⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

How to Report Cybercrime in Belgium (and Get Your Money Back)

21 June 2026
Source:Ministry of Cyber Affairs
Share
How to Report Cybercrime in Belgium (and Get Your Money Back)

A practical, victim-facing guide to reporting cybercrime and online fraud in Belgium: who to call first, how to report to the police and Safeonweb, how to block your cards with Card Stop, and how the PSD2 refund rules decide whether you get your money back.

Quick answer: If you are in immediate danger call 112 (emergency) or 101 (police). Report the fraud by filing a complaint in person at your local police station, and forward any suspicious email or text to suspicious@safeonweb.be, run by the Centre for Cybersecurity Belgium (CCB). If your card or account is involved, call Card Stop on 078 170 170 and then your bank straight away to block your cards. Under the EU Payment Services Directive (PSD2), for an unauthorised payment your bank must refund you and your own liability is capped at EUR 50 (and is zero once you have reported the card lost or stolen, unless you acted fraudulently or with gross negligence).

EUR 50Maximum you can be liable for on an unauthorised payment under PSD2, before you report the card lost or stolen. After you report it, your liability drops to zero unless you acted fraudulently or with gross negligence.
078 170 170Card Stop, the national 24/7 line to block all your Belgian bank and credit cards in one call (dial +32 78 170 170 from abroad).
~10 millionSuspicious messages forwarded by the public to suspicious@safeonweb.be in 2025, according to the Centre for Cybersecurity Belgium.

What to do in 3 steps

  1. Stop the bleeding. If money has moved or your card is exposed, call Card Stop on 078 170 170 to block your cards, then phone your bank to freeze the account, reverse what can still be reversed, and report the transactions as fraud. Change passwords on any compromised accounts.
  2. Report it officially. File a complaint (a "plainte" / "klacht") in person at your local police station; they work with the Regional and Federal Computer Crime Units. Keep the report reference. Forward the scam email or text to suspicious@safeonweb.be and then delete it.
  3. Push for your refund. Ask your bank in writing to refund unauthorised transactions under PSD2. If the bank refuses or stalls, escalate the dispute for free to Ombudsfin, the ombudsman for financial services.
Know the difference: An unauthorised payment is one you never approved (your card or account was used by someone else). The bank must refund it under PSD2, and your liability is capped at EUR 50 (zero once reported). An authorised push-payment scam is one where you were tricked into sending the money yourself (a fake invoice, fake "bank security officer", or romance or investment scam). Because you approved that transfer, there is no automatic legal right to a refund, though it is still worth reporting and asking the bank to attempt a recall.

How recovery actually works

Recovery in Belgium runs along two separate tracks. For genuinely unauthorised transactions, the law is on your side: once you notify your bank, the bank carries the loss and must refund you promptly, keeping your liability to a maximum of EUR 50 (and nothing after you have reported the card or credentials compromised) unless it can prove you acted fraudulently or with gross negligence. Speed matters, because the faster you report, the smaller your exposure and the better the chance funds can be stopped. For scams where you were manipulated into authorising the payment yourself, there is no guaranteed refund, but your bank may still be able to recall the transfer if the money has not yet left the receiving account, and a police complaint plus an Ombudsfin case can help if the bank handled things poorly. In both situations the criminal police report and your written exchanges with the bank are the evidence that drives the outcome.

What to have ready

  • Dates, times and amounts of every suspicious transaction, plus the reference numbers.
  • The IBAN or card number affected and, if known, the account the money was sent to.
  • Screenshots of the scam message, website, or caller ID, and the original email (forwarded to suspicious@safeonweb.be).
  • Any chat logs, invoices, or payment confirmations connected to the fraud.
  • Your Card Stop blocking confirmation and the time you called your bank.
  • Your police complaint reference and a copy of the filed report.

Frequently asked questions

Who do I call first if money has just left my account?
Call Card Stop on 078 170 170 to block your cards, then call your bank immediately to report the fraud and ask them to freeze the account and attempt to recall the payment. The sooner you report, the lower your liability and the higher the chance of stopping the funds.

Will the police get my money back?
The police record the crime and investigate, but they do not issue refunds. Your refund comes from your bank under PSD2 for unauthorised payments, or, if the bank refuses, from escalating to Ombudsfin. The police report is important evidence to support that claim.

I was tricked into transferring the money myself. Can I still be refunded?
There is no automatic refund for authorised push-payment scams because you approved the transfer. Still report it to the police and your bank right away; the bank may be able to recall the money if it has not yet been withdrawn, and Ombudsfin can review whether the bank acted properly.

Sources

For step-by-step reporting and recovery guides covering other countries, see our cybercrime help hub.