Citibank's $900 million mistransfer—and the court ruling that let the recipient keep it
Finality isn't a built-in property of payment methods, but is determined by relationship, rules, and governing law—Citibank's mistransfer ultimately hinged on the appeals court, not the industry phone call.
The video won't play here. Listen to the audio instead:
The argument · timestamps estimated from transcript position
Payment finality is fundamentally a probability distribution
Finality isn't a binary property of payment methods themselves—it's a probability shaped by technology, organizational infrastructure, the relationship between parties, and governing law. Bitcoin is the extreme counter-example: the crypto community believes 'code is law' and transactions are irreversible, yet a $70 million Bitcoin transfer in 2016 was partially unwound by 2022 when state power intervened—protocol rules themselves don't matter when governments act.
— Patrick McKenziePayment networks sell predictability, not finality
Rails like credit card networks and Fedwire issue rules, not law; they operate dispute procedures, not courts. The key: nearly all credit card disputes that actually matter are decided by a junior employee at the card issuer, and different issuers rule vastly differently on similar cases—issuers catering to high-net-worth customers lean toward protecting cardholders. This soft guarantee is what lets strangers who don't trust each other trade online; it's the mechanism that made internet commerce possible.
— Patrick McKenzieWire transfers run on a phone call, not finality commitments
Wire transfers were designed to be highly reversible: two operators—one from the sending bank, one from the receiving—make a brief phone call to agree on an oral reversal, then follow up with written documentation called a 'hold harmless' agreement. The whole thing takes minutes. These informal reversals happen hundreds of thousands of times a day. By contrast, recovering a single stolen Bitcoin took multiple federal agencies over five years and only netted $4.5 billion.
— Patrick McKenzieA form bug at Citibank wired out the entire principal
In 2020, Citibank was administrative agent for a roughly $1.8 billion Revlon loan. Intending to remit about $8 million in interest on behalf of Revlon, the bank's internal Flexcube system had a form flaw: leaving certain fields blank would cause it to wire out the entire principal—nearly $900 million—and the confirmation screen looked identical. Two contractors in India plus one approver in Delaware let it through; the money went out.
— Patrick McKenzieThe trial court ruled the recipients could keep the money
Citibank sent a reversal notice within a day, and about $400 million was gradually returned. But about ten funds and high-net-worth individuals insisted on keeping roughly $500 million, arguing the money looked like a legitimate repayment they were owed. The trial court invoked a rare discharge-for-value defense under New York law, ruling these creditors could legally keep it—until two years later, the appeals court reversed, finding that allowing this outcome would be 'highly unusual and destructive.'
— Patrick McKenzieThe UK, India, and Japan each chose a different fraud-finality rule
Facing app-fraud losses, three countries chose completely different paths. The UK made banks cover APP fraud (capped at roughly £85,000, previously exceeded £400,000), paying out about £173 million in the first year and seeing fraud drop 21%. India gives users one-time reversal rights, then relies on a regulator-funded pool to prevent moral hazard—the sense that someone will always bail you out. Japan barely uses official reversal procedures (even bankers unfamiliar with them), instead relying on tellers to intercept elderly customers and lower ATM withdrawal limits, but when they freeze mule accounts afterward, the money is usually already gone.
— Patrick McKenzieIn their own words · checked verbatim
If they were really final, the world would break
Patrick McKenzie1:23
If you and the United States federal government disagree whether a transaction is final, you are wrong.
Patrick McKenzie2:10
Of course wires are reversible. They were not designed by children, but by professionals who live in a society which has systemically important institutions
Patrick McKenzie7:34
Yeah, we goofed and sent you $1.2 billion to the wrong account. Mondays, am I right?
Patrick McKenzie9:00
Hey guys, we goofed. You're going to do the thing that the culture that is New York City strongly suggests you're going to do right now, right?
Patrick McKenzie13:50
it's just monstrously perverse and disruptive that this transaction would get allowed to stand
Patrick McKenzie21:00
Please don't get defrauded frequently. We would like to avoid the sort of moral hazard of you assuming that we will always cover for your mistakes.
Patrick McKenzie27:00
Figures
| Citibank mistransfer of Revlon loan principal | nearly $900 million | 13:26 |
| Amount returned vs. retained after mistransfer | approximately $400 million returned, approximately $500 million retained | 18:11 |
| Revlon loan size in 2016, with Citibank as administrative agent | approximately $1.8 billion | 13:26 |
| Bitcoin transfer (2016, partially unwound by 2022) | approximately $70 million | 1:23 |
| Time to recover approximately $4.5 billion in Bitcoin, multiple federal agencies | over 5 years | 7:34 |
| UK banks' APP fraud reimbursements in first year | approximately £173 million | 23:09 |
Glossary
- Hold harmless
- An informal written agreement between banks (following an oral understanding between operators) to reverse a mistransmitted transfer—standard industry practice.
- Discharge-for-value defense
- Under New York law, the argument that a recipient who believed in good faith they were legitimately owed the funds need not return a mistransmitted payment.
- APP fraud
- Fraud in which victims are manipulated into initiating the transfer themselves (as opposed to account takeover)—the term used in UK regulation.
- Mule account
- An intermediary bank account used by fraud networks to move and extract stolen funds.
- Flexcube
- Citibank's internal system for processing loan repayment operations.
- Kumimodoshi
- Japan's official wire-transfer reversal procedure, rarely used and unfamiliar even to bankers.
How to listen
Professionals handling cross-border remittances, settlement, or platform fund controls, plus anyone wondering whether mistransmitted money can be recovered.
Sponsor reads at 14:52-18:11 (Mercury, Granola) can be skipped.