preloader image

Loading...

The Legal Affair

Let's talk Law

The Legal Affair

Let's talk Law

Kerala High Court: ATM Fraud Losses Not Covered Under Banker’s Indemnity Policy When Policy Explicitly Excludes ATM-Related Risks

Kerala High Court: ATM Fraud Losses Not Covered Under Banker’s Indemnity Policy When Policy Explicitly Excludes ATM-Related Risks

Introduction:

In New India Assurance Co. Ltd. and Others v The Federal Bank Ltd., the Kerala High Court delivered a significant ruling on the interpretation of insurance contracts, particularly in relation to Banker’s Indemnity Insurance Policies and the scope of exclusion clauses contained therein. The Division Bench comprising Justice Sathish Ninan and Justice P. Krishna Kumar examined whether losses suffered by a bank due to fraudulent ATM withdrawals could be recovered under an indemnity policy when the policy expressly excluded losses arising out of the use of Automated Teller Machines (ATMs) or electronic data processing systems. The dispute arose after Federal Bank instituted a civil suit seeking recovery of ₹83,34,600 from New India Assurance under a Banker’s Indemnity Policy covering the period between April 2012 and March 2013. According to the bank, a series of fraudulent ATM transactions carried out by individuals using debit cards issued by other banks resulted in substantial financial losses. The trial court had ruled in favour of the bank and directed the insurer to indemnify the loss, holding that the fraudulent transactions fell within the coverage of the policy. Aggrieved by the decree, the insurance company approached the High Court challenging the findings of the trial court. The High Court was therefore called upon to determine the scope of coverage under the insurance contract and whether the policy’s exclusion clauses barred indemnification of the losses claimed by the bank. In resolving the dispute, the Court analysed the wording of the policy, the nature of the fraudulent transactions, the applicability of the add-on “Fraud Protection Cover,” and the relevance of established doctrines such as the contra proferentem rule and the unities doctrine in insurance law.

Background of the Case:

The dispute originated from a series of fraudulent ATM transactions that occurred between April and May 2012 across multiple ATM locations operated by Federal Bank. According to the bank, fraudsters had devised a specific modus operandi to exploit a loophole in the functioning of ATM machines. The perpetrators used ATM cards issued by other banks to withdraw cash from Federal Bank ATMs. However, during the withdrawal process, they deliberately collected only part of the cash dispensed while inserting or leaving a currency note in the ATM presenter slot. This interference caused the ATM machine to retract the remaining notes without properly counting them. As a result of the system malfunction triggered by the manipulation, the ATM software registered the transaction as unsuccessful or incomplete and automatically reversed the entire withdrawal amount to the cardholder’s bank account. Consequently, the fraudsters succeeded in obtaining cash while also receiving a full refund of the withdrawn amount in their respective accounts. This fraudulent technique was repeated at several ATM locations across the country, causing significant financial loss to Federal Bank. The bank estimated that the cumulative loss from these transactions amounted to ₹83,34,600. Since the bank had obtained a Banker’s Indemnity Insurance Policy from New India Assurance for the relevant period, it sought indemnification for the loss under the policy. The bank argued that the fraudulent transactions constituted a covered risk under the policy and therefore the insurer was liable to compensate the bank for the losses incurred. However, the insurance company rejected the claim, contending that the losses fell outside the scope of the policy coverage because of specific exclusion clauses that barred liability for losses arising from ATM operations or electronic data processing systems. This disagreement ultimately led the bank to file a civil suit seeking recovery of the claimed amount from the insurer. The trial court examined the evidence and accepted the bank’s contention that the fraudulent transactions were covered under the policy, consequently decreeing the suit in favour of the bank. The insurance company challenged this decree before the Kerala High Court through an appeal.

Arguments on Behalf of the Appellants (Insurance Company):

The appellants, represented by senior advocate George Cherian along with advocates Latha Susan Cherian and K.S. Santhi, strongly contested the trial court’s findings and argued that the decree directing indemnification was legally unsustainable. The insurer contended that the trial court had failed to properly interpret the terms and conditions of the Banker’s Indemnity Policy, particularly the exclusion clauses that explicitly barred liability for losses arising from ATM-related transactions. The appellants emphasised that insurance contracts must be interpreted strictly in accordance with their terms, and courts cannot extend the scope of coverage beyond what is clearly stipulated in the policy. According to the insurer, the policy contained an express exclusion clause stating that losses arising from manipulation or fraudulent use of computers or electronic data processing systems, as well as losses directly resulting from the use of ATMs, were not covered under the policy. The appellants argued that the fraudulent withdrawals in the present case had occurred entirely through ATM transactions and therefore squarely fell within the scope of the exclusion clause. Consequently, the insurer maintained that it had no contractual obligation to indemnify the bank for such losses. The appellants further submitted that the trial court had incorrectly concluded that the fraudulent transactions amounted to a covered risk. According to the insurer, the policy only covered certain specified risks such as theft occurring within the ATM premises or physical damage to the ATM machine caused by malicious acts. The policy did not extend coverage to losses resulting from fraudulent use of the ATM system itself. Therefore, the trial court had erroneously expanded the coverage of the policy beyond its intended scope. The insurance company also addressed the bank’s reliance on the add-on “Fraud Protection Cover,” arguing that this additional cover applied only to debit card holders of Federal Bank and did not extend to transactions conducted using cards issued by other banks. Since the fraudulent transactions in question involved cards belonging to other banks’ customers, the add-on cover was clearly inapplicable. Furthermore, the appellants rejected the bank’s argument based on the “unities doctrine,” which was invoked to suggest that all the fraudulent withdrawals formed part of a single coordinated event. The insurer argued that the transactions occurred at different locations across the country, on different dates, and through separate ATM machines. Therefore, they could not be treated as a single occurrence under insurance law. The appellants also contended that even if the claim were to be considered under the policy, the excess clause limiting liability to amounts exceeding ₹25,000 per claim would further reduce or eliminate the insurer’s liability. On these grounds, the insurance company urged the High Court to set aside the trial court’s decree and dismiss the bank’s claim.

Arguments on Behalf of the Respondent (Federal Bank):

Federal Bank, represented by advocate Madhu Radhakrishnan, defended the trial court’s judgment and maintained that the losses suffered by the bank were indeed covered under the Banker’s Indemnity Policy. The bank argued that the fraudulent withdrawals constituted dishonest and fraudulent transactions, which were precisely the type of risks that indemnity insurance policies are designed to cover. According to the bank, the policy should be interpreted in a manner that gives effect to its protective purpose, particularly when the loss arises from criminal or fraudulent acts committed by third parties. The respondent bank also relied on the contra proferentem rule, a well-established principle in insurance law which provides that when a policy contains ambiguous terms, such ambiguity should be interpreted against the insurer who drafted the contract and in favour of the insured. The bank contended that the exclusion clauses relied upon by the insurer were not sufficiently clear to exclude the type of loss suffered in the present case. Therefore, the ambiguity should be resolved in favour of the insured bank. The bank further argued that the add-on “Fraud Protection Cover” provided additional protection against fraudulent transactions involving debit cards and should be interpreted broadly to include ATM-related fraud. According to the respondent, the extension of coverage under the add-on policy indicated the insurer’s intention to cover losses arising from fraudulent transactions in electronic banking systems. The bank also advanced the argument that the series of fraudulent withdrawals constituted a single coordinated scheme carried out by the perpetrators using a uniform modus operandi. Therefore, the losses should be treated as a single occurrence under the “unities doctrine,” which is often applied in insurance law to determine whether multiple incidents constitute one event or several separate events. The respondent relied on judicial precedents and argued that when multiple acts arise from a common design or scheme, they may be treated as a single occurrence for the purpose of insurance coverage. Finally, the bank contended that the insurer could not rely on the excess clause at the appellate stage because the clause had not been cited in the original repudiation letter issued by the insurer when the claim was rejected. According to the bank, the insurer could not introduce new grounds for repudiation after the dispute had progressed to litigation. On these grounds, the bank urged the High Court to uphold the trial court’s decree directing the insurer to indemnify the bank for the losses incurred.

Court’s Analysis and Interpretation of Insurance Policy:

The Kerala High Court undertook a detailed examination of the policy terms and the legal principles governing interpretation of insurance contracts. The Court emphasised that insurance policies are essentially contractual arrangements between the insurer and the insured, and their interpretation must be guided by the express terms contained in the contract. Courts cannot rewrite or expand the scope of coverage beyond what the parties have agreed upon. The Bench reiterated several settled principles of insurance law. Firstly, insurance policies must be interpreted strictly based on the language used in the contract. Secondly, when a policy contains genuine ambiguity, courts may apply the contra proferentem rule to interpret the ambiguity in favour of the insured. Thirdly, exclusion clauses must be construed narrowly; however, when an exclusion clause is clear and unambiguous, courts must give full effect to it. Applying these principles, the Court closely examined the exclusion clauses contained in the Banker’s Indemnity Policy issued to Federal Bank. The Bench found that the policy specifically excluded liability for losses arising from manipulation or fraudulent use of computers or electronic data processing systems. It also contained an express exclusion for losses arising directly from the use of ATMs. Based on these clauses, the Court concluded that the policy clearly distinguished between two categories of risks: physical risks involving theft or damage occurring within ATM premises, and operational risks arising from fraudulent use of the ATM system itself. According to the Court, the policy covered only the former category and not the latter. The Court therefore held that the fraudulent ATM withdrawals in the present case fell squarely within the exclusion clause because they arose directly from the use and manipulation of the ATM system.

Court’s Findings on Additional Fraud Protection Cover:

The Court also examined the bank’s reliance on the additional “Fraud Protection Cover.” The Bench observed that the additional cover was designed specifically to protect debit card holders of Federal Bank against fraudulent transactions involving their cards. However, the fraudulent transactions in the present case involved ATM cards issued by other banks. Therefore, the protection provided by the add-on policy was clearly inapplicable to the losses suffered by Federal Bank. The Court clarified that the additional cover merely enhanced the monetary limits applicable to certain categories of losses already covered under the policy, such as losses occurring “on premises” or “in transit.” It did not introduce new risks into the policy or expand its coverage to include ATM-related fraud. Consequently, the Court rejected the bank’s argument that the add-on cover extended protection to the losses claimed in the present case.

Rejection of the Unities Doctrine:

The High Court also addressed the respondent’s reliance on the unities doctrine, which is sometimes applied to determine whether multiple incidents constitute a single occurrence for the purpose of insurance coverage. The Court referred to the decision in Kuwait Airways Corporation v Kuwait Insurance Co. and explained that the doctrine requires certain unifying factors such as unity of time, unity of place, unity of cause, and unity of intent. In the present case, the fraudulent transactions occurred at different ATM locations across the country, on different dates, and involved separate transactions. Therefore, the Court concluded that the necessary elements required to apply the unities doctrine were absent. The Bench held that the losses could not be treated as arising from a single event.

Court’s Observations on the Excess Clause:

While examining the insurer’s reliance on the excess clause, the Court observed that the insurer had not invoked this clause in the original repudiation letter issued to the bank. Therefore, the insurer could not rely on the clause at a later stage to deny the claim entirely. However, the Court clarified that this finding did not assist the bank because the claim itself fell outside the scope of the policy coverage due to the exclusion clauses.

Final Judgment:

After analysing the policy terms and the arguments advanced by both sides, the Kerala High Court concluded that the losses suffered by Federal Bank were excluded from the coverage of the Banker’s Indemnity Policy. The Court held that the fraudulent withdrawals arose directly from the use and manipulation of ATM systems and therefore fell squarely within the exclusion clauses contained in the policy. Since the policy clearly excluded such losses, the insurer could not be held liable to indemnify the bank. Accordingly, the High Court allowed the appeal filed by the insurance company, set aside the trial court’s decree directing indemnification, and dismissed the bank’s suit.