Wakilii

Stanbic Bank Uganda Limited v Gabigogo (Civil Appeal 28 of 2023)

High Court · [2024] UGCOMMC 23 · 2024 Appeal Allowed AI-generated summary ↓ Download Pin to watchlist Add to matter
Jurisdiction
Uganda
Case Type
Civil appeal from Chief Magistrate's Court judgment awarding damages for loss caused by ATM fraud
Decision
Suit dismissed; bank not liable for losses caused by customer's failure to exercise reasonable care at the ATM

Observed later treatment

No later-treatment classification is recorded for this judgment.

Citator coverage is limited to judgments in the Wakilii corpus and source-matched treatment records. Absence of a signal is not an assertion that the case remains good law.

AI-generated summary. This summary was generated by AI from the full text of the judgment. It may contain errors or omissions—always read the source judgment before relying on it.

Holding

The High Court allowed the appeal and set aside the lower court's award of damages. The Court held that the bank was not liable for losses arising from ATM fraud where the customer failed to exercise reasonable care in managing his personal space at the ATM, failed to protest when a stranger offered unsolicited assistance, and did not prevent that person from observing him entering his PIN. The customer's negligence was the proximate cause of the loss. The bank had no duty to deploy security guards specifically to prevent this type of fraud absent prior notice of similar incidents at that location.

Outcome

Suit dismissed; bank not liable for losses caused by customer's failure to exercise reasonable care at the ATM

Facts

The respondent held an account with the appellant bank and used an ATM card to conduct transactions. On 19 March 2021, while attempting to deposit cash at the appellant's Metro Branch ATM, he experienced difficulty. A stranger approached from behind, reached over the respondent's shoulder, pressed buttons causing the card to eject, and handed the card back to the respondent. The stranger had swapped the respondent's genuine card with a dummy card and had observed the respondent entering his PIN. The respondent did not protest or alert security. He proceeded to the banking hall to deposit cash and later reported that his card had been captured by the second machine. By the time the swap was discovered at midday, the fraudster had made 12 withdrawals totalling UGX 5,710,000 from various ATMs and points of sale using the genuine card and PIN. The respondent sued the bank for failing to deploy security guards at the ATM and for failing to prevent the fraud.

Issues

  1. Whether the appellant bank was negligent and acted in breach of its banker-customer relationship with the respondent.
  2. Whether the respondent suffered loss due to the appellant's negligence.
  3. Whether the respondent's loss was caused by any negligence on his part.
  4. Whether the appellant had a duty to deploy a security guard at the ATM to prevent fraud.
  5. What is the extent of a bank's duty to protect a customer from third-party fraud at an ATM?
  6. What is the extent of a customer's duty to prevent fraud while using an ATM?
  7. Whether the appellant was liable for damages resulting from unauthorised withdrawals from the respondent's account following ATM card swapping fraud.

Orders

  • Appeal allowed.
  • Judgment of the Chief Magistrate's Court set aside.
  • Suit dismissed.
  • Costs of the appeal and of the court below awarded to the appellant.

Rules and key headnotes

Banking — Contractual Liability — Bank Duty of Care in Digital Banking — Foreseeability and Balancing Test
To determine negligence in ATM fraud cases, the Court applies a flexible balancing test which weighs the burdens of imposing a duty on the bank plus the social utility of the ATM against the gravity of the ATM crime and the likelihood of its occurrence. Banks will only be liable for breach of the imposed duty when the burden and utility weigh less than the gravity and likelihood of the harm.
Banking — ATM Fraud — Allocation of Risk Between Bank and Customer — Customer Negligence
The bank must produce substantial evidence or argument that the card holder was negligent and is therefore responsible for losses incurred from unauthorised ATM transactions. The customer will be liable for loss where the loss is due to negligence by the customer, such as failure to protect the PIN or delay in reporting the card as lost, stolen, or misappropriated.
Banking — ATM Security — Bank's Duty to Deploy Security Guards
Where a security breach occurs at the ATM, the onus lies on the customer to prove negligence by showing that the bank in question could have done more to safeguard the integrity of the customer's personal information from unauthorised access. Absent prior notice of similar criminal incidents at a specific ATM location, the bank has no duty to deploy security guards to prevent third-party fraud such as card swapping.
Contract Law — Banker-Customer Contract — Allocation of Risk of Loss — Effect of Contractual Indemnity
The relationship between a bank and its customer is one of mandate governed by contract. Where the parties have contractually allocated risk of loss from unauthorised ATM use, with the customer bearing losses occurring before notification to the bank and the bank bearing losses occurring after notification, the Court will enforce that contractual allocation unless the bank was negligent in its own operations.
Banking — Customer Duty of Care — Management of Personal Space at ATM
A bank customer has a duty to manage his or her personal space at the ATM by preventing invasions of that space which cause physical or emotional discomfort, by not permitting strangers to observe the entry of the PIN, and by bringing invasions to the immediate attention of security personnel. Failure to protest unsolicited assistance from a stranger at the ATM and allowing that person to see the PIN being entered constitutes customer negligence.

Legislation cited (3)

Cases cited (23)

  • Begumisa and Others v Tiberaga (Supreme Court Criminal Appeal No. 17 of 2000)
  • Nankya v Nsibambi [1980] HCB 81
  • Selangor United Rubber Estates Ltd v Cradock (No. 3) [1968] 1 WLR 1555
  • Westminster Bank Ltd v Hilton (1926) 43 TLR 124
  • Barclays Bank plc v Quincecare Limited [1992] 4 All ER 363
  • Royal Products Ltd v Midland Bank Ltd [1981] 2 Lloyd's Rep 194
  • Young v Grote (1827) 4 Bing. 253
  • London Joint Stock Bank Ltd v Macmillan [1918] AC 777
  • Kornark Investments (U) Ltd v Stanbic Bank Uganda Ltd (High Court Civil Suit No. 116 of 2010)
  • Mars Tours and Travel Ltd v Stanbic Bank Ltd (High Court Civil Suit No. 120 of 2010)
  • Gachev and Others v Uganda (Court of Appeal Criminal Appeal No. 155 of 2013)
  • Best Connect Tours and Travel (U) Ltd v Stanbic Bank Ltd (High Court Civil Suit No. 172 of 2010)
  • Makau Nairuba Mabel v Crane Bank Ltd (High Court Civil Suit No. 380 of 2009)
  • Baden Delvaux v Société Générale [1992] All ER 161
  • Barlow Clowes International Ltd v Eurotrust International Ltd [2005] UKPC 37
  • Royal Brunei Airlines Sdn Bhd v Tan [1995] 2 AC 378
  • Bank of New South Wales v Laing [1954] AC 135
  • Popp v Cash Station Inc (1993) 244 Ill. App. 3d 87
  • X (Minors) v Bedfordshire County Council [1995] 2 AC 633
  • P & P Property Ltd v Owen White & Catlin LLP [2018] EWCA Civ 1082
  • Philipp v Barclays Bank UK plc [2023] UKSC 25
  • Ocaya Richard Saracen Ltd v Saracen U Ltd and Another (High Court Civil Suit No. 23 of 2011)
  • Col. DS Sacha v. Punjab and Jund bank, RPN 1046 of 2003

Full judgment

↓ Download PDF

The original judgment as reported. Read the original PDF before relying on any passage.

Stanbic Bank Uganda Limited v Gabigogo (Civil Appeal 28 of 2023) [2024] UGCommC 23 (12 January 2024)
Source: this page presents Wakilii’s issue analysis and metadata for a publicly reported Ugandan judgment. Any AI-generated summary is marked as such. Judgment text is sourced from the Uganda Legal Information Institute (ulii.org). Wakilii is not affiliated with ULII.