The recent report from the Bank of Greece (BoG) for the year 2025 brings to light a fascinating paradox defining the modern financial landscape: while the volume and value of digital transactions continue their upward trajectory, the growth rate of card fraud is showing a significant decline. This represents a victory for the defensive mechanisms of the banking system, yet it comes with a sobering warning: cybercriminals are not giving up; they are simply shifting their strategy from technical system breaches to the psychological manipulation of users.
The Statistics of Fortification
According to BoG data, the ratio of fraud incidents to total payment card transactions decreased further in 2025. This is largely attributed to the full maturation of Strong Customer Authentication (SCA) protocols, which have rendered "classic" card data theft methods less effective. Greek banks, following European directives, have invested billions in artificial intelligence systems that analyze user behavior in real-time, identifying anomalies before a suspicious fund transfer is even completed.
However, the report emphasizes that the "weak link" remains the human factor. Despite the reduction in technical breaches, losses from social engineering methods remain high. Scammers now utilize sophisticated AI tools to create convincing phishing, smishing, and vishing messages, tricking citizens into revealing their credentials or approving transactions they believe to be legitimate.
The Mutation of Fraud: From Skimming to Phishing
The Bank of Greece analysis shows that traditional methods, such as skimming (copying magnetic stripes at ATMs), have been almost eradicated. Conversely, 2025 is dominated by frauds related to "remote" interaction. Criminals now target classified ad platforms, fake investment websites, and purported updates from government agencies or banks.
- Investment Fraud: Promises of high returns via cryptocurrencies or stocks, where the user is guided to "invest" in ghost platforms.
- "Urgent Need" Scams: Messages impersonating relatives or authorities, requesting immediate money transfers to handle a crisis.
- AI-Powered Phishing: Use of deepfake voice or video to deceive even experienced users or corporate employees (Business Email Compromise).
The BoG notes that cooperation between payment service providers and law enforcement agencies has strengthened, allowing for account freezes in record time. Nevertheless, the cross-border nature of these crimes makes fund recovery an extremely difficult process, especially when money is channeled to countries outside EU jurisdiction.
Institutional Shielding and Bank Responsibility
One of the central points of the report concerns the debate over liability in fraud cases. While the legal framework protects the consumer in cases of unauthorized transactions, the situation becomes complicated when the user has been "deceived" into approving the transaction themselves. The BoG urges credit institutions to further strengthen awareness campaigns and adopt more flexible compensation systems for victims of sophisticated scams to maintain trust in the digital ecosystem.
"Payment security is not just a matter of technology, but also of education. The reduction in numbers for 2025 shows we are on the right track, but complacency is our greatest enemy," a BoG official notes in the data analysis.
In conclusion, the 2025 report sends a dual message. On one hand, the technological shielding of banks is bearing fruit, making the Greek payment system one of the safest in Europe. On the other hand, the ingenuity of scammers is moving into the realm of psychology, requiring citizens to maintain constant vigilance and critical thinking toward every digital stimulus.
