Payment scams are rife. A particularly prevalent form is the authorized push payment (APP) scam. These payments are authorized by a bank customer after falling for a third party’s deceit, which may take many different forms, including fake investment opportunities, impersonation of figures such as bank officers and the police, and diverting an intended payment into the scammer’s account. Because these payments are authorized by the customer, the bank has a valid authority (mandate) to pay and must ordinarily make the payment. Authorized payment scams can be contrasted with unauthorized payments which do not originate from the customer and therefore involve forgery. In such cases, a bank has no authority to pay and at common law will bear the loss, although this is subject to contract terms allocating the loss to the customer. Most authorized payment scams are push payments which means that the payment instruction is sent by the payer to their bank. Examples are payments by mobile phone or home computer. By contrast, pull payment instructions are given by the payer to the payee who initiates the payment process through their own bank. Examples are cheques or direct debits. Pull payments are less prone to authorized payment scams, hence the focus on push payments.