Nakku Joweria v Stanbic Bank (U) Limited [2026] UGCOMMC 368
Observed later treatment
No later-treatment classification is recorded for this judgment.
Citator coverage is limited to judgments in the Wakilii corpus and source-matched treatment records. Absence of a signal is not an assertion that the case remains good law.
AI-generated summary. This summary was generated by AI from the full text of the judgment. It may contain errors or omissions—always read the source judgment before relying on it.
Holding
The plaintiff sued her bank to recover UGX 68,000,000 lost through 17 unauthorised Flexipay withdrawals, alleging breach of the bank's duty of care. The court held that while a bank owes its customers a duty to exercise reasonable skill and care, that duty is not breached where the customer's own authentication credentials are compromised through loss of a phone and national ID that is not promptly reported to the bank. The court found the transactions were completed using the plaintiff's registered credentials, that unsuccessful enrolment attempts did not without more amount to suspicious activity requiring the bank to intervene, and that no breach by the bank was proved. The defendant was found not liable and the suit was dismissed with costs.
Outcome
Suit dismissed with costs to the defendant; plaintiff not entitled to any remedies sought
Facts
The plaintiff held a savings account with the defendant bank opened in 2001, historically operated over the counter with a regular monthly insurance debit. Between 7 and 8 February 2023, UGX 68,000,000 was withdrawn through 17 unauthorised transactions via the defendant's Flexipay platform to unknown numbers. The plaintiff said she lost her phone (with her national ID kept behind it) on 6 February 2023 and reported to the network providers and police. Evidence showed the account was enrolled on Flexipay through the USSD code on 7 February 2023 using her registered credentials, after several failed enrolment attempts, with validation codes and transaction notifications sent to her registered number. A recorded interview indicated she reported the theft to police the following day and remained in communication with the person holding her phone until 10 February 2023, when a police reference was obtained. She reported the loss of funds to the bank only on 6 March 2023. The bank had offered to settle for half the sum, which the plaintiff rejected.
Issues
- Whether the defendant bank owed a duty of care towards the plaintiff as its customer.
- Whether the defendant is liable for the unauthorised withdrawals made from the plaintiff's account.
- What remedies are available to the parties.
Orders
- The defendant is not liable for the unauthorized withdrawals on the plaintiff's account.
- The suit is dismissed with costs to the defendant.
Rules and key headnotes
Legislation cited (4)
- Electronic Transactions Act s.6
- Electronic Transactions Act s.6(2)
- Electronic Transactions Act s.7(4)
- Regulation of Interception of Communications Regulations 2023 reg.22
Cases cited (7)
- Aida Atiku v Centenary Rural Development Bank Limited (Civil Suit No. 754 of 2020)
- Excellent Assorted Manufacturers Ltd & Another v DFCU Bank Limited & Another (Civil Suit No. 338 of 2017)
- Jessica Kakooza v Ecobank (U) Ltd (Civil Suit No. 44 of 2014)
- Equity Bank (U) Ltd v Bamwite Augustine Muhindo (Civil Appeal No. 59 of 2025)
- Stanbic Bank (U) Ltd v Moses Rukidi Gabigogo (Civil Appeal No. 28 of 2023)
- Barclays Bank of Uganda Limited v Eron Kabachwamba (Civil Appeal No. 10 of 2015)
- Browne v Dunn (1894) 6 R 67 (HL)
Full judgment
The original judgment as reported. Read the original PDF before relying on any passage.