A Dubai court has ruled against a major UAE bank, holding it liable for professional negligence after it failed to promptly implement customer instructions to revoke banking access, a lapse that led to unauthorised electronic transfers and substantial financial losses.

In its judgment, the court found that the bank breached its duty of care by allowing a former authorised signatory to retain access to a corporate customer’s electronic banking system despite receiving clear and complete instructions to remove that access.

The dispute involved a UAE-based company operating in the maritime and logistics sector, which maintained multiple foreign-currency accounts with the bank. According to court records, the company had formally instructed the bank to revoke the authority of a former signatory and disable all related electronic banking access after concerns arose over the misuse of company funds.

Despite receiving the required mandate change forms and supporting corporate documents in line with its own procedures, the bank failed to act in a timely manner. As a result, multiple unauthorised electronic transfers were carried out within a short period, causing significant financial loss to the company.

The court appointed an independent banking expert to examine the sequence of events. The expert’s report confirmed that the bank delayed implementing the customer’s instructions and verified the value of the unauthorised transfers executed during that period.

In parallel criminal proceedings, the individual responsible for the transfers was later convicted under a final criminal judgment, reinforcing the unlawful nature of the transactions, the court noted.