Mississippi Banks Owe No Tort Duty to Noncustomers for Third-Party Wire Diversions Absent a Direct Relationship
1. Introduction
Gemstone Foods, L.L.C. v. JPMorgan Chase Bank, National Association is a Fifth Circuit diversity appeal arising from
two allegedly fraudulently diverted wire transfers. Gemstone Foods, a Mississippi food processor and Regions Bank customer,
instructed Regions to wire funds to two vendors. Unknown third parties allegedly redirected the wires into accounts the third
parties had opened at JPMorgan Chase Bank, N.A. (“Chase”). Gemstone had no banking relationship with Chase.
Gemstone sued Chase for negligence and gross negligence based on Chase’s alleged failures in opening the recipient accounts
(e.g., inadequate identity verification and documentation), and it also pleaded a claim under Article 4A of the Florida Uniform Commercial Code.
The district court dismissed under Rule 12(b)(6), holding that under Mississippi law Chase owed no duty to Gemstone as a noncustomer.
The principal issue on appeal was the threshold tort question: does a bank owe a duty of reasonable care to a noncustomer harmed by third-party fraud
involving accounts opened at the bank?
2. Summary of the Opinion
The Fifth Circuit affirmed the dismissal. It held that Midwest Feeders, Inc. v. Bank of Franklin, 886 F.3d 507 (5th Cir. 2018)
controlled and foreclosed Gemstone’s negligence-based claims because Mississippi law (as predicted in Midwest Feeders) does not impose
a duty of reasonable care on a bank toward a noncustomer in these circumstances.
The court rejected Gemstone’s attempts to source a duty from: (1) industry standards and Chase internal policies; (2) the Bank Secrecy Act
and Customer Identification Program regulations; and (3) an out-of-circuit decision applying Pennsylvania law.
The court also noted that Gemstone’s Florida UCC Article 4A claim was dismissed as abandoned below and was not pursued on appeal, thus forfeited.
3. Analysis
3.1 Precedents Cited
The opinion is primarily an application of existing Fifth Circuit diversity precedent and related principles governing adherence to prior panel
decisions and the structure of negligence claims under Mississippi law.
-
Midwest Feeders, Inc. v. Bank of Franklin, 886 F.3d 507 (5th Cir. 2018)
Role in decision: This is the controlling authority. In Midwest Feeders, the Fifth Circuit made an Erie prediction that the Mississippi Supreme Court
would not impose a duty of reasonable care on a bank to a noncustomer harmed by third-party fraud using the bank’s accounts. Gemstone attempted to
distinguish Midwest Feeders based on the fraud’s mechanics (wire diversion and allegedly sham accounts rather than check-kiting and a legitimate account),
but the court treated these as immaterial to Midwest Feeders’ core rationale: absence of a direct relationship between the bank and the noncustomer.
-
Greer v. Key, 428 So. 3d 333 (Miss. 2026)
Role in decision: Cited for the proposition that whether a duty exists is a question of law in Mississippi and that foreseeability is considered “inside”
the duty analysis as a legal question. Gemstone invoked Greer implicitly to suggest room for a different duty outcome, but the Fifth Circuit read Greer as
reaffirming general duty principles rather than recognizing a new bank-to-noncustomer duty in fraud cases.
-
Great Am. E & S Ins. Co. v. Quintairos, Prieto, Wood & Boyer, P.A., 100 So. 3d 420 (Miss. 2012)
Role in decision: Used for the foundational tort point that without a duty, negligence and gross negligence claims fail.
-
PHI Grp., Inc. v. Zurich Am. Ins. Co., 58 F.4th 838 (5th Cir. 2023) (quoting FDIC v. Abraham, 137 F.3d 264 (5th Cir. 1998))
Role in decision: Supplies the “rule of orderliness” constraints in diversity cases—one panel cannot overrule another absent a qualifying intervening
change in state law (e.g., clearly contrary Mississippi Supreme Court decision, near-unanimous intermediate appellate authority, or a squarely on-point statutory amendment).
Gemstone could not identify such a change to unsettle Midwest Feeders.
-
Kelley, LLC v. Corinth Pub. Utils. Comm'n, 200 So. 3d 1107 (Miss. Ct. App. 2016) (quoting Warren v. Pallets, Inc., 747 So. 2d 875 (Miss. Ct. App. 1999))
Role in decision: Supports the proposition that industry standards do not independently create a duty where none exists under substantive law.
-
Keen v. Miller Env't Grp., Inc., 702 F.3d 239 (5th Cir. 2012)
Role in decision: Reinforces that internal policies may be relevant to breach if a duty exists, but cannot themselves create a duty where the law recognizes none.
-
Douglas v. Trustmark Nat'l Bank, 201 F. Supp. 3d 800 (S.D. Miss. 2016) and Marlin v. Moody Nat'l Bank, N.A., 2006 WL 2382325 (S.D. Tex. Aug. 16, 2006), aff'd, 248 F. App'x 534 (5th Cir. 2007)
Role in decision: Cited for the widely accepted rule that the Bank Secrecy Act does not create a private right of action or a duty of care running to private parties.
-
Elkin Valley Baptist Church v. PNC Bank, N.A., 748 F. Supp. 3d 293 (W.D. Pa. 2024), contrasted with
Zhejiang Matrix SCM Co., LTD v. PNC Bank, Nat'l Ass'n, No. 23-0979, 2024 WL 1096534 (E.D. Pa. Mar. 13, 2024) and
Chemalloy Co., LLC v. Citibank, N.A., 609 F. Supp. 3d 370 (E.D. Pa. 2022)
Role in decision: Gemstone urged reliance on Elkin Valley’s Pennsylvania-duty prediction for cybercrime harms to noncustomers.
The Fifth Circuit declined: it involved a different state’s duty framework, did not bind Mississippi law, and was not even consensus within its own circuit.
-
Rollins v. Home Depot USA, 8 F.4th 393 (5th Cir. 2021)
Role in decision: Used twice for forfeiture/abandonment principles: (1) the Article 4A claim was abandoned below and not pursued on appeal;
(2) Gemstone’s privity/statutory argument under Miss. Code Ann. § 11-7-20 was forfeited because it was not raised in opposition to the motion to dismiss.
-
Williams v. GoAuto Ins. Co., 154 F.4th 324 (5th Cir. 2025) (quoting Jefferson v. Lead Indus. Ass'n, 106 F.3d 1245 (5th Cir. 1997))
Role in decision: Supports the court’s refusal to certify the duty question to the Mississippi Supreme Court absent a compelling reason.
-
Pleading/standard-of-review authorities: Allen v. Walmart Stores, L.L.C., 907 F.3d 170 (5th Cir. 2018) (citing
In re Katrina Canal Breaches Litig., 495 F.3d 191 (5th Cir. 2007) and Jones v. Greninger, 188 F.3d 322 (5th Cir. 1999));
and plausibility limits from Ashcroft v. Iqbal, 556 U.S. 662 (2009).
Diversity/substantive-law framework via Krieser v. Hobbs, 166 F.3d 736 (5th Cir. 1999).
-
Jurisdictional/citizenship support: Wachovia Bank v. Schmidt, 546 U.S. 303 (2006) (bank citizenship), 28 U.S.C. §§ 1332(a), 1653.
3.2 Legal Reasoning
(a) Duty as the gatekeeping element. The court treated duty as the dispositive element: under Mississippi law, duty is a question of law,
and without a duty, negligence and gross negligence claims cannot proceed.
(b) Midwest Feeders controls under the rule of orderliness. The Fifth Circuit emphasized that it had already made an Erie prediction in
Midwest Feeders on the precise structural question (bank duty to noncustomer harmed by third-party fraud using bank accounts). Because a later panel cannot
depart from that prediction without a recognized intervening change in Mississippi law, the court asked whether Gemstone could point to such a change.
It could not: no “clearly contrary” Mississippi Supreme Court holding, no near-unanimous intermediate appellate trend, and no squarely on-point statutory amendment.
(c) Attempted factual distinctions did not matter. Gemstone argued the case involved “sham” account opening and wire transfers rather than
check-kiting and an existing account. The court treated these as different modalities of the same basic scenario: third-party fraud enabled through a bank account
with the plaintiff remaining a noncustomer. Midwest Feeders’ rationale—no duty absent a direct relationship—still foreclosed liability.
(d) Alternative “duty sources” failed.
-
Industry standards/internal policies: Under Mississippi authority and Fifth Circuit precedent, these can inform breach when a duty exists,
but cannot create a duty in the first place. The court also noted the pleading weakness: Gemstone did not identify any specific standard or policy actually breached,
instead relying on the hope that discovery would supply them.
-
Bank Secrecy Act/CIP regulations: The court aligned with the prevailing view that the Bank Secrecy Act does not create a private right of action
or a duty to private parties. Thus, alleged regulatory noncompliance could not be repackaged into a negligence duty owed to a noncustomer.
-
Out-of-circuit persuasive authority: The court rejected importing a Pennsylvania duty prediction into Mississippi law, particularly where Midwest Feeders
already represented the Fifth Circuit’s Mississippi prediction and where Pennsylvania district courts themselves were not uniform.
(e) Procedural finality points. The Article 4A claim was treated as abandoned/forfeited, and a statutory “privity” argument (Miss. Code Ann. § 11-7-20)
was also forfeited for failure to raise it in response to the motion to dismiss.
3.3 Impact
1) Reinforcement of a no-duty rule for banks vis-à-vis noncustomers in Mississippi (as predicted by the Fifth Circuit).
The decision consolidates Midwest Feeders as the governing framework for negligence theories by noncustomers against Mississippi banks (or banks sued under Mississippi law)
arising out of third-party fraud using bank accounts. Plaintiffs who lack a direct relationship with the defendant bank face an early, duty-based exit at the pleading stage.
2) Limits on “regulatory negligence” and “policy-based negligence” pleadings.
The opinion underscores that alleging violations of internal procedures, “industry standards,” or Bank Secrecy Act/CIP requirements will not, without more,
supply the missing duty element under Mississippi law as predicted by the Fifth Circuit. This narrows a common pleading strategy in funds-diversion/cyber-fraud cases.
3) Strong signal against certification absent genuine state-law movement.
By declining certification, the court indicates that, where a prior Erie prediction is on the books and state law has not materially evolved,
certification is disfavored—supporting predictable, uniform federal outcomes in diversity banking-fraud negligence cases.
4) Practical channeling of claims.
The decision implicitly pushes victims toward (i) claims against their own banks (where contractual/UCC duties may exist), (ii) UCC Article 4A frameworks when applicable
and properly preserved, and/or (iii) direct pursuit of fraudsters—rather than negligence claims against “receiving” banks with whom they have no relationship.
4. Complex Concepts Simplified
-
Rule 12(b)(6): A procedural motion arguing the complaint—even if its facts are assumed true—does not state a legally valid claim.
-
Duty (negligence law): The legal requirement that the defendant owed the plaintiff an obligation of reasonable care. Without duty, the case ends
regardless of alleged carelessness.
-
Gross negligence: A more severe form of negligence, but it still requires a duty; it is not a workaround if duty is absent.
-
Erie guess (Erie prediction): In diversity cases, federal courts apply state substantive law. If the state’s highest court has not answered an issue,
federal courts predict how it would rule. Midwest Feeders was such a prediction about Mississippi law.
-
Rule of orderliness: Fifth Circuit panels generally must follow earlier Fifth Circuit panel decisions, including earlier Erie predictions,
unless a recognized intervening change in controlling law occurs.
-
Bank Secrecy Act / Customer Identification Program: Federal anti-money-laundering and identity-verification requirements for banks.
Courts generally hold these do not give private victims a right to sue or automatically create a tort duty to them.
-
UCC Article 4A: A specialized statutory scheme governing many wire transfers. It can allocate risk among parties in funds transfers, but claims under it
must be properly preserved and argued.
-
Certification: A process where a federal court asks a state supreme court to answer a state-law question. The Fifth Circuit uses it sparingly.
5. Conclusion
The Fifth Circuit’s decision rests on a single controlling principle: under Mississippi law as predicted in Midwest Feeders, Inc. v. Bank of Franklin,
a bank does not owe a duty of reasonable care to a noncustomer for losses caused by third-party fraud involving accounts at the bank,
absent a direct relationship. The court further held that neither industry standards nor internal policies nor the Bank Secrecy Act/CIP regulations can supply the missing duty,
and it declined to let out-of-circuit authority applying different state law disrupt an established Erie prediction.
As a result, negligence-based claims by noncustomers against “recipient” banks in Mississippi-governed fraud-diversion disputes remain highly vulnerable at the pleading stage,
and litigants must look to other legal relationships and statutory frameworks—particularly those tied to the customer’s own bank or to properly invoked UCC remedies—if available.