- PKO Bank Polski does not automatically refund money in every fraud case – the determining factor is whether the transaction was unauthorised, with the bank obligated under PSD2 to investigate and refund where the client did not consent to the operation.
- In a case involving PKO Bank Polski, it was noted that the bank cannot refuse a refund for an unauthorised transaction without proper grounds – the refund obligation arises where the client is not at fault, strengthening the position of fraud victims in Poland and the EU.
- Poland’s widespread use of BLIK instant payments creates a specific fraud risk – BLIK transactions are executed immediately and are virtually irreversible, leading to a growing number of scam cases involving social engineering, phone fraud, and fake marketplace payments.
- For transfers confirmed by the client through BLIK, SMS code, or app approval, the transaction is classified as authorised and the bank is not obligated to refund – recovery is limited to a recall attempt with no guaranteed result.
- PKO Bank Polski explicitly warns about fraudulent calls from “bank employees” and phishing links – where the client disclosed authentication codes or confirmed transfers under social engineering pressure, the bank’s position on refund becomes significantly stricter.
When PKO Bank Polski Is Obligated to Refund
The determining factor is whether the transaction was authorised by the client. Under PSD2 and Polish payment law, PKO Bank Polski is obligated to investigate unauthorised payment transactions and refund the amount where the client did not consent to the operation and was not at fault. The bank applies the standard European framework – unauthorised transactions trigger the refund obligation, while authorised payments confirmed through BLIK, SMS codes, or app approval are treated as the client’s responsibility. PKO also distinguishes between card fraud, online banking compromise, and voluntarily confirmed transfers, each carrying different recovery prospects.Unauthorised Transactions
Where a transaction was executed without the client’s consent – including online banking compromise, card theft, or operations the client did not confirm – the client’s position is strongest. Under PSD2, the payment service provider must refund the full amount of an unauthorised transaction unless it can demonstrate gross negligence or fraud on the part of the client. In a case involving PKO Bank Polski, it was noted that the bank cannot refuse a refund for an unauthorised transaction without proper grounds, and the refund obligation arises where the client is not at fault. This reinforces the position of fraud victims and limits the bank’s ability to deny claims without substantiated evidence of client negligence. The burden of proving gross negligence lies with the bank.BLIK Payments – Poland-Specific Risk
BLIK is Poland’s dominant instant payment system, widely used for online purchases, peer-to-peer transfers, and ATM withdrawals. BLIK transactions are executed immediately and are virtually irreversible. This creates a specific fraud risk – fraudsters exploit social engineering, phone fraud, and fake marketplace listings to trick clients into confirming BLIK payments. Once the client enters the BLIK code and confirms the transaction through the app, the payment is classified as authorised. PKO Bank Polski is not obligated to refund authorised BLIK payments. The bank may attempt a recall, but the instant nature of BLIK means that funds typically leave the recipient’s account before intervention is possible.Authorised Transfers Under the Influence of Fraudsters
Where the client confirmed the transfer themselves – through BLIK, SMS code, or app approval – even if they were deceived through social engineering, phone fraud, or phishing, the transaction is classified as authorised. PKO Bank Polski is not obligated to return the funds automatically. The bank may initiate a recall attempt and contact the recipient bank, but there is no guarantee of success. PKO explicitly warns about fraudulent calls from “bank employees” and phishing links – where the client disclosed codes or confirmed transfers under pressure, the bank’s refund position is weaker for the client.Card Fraud
For card fraud – unauthorised card transactions including stolen card data and compromised credentials – the probability of recovery is highest. PKO Bank Polski provides card blocking through online banking, the mobile app, and the contact centre. After blocking, the bank investigates the disputed transaction. The chargeback mechanism through Visa or Mastercard applies to fraudulent card transactions under payment scheme rules.When PKO Bank Polski Refuses a Refund
PKO Bank Polski may refuse a refund in several situations. First – the client entered credentials or payment data on a phishing site and the bank classifies the conduct as gross negligence. Second – the client confirmed the transfer through BLIK, SMS code, or app approval, and the transaction is classified as authorised. Third – the client disclosed authentication codes to third parties. Fourth – the fraud was reported too late, reducing the bank’s ability to intervene. PKO’s published warnings about social engineering and phishing schemes indicate that where clients disregarded clear fraud indicators, the bank may take a stricter position. A refusal is not final – the client is entitled to escalate through the bank’s complaints procedure (reklamacja) and subsequently through regulatory and judicial mechanisms.Immediate Steps After Discovering Fraud
Step 1 – Contact PKO Bank Polski Immediately
PKO’s contact centre: 800 302 302 (Poland) or +48 81 535 60 60 (from abroad). The client should also use online banking or the mobile app to block cards and account access. Immediate notification is critical – particularly for BLIK payments, where the instant execution window means every minute counts.Step 2 – Block Cards and Banking Access
All compromised cards and online banking access must be blocked immediately through the mobile app, online banking, or by calling the contact centre. This prevents further unauthorised transactions and is the first action the bank instructs clients to take upon discovering fraud.Step 3 – Submit a Reklamacja (Complaint)
PKO Bank Polski accepts claims through its formal complaints procedure (reklamacja). The client submits the fraud report with supporting evidence through online banking, the mobile app, the contact form, or by email at informacje@pkobp.pl. The reklamacja initiates the bank’s internal investigation and is the formal basis for any subsequent escalation.Step 4 – File a Police Report
In parallel with notifying PKO, a criminal complaint should be filed with the Polish police (Policja) or through the online reporting platform. The police report is an essential evidentiary document for both the bank’s investigation and any subsequent legal proceedings. For cybercrime, reports can be directed to the relevant cybercrime unit (Wydział do Walki z Cyberprzestępczością).Step 5 – Preserve All Evidence
All correspondence with the fraudster, phishing emails, SMS messages, screenshots, BLIK transaction confirmations, recipient details, and any other supporting materials must be preserved without alteration. Digital evidence forms the foundation for PKO’s internal review and any subsequent regulatory or judicial proceedings.Alternative Recovery Mechanisms
Financial Ombudsman (Rzecznik Finansowy)
Where PKO’s internal complaint does not resolve the dispute, the client can refer the case to the Rzecznik Finansowy (Financial Ombudsman) in Poland. The Rzecznik Finansowy provides an independent review of disputes between clients and financial institutions. The ombudsman can intervene on behalf of the client and issue opinions that carry weight in subsequent court proceedings.Complaint to the KNF
PKO Bank Polski S.A. is supervised by the Komisja Nadzoru Finansowego (KNF – Polish Financial Supervision Authority). A complaint to the KNF does not return funds directly but initiates a supervisory review and creates regulatory pressure on the bank. Where systemic failures in fraud prevention or PSD2 compliance are identified, the regulator may require the bank to reconsider its position.Civil Litigation
Civil proceedings against PKO Bank Polski are available under Polish and EU law where a breach of PSD2 obligations is proven, Strong Customer Authentication was not applied, suspicious transaction patterns were ignored, or fraud notifications received an inadequate response. EU case law is progressively strengthening client protections, limiting banks’ ability to refuse refunds for unauthorised transactions without proper grounds. Civil proceedings against the fraudster are available in parallel where the fraudster is identified. The European Account Preservation Order (EAPO) enables the freezing of the fraudster’s assets across all EU member states simultaneously.Criminal Proceedings
A criminal complaint filed with the Polish police or the cybercrime unit (Wydział do Walki z Cyberprzestępczością) initiates an investigation in which law enforcement authorities gain access to bank records, IP logs, payment system data, and telecommunications operator records. Criminal investigation is the primary tool for identifying anonymous fraudsters and tracing the movement of stolen funds across jurisdictions.PKO Bank Polski Contact Details for Fraud Enquiries
PKO Bank Polski operates a full-service banking infrastructure with branches, phone support, online banking, and mobile app across Poland. Head office: PKO Bank Polski S.A., ul. Puławska 15, 02-515 Warsaw, Poland. Contact centre: 800 302 302 (Poland) / +48 81 535 60 60 (from abroad). Email: informacje@pkobp.pl. Online channels: internet banking, mobile app, contact form. Complaints (reklamacja): through online banking, mobile app, email, or contact form. Escalation: Rzecznik Finansowy (Financial Ombudsman). Regulator: KNF (Komisja Nadzoru Finansowego).Frequently Asked Questions
Summary
Will PKO Bank Polski Refund Scammed Money?
PKO Bank Polski can refund money lost to fraud, but the obligation depends on the transaction category. Unauthorised transactions carry the strongest protections under PSD2 and Polish law – the bank cannot refuse without proper grounds. Card fraud has the highest probability of recovery through blocking and chargeback. BLIK and instant transfers confirmed by the client are virtually irreversible and carry no automatic refund right – Poland’s widespread use of BLIK creates a specific and growing fraud risk. Authorised transfers under social engineering pressure depend on the bank’s fraud controls and the specific circumstances.
Speed determines outcomes. PKO’s contact centre must be reached immediately – particularly for BLIK payments where every minute counts. Cards and banking access must be blocked without delay. A reklamacja must be submitted with supporting evidence. A police report should be filed in parallel. Every hour of delay between fraud discovery and bank notification reduces the probability of recovery.
If you have lost funds through fraudulent transactions involving PKO Bank Polski, contact Veritas Advisory Group to have your legal position assessed.
Veritas Advisory Group provides professional legal and advisory services to victims of investment and trade fraud in Europe. This article is for informational purposes only and does not constitute legal advice.
