Scams and Fraud Protection

Source: Criminal Justice (Theft and Fraud Offences) Act 2001; Consumer Protection Act 2007; Payment Services Directive (EU 2015/2366 — PSD2)

Written in plain language for general understanding. This is educational content, not legal advice. Based on Irish Acts of the Oireachtas, statutory instruments, and official guidance.

Irish National Law

What is this right?

Consumer fraud and scams are criminal offences in Ireland. Common types include:

  • Phishing: Fake emails or texts pretending to be from banks, Revenue, or delivery companies to steal your personal data.
  • Vishing: Phone scams where callers impersonate banks, Gardaí, or utilities.
  • Smishing: SMS/text message scams with malicious links.
  • Investment fraud: Bogus investment schemes promising unrealistic returns.
  • Identity theft: Using your personal information to open accounts or commit fraud.

Under PSD2, your bank must refund unauthorised transactions on your account unless you acted fraudulently or with gross negligence.

When does it apply?

  • You have been the victim of a scam or fraud — whether you lost money, had your identity stolen, or were tricked into sharing personal data.
  • The Criminal Justice (Theft and Fraud Offences) Act 2001 covers theft, fraud, making false instruments, and handling stolen property.
  • If you are a victim of authorised push payment (APP) fraud (you were tricked into transferring money), recovery is harder — but your bank should still investigate.

What should you do?

  • Contact your bank immediately if you think your account has been compromised — they can freeze transactions.
  • Report to the Gardaí — fraud is a criminal offence. Get a crime reference number.
  • Report online scams to the CCPC and to FraudSMART (a fraud awareness initiative by Banking & Payments Federation Ireland).
  • If your identity has been stolen, contact the Data Protection Commission and check your credit report with the Central Credit Register (through your bank).
  • For investment fraud, report to the Central Bank of Ireland — check if the firm is regulated at centralbank.ie.

What should you NOT do?

  • Don't click on links in unexpected emails or texts, even if they look official.
  • Don't share PINs, passwords, or one-time codes — your bank will never ask for these by phone, text, or email.
  • Don't be embarrassed to report — scams are increasingly sophisticated and can happen to anyone.

You came here to know your rights — help someone else know theirs.

Support This Mission