2025 Session Last amended: 2024 session

§ 336.4A-203 — Unenforceability of Certain Verified Payment Orders

Plain-Language Summary

This section applies when a payment order was not actually authorized by the customer but is still treated as the customer's order because the bank followed a commercially reasonable security procedure under section 336.4A-202. By a written agreement, the bank may limit how much it can enforce or retain payment on such an order. The bank cannot enforce or keep payment, however, if the customer proves the order was not caused, directly or indirectly, by a person entrusted with duties relating to payment orders or the security procedure, or by someone who gained access to the customer's transmitting facilities or obtained breach-facilitating information from a source the customer controlled.

Practical Notes
Even when a bank is otherwise allowed to treat an unauthorized wire order as the customer’s because it followed a commercially reasonable security procedure, the bank loses the right to enforce or keep the payment if the customer proves the breach did not come from its own insiders or from access to its own facilities or information. The bank may also agree in writing to limit how much it can collect on such an order.