The payment that could not be undone

Graduate · enrolled learners

This lesson opens with Citibank's mistaken payment to Revlon's lenders, August 2020.

What happened

Citibank was acting as the administrative agent on a loan owed by the cosmetics company Revlon, and in August 2020 it meant to send lenders a routine interest payment of about 8 million dollars. Through an operational error, staff using a confusing internal payment system did not correctly suppress the principal, and Citibank instead wired about 900 million dollars of its own money to the lenders, accidentally paying off the entire loan. The payment was authorized and executed exactly as the final instruction said, and it was final. When Citibank realized the mistake and asked for the money back, some lenders returned their share, but others, owed the money eventually anyway, refused, and a court initially ruled they could keep hundreds of millions, because a completed wire is presumed intentional and is very hard to claw back. Citibank eventually recovered the funds only after a lengthy appeal. No system was hacked; the payment system did precisely what it was instructed to do, at speed, and the error could not simply be reversed by wishing it away, because an authorized payment is fast and final.

The decision point

An authorized payment is executed exactly as instructed, quickly, and is very hard to reverse, which means the moment of authorization is the moment that matters, and everything after it is difficult and uncertain. Citibank is the case that shows the cost: a payment system given a mistaken instruction carried it out perfectly, moving 900 million dollars that then took a court battle and an appeal to recover, because a completed payment is presumed intentional and finality resists correction. The consequence is that the only reliable defense against a wrong payment is before it is sent, in the controls, confirmations and limits that catch the error at authorization, because once the payment is authorized and executed, you are relying on the goodwill of the recipient and the slow machinery of the courts, not on any ability to undo it. This is the foundation of the whole course on agentic payments, because as the authority to send moves from a person clicking a confusing button to software and to autonomous agents transacting on their own, the payments those agents make will be just as fast and just as final, so the controls that make them safe have to sit before the send, not after, since after the send there may be nothing to be done, as Citibank spent years and a court fight learning.

Recorded loss

$900,000,000

Orientation and Year One are open: anyone can read them without an account. From Year Two onward the lessons are for enrolled learners, because progress through the later years only means anything if it is tracked against a record.

It is free. We do not sell the list and there is nothing to buy at the end of it.