Discovering an unknown debit on one's account, or learning that a transfer was made without one's knowledge to a third-party account, causes immediate concern, quickly followed by a central question: is the bank required to reimburse, and under what conditions? The answer depends closely on the precise circumstances of the fraud and the customer's conduct before and after discovering it.
The Main Forms of Bank Fraud
Bank fraud takes various forms: card data theft during an online payment on an unsecured site, phishing that tricks the customer into disclosing their banking credentials by impersonating their bank, physical card cloning, or direct hacking of online banking access. Each of these techniques calls for a different analysis of the bank's and the customer's respective liability.
The Bank's Security Obligation
The bank has an obligation to put in place robust security measures to protect its customers' accounts against fraudulent access, including systems for detecting suspicious transactions and enhanced authentication mechanisms for sensitive operations. A failure in these security measures, demonstrable particularly when clearly abnormal transactions triggered no alert whatsoever, can engage the bank's liability independent of the customer's conduct.
Customer Negligence: A Decisive Factor
Conversely, a customer who disclosed their banking credentials in response to an obviously suspicious phishing email, or who kept their PIN with their bank card in the same stolen wallet, may have their own negligence held against them, reducing or excluding the bank's reimbursement obligation. Assessing this negligence nonetheless remains nuanced: a particularly sophisticated fraud, hard to detect even for a vigilant customer, cannot automatically be attributed to alleged carelessness.
Immediate Steps After Discovery
As soon as a suspicious transaction is discovered, it is important to immediately request a block from the bank on the card or access concerned, then promptly formalize a written claim precisely detailing the disputed transactions. Filing a police report with the competent authorities, while not systematically required, generally strengthens the credibility of the claim and may be necessary depending on the concerned bank's internal procedures.
The Role of the Bank's Internal Investigation
After receiving the claim, the bank generally conducts an internal investigation to determine the circumstances of the fraud and assess its own share of liability, a process that can take several weeks depending on the complexity of the case. Actively following up on this investigation, with regular, documented reminders, prevents the file from stalling and reminds the bank of its obligation to handle the claim diligently.
The Special Case of a Fraudulent Transfer
A fraudulently executed transfer raises specific difficulties compared to a simple card payment, since the funds often move very quickly to other accounts, sometimes abroad, making their recovery materially more complex even once the fraud is acknowledged. Acting within the hour following discovery, by asking the bank to attempt to recall the transfer from the receiving bank, considerably increases the chances of recovery before the funds are definitively moved or withdrawn.
Documenting the Precise Timeline of Events
Establishing a precise, detailed timeline of events — the moment a suspicious email or text message was received, the time of the disputed transaction, the moment it was discovered, the time the block was requested — considerably strengthens the credibility of the claim and eases the analysis by the bank and, where applicable, by a mediator or a court. Keeping screenshots of suspicious exchanges, rather than simply deleting them out of reflex, is also a simple precaution often overlooked in the urgency of the moment.
What to Do If Reimbursement Is Refused?
If the bank refuses any reimbursement by invoking customer negligence that seems questionable given the actual circumstances, several avenues remain open: approaching the complaints department and then, where applicable, a banking mediation body, before considering court action based on the bank's failure to meet its security and vigilance obligations.
When Should You Consult a Lawyer?
Assessing how liability should be divided between bank and customer, gathering the necessary evidence, and building a solid argument in the face of a refused reimbursement require an in-depth understanding of banking law and the security obligations placed on financial institutions. Since every fraud case has its own particular circumstances, an individualized analysis remains essential before hastily concluding that no recourse is available. The Cabinet Kaboury, in Rabat, supports victims of bank fraud in their claims and, where necessary, before the court.