9. SECURITY AND CORRECTIVE MEASURES
9.1. Obligations of the Client related with Payment Instruments and Authorization means
9.1.1. The Client authorised to use a Payment Instrument must:
9.1.1.1. use the Payment Instrument in observance of conditions regulating the issuance and use of the Payment Instrument as specified in the General Conditions and/or Contract on Services and/or Service Conditions;
9.1.1.2. having found out that the Payment Instrument has been stolen or lost in any other matter, suspecting or obtaining information about illegal acquisition of the Payment Instrument or unauthorised use thereof as well as about the facts or suspicions that personalised security data of the Payment Instrument (including the means of identification) have become known or might be used by third parties, via email, phone call or using communications options in Profile promptly notify VIALET or any other entity specified thereby in observance of conditions regulating the issuance and use of the Payment Instrument.
9.1.2. Having received the Payment Instrument, the Client, must promptly take all actions (including those specified in General Conditions, Contract on Services and Service Conditions) to safeguard the personalised security data of the received Payment Instrument.
9.1.3. The Client undertakes to protect and not to disclose any Passwords, Authorization code or Passcode created by Client or provided to Client under the Contract on Service or other personalized security means to third parties and not to allow other persons to use Services under the name of the Client. If the Client has not complied with this obligation and/or could, but have not prevented it and/or performed such actions on purpose or due to its own negligence, the Client fully assumes the losses and undertakes to reimburse the losses of other persons incurred due to the indicated actions of the Client or its failure to act.
9.1.4. In the event of loss of Password, Authorization code or Passcode by the Client or disclosure of them, or in case a real threat has occurred or may occur to the Payment Account, the Client undertakes to change the Passwords and Passcode immediately or, if the Client does not have a possibility to do that, notify VIALET thereof immediately (not later than within one Business Day) via email, phone call or using communications options in Profile. VIALET shall not be liable for consequences that have occurred due to the notification failure.
9.1.5. After VIALET receives the notification from the Client as indicated above VIALET shall immediately suspend access to the Payment Account, block the Payment Instrument and provision of VIALET Services until a new Password/Passcode/ Authorization code is provided/created for the Client.
9.1.6. VIALET draws the attention of the Client to the fact that the email linked to the Client’s Profile and also other instruments (e.g. mobile device, mobile phone number), which are linked at the Client’s choice to its Profile, are used as instruments for communication or identification of the Client, therefore these means and logins to them shall be strictly protected by the Client. The Client is completely responsible for safety of its email passwords and all the other means it uses, such as Password, Passcode, payment card CSV and other private credentials. The mentioned data is a secret information and the Client is responsible for its disclosure and for all operations performed after this data is used by the Client for a relevant Payment Account or another Payment Instrument is entered. VIALET recommends memorizing passwords and not to write them down or enter in any instruments where they may be seen by other persons.
9.1.7. VIALET points out that the VIALET App is directly linked to a specific phone number. This means that if the Client loses the phone number used during onboarding, the Client will lose the opportunity to access the Payment Account through VIALET App.
9.2. Blocking of the Account and Payments Instruments
9.2.1. VIALET reserves the right to suspend Payment Transactions, to block the Payment Account and/or the Payment Instrument or suspend any other Service at any time:
9.2.1.1. for objectively justified reasons relating to the security of funds available in the Payment Account and/or security of the Payment Instrument, suspected unauthorised or fraudulent use of funds available in the Payment Account and/or the Payment Instrument, or to the increased risk that the Client might be unable to fulfil his payment obligation to VIALET (including the cases when the Payment Instrument being used allows using the credit granted by VIALET);
9.2.1.2. where the VIALET finds out that the Payment Instrument has been stolen or lost in any other manner, suspects or obtains information about illegal acquisition of the Payment Instrument or unauthorised use thereof as well as about the facts or suspicions that personalised security data of the Payment Instrument (including means of Authorization) have become known or might be used by third parties, or where VIALET has reasonable suspicions that funds available in the Payment Account and/or the Payment Instrument might be illegally used by third parties or that the Payment Account and/or the Payment Instrument might be or has been used for illegal activities;
9.2.1.3. if the Client is in breach of the General Conditions and/or Account Agreement and/or other Contract on Service;
9.2.1.4. in the cases provided for by clause 4.3 of the General Conditions, Service Conditions, Contract on Service or legal acts.
9.2.2. In the cases provided above, VIALET shall notify the Client in the manner specified in the General Conditions or Contract on Service or in any other manner acceptable to VIALET (e.g., by phone, e-mail, VIALET App) about the blocking of the Payment Account and/or Payment Instrument and about the reasons for such blocking, doing its best to notify the Client before the blocking and no later than immediately after the blocking, except in the cases when the provision of such information would impair the safeguards or is prohibited by legal acts.
9.2.3. Access to Payment Account shall be disabled on the Client’s initiative if the Client gives a relevant instruction to VIALET in writing or in other manner agreed between the Parties in Contract on Services.
9.2.4. VIALET shall cancel the blocking of the Payment Account and/or the Payment Instrument when the reasons for the blocking cease to exist or when the blocking has been initiated by the Client -if VIALET receives the respective written request of the Client (unless General Conditions or Contract on Service establish otherwise). VIALET shall have the right to replace the blocked Payment Instrument by a new one.
9.2.5. VIALET shall not be held liable for the Client‘s losses incurred as a result of blocking of the Payment Account and/or the Payment Instrument or suspending the Service, where such blocking or suspending has been performed in observance of the procedure established in the General Conditions, Service Conditions, Contract on Service or legal acts and according to the terms specified in the aforementioned documents.
9.2.6. VIALET may deny an account information service provider or a payment initiation service provider access to a Payment Account for objectively justified and duly evidenced reasons relating to unauthorised or fraudulent access to the Payment Account by that account information service provider or that payment initiation service provider, including the unauthorised or fraudulent initiation of a Payment Transaction. In such cases VIALET shall inform the Client that access to the Payment Account is denied and the reasons therefore. VIALET shall allow access to the Payment Account once the reasons referred to in this for denying the access of the account information service provider and/or of the payment initiation service provider to the Payment Account no longer exists.
9.3. Notifications of the Client regarding unauthorised or incorrectly executed Payment Transactions
9.3.1. The Client shall have a duty to see and check the Statements at least once a month. A failure to inspect the Payment Account balance shall not release the Client from performance of its duties.
9.3.2. The Client must notify VIALET in writing of unauthorised or incorrectly executed Payment Transactions as well as of any other mistakes, inconsistencies or irregularities in the Statement. The Notification must be submitted immediately (within 5 (five) Business Days of finding out about the circumstances mentioned in this clause) and in any case no later than within 60 (sixty) calendar days of the day on which VIALET, in the opinion of the Client, executed an unauthorised Payment Transaction or incorrectly executed a Payment Transaction.
9.3.3. The Client, who is a Consumer or a natural person engaged in economic–commercial or professional activities, must promptly notify VIALET in writing of unauthorised or incorrectly executed Payment Transactions (within the time limit established in clause 9.3.2) and in any case no later than within 13 (thirteen) months of the day of debiting the funds from the Payment Account. These time limits shall not apply in those cases when VIALET has not notified the Client of such unauthorised or incorrectly executed Payment Transaction or has failed to provide conditions for the familiarisation with it in observance of the procedure established in the General Conditions or Contract on Service. The Client, who is not a Consumer or a natural person engaged in economic–commercial or professional activities, must notify VIALET in writing of unauthorised or incorrectly executed Payment Transactions within the time limit established in clause 9.3.2.
9.3.4. Where the Client fails to notify VIALET of unauthorised or incorrectly executed Payment Transactions within the time limit established above, it shall be considered that the Client has unconditionally confirmed Payment Transactions executed in the Payment Account.
9.4. Liability of the Client for unauthorised use of the Payment Instrument and liability of VIALET for unauthorised Payment Transactions
9.4.1. If the Client denies authorizing the Payment Transaction which has been authorized or states that the Payment Transaction has been executed improperly, VIALET is obliged to prove that the authenticity of the Payment Transaction has been confirmed, it has been registered properly and recorded into accounts, and it has not been affected by any technical or any other glitches.
9.4.2. Where the Client, who is not a Consumer, denies that it has authorised the executed Payment Transaction, the use of the Payment Instrument registered by VIALET shall constitute sufficient proof that the Client has authorised the Payment Transaction or acted fraudulently or with intent, or by gross negligence has failed to fulfil one or more obligations established under clauses 9.1.1 – 9.1.2 of the General Conditions.
9.4.3. Where the Client, who is a Consumer, denies that he/she has authorised the executed Payment Transaction, the Payment Instrument’s use registered by VIALET shall not necessarily be sufficient proof that the Client has authorised the Payment Transaction or has acted unfairly or deliberately, or has failed to fulfil one or several duties specified in clauses 9.1.1–9.1.2 of the General Conditions.
9.4.4. Upon receipt of a respective notification of the Client (Payer) within the time limits specified General Conditions or having established that the Payment Transaction has not been authorised by the Client, VIALET shall, without undue delay, but no later than by the end of the next Business Day, return to the Client the amount of such unauthorised Payment Transaction and restore the balance of the Payment Account from which the amount was debited which would have existed if such unauthorised Payment Transaction would not have been executed, unless VIALET has reasonable grounds to suspect fraud. VIALET shall also ensure that the Payer does not incur losses because of interest payable to or receivable from VIALET.
9.4.5. The Customer (Payer), who is a Consumer, shall bear the losses relating to unauthorised Payment Transactions up to EUR 50 (fifty euro), where such losses are incurred as a result of:
9.4.5.1. the use of a lost or stolen Payment Instrument;
9.4.5.2. the misappropriation of the Payment Instrument.
If the Client is not a Consumer and/or the Payment Transaction is executed in the currency of a Member State to/from a Foreign Country or in the currency of a Foreign Country, the Client bears all losses.
9.4.6. The Client (Payer) shall bear all losses relating to unauthorised Payment Transactions, if such losses were incurred because of Client’s failure to fulfil one or several duties specified in clauses 91.1– 9.1.2 of the General Conditions due to fraudulent or deliberate acts or gross negligence.
9.4.7. Where VIALET does not create conditions for notifying, at any time, of the lost, stolen or misappropriated Payment Instrument, VIALET shall bear the losses resulting from unauthorised use of the Payment Instrument, unless the Client has acted unfairly.
9.4.8. Where the Payer lodges a claim with VIALET concerning the Payment Transaction not authorised by Payer and executed by VIALET, the Payee of the funds of which is the Client, such Client (Payee), as the recipient of the funds of the aforementioned Payment Transaction without valid grounds, must immediately repay to VIALET the amount of the aforementioned Payment Transaction transferred to Payee’s Account and agrees with debiting of the funds of such Payment Transaction by VIALET from Payee’s Payment Account.
9.4.9. Where the Client (Payer) lodges a claim with VIALET concerning the Payment Transaction not authorised by Client and executed by VIALET, and VIALET repays to the Client the funds of such Payment Transaction, but later it is established that the Payment Transaction was authorised properly or there are other grounds set out by legal acts for rejecting the Client’s claim (e.g., fraud), such Client, as the recipient of the funds without valid grounds must immediately repay such funds to VIALET and agrees with debiting of the funds of such Payment Transaction by VIALET from Client’s Payment Account.
9.5. Liability of VIALET for the proper execution of Payment Transactions
9.5.1. VIALET shall credit the funds to and debit them from the Payment Account according to the unique identifier specified in the Payment Order, i.e. account number (IBAN). If the Payment Order is executed in accordance with account number stated in the Payment Order, it must deemed to have been duly executed.
9.5.2. VIALET shall have the right to transfer funds to the Payee or credit Payee’s Payment Account based solely on the Payee’s account number specified in the Payment Order even if the Payee’s name (incl. first name and surname) in the Payment Order does not match the indicated account number. VIALET shall have the right but not an obligation to check whether the Payee’s account number given in the Payment Order matches the Payee’s name specified in the Payment Order. If VIALET performs the above referred check (e.g., for the purposes of prevention of money laundering and/or terrorist financing risk and/or fraud etc.) VIALET reserves the right not to execute a Payment Order if it has well-grounded doubts as to correspondence between the name of the Payee and the Payee’s account number contained in the Payment Order.
9.5.3. Where the account number specified by the Payer is incorrect, VIALET shall not be held liable for non- execution or incorrect execution of the Payment Transaction, but must take all possible measures to trace such Payment Transaction and seek the recovery of all funds of such Payment Transaction. VIALET shall have the right to transmit to the payment service provider of the Payer all information necessary to trace the Payment Transaction and to recover the funds, and where the recovery of the funds is impossible, VIALET shall provide to the Payer, upon submission of the latter’s request in writing or using other durable medium, the available information which, in the opinion of VIALET, is necessary for the Payer for invoking legal measures to recover the funds.
9.5.4. Where the Payment Order is initiated directly by the Payer, the Payer’s payment service provider shall be held liable to the Payer for the correct execution of the Payment Transaction. Where the Payer’s payment service provider knows and can confirm to the Payer and to the Payee’s payment service provider that the Payee’s payment services provider received the amount of the Payment Transaction, the Payee’s payment service provider shall be responsible to the Payee for the correct execution of the Payment Transaction and must ensure that the Payer does not incur any losses because of interest payable or receivable from Payer.
9.5.5. Where VIALET as the payment service provider of the Client (Payer) becomes liable under clause 9.5.4 of the General Conditions, VIALET shall immediately refund to the Client (Payer) the amount of the non-executed or incorrectly executed Payment Transaction or shall restore the balance of the Payment Account from which such amount was debited, which would have remained if such incorrect Payment Transaction would not have been executed.
9.5.6. Where VIALET as the payment service provider of the Client (Payee) becomes liable under clause 9.5.4 of the General Conditions, VIALET shall immediately credit the Payment Transaction amount to the Payment Account of the Client (Payee) and/or shall make such amount available to the Client (Payee). Where VIALET receives the Payment Transaction amount intended to the Client (Payee) and cannot credit that amount to the Payment Account of the Client (Payee), VIALET shall immediately, no later than within 2 (two) Business Days, return the Payment Transaction amount to the Payer.
9.5.7. Where, upon initiation of a Payment Order by the Client, the Payment Transaction is not executed or is executed incorrectly, VIALET, at the request of such Client, must immediately and free of charge take measures to trace the Payment Transaction and notify the Client of the results of its search.
9.5.8. VIALET shall indemnify to the Client the full Commission Fee and interest due from the Client because of the non-execution or incorrect execution of the Payment Transaction through VIALET’s fault and shall ensure that the Client does not incur losses because of interest receivable from VIALET.
9.5.9. Provisions of clauses 9.5.4-9.5.8 of the General Conditions shall apply when the Client is a Consumer and the Payment Transaction is executed to or from a Member State. Otherwise, i.e. when the Client is not a Consumer and/or a respective Payment Transaction is executed in any currency to or from a Foreign Country, VIALET shall be held liable for the incorrect execution of the Payment Transaction only when the Payment Transaction is incorrectly executed through the fault of VIALET and shall not be held liable for mistakes made by third parties.
9.5.10. In the event that VIALET makes an unjustified decision regarding the debiting of funds from a payer’s account, leading to losses for the PSU (payee), VIALET shall be liable for compensating the PSU (payee) for such losses.
9.5.11. VIALET shall not be held liable for mutual claims of the Payee and the Payer and shall not settle such claims. The Client may lodge to VIALET only such claims which are related to the non-fulfilment or inadequate fulfilment of the VIALET’s obligations.
9.5.12. VIALET shall not be held liable for mutual claims of the Payee and the Payer and shall not settle such claims. The Client may lodge to VIALET only such claims which are related to the non-fulfilment or inadequate fulfilment of the VIALET’s obligations.
9.5.13. In the event of a disputed payment transaction, VIALET adheres to the regulations set forth by the Bank of Lithuania and promptly investigates the matter.
9.5.14. VIALET may be exempted from the obligation to reimburse the amount of the disputed payment transaction only if there are reasons to suspect fraud on the part of the payer and if VIALET notifies the Bank of Lithuania of these reasons and submits supporting data within the specified time limits.
9.5.15. If VIALET has reasonable grounds to suspect the payer’s intention (dishonesty) and informs the Bank of Lithuania accordingly, it shall have the right to refuse immediate reimbursement of the disputed payment transaction amount to the payer. VIALET shall inform the payer in writing of the reasons for such a decision, along with supporting evidence, and specify the procedure for handling appeals and/or disputes.
9.6. Conditions of refunding to the Payer of amounts of Payment Transactions initiated by or through the Payee.
9.6.1. The Client (Payer) shall have the right to recover the full amount of the authorised and already executed Payment Transaction initiated by or through the Payee (hereinafter these Payment Transactions referred to in this paragraph – Transactions) and the Payer shall not incur losses because of interest payable to or receivable from VIALET, provided that both of the following conditions are met:
9.6.1.1. when authorising a Transaction its precise amount is not specified;
9.6.1.2. the Transaction amount exceeds the amount which could have been reasonably expected by the Client (Payer) considering his previous expenditure, terms and conditions of the Contract on Services and other circumstances, except for the circumstances relating to the exchange of currency, when upon executing a Transaction the currency exchange agreed between the Client and VIALET (e.g., the Reference Exchange Rate) was applied. If, upon giving the consent to execute the Transaction, the Client indicates the maximum permissible amount of such Transactions (one Transaction or several such Transactions executed over a certain period), it shall be considered that such particular maximum amount of the Transactions could have been reasonably expected by the Client;
9.6.1.3.at the request of VIALET, the Client must immediately provide information about the existence of the conditions specified in clauses 9.6.1.1–9.6.1.2 of the General Conditions.
9.6.2. The Client (Payer) shall not be entitled to the refund of amounts of Transaction initiated by or through the Payee under clause 9.6.1 of the General Conditions, if the Client (Payer) has given consent directly to VIALET and VIALET or the Payee has furnished the Client (Payer) in the agreed manner with the information about the future Payment Transaction or created conditions to get familiarised with it at least four weeks before the planned execution of the Transaction.
9.6.3. The Client (Payer) shall have the right to ask VIALET to refund the amount of the Transaction initiated by or through the Payee within 8 (eight) weeks of the day on which the funds were debited from the Payment Account.
9.6.4. Upon receipt of the request of the Client (Payer) to refund the Transaction amount, VIALET shall refund the full amount within 10 (ten) Business Days or shall state the reasons for its refusal to refund such amount and the procedure of appealing against the refusal. VIALET shall have the right to refund the amount of the Transaction to the Payer without investigating the conditions provided for in clause 9.6.1 of the General Conditions and the fact of existence of the circumstances and to take into consideration only the respective request of the Payer. If the Transaction amount is refunded to the Payer, the Commission Fees paid to VIALET and related with the execution of such Transaction shall not be refunded.
9.6.5. Where, in case indicated in clause 9.6.1 of the General Conditions, the Payee is a Client, such Client, on request of VIALET, must immediately furnish VIALET with the documents and information specified thereby pertaining to the Transactions. When the Transaction amount is refunded by VIALET to the Payer, the Payee (Client) of such Transaction amount must immediately return to VIALET the amount of the aforementioned Transaction and agrees with the debiting of the funds of such Transaction from Payee’s Payment Accounts.
9.6.6. The Client (Payer), who is not a Consumer, shall not be subject to the provisions of clauses 9.6.1–9.6.5 of the General Conditions and shall not be eligible to recover the Transaction amount.
9.7. VIALET shall inform the Client about the suspected or actual fraud committed by other parties or about threats to security of payment services by publishing a notification in Website, or by phone, VIALET App message or in other manner that is safe at that time and is best suited to the existing situation.