Background
In 2010, Gregory Moniak inherited approximately £450,000 from his late father. He was deeply vulnerable at the time—a drug addict regularly using crack cocaine and heroin who described himself as “high most of the time.” He was befriended by two individuals, Mr Saeed and Ms Jan, who exploited his vulnerability and trust to steal nearly his entire inheritance over a two-month period (late 2010 to early 2011) through unauthorized card transactions, cash withdrawals, and internet banking payments from his Barclays accounts.
Moniak was traveling abroad (Thailand and Pakistan) during much of the fraud and did not discover the theft until 2015 when he returned to England and found his account nearly empty. Mr Saeed and Ms Jan were prosecuted and convicted in 2018; Mr Saeed received a 4-year sentence. When Barclays refused to reimburse the stolen funds, Moniak complained to the Financial Ombudsman Service (FOS). An ombudsman dismissed the complaint in October 2024, finding that Moniak had either intentionally given the fraudsters access to his card and PIN or was grossly negligent in securing them, thus barring reimbursement under the Payment Services Regulations 2009 (PSR 2009).
The Court’s Holding
The High Court conducted a detailed examination of the legal framework governing unauthorized payment disputes under PSR 2009 and the ombudsman scheme. Under Regulation 61 of PSR 2009, banks must immediately refund unauthorized payments unless Regulation 62(2) applies—which provides an exception where the customer “with intent or gross negligence” failed to comply with security obligations under Regulation 57 (keeping personalized security features safe).
The court emphasized that banks bear the burden of proving gross negligence or intentional breach with sufficient evidence; they cannot simply assert that a customer “must have” disclosed security information. The court adopted the standard definition of “gross negligence” as requiring “a very significant degree of carelessness” that goes far beyond ordinary negligence. The court rejected the claimant’s argument that gross negligence could never apply where the victim’s vulnerability was a factor in the fraud, finding no basis to read such a limitation into PSR 2009 outside the specific context of Authorised Push Payment fraud guidance.
Critically, the court articulated the distinction between “process rationality” (whether the ombudsman’s reasoning contains logical errors or is based on no supporting evidence) and “outcome rationality” (whether the conclusion falls outside the range of reasonable decisions an ombudsman could reach). The judgment establishes that a finding of fact unsupported by any evidence is a process irrationality that can be judicially reviewed, while a conclusion supported by evidence but disagreed with is an outcome rationality challenge, which requires showing the conclusion is unreasonable. The court applied these principles to scrutinize whether the ombudsman’s factual findings met the required evidentiary standard.
Key Takeaways
- Banks must provide sufficient evidence to prove customer gross negligence or intentional breach to deny reimbursement for unauthorized payments; assertion alone is insufficient.
- Gross negligence under PSR 2009 is a high threshold requiring significantly more than ordinary carelessness or lack of care.
- Ombudsman decisions are subject to judicial review for rationality, with courts distinguishing between process irrationality (logical errors, unsupported findings) and outcome irrationality (unreasonable conclusions from supported evidence).
- A factual finding with no supporting evidence constitutes process irrationality and can be quashed, whereas a finding resting on some evidence is reviewable only on outcome rationality grounds.
Why It Matters
This judgment provides critical guidance on consumer protection in disputed unauthorized payment cases, particularly where vulnerable individuals are victims of targeted fraud. It clarifies that financial institutions cannot avoid liability by merely suspecting or asserting customer negligence but must marshal sufficient evidence meeting the high bar of gross negligence under PSR 2009. The decision protects consumers by ensuring evidentiary rigor in fraud cases where sophisticated criminals exploit vulnerability and trust.
The judgment also significantly advances judicial review doctrine by providing detailed analysis of how courts should scrutinize ombudsman decisions, establishing that factual findings unsupported by evidence are subject to judicial intervention. This has broader implications for the ombudsman scheme’s legitimacy, requiring that even informal dispute resolution maintains logical coherence and evidentiary foundation for key factual conclusions.