Will Commerzbank Refund Scammed Money?

Commerzbank can refund money lost to fraud, but the refund depends on the transaction type and whether the client authorised the payment. For unauthorised card transactions, the bank accepts claims and can initiate chargeback. For SEPA direct debits, a reversal is available within 8 weeks or up to 13 months for unauthorised mandates. For bank transfers, Commerzbank explicitly states that the payment cannot be cancelled after crediting – recovery is limited to a recall with no guarantee. Immediate contact with the bank’s 24/7 hotline, card blocking, and submission of a Reklamation are the critical first steps.

When Commerzbank Is Obligated to Refund

The determining factor is whether the transaction was authorised by the client. Under PSD2 and German payment law, Commerzbank is obligated to refund unauthorised payment transactions unless it can demonstrate gross negligence or fraud on the part of the client. For card transactions, the bank provides a formal Reklamation procedure through online banking. For SEPA direct debits, statutory reversal rights apply. For bank transfers confirmed through TAN or photoTAN, the transaction is treated as authorised and the bank’s refund obligation is significantly weaker. Commerzbank assesses each case individually based on the evidence provided and the applicable regulations.

Unauthorised Card Transactions – Reklamation and Chargeback

Where a card transaction was executed without the client’s consent – including card theft, data compromise, or fraudulent use – Commerzbank allows the client to submit a claim (Reklamation) through online banking. The bank reviews the case and can initiate a chargeback through the payment scheme. Under PSD2, the payment service provider must refund the full amount of an unauthorised transaction unless it proves gross negligence on the part of the client. A victim of card theft or data compromise who could not have prevented the unauthorised use through reasonable care is not considered to have acted with gross negligence. The burden of proving gross negligence lies with the bank.

SEPA Direct Debits – Strongest Reversal Mechanism

For SEPA direct debit transactions, Commerzbank provides one of the strongest recovery mechanisms available in the EU. The client can reverse a direct debit within 8 weeks of the debit without providing any reason. For unauthorised direct debit mandates – where the client did not authorise the debit at all – the reversal window extends to 13 months under PSD2. These timeframes are established under the SEPA Direct Debit scheme rules and German payment law. The reversal is processed through Commerzbank without requiring a dispute procedure or court proceedings.

Bank Transfers – Final and Irrevocable

Commerzbank explicitly states that a bank transfer cannot be cancelled once the funds have been credited to the recipient’s account. Where the client sent money to a fraudster – even under the influence of deception – the transfer is treated as completed and irrevocable. Recovery is possible only through a recall request submitted to the recipient bank. The recipient bank is not obligated to freeze or return the funds without a court order or law enforcement directive. If the funds have already been withdrawn, recovery through the recall mechanism alone is unlikely. This is the most restrictive category for recovery through Commerzbank’s internal procedures.

Authorised Transfers Confirmed Through TAN/photoTAN

Where the client confirmed the transfer through PIN, TAN, or photoTAN – even if they were deceived through phishing, vishing, or social engineering – the transaction is classified as authorised. Confirmation through TAN or photoTAN constitutes strong evidence of authorisation under PSD2 and German payment law. Commerzbank is generally not obligated to refund authorised transfers. Where the client disclosed authentication data to third parties, the bank may classify this as gross negligence, further weakening the refund position. Recovery in such cases depends on whether the bank’s own fraud controls and monitoring systems were adequate.

When Commerzbank Refuses a Refund

Commerzbank may refuse a refund in several situations. First – the client confirmed the transfer through TAN or photoTAN, and the transaction is classified as authorised. Second – the client disclosed authentication data, PIN, or login credentials to third parties, which the bank classifies as gross negligence. Third – the transaction is a bank transfer that has been credited to the recipient, and Commerzbank states it cannot be cancelled. Fourth – the fraud was reported too late, reducing the bank’s ability to intervene. A refusal is not final – the client is entitled to escalate through the bank’s complaints procedure and subsequently to the relevant ombudsman or through civil litigation.

Immediate Steps After Discovering Fraud

Step 1 – Block Cards and Banking Access Immediately

The first action is to block all compromised cards and online banking access. Commerzbank’s 24/7 hotline for online banking and fraud incidents: +49 69 5050 2786. Card blocking is also available through online banking and at branches. Immediate blocking prevents further unauthorised transactions and is the first action the bank instructs clients to take.

Step 2 – Submit a Reklamation

Commerzbank provides the Reklamation (claims) procedure through online banking for disputed transactions. The client selects the fraudulent transaction and submits the claim with supporting evidence. For card fraud, the bank reviews the case and may initiate a chargeback through the payment scheme. For SEPA direct debits, the reversal is submitted through online banking within the applicable timeframe (8 weeks or 13 months).

Step 3 – File a Police Report

In parallel with notifying Commerzbank, a criminal complaint should be filed with the German police (Polizei) or the state cybercrime unit (Landeskriminalamt). Commerzbank often requires a police report as part of the claims process. The police report is an essential evidentiary document for both the bank’s investigation and any subsequent legal proceedings.

Step 4 – Preserve All Evidence

All phishing emails, fraudulent SMS messages, call logs, screenshots, transaction confirmations, recipient details, and any other supporting materials must be preserved without alteration. Commerzbank requires evidence to support the Reklamation. Digital evidence forms the foundation for the bank’s review, the chargeback procedure, and any subsequent regulatory or judicial proceedings.

Step 5 – Submit a Formal Complaint if Commerzbank Refuses

Where Commerzbank refuses the refund, the client should submit a formal complaint through the bank’s official complaints procedure. Postal address: Commerzbank AG, 60281 Frankfurt. If the complaint is not resolved satisfactorily, the dispute can be escalated to the relevant ombudsman or financial regulator.

Alternative Recovery Mechanisms

Ombudsman of the Bundesverband deutscher Banken

Where Commerzbank’s internal complaint does not resolve the dispute, the client can refer the case to the ombudsman scheme operated by the Bundesverband deutscher Banken (Association of German Banks). The ombudsman provides an independent review of the dispute. The procedure is free of charge for the client and accessible to both German and international clients.

Complaint to BaFin

Commerzbank AG is supervised by the Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin) and the European Central Bank (ECB). A complaint to BaFin does not return funds directly but initiates a supervisory review and creates regulatory pressure on the bank. Where systemic failures in fraud prevention or PSD2 compliance are identified, the regulator may require the bank to reconsider its position. BaFin complaints can be submitted online through the BaFin website.

Civil Litigation

Civil proceedings against Commerzbank are available under German and EU law where a breach of PSD2 obligations is proven, Strong Customer Authentication was not applied, suspicious transaction patterns were ignored, or fraud notifications received an inadequate response. Civil proceedings against the fraudster are available in parallel where the fraudster is identified and their assets are located. The European Account Preservation Order (EAPO) enables the freezing of the fraudster’s assets across all EU member states simultaneously.

Criminal Proceedings

A criminal complaint filed with the German police or Landeskriminalamt initiates an investigation in which law enforcement authorities gain access to bank records, IP logs, payment system data, and telecommunications operator records. Criminal investigation is the primary tool for identifying anonymous fraudsters and tracing the movement of stolen funds across jurisdictions.

Commerzbank Contact Details for Fraud Enquiries

Commerzbank operates a full-service banking infrastructure with branches, phone support, online banking, and mobile app across Germany and internationally. Head office: Commerzbank AG, Kaiserstraße 16, 60311 Frankfurt am Main, Germany. 24/7 hotline (online banking / fraud): +49 69 5050 2786. Reklamation / dispute: through online banking. Branches: available for in-person support. Complaints postal address: Commerzbank AG, 60281 Frankfurt. Escalation: Ombudsman Bundesverband deutscher Banken. Regulator: BaFin and ECB.