A customer need not bear any loss if the deficiency is on the part of the bank and in cases, where the fault lies neither with the bank nor with the customer but lies elsewhere in the system and the customer notifies the bank within three working days of receiving the communication about the unauthorised transaction.