EU Court: Banks must reimburse phishing victims even in gross negligence cases

The CJEU ruled that banks must immediately reimburse unauthorized payments from phishing, even when victims acted with gross negligence. Belgian Consumer Protection Minister Beenders claims this proves banks have violated the law for a decade. The ruling sets a binding precedent across EU member states, potentially increasing bank liability and compliance costs.