A French court has ruled that both a telecom company and a major bank are responsible for losses caused by a SIM swapping fraud case. The victim suffered 17,000 euros in losses when fraudsters gained control of their phone number and used it to access their bank account. The court found that the telecom operator Free Mobile was at fault for not properly verifying the identity of the person requesting the SIM card transfer. This failure allowed the fraudsters to redirect the victim’s phone line without sufficient checks, which the court deemed a serious oversight. The bank, BNP Paribas, was also found to have played a role in the fraud. It was informed of the potential security breach the day after it occurred but failed to block access to the victim’s account. The bank tried to shift responsibility to the customer by pointing out that a digital key was used for authentication. However, the court ruled that even strong security measures are ineffective if internal teams do not act on alerts. The ruling emphasized that technical safeguards alone cannot compensate for slow or neglected internal procedures, which can leave systems vulnerable. In its decision, the Paris judicial court ordered the bank to compensate the victims and held Free Mobile responsible for half of the losses. This case sets a new legal precedent in France, showing that financial responsibility for identity verification failures can extend beyond banks to include telecom operators and other involved parties. Previously, the financial burden in such cases typically fell on the banking sector, but this ruling demonstrates that all entities involved in the identification process can be held accountable if they fail to follow proper procedures. The case highlights the importance of robust internal processes in cybersecurity, even when technical measures are in place. It also underscores the growing complexity of digital security, where multiple parties must collaborate to prevent fraud. As digital services become more interconnected, this ruling may influence how liability is assigned in future cases involving identity verification and fraud prevention.