20.500.12556/RUL-174861 Odškodninska odgovornost bank za kibernetske napade in druge zlorabe plačilnih instrumentov Banks’ liability for cyberattacks and other payment instrument abuses Razmah elektronskega bančništva med drugim spremlja povečanje pojavnosti kibernetskih zlorab plačilnih instrumentov. Posebej zahtevne so situacije, v katerih storilci z uporabo metod socialnega inženiringa dosežejo, da uporabnik sam avtorizira plačilno transakcijo, zaradi česar postanejo tehnični zaščitni mehanizmi ponudnika plačilnih storitev neučinkoviti. V takšnih primerih se pojavi vprašanje razmejitve odškodninske odgovornosti med ponudnikom in uporabnikom. Temeljno raziskovalno vprašanje magistrske naloge se nanaša na okoliščine in obseg odškodninske odgovornosti banke za škodo, ki nastane kot posledica kibernetskih napadov in drugih zlorab plačilnih instrumentov, zlasti kadar uporabnik sam, čeprav pod vplivom prevare, odobri izvedbo plačila. Naloga obravnava najpogostejše oblike kibernetskih zlorab plačilnih instrumentov ter prikazuje statistične trende v Sloveniji in na ravni Evropske unije. Sledi podrobna analiza pravnega okvira odškodninske odgovornosti bank po pravu Evropske unije in njegove implementacije v slovenski pravni red, pri čemer je poseben poudarek namenjen vprašanjem veljavnosti soglasja uporabnika, dokaznega bremena banke in uporabe močne avtentikacije stranke. Delo vključuje primerjalno analizo domače in tuje sodne prakse ter prikaz predvidenih zakonodajnih sprememb na ravni Evropske unije. A marked increase in the occurrence of cyberattacks and other payment instrument abuses has accompanied the expansion of electronic banking. Particularly complex are situations in which perpetrators by employing methods of social engineering, induce the user to authorise a payment transaction, thereby rendering the technical security mechanisms of the payment service provider ineffective. In such cases the question arises as to the allocation of liability for damages between the provider and the user. The central research question of this thesis concerns the circumstances and extent of a bank’s liability for damage arising as a consequence of cyberattacks and other abuses of payment instruments, especially in cases where the user, albeit under the influence of fraud, authorises the execution of the payment. The thesis examines the most common forms of cyber-related abuse of payment instruments and presents statistical trends in Slovenia and at the European Union level. This is followed by an in-depth analysis of the legal framework governing the liability of banks under European Union law and its implementation into the Slovenian legal order, with particular attention devoted to issues of the validity of user consent, the bank's burden of proof, and the application of strong customer authentication. The work also includes a comparative analysis of domestic and foreign case law, as well as an overview of anticipated legislative amendments at the European Union level. kibernetski napadi socialni inženiring APP prevare zlorabe plačilnih instrumentov odškodninska odgovornost bank PSD2 ZPlaSSIED močna avtentikacija stranke Uredba o plačilnih storitvah huda malomarnost cyberattacks social engineering APP fraud payment instrument abuses banks' liability PSD2 ZPlaSSIED strong customer authentication Payment Services Regulation gross negligence true false false Slovenski jezik Angleški jezik Magistrsko delo/naloga 2025-10-10 09:00:07 2025-10-10 09:00:15 2025-11-30 04:03:05 0000-00-00 00:00:00 2025 0 0 0000-00-00 Zaloznikova Objavljeno NiDoloceno 0000-00-00 0000-00-00 0000-00-00 131506 253300227 24307.pdf 24307.pdf 1 A3FEA2FC9E78FCDBEF79437E91A55DBE cb42bdd99641b4cac7ab7fd27b4134510617c276a97ff30830ac7d29880c3f0a 88c68226-a5a6-11f0-9328-0050569b8976 https://repozitorij.uni-lj.si/Dokument.php?lang=slv&id=219758 Pravna fakulteta 0 0 0