a police report required.

    Swisscard AECS GmbH / AWP P&C S.A.: Versicherungsbedingungen der Cyber Security-Versicherung zu den Charge- und Kreditkarten der Swisscard AECS GmbH, gültig ab Januar 2024, IV. BVB C Online-Kontoschutz, Ziff. 1.3 · Open document (opens in a new window)

    «Versichert ist der im Versicherungsfall aufgrund gesetzlicher oder vertraglicher Bestimmungen von der versicherten Person selbst zu tragende Vermögensschaden.»
  • TWINT

    Card or account terms and conditions

    not covered

    Condition and source

    T&C (TWINT misuse / TWINT fraud with classified ads): actions that a third party carries out without authorisation with a customer’s TWINT app are attributed to the customer (section 1.7). TWINT AG is not liable for unauthorised access, breaches of duty or actions by third parties, except in the case of its own gross negligence or intent; it then compensates at most CHF 3'000 per loss event (section 1.8). Obligations: keep the code secret, lock the device, no jailbreak, check the recipient before every payment, police report in the case of criminal offences. TWINT advises those affected to call their bank immediately.

    TWINT AG: Allgemeine Geschäftsbedingungen für die Nutzung von TWINT, Version 9.0 / Oktober 2026, Ziff. 1.7 und 1.8 · Open document (opens in a new window)

    «Insbesondere werden Handlungen, die eine Drittperson unberechtigt mit der TWINT App einer Kundin bzw. eines Kunden vornimmt, der Kundin bzw. dem Kunden zugerechnet.»
  • Viseca

    Online account protection and online legal protection (included in the credit card)

    limited up to CHF 20'000

    Condition and source

    Depending on the card CHF 5'000 to 20'000 per event. Only transactions without the consent or approval of the insured person; payments approved by the person themselves (phishing with approval) are not covered. Secondary: only the loss the person has to bear themselves, and only after written refusal by the bank. No deductible (product page).

    Deductible: none

    Viseca Card Services SA / Allianz: Kundeninformation und Versicherungsbedingungen für Karten der Viseca Card Services SA – Privatkarten, gültig ab 01.06.2025, Online-Kontoschutz, Ziff. 2.1 · Open document (opens in a new window)

    «Die finanziellen Transaktionen wurden ohne Einverständnis beziehungsweise Freigabe der versicherten Person durchgeführt.»
  • ZKB

    Card or account terms and conditions

    not covered

    Condition and source

    T&C (TWINT misuse / TWINT fraud with classified ads): ZKB TWINT: payments made via TWINT are binding and can neither be revoked nor cancelled. The bank is not liable for goods and services paid for; claims are to be made against the merchant. Dispute no later than 30 days after execution, after which all claims lapse (section 6.4). The customer bears the consequences of misuse via biometric login (section 16).

    Zürcher Kantonalbank: Nutzungsbedingungen für ZKB TWINT, Ausgabe November 2026, Ziff. 1 Gegenstand (Frist Ziff. 6.4) · Open document (opens in a new window)

    «Über TWINT in Auftrag gegebene Zahlungen sind für den Kunden und für die Bank verbindlich und können nicht widerrufen oder storniert werden.»

Insurance (10)

  • Allianz Suisse

    Online- und Kaufschutzbrief (cyber protection)

    limited up to CHF 20'000

    Condition and source

    Account protection: financial losses through misuse of accounts (CH, FL, border area 50 km) and cards by third parties, including online banking, card numbers on the internet, cash withdrawals; plus blocking and replacement fees. Only to the extent that the bank has refused in writing. Not: caused by gross negligence, reporting/review deadline missed, mass attack on the financial institution, avoidable through updates. Police report mandatory.

    Deductible: none

    Allianz Suisse Versicherungs-Gesellschaft AG / CAP Rechtsschutz: Allgemeine Bedingungen (AB) für die Kombi-Haushaltversicherung (B3 Online- und Kaufschutzbrief), Ausgabe 03.2025, Ziff. B3.5.2 lit. d, PDF-S. 9 · Open document (opens in a new window)

    «soweit das kontoführende Geldinstitut, der Kartenvertragspartner, bzw. der Anbieter anderer Bezahlsysteme es schriftlich abgelehnt hat»
  • AXA

    Cyberversicherung Plus (modules: online accounts & credit cards, online bullying & copyright, online shopping, data recovery/virus removal/IT assistance)

    add-on up to CHF 20'000

    Condition and source

    Online accounts & credit cards module: monitoring, legal protection (AXA-ARAG) up to CHF 20'000 and, after unsuccessful legal action, compensation of the loss up to CHF 20'000, subsidiary to the card issuer/bank. Deductible CHF 50–5'000. Gross negligence leads to a reduction. Not: voluntarily made payments (romance scam, grandparent scam), crypto.

    Deductible: CHF 50

    AXA Versicherungen AG / AXA-ARAG Rechtsschutz AG: Allgemeine Vertragsbedingungen (AVB) Haushaltversicherung (Privathaftpflicht, Hausrat, Cyber Plus, Zusatzversicherungen und Services), 16162DE, Ausgabe 10.2021, Ziff. G1.3, PDF-S. 27 · Open document (opens in a new window)

    «Die Deckung gilt ergänzend (subsidiär) für den Teil des Schadens, für den die versicherten Personen gegenüber den Anbietern»
  • Baloise

    BaloiseCombi Haushalt, security module Protection – Cyber (F2.1)

    limited up to CHF 20'000

    Condition and source

    Misuse of credit, debit, customer or SIM cards and misuse of data in private financial and online transactions (online and mobile banking): legal costs against perpetrators and compensation of the loss up to CHF 20'000 per event. Subsidiary: first the bank or third parties; cash, e-money and crypto excluded.

    Basler Versicherung AG (Baloise): BaloiseCombi Haushalt, Produktinformationen und Vertragsbedingungen (F2.1 Sicherheitsbaustein Protection – Cyber), Ausgabe 2025, F2.1.1, PDF-S. 48 · Open document (opens in a new window)

    «Ersatz des Schadens aus dem Kartenmissbrauch»
  • Generali

    Cyber insurance (part D of the household insurance)

    unclear

    Condition and source

    Only card data for payments on the internet; TWINT is not named; negligent conduct is excluded.

    Deductible: CHF 50

    Generali Allgemeine Versicherungen AG / Fortuna Rechtsschutz-Versicherungs-Gesellschaft AG: Allgemeine Versicherungsbedingungen (AVB) Haushaltversicherung (Teil D Cyberversicherung; Rechtsschutz durch Fortuna), Ausgabe 2026, D2 lit. a, PDF-S. 27 · Open document (opens in a new window)

    «dass Dritte die Daten Ihrer Kredit- oder Bezahlkarten für Zahlungen im Internet missbraucht haben»
  • Groupe Mutuel

    CyberProtect (internet legal protection + assistance + compensation)

    covered up to CHF 300'000

    Condition and source

    The only product found that expressly names the dispute with the bank: legal protection (Dextra) in disputes with a bank/credit institution after phishing, pharming, skimming and in the event of unlawful card or contactless payment (Twint, Revolut, PayPal, Apple Pay); no waiting period. In addition, the insurance reimburses fraudulent payments up to CHF 10'000 per calendar year if the intervention was unsuccessful (waiting period 7 days); a written refusal from the bank is required. Limit = legal costs CHF 300'000.

    Groupe Mutuel Versicherungen GMA AG (Rechtsschutz durch Dextra Rechtsschutz AG, Assistance durch Europ Assistance): Allgemeine Versicherungsbedingungen der Versicherung für Risiken und Rechtsstreitigkeiten im Internet CyberProtect, mit Anhang 1 (Katalog der versicherten Risiken und Leistungen), CYGA01-A5, Ausgabe 01.01.2022, Anhang 1 Ziff. 4, PDF-S. 10 · Open document (opens in a new window)

    «Streitigkeiten einer versicherten Person mit einem Bank- oder Kreditinstitut aufgrund eines Diebstahls von Zugangsdaten, Identitätsmissbrauch im Internet (z. B. durch Phishing oder Pharming)»
  • Helvetia

    Cyber add-on to the household contents insurance («Cyber: losses arising from the use of internet technologies»)

    limited up to CHF 5'000

    Condition and source

    The definition covers cashless payments with mobile phones (up to CHF 5'000, subsidiary); whether activation on someone else’s device falls under this is open.

    Helvetia Schweizerische Versicherungsgesellschaft AG: AVB Helvetia Privatkundenversicherung, Hausrat und Privathaftpflicht, Ausgabe September 2025, O5, PDF-S. 10; Begriff «Online-Banking/Kreditkartenmissbrauch», PDF-S. 22 · Open document (opens in a new window)

    «bei widerrechtlichen Abhebungen an manipulierten Geldausgabeautomaten»
  • Mobiliar

    Cyberversicherung für Privatpersonen (module of the household and building insurance)

    limited up to CHF 20'000

    Condition and source

    Disputes and financial losses when third parties obtain card, Twint/PayPal or online account data without authorisation. First legal protection (Protekta), then compensation of the remaining loss up to CHF 20'000; subsidiary to the bank and third parties, at most 3 events per year. Not for a physically stolen card, crypto, investment transactions, grandparent scam, love scam, fake police officer.

    Schweizerische Mobiliar Versicherungsgesellschaft AG / Protekta Rechtsschutz-Versicherung AG: Haushalt- und Gebäudeversicherung, Kundeninformationen und Allgemeine Bedingungen (Hausrat, Wertsachen, Privathaftpflicht, Gebäude, Haustiere, Cyberversicherung, Vertragsrechtsschutz), Ausgabe 04.2025, Art. A Ziff. 4.1, PDF-S. 41 · Open document (opens in a new window)

    «als Folge von unerlaubter Beschaffung folgender Daten der versicherten Personen durch Dritte: Bank- und Kreditkartendaten»
  • smile

    smile.home, additional cover Cyber (H.4.5) and optional private legal protection (R)

    limited up to CHF 5'000

    Condition and source

    Misuse of data in private financial and online transactions (online/mobile banking) and misuse by third parties of cards issued in Switzerland: compensation up to CHF 5'000 per event including blocking and replacement costs; subsidiary to the card issuer and bank. The gross negligence protection does not apply to cyber.

    Deductible: none

    smile.direct versicherungen (Helvetia) / Coop Rechtsschutz AG: AVB zur Haushaltversicherung smile.home (AVB HAU 2024.01), Risikoträger Helvetia; Privatrechtsschutz Coop Rechtsschutz, Ausgabe Januar 2024, H.4.5.3 lit. b, PDF-S. 32 · Open document (opens in a new window)

    «(z. B. Kreditkartenherausgeber oder Bank) übernommen werden (Subsidiarität)»
  • Vaudoise

    Home in One, additional cover for misuse of credit and debit cards (Art. F4)

    not covered

    Condition and source

    Misuse via the internet is excluded; TWINT is not named.

    Vaudoise Allgemeine Versicherungs-Gesellschaft AG: Allgemeine Bedingungen Home in One (Hausrat, Privathaftpflicht, Gebäude), Ausgabe 01.01.2023, Art. F4 Ausschlüsse, PDF-S. 32 · Open document (opens in a new window)

    «Missbräuche per Internet.»
  • Zurich

    Cyber – Safe Shop & Pay

    limited up to CHF 50'000

    Condition and source

    Financial losses through misuse by third parties of private accounts, custody accounts, credit balances (CH/FL) and credit cards after card, access or identification data was obtained without authorisation, expressly including phishing of e-banking and mobile payment access data and skimming. Only to the extent that the bank has refused in writing. Not: PIN written down, reporting obligation breached, review deadline missed. In addition, extra costs in the event of misuse of the mobile phone (901.5) and blocking/replacement costs for cards (901.6).

    Deductible: none

    Zürich Versicherungs-Gesellschaft AG: Haushaltversicherung, Kundeninformation und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 05/2026, Art. 901.4, PDF-S. 50 · Open document (opens in a new window)

    «Darunter fallen beispielsweise Vermögensschäden durch Phishing von Zugangsdaten von E-Banking- und Mobiltelefon-Zahlungssystemen sowie Skimming von Kreditkarten.»

Legal protection (7)

  • AXA-ARAG

    Private legal protection, «Wohnen & Alltag» module (includes online purchases, card/identity misuse, cyberbullying)

    covered : only lawyer and proceedings, not the lost money

    Condition and source

    Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is claiming damages in the event of credit card misuse on the internet (against the party causing the loss). Whether a dispute with the bank or card issuer about the chargeback counts as a «contract for private use» (B2.15) is not expressly regulated; financial transactions are excluded (A7 let. h). Limit = sum insured according to the policy (example on the product page CHF 300'000, max. CHF 1 million per year). No waiting period.

    AXA-ARAG Rechtsschutz AG (AXA-Gruppe): Rechtsschutzversicherung Privatpersonen – Allgemeine Vertragsbedingungen (AVB), Module B bis H, Ausgabe 2021 (PDF erstellt 17.12.2024), Ziff. B2.16, PDF-S. 7 · Open document (opens in a new window)

    «Einfordern Ihrer ausservertraglichen Schadenersatzansprüche – auch bei Kreditkarten- oder Identitätsmissbrauch im Internet»
  • CAP

    privaLex private legal protection with the Multi Risk add-on (Cyber Risk)

    covered : only lawyer and proceedings, not the lost money up to CHF 750'000

    Condition and source

    Only legal costs (lawyer, court, expert opinions), not the lost amount itself. According to the product page, the basic private legal protection already helps if the merchant and the credit card issuer ignore a complaint about an unauthorised charge (consumer law, Art. A3 let. a). This covers the dispute with the card issuer; e-banking/Twint not expressly mentioned. Limit = Europe CHF 750'000 (world CHF 150'000). Waiting period 90 days; does not apply to contracts concluded after the policy start.

    CAP Rechtsschutz-Versicherungsgesellschaft AG: Privatrechtsschutz privaLex, Abschnitt «Wo hilft der Privatrechtsschutz?», Fall «Kreditkarte» · Open document (opens in a new window)

    «Ihre Kreditkarte ist mit Dingen belastet, die Sie nie bestellt haben. Der Verkäufer und die Kreditkartenherausgeberin ignorieren Ihre Reklamation.»
  • Coop Rechtsschutz

    Legal protection module: basic module «Private and health» (including internet legal protection)

    covered : only lawyer and proceedings, not the lost money up to CHF 50'000

    Condition and source

    Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 50'000.

    Deductible: none

    Coop Rechtsschutz AG: Privatrechtsschutz – Rechtsschutz für Private, Allgemeine Versicherungsbedingungen (AVB) – Modul (AVBPM24), Ausgabe 2024 (PDF erstellt 07.04.2026), Modul P, Ziff. P8, PDF-S. 10 · Open document (opens in a new window)

    «Rechtsstreitigkeiten als Opfer von Kreditkartenmissbrauch, Phishing, Hacking, Skimming»
  • Coop Rechtsschutz

    Legal protection package (private, employment, health, housing, traffic, including internet)

    covered : only lawyer and proceedings, not the lost money up to CHF 75'000

    Condition and source

    Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Legal dispute as a victim of credit card misuse, phishing, hacking, skimming; no waiting period. Opposing party not restricted; a dispute with the bank or card issuer is not expressly mentioned. In addition: if legal assistance is unsuccessful after 180 days, the financial loss from unauthorised purchases/sales by third parties is compensated up to CHF 1'000. Limit = legal costs CHF 75'000.

    Deductible: none

    Coop Rechtsschutz AG: Privatrechtsschutz – Rechtsschutz für Private, Allgemeine Versicherungsbedingungen (AVB) – Paket (AVBPP24), Ausgabe 2024 (PDF erstellt 28.05.2026), Ziff. 16.14, PDF-S. 9 · Open document (opens in a new window)

    «Rechtsstreitigkeiten als Opfer von Kreditkartenmissbrauch, Phishing, Hacking, Skimming»
  • Dextra

    Private legal protection Private L (package L, area of law «internet law»)

    covered : only lawyer and proceedings, not the lost money up to CHF 300'000

    Condition and source

    Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Area of law internet law: claim for damages and criminal complaint in the event of credit card misuse (skimming) and phishing/hacking. Whether a dispute with the bank/card issuer about reimbursement falls under contract law (section 21) is not expressly regulated. Limit = Private L CHF 300'000 (XL CHF 1.3 million). Waiting period 60 days (XL 30 days).

    Deductible: none

    Dextra Rechtsschutz AG: AVB Allgemeine Versicherungsbedingungen Pakete für Privatpersonen – Privat- und Verkehrsrechtsschutz, Ausgabe Mai 2022, Art. D1 Ziff. 6 «Internetrecht», PDF-S. 5 · Open document (opens in a new window)

    «Geltendmachung von Schadenersatzansprüchen sowie Unterstützung bei der Einreichung einer Strafanzeige bei Kreditkarten- (Skimming) oder Identitätsmissbrauch (Phishing, Hacking).»
  • Orion

    Private legal protection Standard (including internet and bullying legal protection)

    limited : only lawyer and proceedings, not the lost money up to CHF 5'000

    Condition and source

    Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Victim of phishing/hacking and credit card misuse (only if committed via the internet). Low sum insured CHF 5'000 (Premium CHF 20'000), waiting period 1 month. If legal assistance is unsuccessful after 60 days, Orion may compensate the proven loss up to CHF 1'000 (Premium CHF 3'000), once per year, subsidiary to household contents insurance. Dispute with the bank not expressly mentioned.

    Orion Rechtsschutz-Versicherungsgesellschaft AG: Privat- und Verkehrs-Rechtsschutzversicherung – Kundeninformation nach VVG und Allgemeine Versicherungsbedingungen (AVB), Ausgabe 01/2022 (Druck 4281-07/2022), Art. B1 Abs. 10 «Internet-Rechtsschutz», PDF-S. 10 · Open document (opens in a new window)

    «Rechtsschutz als Opfer im Zusammenhang mit: 1. Phishing / Hacking; 2. Kreditkartenmissbrauch.»
  • Protekta

    Private legal protection, Comfort package (with «personality rights and internet legal protection»)

    limited : only lawyer and proceedings, not the lost money up to CHF 20'000

    Condition and source

    Only legal costs (lawyer, court, expert opinions), not the lost amount itself. Covered is the assertion of damages claims in the event of misuse of a credit/debit card and card data (against the perpetrator). Contractual disputes arising from the use of the credit/debit card (e.g. with the card issuer) are exempted from the finance exclusion (Art. E1 let. g). A dispute with the bank/payment service about e-banking or Twint, on the other hand, falls under the exclusion «banking, financial and payment services». Only Comfort package; limit = sum insured according to the brochure CHF 20'000, waiting period 3 months.

    Deductible: none

    Protekta Rechtsschutz-Versicherung AG (Mobiliar-Gruppe): Rechtsschutzversicherung für Privatpersonen – Kundeninformationen und Allgemeine Bedingungen (Privat-, Verkehrs-, Immobilien-Rechtsschutz), Ausgabe 08.2023, Art. B3 Ziff. 5 lit. c, PDF-S. 8 · Open document (opens in a new window)

    «Geltendmachung von Schadenersatzansprüchen aus der missbräuchlichen Verwendung Ihrer Kredit- oder Debitkarte und deren Daten.»

Bundle (via a telecom provider or association) (3)

  • Swisscom

    Easy Cyber Insurance

    limited : only lawyer and proceedings, not the lost money up to CHF 20'000

    Condition and source

    Only legal protection (AXA-ARAG) up to CHF 20'000, also in disputes with Swiss credit card companies after card misuse; no compensation of the lost money. Not: voluntarily made payments (romance scam, grandparent scam), crypto.

    Deductible: none

    Swisscom (Schweiz) AG / AXA-ARAG Rechtsschutz AG: Bestimmungen Easy Cyber Insurance (Kollektivversicherung, Versicherer AXA-ARAG), Ausgabe 09.2025, B.1.1, PDF-S. 1 · Open document (opens in a new window)

    «Streitigkeiten aus Verträgen mit schweizerischen Kreditkartenunternehmen»
  • TCS

    TCS Cyber-Schutzbrief (legal protection Assista + compensation TAS + technology bolttech)

    limited up to CHF 5'000

    Condition and source

    In the event of misuse of bank, postal account or card data on the internet, TAS pays the proven financial loss up to CHF 5'000 (subsidiary: only to the extent that the bank, an insurer or third parties are not obliged to pay). For irregularities with card issuers, PayPal, Twint, Apple Pay also up to CHF 5'000, deductible CHF 150. Important: for these cases there is only legal advice by telephone, no lawyer for a dispute with the bank (section 13.2). Misuse after theft/loss of the physical card not covered. Limit = compensation.

    Deductible: CHF 150

    Touring Club Schweiz (TCS); Rechtsschutz: Assista Rechtsschutz AG; Entschädigung: TAS Versicherungen AG; Technik: bolttech Switzerland AG: TCS Cyber-Schutzbrief – Allgemeine Geschäftsbedingungen (inkl. Geschäftsbedingungen von bolttech), Produktversion 2025, Ausgabe 01.2025, Ziff. 12 lit. c (PDF-S. 6) und Ziff. 13.3 lit. a (PDF-S. 7) · Open document (opens in a new window)

    «Unrechtmässige Aneignung der Bank-, Postkonto- oder Zahlungskartendaten (Debit- und Kreditkarten) des Begünstigten durch Dritte und deren anschliessende missbräuchliche Verwendung im Internet.»
  • TCS

    TCS Internet-Schutzbrief (product version 2017)

    limited up to CHF 300'000

    Condition and source

    Legal costs for credit card misuse via the internet and skimming (no waiting period) as well as disputes with credit card institutions and payment services (PayPal, Twint, Apple Pay) for online payments (waiting period 3 months). If legal assistance is unsuccessful after 2 months, compensation of the financial loss up to CHF 5'000 (card/skimming) or CHF 1'000 (payment processing). External lawyer’s fees only from an amount in dispute of CHF 2'000. Card misuse after theft not covered.

    Assista Rechtsschutz AG (Tochter des TCS): TCS Internet-Schutzbrief – Allgemeine Versicherungsbedingungen, Produktversion 2017, Ausgabe 09.2023, Ziff. 10 lit. i, PDF-S. 7 · Open document (opens in a new window)

    «Zivilrechtliche Streitigkeiten des Versicherten bei Unregelmässigkeiten bei der Zahlungsabwicklung mit (abschliessende Aufzählung): Kreditkarteninstituten bei Online-Zahlungen; Betreibern von Mobile- und Online-Bezahlsystemen (Paypal, Twint, Apple Pay etc.).»
No information from 5 providers
  • Cembra, Cembra ShoppingProtect: Not regulated in the conditions.
  • Simpego, Household insurance Home (monetary assets: credit, debit and customer cards): TWINT is not regulated.
  • Swisscard, Shopping-Versicherung (Classic, Premium, Exclusive) with the module «Safe online»: Not regulated in the conditions.
  • Zurich, Cyber – Safe Surf: Not regulated in the conditions.
  • Zurich, Cyber – Prevention (Zurich Cyber Security App, partner BOXX Insurance): Service without insurance cover; not mentioned on the product page.

Overview based on public policy terms, as of 06.11.2026. Only your policy and its general terms and conditions (GTC) are binding. No confirmation of cover.

Where it gets stuck

  • Payment approved by the customer (PIN, 3-D Secure, SMS code, app approval): banks and card issuers do not reimburse, even if the approval was obtained by deception.

    Where does it say so?

    Allgemeine Geschäftsbedingungen für Kreditkarten der Swisscard AECS GmbH im Bereich Privatkunden, 01/2021, Ziff. 11.4 Bst. a (vgl. 3-D-Secure-Bedingungen Ziff. 1.4)

    «wenn die fragliche Transaktion … mit mindestens einem zusätzlichen Legitimationsmittel (z. B. PIN-Code, mTAN, 3-D Secure, Swisscard Digital Services) durchgeführt wurde.»

    Open document: Allgemeine Geschäftsbedingungen für Kreditkarten der Swisscard AECS GmbH im Bereich Privatkunden (opens in a new window), retrieved 06.11.2026

  • In Switzerland there is as a rule no legal obligation for the bank to compensate fraud victims; goodwill gestures are becoming rarer.

    Where does it say so?

    Jahresbericht 2024, 2024 (publiziert Mai 2025), S. 8, «2024 in Kürze»

    «Eine rechtliche Verpflichtung der Finanzinstitute, die Kunden in solchen Fällen zu entschädigen, ist aufgrund der heutigen Rechtslage in der Schweiz regelmässig nicht gegeben.»

    Open document: Jahresbericht 2024 (opens in a new window), retrieved 06.11.2026

  • Duties of care breached (PIN written down, codes passed on, device without lock/updates/antivirus): card issuers only pay if all obligations were complied with.

    Where does it say so?

    Jahresbericht 2020, 2020 (publiziert Juni 2021), S. 14, «2020 in Kürze»

    «Zusätzlich werden diese Sorgfaltspflichten zulasten der Kunden zunehmend strenger interpretiert.»

    Open document: Jahresbericht 2020 (opens in a new window), retrieved 06.11.2026

  • Insurance pays on a secondary basis: usually only after written refusal by the bank or card issuer.

    Where does it say so?

    Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz, Ausgabe 06.2026, II C Banking-Schutz, Ziff. 1 (ebenso Swisscard Cyber Security C 3.4, Viseca Online-Kontoschutz Ziff. 5, Cembra CyberProtect Ziff. 1.3)

    «die nicht durch die Erstattung ihrer Verluste durch das Finanzinstitut/den Bankkartenherausgeber auf subsidiärer Basis gedeckt sind.»

    Open document: Cyber-Versicherung für die Visa, Mastercard und Diners Club Karten der Cornèr Bank AG – Versicherungsbedingungen – Allianz (opens in a new window), retrieved 06.11.2026