Mrs Philipp claimed against her bank, having fallen victim to an 'authorised push payment' ('APP') fraud, whereby she authorised payments totalling £700k to fraudsters' various international a/cs. The SC, restoring the 1st instance judgment, confirmed the bank's duty to carry out its customer's instructions with reasonable care and skill, disobeying them if reasonable grounds for believing fraudulent agency involved. Where, as here, the instructions came directly from the customer (a feature of APP fraud), the bank might have the right - but had no duty - to disobey such instructions.