A Spanish court has ruled that a bank must return €900,000 to a company that was defrauded after criminals impersonated the firm's chief executive to authorise fraudulent transfers. The judge found that the client was not negligent and that the fraud was a direct consequence of the increasing digitalisation of the banking sector, placing responsibility on the institution. The ruling sets a notable precedent for corporate fraud victims seeking restitution from financial institutions in cases of sophisticated identity-based scams.