Wrong Account Number, Right Payee Name: Why a Malaysian Bank Was Held Liable

Call your bank straight away if you’ve sent money to the wrong account. A refund isn’t automatic, but the bank may share responsibility for what went wrong. In a High Court decision reported on 26 August 2026, the bank’s system asked for a payee name and account number without checking whether they matched. Ask your bank to try to recover the money, and keep your transaction records.
Start here: what to do now
- Call your bank. Use its app, official website or the number on your card. Give the transaction reference, amount, time and wrong recipient details. Ask whether it can stop the payment. If it has gone through, ask it to request recovery from the receiving bank.
- Explain what happened. Did you mistype a detail, spot a transfer you didn’t approve, or approve a payment after being deceived? For suspected online financial fraud, also call 997 promptly and follow the reporting instructions.
- Write down the bank’s response. Keep your case number, call time, what it agreed to do and when it will update you. Follow up in writing the same day if you can.
- Keep the evidence before paying again. Save receipts, recipient details, messages and approval records. Contact the intended payee through a trusted channel before arranging a replacement payment.
- Keep track of your complaint too. Asking for the money back and asking the bank to investigate a possible failure are separate steps. Keep your written complaint and final decision for FMOS (explained below). For a large or urgent loss, get advice on court options promptly.
Which of these sounds like your transfer?
These hypothetical examples show why the details matter. Tell the bank what you actually did and saw, so it can investigate the payment.
| What happened? | What to tell the bank | What to do first |
|---|---|---|
| You approved RM2,000 for a supplier but mistyped the account number. | “I authorised the payment, but entered the wrong recipient details.” | Ask the bank to try to recover the mistaken payment. Save the details you entered and the confirmation screen. |
| You discover RM2,000 leaving your account and didn’t approve it. | “I don’t recognise or authorise this transaction.” | Contact the bank’s fraud team immediately. Follow its instructions to secure your account, and keep alerts and device records. |
| Someone impersonated your supplier and persuaded you to approve RM2,000 to a replacement account. | “I approved this payment after receiving what I now suspect were fraudulent instructions.” | Contact the bank’s fraud team and NSRC at 997. Keep the messages, invoice and contact details. |
Being tricked into approving a payment still matters. Equally, a wrong digit doesn’t by itself mean someone hacked your account.
Bank Negara Malaysia (BNM) has a framework for unauthorised e-banking transactions. It excludes payments you willingly make and approve, including payments with incorrect details and some scam payments. BNM also says authentication alone is not conclusive proof that you authorised a payment. Explain both what you did and what you understood you were approving. Falling outside this framework doesn’t, by itself, settle whether you have another basis for a claim against the bank.
What happened in the reported case?
The Edge and Free Malaysia Today reported that an auto-parts business entered the wrong account number in Alliance’s Bizsmart platform when trying to pay Perodua. The Edge names the business as Yatt Fatt Auto Supplies Sdn Bhd and gives this timeline:
| Transfer date | Amount sent |
|---|---|
| 24 May 2022 | RM400,000 |
| 27 May 2022 | RM400,000 |
| 30 May 2022 | RM433,224.53 |
The Edge says the business alerted the bank on 31 May after Perodua said the payments hadn’t arrived. FMT reports that only RM69,303.53 was returned, leaving the business to sue for approximately RM1.16 million.
According to FMT, Judicial Commissioner Moh Kok Wai ruled for the business against Alliance Bank Malaysia Bhd and Alliance Islamic Bank on 26 August 2026, awarding approximately RM1.16 million plus RM50,000 in costs. The reported problem was straightforward: the bank asked for both a name and an account number, but didn’t check whether they matched. FMT also reports that bank witnesses accepted that conflicting payment details would ordinarily lead them to ask for clarification.
What does that mean for your complaint?
The reported reasoning gives you a reason to look at what the bank’s system did, as well as the customer’s mistake. It doesn’t create a refund rule for every Malaysian payment service.
The reports describe an oral decision. In the public materials checked on 11 September 2026, we didn’t find the sealed order, written grounds or a primary appeal record. We can’t confirm how the court addressed all the banking terms, divided responsibility or worded the full order. Not finding an appeal record doesn’t mean there is no appeal. An order to pay also doesn’t show that payment has been made. Ask your adviser to obtain the court documents before relying on this case.
For your complaint, these questions help you gather evidence:
| Question | What to keep or ask for |
|---|---|
| Did you type the recipient’s name, or did the bank retrieve it? | The recipient setup record and confirmation screen. A name you typed yourself doesn’t independently confirm who owns the account. |
| What did the bank show before you approved the payment? | Any recipient name it returned, mismatch warning, transaction status and acknowledgement. If you don’t remember, say so. |
| Which payment service and terms applied? | Whether it was IBG, DuitNow or another service, and the terms in force when you sent the money. |
| What happened after you reported the mistake? | Call times, case numbers, the recovery request, replies and amounts returned. Ask the bank to keep its relevant logs. |
You don’t need to make another payment to recreate a missing screen. Explain what you have and ask the bank what it can provide. It may not give you every internal record. These records help you explain what happened; they still need to be assessed before deciding who is responsible.
Can the bank simply reverse the transfer?
A payment that hasn’t gone through is different from one that has reached the wrong person’s account. PayNet’s IBG page explains refunds for unsuccessful payments. That doesn’t mean a completed transfer to the wrong person will automatically bounce back.
For a processed IBG transfer, PayNet says cancellation or reversal generally isn’t possible. The bank may still try to recover the money, depending on the recipient’s cooperation and bank policies. That’s why it’s worth contacting the bank immediately, even if the payment shows as completed.
The terms for your payment service matter too. Maybank’s published DuitNow terms, for example, say a confirmed payment cannot be revoked, but provide a separate process for recovering mistaken payments. That process considers whether the money was wrongly credited, how much remains and when recovery was requested. For requests after seven months, it includes obtaining the recipient’s consent. These are Maybank’s terms, not a deadline shared by all banks or evidence of the terms governing Alliance’s 2022 transfers.
Ask the bank:
- Has the payment completed, failed or remained pending?
- Have you sent a recovery request to the receiving bank?
- What procedure, time window and charges apply to my transfer?
- Can any money be recovered? What is preventing recovery of the rest?
If recovery stalls, keep pursuing your written complaint. For a large or disputed loss, ask a Malaysian lawyer about possible claims against the recipient or bank, the evidence needed, urgency and cost. A recovery request, a complaint and a court claim are different routes; none guarantees your money back.
Put your bank complaint into words
You don’t have to start with a blank page. Adapt this sample for an authorised typing mistake to what actually happened. Change it if your case involves fraud or a payment you didn’t approve. Send full account details through the bank’s secure complaint channel, not in a public post.
On [date and time], I authorised a payment of [amount] through [payment service], reference [reference]. I meant to pay [payee], but entered [incorrect detail]. The confirmation screen showed [what you actually saw]. I discovered the mistake at [time] and contacted the bank at [time], case [number].
Please urgently try to recover the money. Confirm what you have asked the receiving bank to do and when you will update me. Please also investigate [the specific warning or handling issue you dispute] and keep the relevant transaction, approval and contact records. I attach my receipt and supporting records. If you reject my complaint, please provide your written final decision, reasons and details of the FMOS route.
Keep the receipt, screenshots, recipient details, supplier messages, call notes and bank correspondence in one folder. Include your complaint, its acknowledgement and a running total of money returned. For suspected fraud, add the messages and any police or NSRC reference. Keep originals unchanged; use clearly labelled copies for highlights or notes.
Can FMOS help you or your business?
The Financial Markets Ombudsman Service (FMOS) offers a free dispute-resolution service. You don’t need to hire a lawyer to use it. FMOS checks eligibility before registering a case.
For a banking complaint, check four things:
- Are you eligible? The scheme can cover personal, domestic or household customers and qualifying micro or small businesses. A business account alone isn’t enough: FMOS assesses eligibility using the relevant SME Corporation definition.
- What is your complaint about? It must concern a product or service from an FMOS member. Explain what you think the bank did wrong and your direct financial loss. Ask FMOS to assess an authorised mistaken-transfer complaint; its examples of unauthorised transactions don’t automatically cover your situation.
- How much are you claiming? The usual limit is RM250,000 per dispute. A larger dispute needs both you and the institution to jointly agree in writing to submit it.
- Has the dispute gone to court or arbitration? FMOS excludes disputes already filed in court, referred to arbitration or decided by either. Check the route before starting proceedings. Other exclusions and legal time limits also apply.
Keep these two dates
Complain formally to the bank first, then keep:
| Date | Why it matters |
|---|---|
| When you first submitted the dispute to the bank | If it fails to respond within 60 days, you may refer the dispute to FMOS. |
| When you receive the bank’s written final decision | If you’re dissatisfied, the ordinary filing window is six months from receipt. You don’t have to wait out 60 days once you have that decision. |
These referral dates aren’t a reason to delay reporting the transfer, or a promise of recovery within 60 days.
The bank’s final decision should identify itself as final and explain the FMOS route and deadline. FMOS’s rules allow exceptions if the deadline is omitted, and discretion to accept certain late complaints. If the letter is unclear, replies only say the bank is still looking into it, or you think you’re late, contact FMOS promptly with the correspondence. Let it assess your position before you give up on that route.
Use the FMOS filing page listed in Sources below for the current form and checklist. For banking disputes, it asks for the final decision or initial complaint, relevant identification, documents allowing information to be disclosed, and supporting records. A business may also need evidence that it qualifies as micro or small. If something is missing, ask FMOS what to do rather than delaying contact.
Before your next supplier payment
Treat a request to change a supplier’s bank account as a reason to pause. Call the supplier on a number already in your records, not a new number in the request. Ask a second person to check the account details independently. Compare any name returned by the bank with your intended payee, and resolve differences before sending money. These checks can help you manage risk, but don’t guarantee against loss.
Take it one step at a time
Start with the recovery request, explain what happened and keep a record of what the bank does next. You don’t have to work out who is legally responsible before reporting the problem. Your records will help the bank, FMOS or your adviser look at both the payment instructions and how the bank handled them.
FAQ
Does entering the correct payee name guarantee that I’ll get my money back?
No. A name you typed may simply be a label; a name retrieved by the bank is different evidence. Save what the system asked for and showed you. The reported High Court decision doesn’t decide your complaint.
Does the recipient always have to agree before mistaken money can be recovered?
There isn’t one rule you can assume applies to every transfer. The payment service, terms and timing matter. Maybank’s published DuitNow terms distinguish earlier recovery requests from those after seven months. Ask your bank which procedure it is using.
Can a business claim RM1.16 million through FMOS because that was the court award?
No automatic route follows from that award. Business eligibility and the scheme’s exclusions still apply. A claim above the ordinary RM250,000 limit needs both parties’ written agreement to be submitted to FMOS.
Should I wait until I have every document before contacting FMOS?
No. FMOS says you can approach it for consultation and provide documents later. Explain what’s missing, contact it promptly and follow its requests for records. A consultation doesn’t, by itself, mean your dispute has been registered.
What if someone says they accidentally paid money into my account?
Contact your own bank through an official channel and let it check the claim. While it does, avoid spending the disputed money or sending it to another account at a stranger’s request.
About this information
This is general Malaysian legal information, not advice on your particular transfer or banking contract. The case summary relies on two news reports of an oral High Court decision, with the limits explained above. Official guidance and public sources were checked on 11 September 2026. Check the bank terms and FMOS requirements that apply when you act. Urgent court remedies and legal time limits need advice based on your facts and jurisdiction.
Spot something outdated or wrong? Tell us — we’ll verify and correct it.
Sources and what each supports
- The Edge Malaysia, 26 August 2026 — transfer chronology and reported oral reasoning. Secondary reporting; not written court grounds. Source URL: https://theedgemalaysia.com/node/815800
- Free Malaysia Today, 26 August 2026 — separate report of the award, partial recovery and system evidence. It spells the company’s name “Yat Fatt”; The Edge uses “Yatt Fatt”. Both full reports were inspected. Source URL: https://www.freemalaysiatoday.com/category/nation/2026/08/26/bank-subsidiary-to-pay-rm1-16mil-credited-to-wrong-company
- PayNet: Interbank GIRO and IBG cancellation and recovery — distinguish unsuccessful-transfer refunds from recovery attempts after processing; specific to IBG.
- Maybank: DuitNow terms — clauses 2.2–2.3, 2.9 and 5 on recipient information, confirmed payments and recovery. A bank-specific example; the PDF is linked from its 17 November 2023 update. Check the terms applicable to your transaction.
- Government of Malaysia: NSRC 997 — urgent scam-reporting channels; updated 31 July 2026. BNM: fair treatment for victims of unauthorised e-banking transactions — paragraph 5.2 defines “unauthorised transaction” for the policy; sections 8–9 address reporting and investigation. The policy states an effective date of 1 October 2024; it is not used to explain liability for the 2022 transfers.
- FMOS: who can file and scope — complainant eligibility and covered services.
- FMOS Rules — definition of Monetary Limit; rules 3–6 on eligibility, exceptions and referral timing. The fuller rules qualify the abbreviated scope page.
- FMOS: filing guidance and FAQ — complaint dates, documents, free service and eligibility assessment. Forms and operating guidance should be rechecked when filing.