Crédit Agricole Italia — Conto Online

Documented and closed events. They stay on file: an operator’s past is data, not a verdict.

1. Oct 1, 2019 Data breach Severe ✓ resolved

   Bank statements sent by certified email to the wrong customers: 2,219 messages between 1 and 6 October 2019, fined 1,650,000 euros (Crédit Agricole Italia) and 315,023 euros (CA FriulAdria) by the Italian data protection authority

   Between 1 and 6 October 2019 the group's IT consortium, Crédit Agricole Group Solutions, delivered bank statements by certified email (PEC) to customers other than the account holders those documents referred to: 2,219 messages in total. The two banks notified the breach to the Italian data protection authority (Garante) on 9 October 2019. THE DECISION. By prescriptive and sanctioning decision of 14 January 2021 (doc. web 9582744) the Garante found a breach of Articles 5(1)(f) and 32 of Regulation (EU) 2016/679 — the principles and measures on security of processing. The administrative fines are 1,650,000 euros against Crédit Agricole Italia S.p.A. and 315,023 euros against Crédit Agricole FriulAdria S.p.A., 1,965,023 euros in total. Crédit Agricole Group Solutions, the processor behind the technical fault, was not fined directly. WHAT GOT OUT. Not credentials and not money: accounting documents carrying the holder's name, account details and transactions, landing in another customer's certified mailbox. It is the kind of exposure that cannot be recalled and that changing a password does not repair. STATUS AT THE VERIFICATION DATE. The decision is still published on the Garante's site and no ruling annulling it appears on the record. We check this because a challenged fine is not a final one: here, on the public record, nothing points the other way.

   ↗ source
2. Feb 28, 2022 Regulatory action Moderate ✓ resolved

   One million euros from the Italian competition authority for the instant-transfer "dark pattern" in the app: fine upheld by the Lazio administrative court in May 2025

   On 28 February 2022 the Italian Competition Authority (AGCM) closed proceeding PS12146, fining Crédit Agricole Italia S.p.A. one million euros for an unfair commercial practice. WHAT THE APP DID. In the online banking app, before the update released on 11 October 2021, the instant transfer — the more expensive option compared with a standard one — carried the label "Suggested" beside it. And after the customer had nonetheless chosen a standard transfer, the costlier option was put forward again in a highlighted box reading "Proceed with instant". The Authority held the conduct capable of "exercising undue influence and considerably limiting the average consumer's freedom" in choosing the type of transfer, in breach of Articles 24 and 25 of the Italian Consumer Code. WHY THIS IS A FACT AND NOT AN ACCUSATION. That is what matters most here. Crédit Agricole challenged the decision, and by judgment no. 9315/2025 published on 15 May 2025 the Lazio Regional Administrative Court upheld the fine. So this is not a pending allegation but a penalty that has survived the first instance of administrative review. We find no subsequent ruling by the Council of State: if one arrives and reverses the outcome, this entry must be rewritten. WHY IT SITS ON A CURRENT ACCOUNT CARD. Because it is not a fact about an advertising campaign: it is a fact about the interface through which money moves — that is, about the product. The extra cost was paid by the customer on every transfer, and paid without having genuinely chosen it.

   ↗ source

verified on Sep 27, 2026

Weighted average across 2 public review platforms (158,146 reviews in total), weighted by volume. This is not our rating: it is those platforms’ average.