Court of Appeal of Versailles, Civil Chamber 1-6, 29 January 2026, No. 24/07307
🔑 Key Takeaways
- Where a fraudster impersonates the official number of the bank through spoofing, the victim cannot be blamed for failing to detect the fraud.
- The notions of “structured deception” and “characterised psychological manipulation” adopted by the Court rule out a finding of gross negligence.
- The Court of Appeal overturns the first-instance judgment, which had found gross negligence.
- Caisse d’Épargne is ordered to reimburse €10,000 plus interest at the statutory rate, plus €2,000 for non-material loss.
- Non-material loss, distinct from the financial loss, is compensated here, which is still relatively rare in this type of litigation.
Table of Contents ▼
- What happened? The mechanics of bank spoofing
- What had the court of first instance decided, and why was it wrong?
- What did the Court of Appeal of Versailles decide?
- Why was non-material loss compensated?
- What is the scope of this judgment for spoofing victims?
- Conclusion
- FAQ: Frequently Asked Questions
What happened? The mechanics of bank spoofing
How does spoofing impersonate the bank’s official number?
Telephone spoofing is a technique allowing a caller to alter the caller identification so that any number appears in place of their own. This manipulation exploits weaknesses in telephone protocols (SS7, VoIP) and allows fraudsters to display the official number of any bank. The victim sees the bank’s real number appear, which gives them legitimate confidence in the call.
The particular feature of spoofing is that it makes checking the displayed number completely pointless. If the customer called the displayed number back, they would indeed reach Caisse d’Épargne. The fraudster is untraceable, and the victim has no technical means of distinguishing the fraudulent call from a genuine call from their bank.
What was the exact fraud scenario?
The victim receives a call. The official number of Caisse d’Épargne Île-de-France appears on the screen. The voice is professional: an adviser from the fraud department warns that an attempted suspicious transaction has been detected. To cancel it, the victim is asked to carry out a “counter-order”, a transfer of €9,500 presented as the securing procedure. A card payment of €500 completes the transactions.
📞 Diagram of “fake adviser” bank spoofing
↓
🎭 Impersonated identity: “your bank’s fraud department”
↓
⚠️ Urgency: “a fraudulent transfer is under way, act now”
↓
🔄 Manipulation: “make this counter-order transfer to secure your account”
↓
💸 Result: transfer of €9,500 + card payment of €500 = €10,000
↓
✅ CA Versailles (29/01/2026): bank ordered to pay €10,000 + €2,000 non-material loss
What had the court of first instance decided, and why was it wrong?
The court of first instance had found gross negligence on the part of the victim. Its reasoning rested on the idea that a normally prudent customer should not have obeyed a stranger on the phone to make a transfer. This reasoning suffers from an error of analysis: it assesses the customer’s prudence setting aside the deception, asking what a “reasonable” customer would have done as if the fraud had not taken place.
The question is not “was the customer careless in trusting someone?” The question is “was the customer careless in trusting someone who was calling with the official number of their own bank, in a context of professional discourse and constructed urgency?”
What did the Court of Appeal of Versailles decide?
The Court of Appeal overturns the first-instance judgment and orders Caisse d’Épargne Île-de-France to pay. The judgment expressly describes the facts as “structured deception” and “characterised psychological manipulation”.
What does “structured deception” mean in law?
The notion of “structured deception” refers to a fraudulent manoeuvre which, by its degree of organisation and sophistication, creates an appearance of legitimacy that even a normally vigilant customer cannot reasonably see through. It is distinct from mere gullibility in the face of a crude argument.
Here, the deception was structured because it combined a technical vector (the impersonation of the bank’s official number), a psychological vector (the urgent discourse, the staging of the “fraud department”) and a coherent narrative scenario (the existence of an alleged fraudulent transfer justifying the “counter-order”).
Where is the limit of gross negligence in the presence of spoofing?
⚖️ Gross negligence: present or absent? Assessment criteria
✅ Official number of the bank displayed (spoofing)
✅ Professional and coherent discourse
✅ Urgency preventing reflection
✅ Plausible narrative scenario (counter-order, securing the account)
Factors that may establish gross negligence:
⚠️ Obvious signs of fraud ignored
⚠️ Spontaneous disclosure of PIN codes or passwords
⚠️ Repeated transfers despite explicit warnings from the bank
Why was non-material loss compensated?
Beyond the reimbursement of the €10,000, the Court awards €2,000 in damages for non-material loss. This loss corresponds to the psychological suffering endured by the victim following the fraud and the bank’s refusal to reimburse. That refusal, which forces the victim to bring lengthy and costly proceedings, may aggravate the non-material loss and justify additional compensation.
The award of this sum sends a signal to banks: an abusive refusal to reimburse may generate an additional cost in the form of damages for non-material loss.
What is the scope of this judgment for spoofing victims?
This judgment invalidates the argument most frequently put forward by banks in this type of situation: “you initiated the transfer yourself, you are responsible”. It recalls that gross negligence cannot be deduced from the mere fact of having obeyed someone who was calling with the bank’s official number.
Under the Regulatory Technical Standards (RTS) of the European Banking Authority, banks have obligations to monitor and detect transactional anomalies. An unusual transfer should trigger an alert. This failure to monitor may constitute an additional lever for establishing liability.
Conclusion
The Court of Appeal of Versailles delivered a courageous judgment on 29 January 2026: its wording (“structured deception” and “characterised psychological manipulation”) provides a valuable framework of analysis for similar cases. For spoofing victims who have their own behaviour held against them by their bank, this judgment is an essential tool.
The law firm LE BOT Avocat supports victims of bank spoofing at every stage of their claim. If your bank refuses to reimburse a transfer that you made under the influence of a fake adviser, contact us.
