1. Where a payment services user who is a consumer was manipulated by a third party pretending to be an employee of the consumer's payment service provider or any other relevant entity of a public or private nature using the name or e-mail address or telephone number of that entity unlawfully and that manipulation gave rise to subsequent fraudulent authorised payment transactions, the payment service provider shall refund the consumer the full amount of the fraudulent authorised payment transaction under the condition that the consumer has, without any delay, reported the fraud to the police and notified its payment service provider.
2. Within 10 business days after being notified of the fraudulent authorised payment transaction by the consumer and being presented with the police report, the payment service provider shall do either of the following:
(a) refund the consumer the amount of the fraudulent authorised payment transaction;
(b) where the payment service provider has reasonable
…