Issue 1: Does the Quincecare duty apply when the instruction comes from the customer themselves?
The previous major cases applying the Quincecare duty have involved an agent of the bank's customer (such as a director of the customer company) fraudulently instructing the bank to transfer money in an attempt to misappropriate funds. For example, in Singularis Holdings v Daiwa Capital Markets  UKSC 50, a director of the company had instructed the bank to transfer money from the company account to third parties. The Supreme Court held that the bank should have realised that something suspicious was going on and suspended payment until it had made reasonable enquiries to satisfy itself that the payments were properly to be made.
By contrast, in this case it was Mrs Philipp, the customer herself, who instructed the bank to transfer the money. Barclays argued that the Quincecare duty could not apply in these circumstances because it only arises when the instructions to the bank are given by an agent. The bank's argument was that if the agent's instructions are a fraud, then the bank has no proper instructions at all, and that is how the duty arises. Where it is the customer who gives the instructions, the bank argued that its only duty was to execute those instructions.
Lord Justice Birss, writing for the Court of Appeal, did not accept the bank's arguments. While the previous cases had involved agents, the reasoning in those cases applied equally to cases without agents. Birss LJ explained that reasoning as follows:
- The starting point is to identify the relationship between the customer and the bank in the context of an instruction to pay: the bank is the agent for the customer as principal.
- The next question is to ask what if the banker knew that the relevant instruction was an attempt to misappropriate funds? A bank that executed that instruction in those circumstances would be liable.
- The final question is then what lesser state of knowledge will put the bank under a legal obligation? The answer is that if the circumstances were such that an ordinary prudent banker would be "on inquiry", then the duty arises.
Birss LJ noted that the purpose of this duty is to protect the customer, not the bank. The reasoning does not depend on whether the instruction comes from an agent, and applies equally to a case where the instruction comes from a customer, provided the circumstances are such that the bank is on inquiry that executing the order may result in the customer's funds being misappropriated. The bank's duty to execute the customer's instruction is not absolute; it is subject to its duty of care when carrying out those instructions. How the tension between those two duties will be resolved will depend on the facts of the case.
Issue 2: Would such a duty on banks be onerous and unworkable?
Barclays argued that this kind of duty of care would impose an onerous and unworkable burden on banks. In the High Court, the Judge had accepted the bank's argument on this point, and in the Court of Appeal both Mrs Philipp and the Consumers' Association 'Which?', as intervener, argued that the Judge was wrong. The Court of Appeal concluded that this issue could not have been properly decided without a trial. There was evidence to show that it was at least arguable that the duty of care would be neither unworkable nor onerous in terms of banking practice as it was in March 2018, when the fraud occurred. Among that evidence was the existence at that time of at least one voluntary code of practice, which provided evidence of what was feasible for banks at the time.
In arguing that the duty would be onerous and unworkable, Barclays asked how the duty could possibly work in the context of the huge number of banking transactions executed every day and the speed of many of these transactions, such as in the BACS and Faster Payment systems. Birss LJ did not accept this as a relevant concern, because the Quincecare duty is conditioned on whatever ordinary banking practice is at the relevant time: "A finding that the facts of Mrs Philipp's case would, when considered alongside ordinary banking practice in March 2018, have put an ordinary prudent banker on inquiry about APP fraud, simply does not mean that the circumstances associated with any one of the many millions of low value BACS transfers would do so."
This is a significant decision on the scope of the Quincecare duty, which has made clear that the duty is a wider one than some may have previously thought. The duty can potentially arise whenever a banker has been put on inquiry that the customer may be the victim of fraud, regardless of who the instruction comes from.
In light of the Court of Appeal's decision, banks may wish to review their anti-fraud and safeguarding processes, including training to help staff to identify situations where the customers instructing them may be the victim of a fraud. Importantly, as Birss LJ noted, the Quincecare duty is conditioned on whatever ordinary banking practice is at the relevant time by the standard of the ordinary reasonable banker. We will have to await the judgment following trial to find out what that standard was in respect of APP fraud in 2018, when Mrs Philipp instructed Barclays to transfer the money, and therefore what measures Barclays would have had to have in place to comply with any duty owed. However, the decision does indicate that courts will look to any voluntarily adopted industry standards or codes as evidence of whether checks and balances will be workable or not. The scope of the duty – and what safeguards a bank must put in place - will continue to evolve as banking practice evolves. Banks will need to ensure that their processes reflect this.