Banking Law and Payment Dispute Resolution Frameworks in Kuwait

1. Introduction

Payment dispute resolution in Kuwait concerns the legal mechanisms used to resolve disagreements arising from bank transfers, cards, cheques, electronic payments, payment gateways, mobile banking, unauthorized transactions, failed transfers, merchant payments and settlement arrangements.

Unlike a system governed by one comprehensive “Payment Dispute Resolution Act,” Kuwait's framework is spread across several sources of law and regulation. Important sources include:

• Law No. 32 of 1968 concerning Currency, the Central Bank of Kuwait and the Organisation of Banking Business, as amended;
• Kuwait Commercial Law, Decree-Law No. 68 of 1980;
• Law No. 20 of 2014 concerning Electronic Transactions;
• Law No. 39 of 2014 concerning Consumer Protection;
• Central Bank of Kuwait (CBK) instructions and payment-system regulations;
• contractual rules between banks, customers and payment-service providers; and
• Kuwait's civil and commercial procedural rules.

The Central Bank of Kuwait plays the principal regulatory role for banks and regulated payment activities.

A useful way to understand the system is:

Payment occurs → problem identified → bank/PSP complaint → investigation → regulatory or contractual escalation → court/arbitration where necessary.

2. What Is a Payment Dispute?

A payment dispute arises when the parties disagree about whether a payment was properly initiated, authorized, executed, credited or reversed.

Common examples include:

Unauthorized transactions.
A customer claims that someone else used the customer's card or electronic banking credentials.

Incorrect transfer.
Money reaches the wrong beneficiary or an incorrect amount is transferred.

Failed payment.
The customer's account is debited but the beneficiary or merchant does not receive the funds.

Duplicate payment.
The same transaction is processed more than once.

Card dispute.
The customer disputes a card transaction with the issuing bank.

Merchant dispute.
A merchant challenges a reversal, chargeback or withheld settlement.

International transfer dispute.
A disagreement arises between customers, banks or correspondent banks concerning a cross-border payment.

Different disputes may therefore require different legal mechanisms.

3. Role of the Central Bank of Kuwait

The Central Bank of Kuwait is central to the regulatory framework.

Under Kuwait's banking legislation, the CBK supervises banks and regulates important aspects of banking and payment activity.

Its responsibilities relevant to payment disputes include:

• banking supervision;
• payment-system oversight;
• customer-protection requirements;
• electronic-payment regulation;
• operational-risk requirements;
• cybersecurity expectations;
• complaint-handling requirements; and
• supervision of regulated payment-service providers.

The CBK regulatory framework has become increasingly important as Kuwait has moved toward electronic and digital payments.

A bank cannot therefore treat a payment dispute solely as a private contractual disagreement. Regulatory obligations concerning customer protection, security and operational controls may also apply.

4. Payment Service Providers

Modern payments are not performed exclusively by traditional banks.

A transaction may involve:

Customer → payment application → payment service provider → bank → payment network → merchant's bank → merchant

This creates several possible points of failure.

Kuwait's regulatory framework for electronic payment and settlement activities therefore addresses entities providing payment-related services, subject to the scope of CBK licensing and regulation.

A dispute requires identification of which participant was responsible for the relevant stage of the transaction.

For example, a payment gateway failure is legally different from an unauthorized debit caused by compromised banking credentials.

5. Electronic Transactions Law

Law No. 20 of 2014 concerning Electronic Transactions is particularly relevant to modern payment disputes.

It provides legal recognition for electronic transactions, electronic records and electronic signatures within its scope.

This matters because evidence in a payment dispute is frequently electronic.

Examples include:

• login records;
• transaction timestamps;
• electronic instructions;
• OTP records;
• device information;
• account statements;
• authentication records;
• payment confirmations; and
• electronic communications.

Consequently, the absence of a traditional paper instruction does not automatically make an electronic payment legally ineffective.

6. Authentication

Authentication is often the central factual question in an unauthorized-payment dispute.

Suppose a customer states:

“I did not authorize this KD 2,000 transfer.”

The bank may respond that:

• the correct password was entered;
• an OTP was used;
• the transaction originated from a recognized device; and
• an electronic confirmation was generated.

The dispute then becomes more complicated than merely asking whether the bank's system recorded a transaction.

A court may need to consider:

Who actually initiated it?

Were the authentication procedures reliable?

Were the credentials compromised?

Did the customer act negligently?

Did the bank follow required security procedures?

Electronic evidence therefore becomes central.

7. Unauthorized Card Transactions

Card disputes usually involve several contractual relationships:

Cardholder ↔ issuing bank

Issuing bank ↔ card network

Card network ↔ acquiring bank

Acquiring bank ↔ merchant

The cardholder normally begins by challenging the transaction with the issuing bank.

The bank investigates whether the transaction was properly authenticated and whether the card-network rules permit a reversal or chargeback.

However, a chargeback is not identical to a judicial determination.

Card-network rules provide contractual mechanisms between network participants. Kuwaiti law, banking contracts and judicial remedies can remain relevant even after the network process has concluded.

8. Chargebacks

A chargeback generally reverses a card transaction through the relevant payment network when specified conditions are satisfied.

Possible reasons include:

• unauthorized use;
• duplicate processing;
• goods not received;
• incorrect amount;
• cancelled transaction; or
• processing error.

The merchant may contest the chargeback by producing evidence.

Therefore:

Customer complaint → issuer review → chargeback → merchant/acquirer response → network determination

may occur before any court proceedings.

Banks should clearly distinguish this contractual process from statutory customer rights.

9. Bank Transfer Disputes

Bank transfers raise different issues.

Consider:

A instructs Bank X to transfer KD 10,000 to B.

Several disputes could arise.

Scenario 1 — Wrong account entered by customer

The customer supplied incorrect beneficiary information.

Scenario 2 — Bank execution error

The customer supplied correct information but the bank executed the payment incorrectly.

Scenario 3 — Fraud

The customer's payment credentials were compromised.

Scenario 4 — Technical failure

The account was debited but settlement did not complete.

Each scenario produces different questions of contractual responsibility, negligence, evidence and restitution.

10. Mistaken Payments

A mistaken transfer can also involve principles of unjust enrichment and restitution under Kuwait's civil-law framework.

If money reaches a person who has no legal entitlement to retain it, the sender may potentially have a claim for recovery.

However, practical recovery can become difficult if:

• the recipient withdraws the money;
• funds are transferred abroad;
• several intermediary accounts are used;
• fraud is involved; or
• the recipient's identity is uncertain.

Rapid notification to the bank is therefore particularly important.

11. Fraud-Related Payment Disputes

Payment disputes increasingly overlap with fraud and cybersecurity.

Typical examples include:

• phishing;
• impersonation;
• stolen credentials;
• fraudulent payment links;
• account takeover;
• SIM-related fraud; and
• manipulation of payment instructions.

The legal analysis should distinguish between:

authorized but fraud-induced payments

and

completely unauthorized payments.

Suppose a customer personally approves a transfer because a fraudster pretends to be a legitimate business.

Technically, the customer may have authenticated the payment.

That can create a substantially different dispute from one where the customer never participated in the transaction.

12. Bank's Duty of Care

Banks are expected to operate payment services with appropriate professional and security controls.

Potential questions include whether the bank:

• followed the customer's mandate;
• properly authenticated instructions;
• maintained reasonable security;
• detected unusual transactions;
• complied with regulatory requirements;
• responded promptly after notification; and
• preserved transaction evidence.

But the bank is not automatically liable whenever a customer loses money.

Liability depends upon the facts, contractual terms and applicable statutory and regulatory rules.

13. Customer Responsibilities

Customers can also have contractual obligations concerning payment security.

These can include requirements to:

• protect passwords;
• protect authentication devices;
• avoid sharing OTPs;
• report lost cards;
• report unauthorized transactions promptly; and
• monitor account statements.

A dispute can therefore involve contributory conduct by the customer as well as the bank's conduct.

A contractual clause cannot necessarily excuse a bank from every form of liability merely by shifting all risk to the customer. Mandatory law, consumer protection and judicial interpretation remain relevant.

14. Consumer Protection

Law No. 39 of 2014 concerning Consumer Protection adds another layer where the customer qualifies for consumer protection.

Issues can include:

• misleading information;
• unfair practices;
• inadequate disclosure;
• contractual transparency;
• complaint handling; and
• provision of services inconsistent with agreed terms.

Retail banking contracts should therefore clearly explain matters such as fees, transaction authorization, customer responsibilities and dispute procedures.

15. Complaint Resolution

The first stage of a payment dispute will ordinarily be the financial institution's internal complaint mechanism.

A typical process is:

Stage 1 — Customer notification

The customer reports the disputed payment.

Stage 2 — Registration

The institution records the complaint.

Stage 3 — Investigation

Transaction records and authentication evidence are examined.

Stage 4 — Response

The bank or payment provider gives its position.

Stage 5 — Escalation

Where available and applicable, the matter may be escalated through the relevant CBK/customer-protection mechanism.

Stage 6 — Judicial or arbitral proceedings

Unresolved disputes may ultimately require litigation or, where legally applicable and contractually agreed, arbitration.

The precise route and deadlines depend upon the type of payment, institution and contractual framework.

16. Evidence

Evidence is crucial in payment litigation.

Relevant material can include:

Importantly, successful authentication is evidence, but the legal consequences still depend on the full circumstances.

17. Cross-Border Payments

International payment disputes are particularly complicated.

A transfer may involve:

Kuwaiti customer → Kuwaiti bank → correspondent bank → foreign intermediary → beneficiary bank

Potential issues include:

• governing law;
• jurisdiction;
• correspondent-bank contracts;
• sanctions screening;
• AML controls;
• incorrect beneficiary information;
• foreign exchange;
• payment-message standards; and
• intermediary-bank deductions.

A Kuwaiti bank may therefore not control every stage of an international payment.

18. AML and Payment Delays

Not every delayed or blocked payment constitutes a breach by the bank.

Kuwaiti financial institutions operate under anti-money-laundering and counter-terrorist-financing requirements.

Transactions can require:

• customer verification;
• sanctions screening;
• source-of-funds investigation;
• transaction monitoring; or
• regulatory reporting.

Consequently, payment processing may sometimes be restricted because of legal compliance requirements.

Whether the bank acted lawfully depends upon the applicable AML/CFT framework and the particular circumstances.

19. Cheque Disputes

Cheques remain important in Kuwaiti commercial law.

Disputes can concern:

• signature authenticity;
• insufficient funds;
• alteration;
• endorsement;
• payment;
• presentment;
• stop-payment instructions; and
• underlying contractual obligations.

The Kuwaiti Commercial Law contains important rules governing commercial papers, including cheques.

Cheque disputes should therefore be distinguished from ordinary electronic-payment disputes.

20. Case Law

A methodological caution is necessary here: reported Kuwaiti judgments are not available internationally with the same comprehensive public citation infrastructure as CJEU, UK or US judgments. It would be unreliable to invent Kuwait Court of Cassation numbers or dates simply to produce six citations.

Kuwaiti banking jurisprudence nevertheless contains recurring Court of Cassation principles highly relevant to payment disputes. The following are best understood as established lines of Kuwaiti cassation jurisprudence, rather than fabricated individual case citations.

Case-Law Principle 1 — Banks and Customer Instructions

Kuwaiti commercial jurisprudence generally treats the bank-customer relationship as contractual, with the bank required to execute valid customer instructions in accordance with the applicable agreement and professional obligations.

Payment relevance

Where a bank transfers:

KD 25,000 instead of KD 2,500,

the central issues include whether the customer's instruction was clear and whether the bank correctly executed it.

A bank's records are important evidence but do not automatically eliminate judicial examination of the underlying mandate.

21. Case-Law Principle 2 — Burden of Proof in Banking Transactions

Kuwaiti Court of Cassation jurisprudence gives significant importance to general evidentiary principles: a party asserting a legal right normally has to establish the factual and legal basis for that claim, while the opposing party may prove payment, discharge or another defence.

Payment relevance

A customer alleging an incorrect debit must identify and establish the disputed transaction.

The bank can respond with:

• account records;
• transaction instructions;
• authorization evidence; and
• other records demonstrating execution.

The court evaluates the complete evidentiary record.

22. Case-Law Principle 3 — Bank Statements Are Evidence but Disputes Remain Reviewable

Kuwaiti commercial cases recognize the evidential significance of banking books, statements and account records.

However, disputes over the underlying entries can still require judicial examination.

Example

A statement showing:

Transfer: KD 7,500

establishes powerful evidence that the banking system recorded the transaction.

It does not necessarily answer the separate question:

Was the transfer legally authorized?

That distinction is particularly important in electronic-payment fraud.

23. Case-Law Principle 4 — Expert Evidence in Banking Disputes

Kuwaiti courts frequently use court-appointed experts in complex commercial and banking disputes.

An expert may examine:

• account records;
• transfers;
• contractual documents;
• payment calculations;
• debit and credit entries; and
• technical records.

The ultimate legal determination remains for the court.

Payment relevance

Expert evidence becomes particularly useful when hundreds of transactions or technically complicated payment records are disputed.

24. Case-Law Principle 5 — Contractual Interpretation

Kuwaiti cassation jurisprudence consistently recognises the importance of interpreting contracts according to their wording and the parties' legal obligations, subject to mandatory law.

This matters because payment disputes frequently depend upon the banking agreement.

For example, the contract may determine:

• how instructions can be given;
• authentication requirements;
• notification procedures;
• payment cut-off times;
• applicable fees; and
• customer reporting obligations.

A bank cannot analyse liability by examining the transaction record alone; the governing contract must also be considered.

25. Case-Law Principle 6 — Unjust Enrichment and Recovery of Undue Payments

Kuwaiti civil-law principles concerning payment without legal entitlement and unjust enrichment can become relevant where money is transferred to a recipient by mistake.

Example

Bank A mistakenly credits KD 30,000 to Customer B.

Customer B had no contractual or other entitlement to receive the money.

The fact that the amount appeared in B's account does not necessarily create a substantive right to retain it.

Restitution principles may support recovery, subject to the circumstances and applicable procedural rules.

26. Case-Law Principle 7 — Fraud and Forged Instructions

Kuwaiti banking litigation also distinguishes genuine customer instructions from transactions involving forgery, fraud or other unauthorized conduct.

The legal consequences can depend upon:

• authenticity;
• negligence;
• banking procedures;
• customer conduct;
• causation; and
• contractual allocation of risk.

This principle has become increasingly important as banking has shifted from handwritten payment instructions toward electronic authentication.

27. Hypothetical Case Study

Consider a Kuwait resident who discovers:

Three electronic transfers: KD 4,000 each

The customer claims all three were unauthorized.

The bank's records show:

• correct credentials;
• OTP authentication;
• recognized mobile device; and
• electronic confirmations.

The customer argues that the account was compromised.

The legal analysis should proceed through several questions.

Question 1 — Authorization

Who actually initiated the transactions?

Question 2 — Authentication

Were the authentication systems properly functioning?

Question 3 — Security

Did the bank comply with applicable CBK requirements?

Question 4 — Customer conduct

Were credentials or OTPs disclosed?

Question 5 — Notification

How quickly was the fraud reported?

Question 6 — Causation

Whose conduct legally caused the loss?

Question 7 — Contract

How does the account agreement allocate responsibilities?

A court should therefore not decide the dispute simply from the fact that an OTP was recorded.

28. Merchant Payment Dispute

Consider another example.

A Kuwait merchant sells goods worth:

KD 1,500

The customer pays by card.

Later, the customer disputes the transaction.

The issuer initiates a chargeback.

The merchant provides:

• invoice;
• payment authorization;
• delivery confirmation; and
• customer correspondence.

The dispute may initially be resolved under card-network rules.

But contractual or judicial proceedings may subsequently arise between the merchant and acquiring bank or between other parties if significant amounts remain disputed.

29. Fintech and Mobile Payment Disputes

Digital wallets and fintech platforms create additional complexity.

A transaction can involve:

User → wallet → PSP → settlement bank → card/payment network → merchant

Determining responsibility requires identifying precisely where the failure occurred.

For example:

Wallet displays successful payment

but

Merchant never receives settlement.

The dispute could involve:

• platform malfunction;
• settlement failure;
• bank processing;
• network processing;
• merchant-system error; or
• reconciliation error.

Regulatory responsibility therefore cannot be assigned simply because the customer's interface displayed one result.

30. Smart Contracts and Automated Payments

Kuwait's Electronic Transactions Law also provides an important legal foundation for increasingly automated commercial activity.

Future payment disputes may involve:

• API-generated payment instructions;
• automated treasury systems;
• machine-to-machine payments;
• tokenized assets; or
• smart-contract-based settlement.

The core legal questions remain familiar:

Who authorized the payment?

What constituted the instruction?

Was the electronic record reliable?

Did the system execute the agreed terms?

31. Relationship Between Payment Law and Banking Regulation

Payment dispute resolution should therefore be viewed as three interconnected layers.

Layer 1 — Private law

Determines contractual rights between:

customer ↔ bank ↔ merchant ↔ PSP

Layer 2 — Banking regulation

CBK rules determine regulatory standards for banks and regulated payment providers.

Layer 3 — Procedural law

Courts, evidence rules, experts and—where validly agreed—arbitration determine how unresolved claims are adjudicated.

A single payment incident can engage all three simultaneously.

32. Practical Dispute-Resolution Framework

For Kuwaiti banks, a strong framework can be represented as:

Transaction monitoring

↓

Customer complaint

↓

Immediate fraud/security assessment

↓

Preservation of electronic evidence

↓

Transaction authentication review

↓

Card/network procedure where applicable

↓

Internal complaint determination

↓

Relevant regulatory/customer-protection escalation

↓

Negotiation or settlement

↓

Court or arbitration where applicable

This layered approach reduces the need for every disputed transaction to become full litigation.

33. Major Legal Risks for Banks

Kuwaiti financial institutions should particularly monitor:

Unauthorized payment risk — transactions allegedly made without customer consent.

Cybersecurity risk — compromised accounts and authentication systems.

Operational risk — processing and settlement failures.

Evidence risk — inability to reconstruct the transaction.

Contract risk — unclear electronic-banking conditions.

Consumer-protection risk — unfair or insufficiently transparent terms.

AML risk — fraudulent or suspicious payment flows.

Third-party risk — failures by payment processors or technology providers.

Cross-border risk — conflicting jurisdictions and intermediary banks.

Reputational risk — poor complaint handling can damage customer confidence even where the bank ultimately has no legal liability.

34. Core Legal Framework at a Glance

35. Conclusion

Payment dispute resolution in Kuwait is a multi-layered banking-law framework rather than a single statutory procedure. The Central Bank of Kuwait provides the principal regulatory framework, while the Commercial Law, Electronic Transactions Law, Consumer Protection Law and general civil-law principles determine important private-law rights and liabilities.

For traditional payments, disputes frequently concern customer mandates, cheques, transfers and account entries. For digital payments, the focus increasingly shifts toward electronic authorization, authentication, cybersecurity, transaction logs and digital evidence.

Kuwaiti Court of Cassation jurisprudence is particularly important for principles concerning bank-customer contractual relationships, proof of transactions, banking records, expert evidence, contractual interpretation, mistaken payments and unauthorized instructions.

The essential legal question is therefore not simply whether the bank's computer system shows that a payment occurred. A complete dispute analysis must determine:

who authorized the transaction, whether the bank executed it correctly, whether applicable security procedures were followed, whether the customer contributed to the loss, what the contract provides, and whether reliable evidence establishes those facts.

For modern Kuwaiti banking, an effective payment-dispute framework therefore combines prevention, authentication, evidence preservation, internal complaints, CBK regulatory protection, card/payment-network procedures and ultimately judicial or arbitral remedies where appropriate.