What duty of care your bank actually owes

What duty of care means for a bank

A bank owes its customers a duty to operate accounts and process instructions with reasonable care and skill. This is a general legal principle, not a promise that every transfer will be checked for fraud before it goes through.

In practice, this duty is balanced against your own instructions. A bank generally has to follow a valid payment instruction from you, even one that turns out to be part of a scam. The exception is when something about it should have raised a red flag.

This is why “the bank let the scam happen” is rarely the whole picture. The real question is usually whether the bank ignored signs it reasonably should have caught.

What this duty does and does not cover

The duty covers things like operating your account competently, following security procedures, and acting on clear warning signs of fraud within a reasonable time. It does not extend to guaranteeing that every payment you authorise is genuine, since you are the one who gave the instruction.

Banks are not expected to interrogate every transfer. Unusual patterns, such as a sudden large payment to a new payee, can still raise the bar for what reasonable care requires.

The kind of warning signs banks are expected to notice

Sudden, uncharacteristic transactions are one signal this duty is built around. So are multiple rapid transfers to the same new account, or clear signs that a customer may be under pressure or being coached. A single unusual transfer is less likely to meet this bar than a repeated, escalating pattern.

If your situation involved being asked to pay repeatedly to unlock a withdrawal, that pattern is often exactly what a bank’s monitoring is meant to catch.

How this duty connects to a complaint or a claim

If you believe your bank fell short of this duty, the first step is usually a formal complaint to the bank. If the response is not satisfactory, the next step is escalating to Bank Negara Malaysia. In some cases, this can also support a civil claim against the bank itself, though that is assessed on the specific facts.

This duty is separate from, and can run alongside, any claim against the scammer or the account that received your money.

What to do next

Write down the transaction pattern: dates, amounts, and anything unusual about how the payments were made. This is what any complaint or claim will be built on.

From there, whether a wider claim against those involved is realistic is worth considering alongside your complaint.