Wakilii

Atiku v Centenary Rural Development Bank Limited (Civil Suit 754 of 2020)

High Court · [2022] UGCOMMC 146 · 2022 Judgment for Defendant AI-generated summary ↓ Download Pin to watchlist Add to matter
Jurisdiction
Uganda
Case Type
First instance civil suit for recovery of funds allegedly debited negligently from plaintiff's bank account
Decision
Suit dismissed with costs to the defendant

Observed later treatment

No later-treatment classification is recorded for this judgment.

Citator coverage is limited to judgments in the Wakilii corpus and source-matched treatment records. Absence of a signal is not an assertion that the case remains good law.

AI-generated summary. This summary was generated by AI from the full text of the judgment. It may contain errors or omissions—always read the source judgment before relying on it.

Holding

The High Court dismissed the plaintiff's claim for recovery of UGX 55,616,000 allegedly debited negligently from her account through the bank's mobile banking platform. Held that the plaintiff signed the account opening form including consent for mobile banking services and is bound by her signature under the rule in L'Estrange v Graucob. The bank had put in place commercially reasonable two-factor authentication requiring both the customer's phone and SIM card. All transactions were executed using the plaintiff's registered phone number. The plaintiff, who admitted never losing her phone except giving access to her daughter, was in the best position to prevent the fraud and bore the loss under the imposter rule.

Outcome

Suit dismissed with costs to the defendant

Facts

On 2 January 2020, the plaintiff opened a savings account with the defendant bank and deposited UGX 56,320,000 between 4 and 10 January 2020. She made one counter withdrawal of UGX 700,000 on 13 January 2020. On 27 August 2020, she discovered her account had zero balance. The bank informed her that UGX 56,616,000 had been withdrawn electronically via the CenteMobile mobile banking platform between January and May 2020. The plaintiff claimed she never applied for or used the mobile banking service. The defendant contended she signed the account opening form that included consent for CenteMobile, and all transactions were initiated using her registered mobile phone number 0773 710 077. The bank's two-factor authentication system pegged transactions to the plaintiff's specific phone and SIM card. The account was reactivated on 5 February 2020, and a transfer to a third-party number occurred on 6 February 2020. The plaintiff admitted her daughter had access to her phone to read messages due to her sight impairment.

Issues

  1. Whether or not the plaintiff's account was fraudulently and/or negligently debited by the defendant.
  2. Whether or not the defendant is liable for the fraudulent and/or negligent withdrawals made on the plaintiff's account.
  3. What are the remedies available to the parties?

Orders

  • Suit dismissed.
  • Costs awarded to the defendant.

Rules and key headnotes

Contract Formation — Signature to Contractual Documents — Effect of Signature
A party of full age and understanding is bound by their signature to a contractual document whether they read it or understand it or not, unless the signature was obtained unfairly through misrepresentation, duress or undue influence, or the text was impossible to decipher.
Documentary Evidence — Parol Evidence Rule — Exclusion of Oral Evidence
When the terms of a contract have been proved by production of the document itself, no evidence of any oral agreement or statement may be admitted for the purpose of contradicting, varying, adding to or subtracting from its terms, unless there is evidence of fraud, duress, or mutual mistake.
Defences — Non Est Factum — Requirements for Application
The doctrine of non est factum does not apply unless there is a misrepresentation inducing a mistaken belief as to the class or character of the document and not merely a misrepresentation as to its contents, and requires proof that the signatory was not negligent and that there is a fundamental difference between what was signed and what the signatory thought was signed.
Digital Banking — Bank's Duty to Customers — Security and Consumer Protection
Banks offering mobile banking have a duty to put in place robust fraud detection and prevention solutions and to take reasonable measures to ensure that their digital banking systems are secure, regularly reviewed and updated, and that customers are provided with information on how to access services securely and maintain their security against unauthorised transactions.
Digital Banking — Customer's Duty — Confidentiality of Banking Information
Digital bank customers have a duty to keep their banking information, user IDs, passwords and PIN numbers confidential and to prevent fraudsters from gaining access to their personal login details, failing which they bear responsibility for any unauthorised transactions on their account.
Digital Banking Fraud — Allocation of Loss — Imposter Rule
In cases of digital banking fraud, the party in the best position to prevent the fraud bears responsibility for the loss. Where a bank has implemented commercially reasonable two-factor authentication and the customer has exclusive control over both authentication factors, the customer bears the loss arising from unauthorised transactions.
Negligence — Breach of Duty of Care — Contributory Negligence by Customer
Where a customer compromises security features put in place by a bank for protection of their account by allowing third parties access to authentication credentials, and transactions are executed using those credentials, the bank cannot be held liable for negligence in permitting the transactions.

Legislation cited (4)

  • Evidence Act s.92
  • Bank of Uganda Financial Consumer Protection Guidelines 2011 cl.1(a)
  • Bank of Uganda Financial Consumer Protection Guidelines 2011 cl.1(b)(i)
  • Bank of Uganda Financial Consumer Protection Guidelines 2011 cl.6(2)(a)(i)

Cases cited (11)

  • L'Estrange v F Graucob Limited [1934] 2 KB 394
  • Evans v Roe (1872) LR 7 CP 138
  • Jacob v Batavia and General Plantations Trust [1924] 1 Ch 287
  • Muthuuri v National Industrial Credit Bank Ltd [2003] KLR 145
  • Robin v Gervon Berger Association Limited [1986] WLR 526
  • Bank of Australasia v Palmer [1897] AC 540
  • Saunders v Anglia Building Society [1971] AC 1004
  • Williams v Commonwealth Bank of Australia [2013] NSWSC 335
  • Royal Bank of Scotland v Etridge [2001] 3 WLR 1021
  • Beau Townsend Ford Lincoln Inc v Don Hinds Ford Inc 759 F App'x 348
  • Arrow Truck Sales Inc. v. Top Quality Truck & Equipment Inc. Case No. 8:14-cv-2052-T-30TGW

Full judgment

↓ Download PDF

The original judgment as reported. Read the original PDF before relying on any passage.

Atiku v Centenary Rural Development Bank Limited (Civil Suit 754 of 2020) [2022] UGCommC 146 (18 July 2022)
Source: this page presents Wakilii’s issue analysis and metadata for a publicly reported Ugandan judgment. Any AI-generated summary is marked as such. Judgment text is sourced from the Uganda Legal Information Institute (ulii.org). Wakilii is not affiliated with ULII.