- N26 does not guarantee a refund in every fraud case – the outcome depends on whether the transaction was unauthorised or voluntarily confirmed by the client through PIN, 2FA, or 3D Secure authentication.
- For unauthorised transactions, PSD2 requires N26 to provisionally refund the amount within one business day – the final decision follows after the bank’s investigation.
- N26 initiates chargebacks through Mastercard for fraudulent card transactions – disputes must be submitted through the app within 90 days, while standard EU chargeback rules allow up to 120 days depending on the case.
- For bank transfers (SEPA), recovery is limited to a recall request with no guaranteed result – once funds leave the recipient’s account, recovery through the bank alone is unlikely.
- Recovery probability ranges from high for account takeover and card theft, to medium for online fraud, to low for voluntary transfers to a fraudster – speed of notification and quality of evidence are the determining factors.
When N26 Is Obligated to Refund
The determining factor is whether the transaction was authorised by the client. N26 applies the same PSD2 framework as all EU-licensed banks, distinguishing between unauthorised transactions and payments the client confirmed themselves. For card payments, the Mastercard chargeback mechanism provides an additional recovery channel. For SEPA transfers, the options are significantly more limited. N26 also assesses whether the client acted with gross negligence – disclosing credentials, responding to phishing, or failing to secure the account. This assessment determines whether the bank’s refund obligation applies or whether liability shifts to the client.Unauthorised Transactions – PSD2 Provisional Refund
Under PSD2 (Directive (EU) 2015/2366), where a payment transaction was not authorised by the account holder, the payment service provider must refund the transaction amount. The provisional refund is typically issued within one business day. The final decision follows after the bank’s investigation. N26 may refuse a refund only where it can demonstrate gross negligence or fraud on the part of the client. A victim of account takeover or card theft who could not have prevented the unauthorised access through reasonable care is not considered to have acted with gross negligence. The burden of proving gross negligence lies with the bank.Authorised Payments Made Under the Influence of Fraudsters
Where the client confirmed the transaction themselves – through PIN, 2FA, or 3D Secure authentication – even if they were deceived, N26 is generally not obligated to issue an automatic refund. The payment is classified as authorised regardless of the deception. Recovery in such cases depends on whether N26 breached its security obligations, failed to apply adequate transaction monitoring, or ignored suspicious patterns. Voluntary transfers to a fraudster carry the lowest probability of recovery through the bank’s internal procedures and typically require escalation through regulatory or judicial mechanisms.Card Payments – Chargeback Through Mastercard
For card transactions, N26 initiates a chargeback through the Mastercard payment scheme. The dispute is submitted through the app – the client selects the transaction and chooses “There’s something wrong.” A new card is automatically issued upon submitting the dispute. Chargeback is available for unauthorised transactions, non-delivery of goods or services, duplicate debits, and incorrect amounts. The dispute must be submitted within 90 days through the app. Standard EU chargeback rules allow up to 120 days depending on the case category. A successful outcome is not guaranteed – each case is assessed on its specific facts by the payment scheme.Bank Transfers – SEPA Recall
For SEPA bank transfers, recovery options are significantly more limited than for card payments. A SEPA transfer is irrevocable once executed. N26 can submit a recall request to the recipient bank, but the recipient bank is not obligated to freeze or return the funds without a court order or law enforcement directive. If the funds have already been withdrawn from the recipient’s account, recovery through the bank recall mechanism alone is unlikely. Speed of notification is critical – the window for a successful SEPA recall is measured in hours.When N26 Refuses a Refund
N26 refuses refunds in several typical situations. First – the transaction was confirmed by the client through PIN, 2FA, or 3D Secure authentication, and the bank classifies it as authorised. Second – the bank determines that the client acted with gross negligence, including responding to phishing, disclosing credentials, or failing to secure the account. Third – the dispute was submitted too late, outside the applicable timeframe. Fourth – the transaction is a SEPA bank transfer rather than a card payment, and the recall request was unsuccessful. A refusal by N26 is not final – the client is entitled to escalate through the bank’s complaints procedure and subsequently to the relevant regulatory authority or through civil litigation.Immediate Steps After Discovering Fraud
Step 1 – Block the Card and Submit a Dispute Immediately
The first action is to block the compromised card through the N26 app. The dispute is submitted by selecting the fraudulent transaction and choosing “There’s something wrong.” A new card is automatically ordered upon submitting the dispute. For account takeover cases where app access is compromised, the client should contact N26 support immediately through alternative channels.Step 2 – Preserve All Evidence
All correspondence with the fraudster, payment confirmations, screenshots of fraudulent websites or communications, transaction reference numbers, and any other supporting materials must be preserved without alteration. N26 may request evidence during the dispute process. Digital evidence forms the foundation for the bank’s internal review, the Mastercard chargeback procedure, and any subsequent regulatory or judicial proceedings.Step 3 – File a Police Report
In parallel with notifying N26, a criminal complaint should be filed with the relevant national police authority. In Germany, reports can be filed with the local police (Polizei) or the state cybercrime unit (Landeskriminalamt). The police report is an important evidentiary document in dispute proceedings. A criminal investigation unlocks access to bank records, IP logs, and payment system data that are critical for identifying the fraudster and tracing stolen funds.Step 4 – Submit a Formal Complaint and Escalate
Where N26 refuses the refund, the client should submit a formal complaint through the bank’s support channels. If the complaint is not resolved satisfactorily, the dispute can be escalated to the relevant financial regulator. N26 Bank SE is licensed in Germany and supervised by the Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin) and the European Central Bank (ECB).Alternative Recovery Mechanisms
Complaint to BaFin
N26 Bank SE is a German-licensed bank regulated by BaFin and the ECB. A complaint to BaFin does not return funds directly but initiates a supervisory review and creates regulatory pressure on the bank. Where systemic failures in fraud prevention or PSD2 compliance are identified, the regulator may require the bank to reconsider its position. BaFin complaints can be submitted online through the BaFin website.Dispute Resolution and Ombudsman
In Germany, banking disputes can be referred to the ombudsman scheme operated by the Bundesverband deutscher Banken (Association of German Banks). The ombudsman provides an independent review of the dispute. The procedure is free of charge for the client. Alternatively, where N26 operates in other EU jurisdictions, the relevant national dispute resolution body applies.Civil Litigation
Civil proceedings against N26 are available under German and EU law where a breach of PSD2 obligations is proven, Strong Customer Authentication was not applied, suspicious transaction patterns were ignored, or fraud notifications received an inadequate response. Civil proceedings against the fraudster are available in parallel where the fraudster is identified and their assets are located. The European Account Preservation Order (EAPO) enables the freezing of the fraudster’s assets across all EU member states simultaneously.Criminal Proceedings
A criminal complaint filed with the German police or Landeskriminalamt initiates an investigation in which law enforcement authorities gain access to bank records, IP logs, payment system data, and telecommunications operator records. Criminal investigation is the primary tool for identifying anonymous fraudsters and tracing the movement of stolen funds across jurisdictions.N26 Contact Details for Fraud Enquiries
N26 is a digital bank with no traditional branch network. The primary communication channel is the app. Bank name: N26 Bank SE. Head office: Voltairestr. 8, 10179 Berlin, Germany. Main support channel: in-app chat (fastest method). Email: support@n26.com. Help Centre: https://support.n26.com. Fraud reporting: through the app – card block + dispute submission under “I’ve been victim of fraud.” Regulator: BaFin (Germany) and ECB. Escalation of complaints: Ombudsman of the Bundesverband deutscher Banken.Frequently Asked Questions
Yes. Under PSD2, N26 is required to refund the amount of an unauthorised transaction, with a provisional refund typically issued within one business day. The final decision follows after the bank's investigation. N26 may refuse only where it proves gross negligence or fraud on the part of the client. The burden of proof lies with the bank.
Where the client confirmed the transaction through PIN, 2FA, or 3D Secure, N26 is generally not obligated to issue an automatic refund. Recovery may be possible where N26 breached its security obligations or failed to apply adequate monitoring. For SEPA transfers, only a recall request is available with no guaranteed result. Regulatory complaints and civil litigation are available where bank failures are documented.
Disputes must be submitted through the app within 90 days. Standard EU chargeback rules allow up to 120 days depending on the case. The PSD2 provisional refund for unauthorised transactions is typically issued within one business day, with the final decision following after investigation. The Mastercard chargeback process timeline depends on the dispute category and complexity.
After receiving a refusal from N26, the client can escalate to BaFin or the ombudsman of the Bundesverband deutscher Banken. Civil proceedings against N26 under German and EU law can be initiated where PSD2 breaches or inadequate fraud controls are documented. Civil proceedings against the fraudster are available where the fraudster is identified.
Yes. Veritas Advisory Group manages disputes with N26, complaints to BaFin, ombudsman proceedings, EAPO applications, criminal complaint filing, and civil litigation in German and EU jurisdictions on behalf of clients based internationally. All procedures are initiated in Germany or the relevant EU jurisdiction - regardless of the client's location.
Will N26 Refund Scammed Money?
N26 can refund money lost to fraud, but the obligation and mechanism depend on the transaction category. Unauthorised transactions carry the strongest protections under PSD2, with provisional refunds typically within one business day. Card payments are recoverable through the Mastercard chargeback mechanism within 90 to 120 days. SEPA bank transfers are limited to recall requests with no guaranteed outcome. Authorised payments confirmed through PIN, 2FA, or 3D Secure carry the lowest probability of recovery through the bank’s internal procedures.
Speed determines outcomes. The card must be blocked immediately through the app. The dispute must be submitted without delay. SEPA recall requests are effective only before funds leave the recipient’s account. Every hour of delay between fraud discovery and bank notification reduces the probability of recovery.
If you have lost funds through fraudulent transactions involving N26, contact Veritas Advisory Group to have your legal position assessed.
Veritas Advisory Group provides professional legal and advisory services to victims of investment and trade fraud in Europe. This article is for informational purposes only and does not constitute legal advice.

