Philipp v Barclays Bank UK PLC

Factual and Procedural Background

The Plaintiff and her husband were deceived in early 2018 by fraudsters posing as regulators and law-enforcement officials. Acting on the fraudsters’ advice, the Plaintiff instructed Company A (her retail bank) to transfer two sums of £400,000 and £300,000 to accounts in the United Arab Emirates. Company A twice telephoned the Plaintiff to confirm the instructions, and she reaffirmed them. The funds were irretrievably lost.

The Plaintiff sued Company A, alleging that it owed a contractual and/or common-law duty to refuse payment where it had reasonable grounds to suspect fraud (an alleged extension of the so-called “Quincecare” duty). Company A obtained summary judgment in the High Court. The Court of Appeal reversed that decision, holding that the alleged duty was arguable and should proceed to trial. Company A appealed to the Supreme Court.

Legal Issues Presented

1. Does a bank owe its personal customer a duty, implied by contract or at common law, to refuse to execute a payment instruction given by the customer personally when the bank has reasonable grounds to suspect that the customer is the victim of an authorised push-payment fraud?
2. What is the correct scope and rationale of the “Quincecare duty” recognised in earlier case-law?
3. Should the Plaintiff’s subsidiary claim—that the bank failed to take adequate steps to recover the funds after the fraud was discovered—be summarily dismissed?

Arguments of the Parties

Plaintiff’s Arguments

• The Quincecare line of cases embodies a wider duty of reasonable skill and care that extends beyond agent-initiated instructions to situations where the customer’s own instructions are induced by fraud.
• An instruction obtained by fraud is, in substance, an attempt to misappropriate the customer’s funds; therefore, the bank should investigate and, if appropriate, refuse payment.
• Even if no such duty existed at the time of payment, Company A was negligent in failing promptly to try to recall the funds once the fraud became apparent.

Company A’s Arguments

• A bank’s primary and strict contractual obligation is to execute a valid instruction from its customer; no duty of care can override that obligation in the absence of illegality or lack of authority.
• The Quincecare duty arises only where an agent instructs the bank and the bank is on inquiry that the agent lacks actual authority; it has no application when the customer personally gives an unequivocal instruction.
• The Plaintiff’s claim regarding post-payment recovery is speculative and lacks a realistic causal foundation.

Table of Precedents Cited

Court's Reasoning and Analysis

Judge [Leggatt] held that a customer’s clear and authorised instruction obliges the bank to execute payment; the duty of care arises only where the bank must interpret ambiguous instructions or verify an agent’s actual authority. The Court criticised the analytical approach in Quincecare, finding it mistakenly assumed a conflict between the bank’s duty to pay and a separate duty of care, then resolved that “conflict” by policy balancing. Properly analysed:

• An agent acting dishonestly lacks actual authority; apparent authority is displaced where the bank is on notice of possible fraud and fails to inquire.
• Thus, the so-called Quincecare duty is simply an aspect of the ordinary duty to ascertain the customer’s real instructions when an intermediary acts.
• These principles do not apply where the customer herself (even if deceived) gives an unequivocal instruction; the bank must comply.
• Any broader redistribution of APP-fraud losses is a matter for Parliament and regulators, not implied contractual terms.
• The bank’s standard terms expressly warned customers about APP fraud and reserved a right—not a duty—to refuse suspicious payments.
• The Plaintiff’s separate allegation that Company A unreasonably delayed efforts to recall the funds after 27 March 2018 raises factual issues unsuitable for summary disposal.

Holding and Implications

HELD: Appeal ALLOWED; summary judgment restored for Company A on the alleged duty to refuse payment, save that the Plaintiff’s limited claim concerning post-fraud recovery efforts after 27 March 2018 may proceed.

Implications: The Supreme Court definitively confines the Quincecare duty to cases where an agent instructs the bank and the bank is on inquiry as to lack of actual authority. Banks owe no duty to second-guess a customer’s own valid instructions even if induced by fraud. Victims of authorised push-payment fraud must look to regulatory or legislative remedies rather than contractual claims against their banks. The judgment restores certainty in banking law and delineates clear risk allocation between customers and financial institutions.