[2026] NSWDC 262
General information, not legal advice.
District Court of NSW
2026-07-31
Hollo SC DCJ
Original judgment source is linked above.
Zoe will write a short plain-English summary of this judgment and email it to you for free: what it was about, what the court decided and why. It can take up to a minute.
General information, not legal advice.
Or create a free account to save it and ask Zoe follow-up questions.
Source: NSW Caselaw (www.caselaw.nsw.gov.au). Converted to plain text by ZoeLaw. Not the official version.
Medium Neutral Citation: MJ CONCEPTS KOTARA PTY LIMITED v PANDORA JEWELLERY PTY LIMITED (No 2) [2026] NSWDC 262
Hearing dates: 15-18 and 26 June 2026, final submissions 30 June 2026
Date of orders: 31 July 2026
Decision date: 31 July 2026
Jurisdiction: Civil
Before: Hollo SC DCJ
Decision: See [431] below
Catchwords: Third-party fraud – interception of email account for purpose of requesting payment by electronic funds transfer
Estoppel by representation – ostensible authority – whether Plaintiff bound by representation of authority – whether reliance on representation reasonable – whether Defendant put on inquiry
Contract – Failure to mitigate – whether claim for recovery of monies was an action in debt – assessment of date of breach of contract – whether failure to alert Defendant amounted to a failure to mitigate
Estoppel by representation – silence – whether failure to respond to Defendant’s emails was a representation that contract had been complied with – whether reliance on Plaintiff’s conduct reasonable
Legislation Cited: Electronic Transaction Act 2000 (NSW), s 14
Uniform Civil Procedure Rules, Rule 14.14
Cases Cited: 183 Eastwood Pty Limited v Dragon Property Development & Investment Pty Limited [2023] NSWCA 72
Advanced National Services Pty Ltd v Daintree Contractors Pty Ltd [2019] NSWCA 270
Alexander v Cambridge Credit Corporation Limited (1987) 9 NSWLR 310
ASIC v Hellicar (2012) 247 CLR 345
Australian and New Zealand Banking Group Limited v Liebmann [2010] NSWSC 545
Bak v Glenleigh Homes Pty Limited [2006] NSWCA 10
Banque Commerciale S.A., En Liquidation v Akhil Holdings Limited (1990) 169 CLR 279
Behan v Obelon Pty Ltd [1984] 2 NSWLR 637
Byron Shire Council v Vaughan [2002] NSWCA 158
Calabria Community Club Limited v Christer Nominees Pty Limited [2025] NSWCA 65
Ceerose Pty Ltd v The Owners – Strata Plan No 89074 [2025] NSWCA 235
Chand v Commonwealth Bank of Australia [2015] NSWCA 181
Commercial Union Assurance Co of Australia Limited v Ferrcom Pty Limited (1991) 22 NSWLR 389
Commissioner of Taxation v Bendel [2026] HCA 18
Crabtree-Vickers Pty Limited v Australian Direct Mailing Advertising & Addressing Company Pty Ltd (1975) 133 CLR 72
Dare v Pulham (1982) 148 CLR 658
Edwin Davey Pty Ltd v Boulos Holdings Pty Ltd [2022] NSWCA 65
Essington Investments Pty Limited v Regency Property Pty Limited [2004] NSWCA 375
Factory Direct Fencing Pty Limited v Kong AH International Company Limited [2013] QDC 239
Freeman & Lockyear v Buckhurst Park Properties (Mangal) Limited [1964] 2 QB 480
Hexiva Pty Ltd v Lederer [2006] NSWSC 1129
Hill Foundation Pty Ltd v 131 MVR Pty Ltd [2022] NSWSC 520
Jones v Dunkel (1959) 101 CLR 298
Karacominakis v Big Country Developments Pty Limited [2000] NSWCA 313; (2000) BPR 18,235
Kramer v Stone (2024) 210 CLR 484
Kuhl v Zurich Financial Services Australia Limited (2010) 243 CLR 361
Lodge Holes Colliery Company Limited v Wednesbury Corporation [1908] AC 323
MJ Concepts Pty Limited v Pandora Jewellers Pty Limited [2026] NSWDC 150
Mobius Group Pty Limited v Inoteq Pty Limited [2024] WADC 114
Netforce Pty Ltd v ITC Group Pty Ltd [2010] NSWSC 443
Northside Developments Pty Ltd v Registrar-General (1990) 170 CLR 146
Pacific Carriers Ltd v BNP Paribas (2004) 218 CLR 451
Pavey & Matthews Pty Ltd v Paul (1987) 162 CLR 221
Philipp v Barclays Bank UK PLC [2023] UKSC 25
Robinson v Harman (1848) 1 Exch Rep 850; 154 ER 363
Sherson & Associates Pty Ltd v Bailey [2000] NSWCA 275
TC Industrial Plant Pty Ltd v Robert's Queensland Pty Ltd (1963) 180 CLR 130
Thompson v Palmer (1933) 49 CLR 507
Tina Motors Pty Limited v Australian & New Zealand Banking Group Limited [1977] VR 205
Tobin v Broadbent (1947) 75 CLR 378; [1947] HCA 46
Tomanovic v Argyle HQ Pty Ltd [2010] NSWSC 152
Young v Queensland Trustees Ltd (1956) 99 CLR 560
Texts Cited: J. W. Carter, Contract Law in Australia, 8th Edition 2023
Keane, Estoppel by Conduct, Third Edition 2023
Category: Principal judgment
Parties: MJ Concepts Kotara Pty Limited (Plaintiff)
Pandora Jewellery Pty Limited (Defendant)
Representation: Counsel:
Mr GM McGrath (Plaintiff)
Mr S Duggan (Defendant)
Solicitors:
Sparke Helmore Lawyers (Plaintiff)
Corrs Chambers Westgarth (Defendant)
File Number(s): 2024/00293325
Publication restriction: Nil
These proceedings concern how parties to an agreement for the sale and purchase of assets should bear the financial consequence of a fraud that was perpetrated by an unknown third-party or parties by gaining access to an email account operated by the Plaintiff, and then by impersonation, sending from that account an email which contained a request for payment by electronic funds transfer.
Relying on the details provided by the fraudster(s) through the interception of the Plaintiff’s email account, the Defendant paid monies into a bank account which was not operated or associated with the Plaintiff. Unfortunately, almost all of those funds were dissipated, and so far as the evidence reveals, were unable to be recovered before the parties realised that the funds had been transferred into the fraudster’s bank account, rather than an account operated by the Plaintiff.
In simple terms and shorn to its essence, the Plaintiff says that the Defendant has failed to pay the agreed amount under and in accordance with the agreement between the parties. It says that it made no nomination to the false bank account; that was made by the fraudster(s).
The Defendant says, again shorn to its essence, that it received and acted on the nomination of a bank account from an email address operated by the Plaintiff, that it acted reasonably in relying on that email and paying the money into the nominated bank account, and that the Plaintiff did not, despite receiving subsequent emails concerning the payment, alert it to the transfer of funds into the wrong account until it was too late.
The Plaintiff, MJ Concepts Kotara Pty Limited (MJC) was the franchisee of a jewellery shop in the suburb of Kotara near Newcastle in New South Wales pursuant to a franchise agreement (Franchise Agreement) granted by the Defendant, Pandora Jewellery Pty Limited (Pandora).
MJC was ultimately owned and operated by members of the Matthews family. The Matthews family operated other jewellery stores in the Newcastle area. This included a store which was also the subject of a separate Pandora Franchise Agreement in the suburb of Charlestown.
In mid-July 2023 Pandora notified the Matthews family that it would not renew the Franchise Agreements for the Kotara store or the Charlestown store. At the same time, it offered, in relation to each store, an early termination of the Franchise Agreement and the purchase of assets including a buyback of inventory up to a fixed amount. Following negotiations, Pandora and MJC entered into an Asset Sale Agreement (ASA) on 22 January 2024 for the purpose of recording the terms on which Pandora would purchase assets from MJC with respect to the Kotara store.
The Matthews family business was operated by husband and wife, Stephen and Donna Matthews, and Stephen’s two sons, Samuel (or Sam) Matthews and Adam Matthews. For convenience I will refer to members of the Matthews family by their first names without intending discourtesy to any of them.
Stephen was the sole director of MJC. However, MJC was ultimately owned by a company of which he and Donna were shareholders. Donna had an active role in the family’s businesses, including in the Kotara store. Her role and function and ultimately, her authority as it was represented to Pandora, was put in issue in the proceedings. Sam and Adam worked in the family business during the relevant time.
Pandora is the Australian arm of the international Pandora jewellery business which has its headquarters in Denmark. As explained below, the international business provided shared services to the Australian and other Asian arms of its operations. This included shared transaction accounting functions and the processing of payments. Relevantly, these accounting and payment processes were based in Shanghai, China and described as the Global Business Service.
MJC now sues on the ASA claiming that the purchase price for the sale of its assets in the amount of $467,378 has not been paid to it. It claims it has complied with its obligations under the ASA, including the delivery of the assets defined in the ASA. MJC seeks to recover the purchase price as a debt, or alternatively, as damages for breach of contract. It also claims interest on that amount under the ASA.
The ASA contained terms permitting the purchase price to be paid by electronic funds transfer into an account nominated by MJC. I have set out the relevant terms of the ASA below. Pandora claims that it has paid the purchase price in accordance with the ASA because it received a notice from Donna’s email account nominating a bank account into which it paid the purchase price, and that MJC should be estopped from denying Pandora’s reliance on that notice. It is not in issue that Pandora has received the stock and other assets defined in the ASA from the Kotara store.
Pandora pleaded it received a notice by email from Donna on 8 March 2024 at 2.16am (AEST) directing it to pay the purchase price into a nominated account with the National Australia Bank (NAB) (the 2.16am email). Pandora pleaded that the 2.16am email was from Donna and was a nomination by MJC of a bank account within the meaning of the ASA ([10(a)-(a1)] of the Amended Defence). Pandora paid the purchase price into the bank account nominated in the 2.16am email but that was not a bank account held by or operated by MJC.
In its Reply filed 17 March 2025, MJC denied that the 2.16am email was from Donna and said that she did not send it, and that MJC did not have knowledge that it would be sent (at [2] of the Reply). It further pleaded that Donna had no authority to act for the Plaintiff by nominating a bank account to receive funds payable to MJC under the ASA, and that even if it be found that Donna sent the 2.16am email, that email would not be a nomination in writing for the purposes of the ASA (at [3] of the Reply).
At trial, MJC submitted that the email was not a genuine email of MJC but was the product of what was described as a Business Email Compromise attack by an unknown third-party or parties. It relied on expert evidence from a Mr Geoffrey Campey.
By way of a Rejoinder filed on 29 April 2025 to MJC’s Reply, Pandora pleaded in substance:
(a) that Donna had implied (if not express) authority to nominate a bank account and to send the 2.16am email: see [1]-[2] of Rejoinder; (b) in further answer to MJC’s claim, Donna had ostensible authority to send the 2.16am email; this was put on the basis that prior to 8 March 2024, MJC represented to Pandora that Donna had authority to act on its behalf and in reliance upon that representation, believing that Donna had authority to send the 2.16am email, acted upon the direction contained in it: see [3] of Rejoinder; (c) in the further alternative, if the 2.16am email was not a nomination in writing for the purpose of the ASA, by not informing Pandora that it had not received the purchase price by 14 March 2024, MJC failed to mitigate its loss, reducing its recoverable loss to nil: see [4] of Rejoinder. In particular, Pandora alleged that following receipt of two emails (referred to in the pleadings as ‘confirmation emails’) which it sent to MJC after the 2.16am email, MJC was, or ought to have been, aware that Pandora had not complied with its obligations under the ASA; and (d) finally, an estoppel to the effect that by not responding prior to 14 March 2024 to the same two emails which were sent by Pandora on 8 March 2024 after the 2.16am email, MJC represented that Pandora had complied with its obligations under the ASA and that in reliance on that representation, it did not take any steps to recall payment of that amount. Accordingly, it was pleaded that MJC is estopped by its conduct from denying that Pandora complied with its obligations under the ASA by making payment to the account referred to in the 2.16am email: see [5] of the Rejoinder.
Pandora did not press in its closing submissions the contention that Donna had actual authority to send the 2.16am email; I have taken these allegations to have been abandoned.
By a Surrejoinder filed 7 May 2025, MJC denied that it had represented that Donna had authority to act on its behalf as alleged in the Rejoinder. It specifically pleaded that if Pandora was found to have relied upon the representation alleged, then it acted or failed to act unreasonably. MJC provided particulars of ‘Unreasonable Inaction’ and ‘Particulars of Circumstances Giving Rise to Need for Inquiry’. These latter particulars broadly concerned features of the 2.16am email and an attachment to it, and the circumstances in which that email was sent.
MJC’s claim is a claim in contract for the recovery of the purchase price under the ASA either for the payment of a debt or for damages for breach of the terms of the ASA. It is not in issue that the purchase price has not been paid to MJC.
In the way the arguments were developed by the parties, the first matter which I think needs to be determined is what, if any, bank account MJC nominated for the purpose of the ASA? As set out below, prior to 8 March 2024, MJC had referred in email correspondence to Pandora to an account which MJC held with NAB.
Ultimately, in final submissions, counsel for Pandora did not submit that the Court should find that Donna had sent the 2.16am email, or that she caused it to be sent. Counsel for Pandora did not make a submission either way that anyone else in the Matthews family business caused the 2.16am email to be sent (Transcript 385).
Nevertheless, Pandora maintained a defence to MJC’s claim by reason of an estoppel by representation as to Donna’s authority to act on behalf of MJC. This was cast in final submissions on the basis that, whether or not Donna had sent the 2.16am email, MJC represented that Donna had authority to act on its behalf, which included the authority to send to Pandora a nomination of its bank account for the purpose of the ASA; that Pandora reasonably relied on that authority by acting in accordance with the 2.16am email because it had been sent from Donna’s email address and that it suffered detriment by the payment of money into the fraudster’s bank account. In the circumstances it was submitted that MJC should be estopped from denying reliance by Pandora on the 2.16am email. The resolution of the arguments raised by this defence is, broadly, the second matter for determination.
MJC resisted this estoppel argument at several levels, including on the basis that it fell outside of the pleaded case and that, in any event, the alleged representation would not bind MJC. MJC also argued that Pandora had not established the representation as to Donna’s authority that it alleged and that Pandora’s reliance on the 2.16am email was not, in the circumstances, reasonable.
The third matter which arises if Pandora is unsuccessful in establishing the estoppel it wishes to raise, is whether there was a failure by MJC to mitigate any loss it had suffered in the circumstances. This defence raised two further issues:
(a) whether MJC’s claim for the purchase price is an action in debt, to which the principles concerning the failure to mitigate do not operate; and (b) if the claim is not properly to be characterised as an action in debt, what was the date of the breach of contract upon which MJC sues. This was on the basis that it was accepted, as a matter of principle, that any failure to mitigate only applies as from the date of breach. The date of breach may be of significance because of the timing of amounts which were dissipated from the account into which the monies were paid before the parties became aware that a fraud had been committed.
Finally, the fourth matter raised by the parties was, in terms of [5] of the Rejoinder to which I have made reference in [16(d)] above, whether by not responding to two emails sent by Pandora at 9.11am and 2.12pm on 8 March 2024 (that is after the 2.16am email), MJC should be estopped by its conduct from denying that Pandora complied with its relevant obligations under the ASA by making payment into the fraudster’s bank account.
Before addressing these issues, it is convenient to set out the relevant contractual arrangements and the events and communications as they unfolded. For a large part, those events and communications were not the subject of dispute. The time stamps I record for emails sent or received are in Australian Eastern Daily Time (AEDT) unless otherwise specified.
Each of Stephen, Donna, Sam and Adam gave evidence for MJC and were cross-examined. Ms Danielle Stephenson (whom I will refer to as Danielle in these reasons, again with no discourtesy intended) was employed by the Matthews family as a finance manager and human resources manager and was responsible for managing accounts, wages and leave entitlements. She was also cross-examined.
Mr Adrian Cutcliffe, who is a Network and Franchise Management Director of Pandora, and Ms Shrestha Sunder, a Commercial Finance Specialist at Pandora gave evidence for Pandora and were also cross-examined. Mr Cutcliffe was not directly involved in the communications or events of 8 March 2024, but as explained below, Ms Sunder was.
It will be necessary to refer to some of the evidence given by these witnesses in resolving the issues, as they were framed. Generally speaking, I formed the view that each of the witnesses were attempting to give their best recollection of the relevant events. While criticisms were made of the evidence given by some of the witnesses including Donna and Stephen, I have not made adverse credit findings in respect of the evidence of any of the witnesses.
Mr Geoffrey Campey gave expert evidence for MJC. He too was cross-examined. I will refer separately to his evidence because I think it is necessary to understand the manner in which the 2.16am email was sent from Donna’s email address, and the subsequent communications between the parties on 8 March 2024.
By a Franchise Agreement dated 17 November 2022, Pandora granted a franchise of its jewellery business to MJC.
The Recitals to the Franchise Agreement record that Pandora International, which is a company registered in Copenhagen Denmark, had developed a system for the distribution and retail of Pandora products which included product packaging and accessories approved by Pandora for resale by MJC.
Pandora International had granted a non-exclusive licence to Pandora to use trademarks, images, systems and other intellectual property to operate Pandora businesses. Under the terms of the Franchise Agreement, Pandora in turn granted MJC a non-exclusive licence as franchisee to operate a Pandora Business at premises at a Westfield Shopping Centre at Kotara.
Stephen and Donna were both guarantors under the Franchise Agreement. As mentioned above, Pandora had also granted a Pandora Business to the Matthews family in respect of a jewellery store at Charlestown.
The Franchise Agreement was expressed to commence on 8 July 2020 in respect of premises at Westfield Kotara. The term of the Franchise Agreement was expressed to expire on 3 October 2024 (Item 15).
The Franchise Agreement contained provisions requiring MJC, as franchisee, to:
(a) implement proper systems and procedures as may be necessary and as are required by Pandora to maintain the confidentiality of defined Confidential Information (Clause 23.3); and (b) ensure, at its cost, that all Hardware and Software is secure from unauthorised access or use and comply with Pandora’s security requirements set out in the ‘Retail Management Guide’ (Clause 17.10(2)(f)).
Stephen signed the Franchise Agreement as its sole director, and also as a guarantor. Donna signed as a guarantor. Donna was not a director of MJC. It was not submitted that Donna acted as a de-facto director, or that she was appointed or conducted herself as a director or officer within the meaning of the terms in s 9AC and s 9AD of the Corporations Act 2001 (Cth). However, it was not controversial that Donna held a 50% interest in MJC’s parent company and that she was a director of that parent company.
At a meeting in Belrose in mid-July 2023, attended by various Pandora representatives, Stephen and Donna were advised that Pandora would not be extending the Franchise Agreement for the Kotara and Charlestown stores.
By letter dated 18 July 2023 addressed to the directors of MJC and marked to the attention of Stephen and Donna, Pandora confirmed its intention not to extend the Franchise Agreement beyond 3 October 2024. On the same day, by email to Stephen and Donna, Pandora put forward a proposal to offer an early termination of the Franchise Agreement with the repurchase of stock and the purchase of assets.
The parties negotiated the terms of this proposal over the ensuing months. Relevantly, on the part of MJC, the negotiations were conducted by Stephen and one of his sons, Sam. It does appear that, to the extent these negotiations were conducted by email communications, Donna was copied into at least some of those communications, but she did not send any of them. Those negotiations culminated in the execution of the ASA, styled “PANDORA A**sset S**ale A**greement (Kotara)” dated 22 January 2024.
Under the ASA, MJC was described as the Vendor and Pandora as the Purchaser. Stephen again signed as the director of MJC. Stephen and Donna also executed the ASA as covenantors.
Under the ASA, Pandora agreed to purchase certain inventory and assets.
The ‘Assets’ that were the subject of sale under the ASA were defined in clause 1.1(3) and included Plant and Equipment, Point of Sale Materials (POSMs), Hardware and Software, and Stock.
‘Stock’ was in turn defined in clause 1.1(54) as all jewellery stock used or to be used in the business at the opening of the business on the Completion Date, which is owned by the Vendor and which it is authorised to sell under the Franchise Agreement.
The Purchase Price, defined in clause 1.1(47), was set out in Item 5 of the Schedule to the ASA, relevantly, to mean $55,000 plus Stock Value, subject to any adjustments at Completion. Stock Value was the value of the Stock, calculated in accordance with clause 5 of the ASA.
Clause 5 prescribed a process in detail for the determination of the value of Stock, including the arrangement of a full physical stocktake to be carried out on the day prior to the Completion Date in the presence of representatives of Pandora, and the compilation and the provision to Pandora of a complete list of Stock ascribing values to each item in Stock. By clause 5.4, Pandora agreed to purchase Stock up to a maximum amount of $350,000 in total, including GST.
The operative provision for the sale and purchase under the ASA was clause 3 which provided:
“3. Sale and purchase
Subject to Completion and on the terms set out in this Agreement, the Vendor sells to the Purchaser and the Purchaser purchases from the Vendor, the Assets, free from Encumbrances, for the Purchase Price and otherwise on the terms of this Agreement.”
“8.1 Completion must take place at the Premises on the Completion Date or on such other date and place as may be agreed by the Purchaser.”
The Completion Date was expressed in Item 2 of Schedule 1 to the ASA to be 4 March 2024.
Clause 8.2 listed a number of matters which the Vendor (MJC) was required to do, including delivering the Assets (which as observed above, included the Stock) and the handing over of business records, and keys and codes to gain access to the Premises.
Importantly, clause 6 of the ASA provided for the payment of the purchase price. Clause 6.1 provided for the manner of payment as follows:
“6.1 The Purchaser must pay the Purchase Price to the Vendor in the manner specified in Item 7 of Schedule 1.” (emphasis added)
“Manner of payment of Purchase Price
The Purchase Price must be paid by way of bank cheque or any other method permitted under clause 8.3, including electronic funds transfer (EFT) as follows:
(1) the Deposit (if any) on the execution of this Agreement; and
(2) the balance of the Purchase Price must be paid to the Vendor within five (5) business days of the date of Completion.”
It is common ground that no deposit was paid on the execution of the ASA.
Clause 8.3, to which reference is made in Item 7 of Schedule 1, provided:
“8.3 Where this Agreement provides for payment by bank cheque, the payment may be made by direct transfer of immediately available funds to a bank account nominated in writing by the party to whom the payment is due, or in such other form of immediately available funds as may be agreed in writing between the Vendor and the Purchaser.” (emphasis added)
Stephen said he negotiated what he described as the ‘exit’ with Pandora. In doing so he worked with his son, Sam. Sam was responsible for overall sales, marketing and finance aspects of the business. Sam had previously worked at the Commonwealth Bank of Australia for approximately 13 years.
Between September and December 2023, Stephen exchanged several emails in relation to the proposal put forward by Pandora for the early termination of both the Kotara and Charlestown franchises and the payments to the Matthews businesses in connection with that proposal. Stephen exchanged emails first with Mr David Allen and then Mr Travis Little, who had responsibility for Pandora’s Australian and Asian businesses.
Donna does not appear to have sent any of the email communications for the purpose of these negotiations. She was, however, copied in on emails, as was Sam, between Stephen and Mr Allen, and then Mr Little. The emails sent by Stephen were most often sent under a signature block ‘Stephen Matthews, Director’. There is no evidence that Donna made any proposals or conducted these negotiations on behalf of the Matthews family for either store.
As observed earlier, MJC and Pandora executed the ASA on 22 January 2024. Stephen and Donna were covenantors to that agreement.
On the same day MJC and Pandora executed a Deed of Termination and Release (Deed of Termination). The Deed of Termination was signed by Stephen as the director of MJC. Donna did not sign this Deed.
By clause 5 of the Deed of Termination the parties gave each other mutual releases in respect of claims they might have had but for the Deed against one another. These included claims under the Franchise Agreement. Clause 5.2 provided that the Deed may be pleaded by Pandora in bar of any “Franchisee Claims”. The effective date of the Deed of Termination was expressed to be 3 March 2024. Pandora did not argue that the Deed of Termination prevented recovery by MJC of the purchase price under the ASA.
On 28 February 2024, Navnita Damodran, who was a paralegal working in Pandora’s business in Australia, sent an email to Stephen and Donna asking MJC to provide a tax invoice for Fixed Assets and Points of Sale Material (or POSMs) for the purpose of the ASA. As I have observed, item 5 of the Schedule to the ASA specified that the purchase price would comprise “$55,000 plus Stock Value”. The amount of $55,000 evidently represented the agreed sum for the Fixed Assets (or Plant and Equipment) and the POSMs to be sold under the ASA.
In any event, a tax invoice for $55,000 plus GST was required to be issued for Fixed Assets and POSMs (as part of the purchase price) for the Kotara store, and an amount of $25,000 plus GST for the Charlestown store. The email from Ms Damodran was sent to both Stephen and Donna and copied to Ashleigh Mckinnon and Shrestha Sunder of Pandora. Ms Sunder was a Finance Manager, and she was responsible for transaction accounting and financial reporting, including payment transactions. Ms Sunder worked in Sydney. Ms Mckinnon was the Franchise Operations Co-ordinator; she supported Mr Cutcliffe in the day-to-day operations of the franchise function of Pandora’s business.
Ms Damodran requested that MJC provide its bank account details on the invoice. In her 28 February 2024 email, Ms Damodran stated:
“You may use the description “Fixed Assets and POSMs” as a one-line item in the invoice. Please ensure this also includes your bank account details as required for payment. …
Please note, no tax invoice for Stock is required. Once Stock Value has been confirmed by both parties, it will be paid into the same bank account of the fixed assets and POSMs after reconciliation of final accounts pursuant to the terms of the Asset Sale Agreement.
At your earliest convenience, please also kindly confirm the preferred Bank account details and email address to ensure the details we have on record are accurate. This should also align with the details provided in the above requested invoice.” (emphasis added).
The evidence did not reveal what bank account details (if any) Pandora had ‘on record’ for MJC at the time this email was sent.
“26.4 To the extent that any supply made under or in connection with this Agreement is a taxable supply, the GST exclusive consideration to be paid or provided for that taxable supply is increased by the amount of any GST payable in respect of that taxable supply and that amount must be paid at the same time as the GST exclusive consideration is to be paid or provided.
26.5 A party’s right to repayment under clause 26.4 is subject to a valid tax invoice being delivered by the supplier to the recipient of the taxable supply.”
A valid tax invoice needed to be delivered by MJC in order for payment to be made for that part of the Purchase Price which was considered by the parties to be a taxable supply for GST purposes.
Later that day Mr Jonathan Zhang sent an email to Stephen and Donna attaching, amongst other things, a stock account statement for review. Mr Zhang noted that a final stock credit, and the fixed asset invoice, still needed to be processed. His email also included a list of credits and non-stock charges. Mr Zhang was a Manager in the Global Business Services Team in Shanghai. I will address evidence in relation to others who worked in the Global Business Services Team with Mr Zhang and its function, later in these reasons.
On 4 March 2024 Ms Damodran followed up her request for the provision of tax invoices that she had made on 28 February 2024. On the same day, the stocktake process commenced at the Kotara store. Donna managed the stocktake process.
On the following day, 5 March 2024, Stephen sent the requested invoices to Ms Damodran, copying in Sam. Donna was, however, not copied into this email. There was no text in his email message. He provided tax invoices for each of the Kotara and Charlestown businesses in the amounts requested in Ms Damodran’s email of 28 February 2024, but he did not include any amounts for GST. Both invoices stated that payment could be made via direct transfer. In relation to the Kotara invoice, Stephen provided bank account details for an account styled ‘MJ Concepts Kotara’ with NAB ending 5695 (the Kotara NAB account). The tax invoice stated:
“Please use your invoice number as your reference.
Remittance to be emailed to danielle@matthewsjewellers.com”.
At 9.52pm on 5 March 2024 Ms Damodran sent an email to Stephen and Ms Sunder, copying Sam, Ms Mckinnon and Mr Cutcliffe, thanking Stephen for providing the invoices. In the body of her email she wrote “@S**hrestha Sunder please see attached”. Donna was not copied into that email.
Pandora discovered that the invoices had not included amounts for GST. Accordingly, later that day Ms Damodran sent a further email to Stephen and Donna and copied to Sam and also, Ms Mckinnon and Ms Sunder advising that “we have just noticed that the invoice attached does not include GST”.
Stephen forwarded Ms Damodran’s request to Danielle. He also forwarded the email to Sam seeking clarification from both of them as to how to amend the invoices. He did not seek Donna’s assistance or send this email to her.
Within an hour or so of Ms Damodran’s request, Stephen provided, by email, corrected invoices for both the Kotara and Charlestown stores, including the GST component. The email simply attached the corrected invoices, with no text other than Stephen’s signature block, and was sent to Ms Damodran and to Sam and Danielle. The email was not sent or copied to Donna. In respect of the Kotara store the amount of the invoice increased by 10% to $60,500. Otherwise, the tax invoice was in the same form as the one that had been sent earlier. It included the details of the Kotara NAB account and the same remittance information.
Having received the corrected invoices, Ms Damodran replied to Stephen and Ms Sunder (copying in on this occasion Sam, Danielle and Ms Mckinnon) again thanking Stephen and again advising Ms Sunder of the attached updated invoices with GST.
The stocktake at the Kotara store was completed on 5 March 2024. Donna supervised the stocktake which was conducted with Pandora staff including Kristen Barr, Divisional Manager, and Ann Langridge, Regional Sales Manager and four other Pandora staff members. The stocktake was completed at about 2pm. Sam attended the Kotara store thereafter and reviewed the final count with Ms Barr and signed off on the stock numbers and corresponding dollar values. Donna handed the keys of the Kotara store to Ms Barr after Sam had agreed that the stocktake was in order.
On 6 March 2024, following the stocktake at the Kotara store, Mr Zhang sent an email to Stephen and Donna, and copied to a number of Pandora employees including Ms Damodran, Ms Sunder, Ms Barr and Ms Phoebe Zhang (who worked with Mr Zhang in the Global Business Services Team). In this email Mr Zhang advised that the Fixed Asset and POSM amounts, and the final stocktake credit had been processed. The total stock credit, excluding GST, was $320,852. Mr Zhang advised that the net payment to MJC including GST, considering all outstanding balances to date, was $467,378. This was then the agreed purchase price under the ASA. It included adjustments as contemplated in Item 5 of Schedule 1. Mr Zhang stated in this email:
“Please let us know if you have any questions and please can you provide your banking details if not already provided to the our [sic] legal team.”
In requesting the provision of MJC’s ‘banking details’ at this stage, it should be noted that Mr Zhang had not been copied into the earlier emails sent by Stephen attaching the tax invoices. The reference to ‘our legal team’ must be taken to include Ms Damodran.
On 7 March 2024 the parties participated in a meeting on Microsoft Teams in the early afternoon (Teams Meeting). Stephen, Donna and Sam attended the Teams Meeting on behalf of MJC. The Pandora representatives included Ms Sunder, Ms Barr and Ms Mckinnon. Sam’s evidence was that the purpose of the meeting was to review the numbers which had been provided by Mr Zhang in his email of 6 March 2024 and to confirm the settlement of the stocktake which had been completed on 5 March 2024. Sam’s evidence was that the meeting took about 15 minutes. The parties appear to have been content with the net payment to MJC for the Kotara store as set out in Mr Zhang’s email of 6 March 2024.
There was no evidence of any discussion at the Teams Meeting concerning the banking details that had been provided to Pandora on the tax invoices supplied by Stephen on the previous day. There was no suggestion at the meeting that MJC had changed or created a new account for the purpose of receiving the purchase price of the ASA, or that they had any intention of doing so. There was also no evidence that Donna played any role in the discussions that took place at that meeting.
It appears that an issue arose at or following the Teams Meeting as to the entitlement of the Matthews’ businesses to be credited for marketing fees in October of the previous year. This issue did not affect the settlement figure for Kotara as Pandora had proposed to allow the credits for the Kotara store to stand, but not for the Charlestown store.
Sam addressed these matters with Pandora, ultimately with Mr Liddle, and in doing so, stated to him that he considered that Pandora was not acting in good faith in not allowing the credits to stand for the Charlestown store. The underlying dispute is difficult to follow but it does not appear to have involved a substantial amount. In any event, the issue was ultimately resolved in favour of the Matthews business following prompt approval by Mr Cutcliffe.
Importantly, following the Teams Meeting on 7 March 2024, Ms Sunder sent an email at 3.19pm to Sam, Stephen and Donna of MJC and to Mr Zhang and Mr Adrian Cutcliffe of Pandora, copied to Ms Damodran, Ms Mckinnon, Ms Phoebe Zhang and Ms Barr (7 March 3.19pm email). The email was under the subject ‘Kotara final statements’. In this email to Sam, Stephen and Donna, Ms Sunder summarised some matters relating to the Teams Meeting including the issue concerning the credits of marketing fees to which I have referred above. She also confirmed the remaining stock credit that could be paid the following week for Charlestown. As the parties had agreed on the calculation of the Purchase Price, Ms Sunder addressed the following to Mr Zhang:
“@Jonathan Zhang please can you arrange payment of $467,378 to the bank account in the attached invoice (and snipped below).”
“Due Date: 4 Mar 2024
Payment can be made via direct transfer
MJ Concepts Kotara | BSB 082-514 | Account 168445695
Please use your invoice number as your reference.
Remittance to be emailed to danielle@matthewsjewellers.com”
The invoices which Ms Sunder attached to this email were the corrected invoices with GST that Stephen had sent to Pandora on 5 March 2024 at the request of Ms Damodran. As noted earlier, these invoices included the Kotara NAB account.
In the early morning of 8 March 2024, the 2.16am email was purportedly sent from Donna to Mr Jonathan Zhang. It bears a time stamp of 2.16am AEDT. The email was sent from Donna’s email account (dm@matthewsjewellers.com). It was apparently received by Mr Zhang. It was copied to a number of Pandora employees: Ms Damodran, Ms Sunder, Ms Mckinnon, Ms Phoebe Zhang and Ms Barr at their Pandora email addresses. It was received by, at least, Ms Sunder. It was also copied to Stephen, but at an erroneous email address namely, sjm@mattheswjewellers.com. This email was in error because Stephen’s email was sjm@matthewsjewellers.com. I will return to the erroneous email address in the context of Mr Campey’s evidence. It was not suggested that Stephen received the 2.16am email or any of the emails subsequently sent in response to it.
The 2.16am email stated:
“Dear Jonathan,
Please find attached our National Australia bank account information. Please update your system and ensure to use this bank info when making payment.”
It then provided in larger font than the earlier text, a due date of 4 March 2024 and that payment could be made by direct transfer to an account styled ‘MJ Concepts Kotara’ with a BSB and account number which did not match the Kotara NAB account. It was not the Kotara NAB account or any other bank account held or operated by MJC. It was, as the evidence revealed, an account held with NAB in Brisbane by an entity named “Mae Spa Pty Limited” and can be referred to as the false NAB account. The amount of the payment to be made was not set out in the text of the email.
The 2.16am email was sent, as it appears, in response to Mr Zhang’s email of 6 March 2024 at 5.24pm (see [75] above) which had included the purchase price calculated by Pandora. The 2.16am email was not a response to, and did not refer to, Ms Sunder’s later email of 7 March 2024 at 3.19pm.
The 2.16am email continued:
“Can you confirm a payment date?”
There was then included an email signature block for Donna Matthews PANDÖRA, Kotara & Charlestown and a mobile number.
“[EXTERNAL EMAIL: Be cautious with links and attachments]”.
This was not otherwise referred to in the evidence or mentioned in the submissions of either party.
The 2.16am email included, as an attachment, a document which was styled as a document of the National Australia Bank (the NAB attachment). A copy of the NAB attachment from page 529 of the Court Book (MFI-1) is reproduced in Schedule B to these reasons.
The NAB attachment was dated ‘March 6th, 2024’ and commenced:
“To Whom It May Concern,
The following bank account information is confirmed by the National Australia Bank of Australia (sic) on behalf of MJ Concepts Kotara in order to facilitate electronic payments”.
The NAB attachment stated the ‘Company Name’, MJ Concepts Kotara and provided details of the false NAB account consistently with the details appearing in the covering email in large font. It stated ‘Beneficiary Bank Information’ as follows:
“NATIONAL AUSTRALIA BANK
45 George Street,
Sydney NSW 2000,
Australia
Swift code: NATAAU3303M”
It contained a signature of a named Service Manager. However, it contained no email or contact number for anyone, no Australian Business Number (ABN) or Australian Company Number (ACN), and no Australian Credit Licence or Australian Financial Services Licence details.
“Thanks Donna, @Jonathan Zhang please can you arrange payment per the below for $467,378+ send through a remittance as soon as the payment is authorised.” (emphasis added)
The request to arrange payment ‘per the below’ was plainly to the bank account referred to in the 2.16am email. The 9.11am email included in its thread the 2.16am email. Donna said that she did not see the email, and I accept her evidence that she did not. I will return to this evidence below. Although it was addressed to Stephen, the email contained the same erroneous email address. Stephen did not receive this email.
Later that morning, members of the Matthews family and their partners attended Newcastle Racecourse for a Race Day charity event for which the Matthews Jewellers business was the major sponsor. Each of Stephen, Donna, Sam, Adam and Danielle were in attendance. The attendees arrived between 11.30am and 12.00pm.
At 2.12pm on 8 March 2024, Mr Zhang sent an email to Danielle and Donna (the 2.12pm email). Danielle had not been a recipient of either the 2.16am email or the 9.11am email. Otherwise, the 2.12pm email was copied to the same recipients as had been copied into the 2.16am email. This included Ms Sunder and Ms Damodran. Stephen was again copied into this email but at the same erroneous email address. Mr Zhang stated:
“Hi, Donna
The payment is already processed. Please find payment remittance as attached.
Feel free to inquire us if any question.”
The attachment to the 2.12pm email, described as a payment remittance, contained details of the processing of a payment generated from a bank account held by Pandora with Westpac. The attachment bore a date of 8 March 2024 13:17 AEDT. It was not suggested by any of the parties that this was not a genuine document.
The attachment recorded a payment in Australian dollars of $467,378 from a Pandora Cheque Account. The ‘Payment type’ was described as ‘New beneficiary’. Under the ‘Beneficiary summary’, it provided “MJ Concepts Kotara – New”, a ‘payment method’ of “Overnight” and ‘Status’ of “I**NPRG”. This was explained in the Status Codes set out in the document as “In Progress”. The form indicated that the reference to “New” was “The account details for this beneficiary have not been used previously.” However, it did not include the details of the ‘new’ account to which the payment was to be directed.
The attachment also contained the following ‘Additional payment information’:
“Created by N Lin Date and time: 08 March 2024 12:14 AEDT
Last updated by: N Lin Date and time: 08 March 2024 12:26 AEDT
1st authorisation: X Li Date and time: 08 March 2024 12:51 AEDT
2nd authorisation: Y Zhan Date and time: 08 March 2024 13:10 AEDT”
(a) ‘Y Zhan’, the person identified as providing the second authorisation for the payment was Mr Yuqi Zhan. Mr Yuqi Zhan was a director or, as described by Ms Sunder, the “boss” of the Global Business Services team located in Shanghai. This team, according to Ms Sunder, performed all the accounting and transactional services for Australia, New Zealand and some of Asia; (b) ‘X Li’, the person identified as providing the first authorisation for the payment was Ms Xieomin Li. Ms Li worked in the Global Business Services team reporting to Mr Yuqi Zhan; and (c) ‘N Lin’, the person identified as having created and updated the process for payment also worked in Shanghai in the Global Business Services team under Ms Li and then Mr Yuqi Zhan.
Mr (Jonathan) Zhang also worked in Shanghai in the Global Business Services team. Mr Cutcliffe’s evidence was that Mr Zhang had a management role in the accounts receivable function. According to Ms Sunder, he also reported to Mr Yuqi Zhan. The signature block on Mr Zhang’s emails suggested that the Global Business Services team was operated by Pandora Jewellery (Shanghai) Company Limited.
Mr Cutcliffe’s evidence was that Ms Phoebe Zhang worked with and assisted Jonathan Zhang in the Shanghai office. Although she was not mentioned in the Westpac remittance document, she was a recipient of the 2.16am, 9.11am and 2.12pm emails.
Donna’s evidence was that she did not see the 2.12pm email.
Danielle did, however, receive the 2.12pm email, while she and other members of the Matthews family were having lunch at the Race Day. Her evidence was that she did not open the remittance attachment. Danielle recalled seeing the Outlook notification on her mobile phone while she was seated at the table at the Race Day luncheon. Danielle said that she told Stephen that she had received the email notification gesturing to her phone but did not recall precisely what she said to him. She recalled that he said words to the effect of “Oh*, that’s great Danielle*”. Stephen accepted that Danielle had told him something to the effect that money is coming in from Pandora.
Sam also gave evidence that during the lunch at the Race Day, Danielle had gestured to her phone and although he couldn’t recall what she had said, gave him the impression that she had received an email confirming that payment from Pandora had been processed. He did not see this email.
Adam gave evidence that he recalled Danielle gesturing to her phone during the lunch. He could not recall the specific words that she used but he got the impression that ‘it was only a matter of time before the settlement monies could be recovered’.
Donna’s evidence was that she checked her email in response to Danielle ‘saying something positive about Pandora’. She recalled saying to Danielle ‘I didn’t get anything’.
The gesture or comment by Danielle that she had received an email from Pandora about payment was therefore communicated, in one way or another, to Stephen, Donna, Sam and Adam during the course of their luncheon at the racecourse.
There was also evidence of a further email purporting to be from Jonathan Zhang to Donna and Danielle, sent at 3.53pm on 8 March 2024 (the 3.53pm email). The 3.53pm email contained the same text as the 2.12pm email and also the same attachment, namely, the Westpac remittance record. However, the 3.53pm email did not contain in its thread (unlike the 2.12pm email) the earlier 2.16am email or Ms Sunder’s 9.11am email. This omission was not explored by the parties in the evidence.
Adam gave evidence that in the weeks after the improper payment had been detected, he reviewed emails from Donna’s email account and Danielle’s email account. He noticed in conducting this review, the 3.53pm email in which a Pandora address was misspelt. He could not recall whether the 3.53pm email which he retrieved was from Donna’s email account or Danielle’s email account, but it was from one of them.
The 3.53pm email was provided to Mr Campey, an expert called by MJC. Mr Campey gave evidence that the 3.53pm email was sent from the email address “jonzh@padnora.net” with the associated display name “Jonathan Zhang”. This was not the email address from which the 2.12pm email had been sent (jonzh@pandora.net). His evidence was that the email was sent to two email addresses namely, “dm@matthewsjewellers.com” with the associated display name of “Donna Matthews” and “danielle@matthewsjewellers.com” with the associated display name of “Danielle Stephen**son”.
Mr Campey’s evidence was that the 3.53pm email was also carbon-copied to five additional email addresses. This included:
(a) “sam@matthewsjewellers.com” with the associated display name “Sam Matthews”; and (b) email addresses for each of Ms Sunder, Ms Damodran, Ms Mckinnon and Ms Phoebe Zhang at email addresses for these persons “@padnora.net” (Mr Campey’s emphasis). Each of these email addresses were obviously different from the earlier emails.
Sam gave evidence that he received the email and opened it on the afternoon of 8 March 2024 or on the following day but did not recall opening the remittance attachment to the email. Neither Donna nor Danielle recalled seeing the 3.53pm email. It was not sent to Stephen or Adam.
Monies were in fact transferred by Pandora into the false NAB account. It appears that the funds, which had been intended as payment of the purchase price, were able to be transferred to the false NAB account on 8 March 2024. Pandora tendered a bank statement of an account held with NAB by an entity named “Mae Spa Pty Limited”. There was no evidence whether this was in fact a registered company or who, if anyone, stood behind it. The account was held with the NAB at a branch or office in Queen Street, Brisbane. The bank statement showed that, notwithstanding the Westpac remittance had recorded the false NAB account as ‘New’ and the payment method as ‘Overnight’, the amount of $467,378 had been credited into the new account on the same day as the payment had been processed. The processing and authorisation of payment of this amount by personnel in the Pandora Shanghai office was not explained in the evidence.
The bank statement of ‘Mae Spa Pty Limited’ showed the following debits, comprising transfers or payments out of the account:
(a) on 12 March 2024 a transfer out in the amount of $186,510.22 with the ‘particulars’ or description ‘Carparts/Europe’; (b) also, on 12 March 2024 a transfer out in the amount of $248,200.55 with the description ‘Carparts/USA’; (c) on 13 March 2024 a transfer out in the amount of $29,515.02 with the description ‘Carparts/USA’; (d) on 14 March 2024 a debit entry in the amount of $3,152.21 described as ‘Removal Of Scam Funds’; and (e) on 22 March 2024 another debit entry in the amount of $10 again described as ‘Removal Of Scam Funds’.
On 12 March 2024 Donna attended to and supervised the stocktake with various Pandora officers at the Charlestown store. Adam came to the store to finalise the stock check. Adam had to take stock from the Charlestown store as there had been too much stock left over. Adam returned to the Charlestown store on the following day to complete the stocktake as there was still excess stock.
At that time the Matthews family was setting up a new jewellery store at 122 Darby Street, Newcastle. On 13 and then on 14 March 2024 Donna attended to the set-up at that store.
The evidence of each of Stephen, Donna, Sam, Adam and Danielle, as to whether they made any enquiries of the receipt of payment into the Kotara NAB account, will be addressed below. In short, they each gave evidence that until 14 March 2024 none of them considered that there was anything suspicious or untoward in relation to the anticipated payment of the purchase price or the non-receipt of funds into the Kotara NAB account. I will refer to some of this evidence below in addressing the mitigation issue.
At 9.00pm on 13 March 2024, Mr Zhang provided information by email to Stephen and Donna of information concerning the settlement of the Charlestown store.
At 8.00am on 14 March 2024, Sam responded to Mr Zhang setting out questions about charging of the credits for marketing and royalty funds in respect of the settlement for the Charlestown store. Mr Zhang provided details for those invoices by an email at 12.12pm on that day.
At about this time, around 12.00pm or 12.30pm, Sam met with Danielle at the Matthews Jewellers Newcastle office. He said it was his usual practice to meet with Danielle on a weekly basis to discuss cash flow matters and payables. During the course of this meeting, he raised the purchase monies from the settlement of the Kotara store. Danielle responded, “We haven’t got that money yet”. Danielle logged into the NAB online banking and it was observed that the monies had not been received.
At 12.44pm on 14 March 2024 Sam informed Mr Zhang by email that MJC had not received the $467,378 payment for Kotara; he asked Mr Zhang:
“Could you please urgently check the remittance has been paid with your bank. We have not received the $467,378 payment for Kotara”.
Mr Zhang responded soon after that he had already informed his team to check and would reply soon.
At 1.26pm on 14 March 2024, Mr Zhang responded to the concerns that had been raised by Sam. He advised that payment in the amount of $467,378 had been debited from a Pandora bank account on 8 March 2024 and stated that:
“We made the payment to below bank account as per Donna’s information. Could you please double check this account?”
Mr Zhang then set out the full text of the 2.16am email.
“This is the incorrect bank account. You need to stop this payment now!”
“Please see attached email from Donna confirming banking details for the payment made last week – the payment has gone through already. We also sent through a remittance last week Friday. I have attached both emails above.”
“It’s cyber-security 101 to confirm the account details when you get an email to change them”.
He asked Ms Sunder to get in contact with Pandora’s bank manager as quickly as she could.
Sam subsequently spoke to Mr Cutcliffe later that afternoon asking him to do everything to get the payment stopped. Mr Cutcliffe responded by saying that this was not Pandora’s problem. The two argued and Mr Cutcliffe hung up the phone. Subsequently, through text messages, Mr Cutcliffe advised that Pandora was investigating directly with the bank. He later apologised for ending the call quickly and said that, given the seriousness of a potential hack, he figured quick action on his end was the best approach.
A meeting was held with Mr Little and Mr Cutcliffe on 15 March 2024 via Microsoft Teams which was attended by Sam, Stephen and Donna. The meeting was held on a without prejudice basis.
On 18 March 2024 Stephen attended Newcastle Police Station and reported the incident. He said he was told that Pandora needed to make a Police complaint for an investigation to occur. On the following day he emailed Mr Little advising of his attendance at Newcastle Police Station.
Later that day, Mr Little advised Stephen that it was Pandora’s position that it had paid the money in accordance with the ASA and, given the seriousness of the allegations Stephen had raised, Pandora was undertaking an investigation as to what had occurred.
It is plain that both parties conducted investigations of one sort or another in relation to what had occurred. The terms and results of those investigations were not put before the Court by either party.
MJC issued its Statement of Claim in these proceedings on 9 August 2024.
I find that Donna did not send the 2.16am email. Although put in issue in the pleadings, it was not submitted in closing submissions that I should find that she did.
Each of Stephen, Sam, Adam and Danielle gave evidence that they did not send the 2.16am email or authorise it to be sent. It was not put to any of them in their cross-examination that they sent that email or caused it to be sent. I find that no member of the Matthews family or Danielle sent the 2.16am email or caused it to be sent.
I am fortified in making these findings by expert evidence adduced by MJC to which I refer below. There was some suggestion during the course of the hearing that the 2.16am email might have been sent by someone within the Matthews family business; effectively that the deception was an ‘inside job’. The theory was not, however, developed and was not ventilated in closing submissions.
There was some evidence that Adam had ‘administrator access’ to Donna’s email account; that inference may also be drawn from Adam’s capacity to undertake the reviews of the email accounts of both Donna and Danielle after 14 March 2024. However, it was not put to Adam that he sent the 2.16am email or caused it to be sent. It was not suggested any other person in the Matthews family jewellery business was responsible, and no such person was identified. For the avoidance of doubt, I conclude there is no evidence that the 2.16am email was sent or caused to be sent by a person working within the Matthews’ jewellery business. Again, I am fortified in reaching this conclusion by Mr Campey’s evidence.
The Plaintiff called expert evidence from Mr Geoffrey Campey who prepared a report dated 22 September 2025. Mr Campey holds qualifications in both computer science and law. He has expertise in computer and mobile device forensics, and he has provided expert evidence in digital, mobile and online forensics in civil and criminal matters in various State and Federal courts. He is a lecturer in Cyber Crime and Cyber Security at the University of Newcastle.
His expertise and experience to give evidence in the form of his report in these proceedings was not challenged.
The principal question asked of Mr Campey was whether Donna sent to Pandora the 2.16am email referred to in paragraph 10(a) of the Amended Defence. In answering that question, Mr Campey also analysed and made observations about other email communications which followed the 2.16am email. Mr Campey expressed his conclusion at [1.5] – [1.6] of his report as follows:
“1.5 In short, it is my opinion that the email sent by “dm@matthewsjewellers.com” to “jonzh@pandora.net” on 8 March 2024 at 2:16:25AM AEDT was in fact sent from the “dm@matthewsjewellers.com” email account. That said, I am unable to express an opinion as to whether Donna Matthews caused that email to be sent or whether another individual did so. Another person with access to the “dm@matthewsjewellers.com” email account could also be responsible for the sending of that email.
1.6 Based on my previous experience in similar matters, in my opinion it is likely that a Business Email Compromise cyberattack had been perpetrated by parties unknown.”
Mr Campey observed in particular, that in the 2.16am email and the subsequent 9.11am email and 2.12pm email, Stephen’s email address had been misspelt (sjm@mattheswjewellers.com). He identified that the domain “mattheswjewe**llers.com” had been registered on 8 March 2024 and that registration had expired on 8 March 2025. The consequence of that registration was that, during its currency, every email to Stephen’s incorrect email address would not be returned to the sender as undeliverable.
Mr Campey observed that the domain “padnora.net” (from which the 3.52pm email was sent) had also been registered on 8 March 2024 and had expired on 8 March 2025. Mr Campey identified that the individual or entity who registered the padnora.net domain had employed the services of a domain registration privacy service to shield their contact information.
Relevantly, Mr Campey also made observations about the NAB attachment to the 2.16am email. He said that he was able to identify that that attachment was created (and modified) at 1.10am on 8 March 2024, that is about an hour before the 2.16am email was sent.
Mr Campey expressed his findings as follows:
“9.1 In my opinion, as noted above, the metadata in A02 [2.16am email] indicates that it was sent from the “dm@matthewsjewellers.com” email account on 8 March 2024 at 2:16:25AM AEDT. It is however important to note that, notwithstanding the use of this email account to send the email, it does not automatically follow that the owner of the account, presumably Donna Matthews, was responsible for sending the email. Another person with access to this email account could have sent A02 [2.16am email] with A06 [NAB attachment] attached to it. The fact that MJCK [MJ Concepts] email domain is hosted by Microsoft means that such an action could be undertaken from anywhere in the world.
9.2 Based on my experience with previous matters which exhibit similar patterns, it is my opinion that a BEC Attack has taken place in this matter. I base this opinion on the following factors:
9.2.1 The provision of alternative banking details to redirect the transfer of funds,
9.2.2 The use of an alternative email domain (padnora.net) which closely resembles the correct email address of one of the parties,
9.2.3 The registration of two alternative email domains (padnora.net and mattheswjewellers.com) in close proximity to the attack, in this case the same day,
9.2.4 The suspected interception and subsequent delayed relay of communication from one party (PJ) [Pandora] to the other (MJCK) [MJ Concepts],
9.2.5 The use of an alternative email domain (padnora.net) for sending the intercepted communication, and
9.2.6 The use of a domain privacy service for [sic] to obfuscate the registration details of the alternative email domain (padnora.net).
9.3 These factors combine to form in my mind the impression that this was a BEC Attack performed by an experienced actor, notwithstanding the obvious mistakes that were made in their execution of the attack.
9.4 The fact that the mattheswjewellers.com [domain] was registered on the same day of the attack indicates to me that the attackers, whilst somewhat sloppy in their execution of the attack, understood the potential consequences of their mistake and moved to mitigate the risk. That risk, as outlined above, was that the email sent to the misspelled domain would trigger an “undelivered” report and potentially raised suspicion.” (emphasis added)
Criticisms were made of aspects of Mr Campey’s evidence. In particular, it was submitted and Mr Campey accepted in his oral evidence, that he had not been provided by MJC access to, and therefore did not have the opportunity to inspect, email servers, IP addresses of MJC computers, outlook accounts and audit logs. Mr Campey’s evidence was that he understood that the reason these materials were not provided to him was essentially costs driven. He gave evidence that the amount of additional work required to examine these materials was a minimum of $15,000 but, depending on what came out of further investigations, “it could easily have stretched to” $30,000 to $40,000. Mr Campey also accepted that he should have made reference in his report that such materials had not been made accessible to him.
However, he said that he was confident that the conclusions he reached about a Business Email Compromise attack, as expressed in his report, were still reliable. He gave this evidence:
“Q. Finally, Mr Campey, given that you did not have access to the Microsoft servers and did not inspect the devices of the plaintiff MJ Concepts Kotara do you still consider your conclusions about there being a business email compromise attack as expressed in your report to be reliable?
A. I think the hallmarks of a reasonably sophisticated threat actor here are, are there and so the fact that someone has registered a domain name, applied that domain name to a Google server to be able to email it, the fact that they have then have subsequently had to register a second domain name, these are things that I presume most people in this room couldn't do and so the hallmarks of someone who is reasonably technical - at least reasonably technically savvy to be able to go through those processes leads me to the conclusion that this was probably the work of someone who knew how to function in a business enterprise attack, business email attack, sorry. … Business email compromise attack.”
I accept the criticisms made by Pandora of Mr Campey’s report. He could have looked at other material in performing his analysis, and he should specifically have indicated in his report that he did not get access to certain materials. However, Mr Campey remained confident of his conclusion that there had been a Business Email Compromise attack and that whoever perpetrated that attack, required technical skills and know-how on how to execute it. Pandora elected not to put on expert evidence of its own.
In these circumstances, I am prepared to accept Mr Campey’s conclusions that it was very likely that a Business Email Compromise attack had occurred with respect to the 2.16am email, and his observations concerning the NAB attachment and the subsequent emails referred to at [138]-[140] above.
Mr Campey also gave some evidence that it was possible that the fraudster in this case had placed and then removed a ‘redirection rule’, I infer, in relation to Donna’s email account. He explained this concept as follows in his oral evidence at:
“Q. Could you tell the Court what a redirection rule is?
A. In the context of email "redirection rule" is a rule that you can set up in your email account or across the entire email server that can direct the flow of an email and how emails are delivered to either individuals or to groups of people and to the various folders and inboxes in various email accounts.”
Mr Campey said that he had seen in his experience cases where such redirection rules were placed by the attackers and once complete, had been removed, essentially to hide the work that they had done. However, because he had not inspected any of MJC’s computers or outlook accounts, Mr Campey could not say whether a redirection rule had been in place on 8 March 2024 and subsequently removed in relation to Donna’s email account.
Adam gave evidence that in the weeks after 14 March 2024, that is after the improper payment had been detected, he reviewed Donna’s Microsoft email account and checked a standard email folder marked “Conversation History”, and found emails from Pandora sent or copied to Donna and referring to the sale of the Kotara business in that folder. These emails were not in Donna’s inbox.
MJC submitted that I should find that a redirection rule had been applied by the fraudster which caused emails to be sent to Donna’s Conversation History folder, rather than to her inbox.
Based on the equivocation in Mr Campey’s evidence, I am not satisfied that the deployment of the redirection rule was necessarily an aspect of the fraudster’s attack on MJC’s domain and Donna’s email account. However, the use by an attacker of a redirection rule which directed emails out of Donna’s inbox remains a possibility on the evidence.
In any event, Adam’s evidence that he found Pandora’s emails in the Conversation History folder in Donna’s email account, was not challenged. However those emails came to be located in that folder, their location is consistent with Donna’s evidence that she did not see the 9.11am email or the 2.12pm email. Indeed, Pandora did not challenge but rather, relies on Donna’s evidence that she told Danielle “I didn’t get anything” when Danielle mentioned the 2.12pm email to Donna at the luncheon.
Under clause 8.3 of the ASA, payment could be made by direct transfer to a bank account nominated in writing by the party to whom the payment is due.
By providing the invoices to Pandora on 4 March 2024 and then again on 5 March 2024 for the Fixed Assets and POSMs, Stephen, on behalf of MJC, nominated the Kotara NAB account for the purpose of clause 8.3 of ASA. The amount specified in these invoices were, and were understood by the parties, to be part of the purchase price under the ASA.
As observed above, the invoices provided by MJC for Fixed Assets and POSMs were significant to the parties because a valid tax invoice needed to be issued for that part of the Purchase Price which comprised a taxable supply for GST purposes. Ms Damodran contemplated that the balance of the Purchase Price would be paid into the same account as nominated by MJC in these invoices. Ms Damodran passed on both the original and updated invoices that she had received from Stephen to Ms Sunder.
On 6 March 2024 at 5.24pm Mr Zhang confirmed the total net payment of the purchase price of $467,378. In the email, he asked for the provision of banking details “if not already provided to our legal team”. Mr Zhang had not been copied into the emails from Stephen attaching the earlier invoices; these had been provided to Ms Damodran. Accordingly, there was no need to respond to this aspect of Mr Zhang’s email of 5.24pm.
It was in these circumstances that Ms Sunder sent her email of 7 March 2024 at 3.19pm after the Teams Meeting. She asked Mr Zhang to arrange for payment of the purchase price to the bank account in the attached invoice; that invoice was for the Fixed Assets and POSMs with GST included that had been sent by Stephen on 5 March 2024. Ms Sunder’s email “snipped” the details of the Kotara NAB account from the 5 March 2024 invoice. At this point, both parties understood that the bank account into which the purchase price was to be paid was the Kotara NAB account contained in the updated invoice attached to Stephen’s email of 5 March 2024.
It is also to be observed that there was no evidence of any discussion at the earlier Teams meeting on 7 March 2024, the purpose of which was to review the figures provided by Pandora for the purchase price on the previous day, that MJC had changed or were proposing to change the details for the bank account into which the purchase price monies were to be paid.
In the circumstances, for the purpose of determining the first issue I have identified above, I find that as at the close of business on 7 March 2024, MJC had nominated the Kotara NAB account for the purpose of the payment of the purchase price under the ASA and Pandora had accepted that nomination.
This leads to the consideration of the effect of the 2.16am email, and Pandora’s contention that MJC should not be permitted to deny Pandora’s reliance on the 2.16am email as a nomination of the account to which funds could be transferred under the ASA.
In closing submissions, counsel for Pandora made and developed a submission that MJC’s claim in contract should fail because of a ‘defence of estoppel by representation’ as to Donna’s authority to act on behalf of MJC. This was put on the basis that MJC had represented over a course of dealings between the parties, including by the failure to correct assumptions as to Donna’s authority, that Donna had, in effect, plenary authority to act on behalf of MJC, which included the authority to send to Pandora a nomination of the bank account into which the purchase price was to be paid in accordance with the ASA.
It was submitted that Pandora had relied reasonably in the circumstances on that representation of authority by acting upon the 2.16am email which was sent from Donna’s email account. Pandora submitted, to the extent that payment into the false NAB account was a breach of contract, its reliance upon the 2.16am email was detrimental. The funds transferred into that bank account were dissipated before action could be taken such that only a very small proportion of those funds were able to be retrieved.
As counsel for Pandora put it in final submissions, in its essence, whether or not Donna sent the 2.16am email, by reason of its representations as to her authority, MJC should be estopped from denying Pandora’s reliance on the 2.16am email.
MJC resisted the raising of this argument in final submissions on the basis that it was not open on the pleadings because the pleading of ostensible authority (or to the same effect, an estoppel by representation as to Donna’s authority) in the Rejoinder was expressly put on the basis that Donna had in fact sent the email. Even if Pandora were permitted to run the point, counsel for MJC submitted that the estoppel, or reliance on the principles of ostensible authority, could not be maintained if Donna was found not to have sent the 2.16am email. Counsel for MJC also argued that the representation as to Donna’s authority had not been made out on the evidence, and if it was, Pandora had not reasonably relied on the representation in the circumstances and that it was put on inquiry by the content of, and the circumstances surrounding, the 2.16am email and its attachment.
For the reasons set out above, I have found that Donna did not send or cause to be sent the 2.16am email, and that no other member of the Matthews family caused it to be sent.
As I have observed, counsel for Pandora did not submit that the Court should find that Donna sent the 2.16am email. In these circumstances, counsel for MJC argued that the estoppel contended for by Pandora was outside of the pleadings and should not be permitted because the pleading of ostensible authority in the Rejoinder was expressly alleged on the basis that Donna had sent the 2.16am email. Whether cast in terms of ostensible authority or estoppel by representation, MJC submitted that representations about Donna’s authority did not arise on the pleadings, if, as I have found, Donna did not send the 2.16am email.
I accept the characterisation by MJC of the pleadings. I have summarised the pleadings in [11] to [18] above. In its Amended Defence, in answer to MJC’s allegation that Pandora had refused to pay the Purchase Price under the ASA, Pandora answered in part as follows in [10]:
“In answer to paragraph 10 of the SOC the defendant:
(a) says that on 8 March 2024 at 2.16am, it received a notice by email from under the name of Donna Matthews of the plaintiff, directing it to pay the Purchase Price into a nominated account of the National Australia Bank (the NAB Account);
(a1) by that email, the plaintiff nominated in writing a bank account namely the NAB Account within the meaning of clause 8.3 of the Asset Sale Agreement …”
The amendments effected by the Amended Defence filed 10 March 2025, included the change in [10(a)] from receipt of “a notice by email under the name of Donna Matthews” to “a notice by email from Donna Matthews”. The intent of the amendment, it seems to me, was to clarify the pleading so that the allegation was that Donna sent the email, not that it was sent from her email address. That is also consistent with the introduction in the pleading of the consequence of sending the email in [10(a1)]. In any event, by its Reply, MJC averred that Donna did not send the 2.16am email and that she had no authority to do so (Reply at [3]), so that even if it be found that she did send the email, that would not be a nomination in the terms of clause 8.3 of ASA (Reply at [4]).
It was on this basis that Pandora, by its Rejoinder filed 29 April 2025, pleaded in answer to [3] of the Reply that Donna had implied (if not express) authority to send the 2.16am email. As I have mentioned, Pandora did not press its contentions as to Donna’s actual authority. The Rejoinder however also pleaded in response to [3] of the Reply, in the alternative, that prior to 8 March 2024 MJC represented to Pandora that Donna had authority to act on behalf of MJC, and that Pandora had relied upon that representation by paying the Purchase Price, such that:
“3(c) In the premises, Donna Matthews had ostensible authority to send the 8 March [2.16am] Email”.
MJC joined issue to these allegations by its Surrejoinder, specifically alleging that if it be found that Pandora relied on the representation, it acted or failed to act reasonably in doing so, in circumstances in which there was a need for inquiry ([3(b)] of the Surrejoinder).
It can be seen that the allegations as to the representation of authority in the Rejoinder were pleaded specifically on the basis, as alleged in [10(a)] of the Amended Defence, that Pandora received a notice by email from Donna. The pleading of ostensible authority was specifically pleaded on that basis; and expressly that Donna had ostensible authority to send the 2.16am email ([3(c)] of the Rejoinder). Accordingly, as pleaded, the reliance on ostensible authority was deployed on the footing that Donna had sent the 2.16am email and [10(a)] of the Amended Defence had been amended to clarify that allegation.
In a commercial cause such as this, where the parties have exchanged detailed pleadings setting out the claims and the issues they wish to agitate, there is much to be said for holding parties to those pleadings. Counsel for the Plaintiff indicated in his oral opening, that MJC did not agree to the case ‘veering off the pleadings’. Although MJC did itself formally seek leave to amend during the course of the hearing, I took that to mean that MJC did not acquiesce to any departure from the pleadings: see Banque Commerciale S*.A.,* En Liquidation v Akhil Holdings Limited (1990) 169 CLR 279 (Banque Commerciale) at 287 (Mason CJ and Gaudron J). Pleadings and particulars serve to afford procedural fairness to the parties and to define the issues for decision in the litigation: see Dare *v Pulham* (1982) 148 CLR 658 at 664; Banque Commerciale at 286. Further, r 14.14(2) of Uniform Civil Procedure Rules (UCPR*)* requires that a defendant must plead specifically any matters that may take the opposite party by surprise or which the defendant alleges makes any claim of the opposite party not maintainable, or which raises matters of fact not arising out of the proceeding pleading: generally see, Calab**ria Community Club Limited v Christer Nominees Pty Limited [2025] NSWCA 65 at [52]-[53].
It is true, as counsel for Pandora pointed out, that a representation as to Donna’s authority was pleaded in [3(a)] of the Rejoinder and reliance on that representation was pleaded in [3(b)] of the Rejoinder in terms of an alteration of Pandora’s position by paying the purchase price into the false NAB account. It is also true, as counsel for Pandora pointed out, that [10(a1)] of the Amended Defence raised the issue of Pandora’s reliance on the 2.16am email from Donna’s email account as a nomination in writing for the purpose of clause 8.3 of the ASA. Nor, as counsel for Pandora submitted, should the Court be too focused on taxonomy in this area of discourse, especially in respect of the particular species of estoppel relied upon. Counsel for Pandora submitted that no narrow or technical approach should be taken having regard to the allegations in [3] of the Rejoinder and that Pandora’s submission was based on a ‘traditional’ estoppel by representation.
I accept that the Court should not take a too technical approach to the task of considering whether an argument falls within the boundaries of the issues defined by the pleadings and that it should, where possible, look to the substance of the matters sought to be put, rather than rely on legal categorisation which may differ from time to time in the decided cases.
However, in this case, there was a close attention by the parties to the pleadings; the filing of a Reply, a Rejoinder and a Surrejoinder demonstrated that the parties, quite appropriately in a case such as the present, had defined the issues for decision in this litigation with care and with precision. By those pleadings, and especially [10(a)] of its Amended Defence and [3] of the Rejoinder, insofar as its claims for estoppel arising from representation as to Donna’s authority are concerned, Pandora made a decision to defend the case on the basis that Donna sent the 2.16am email.
I have real difficulty reading the pleadings otherwise. Pandora did not raise a defence on the pleadings that any relevant representation was made by MJC, if the 2.16am email was not sent by Donna, other than the estoppel argument raised in [5] of the Rejoinder. That understanding of the pleadings is reinforced by the preamble to [5] of the Rejoinder which made it clear that the estoppel by representation in [5] was put on the basis that Donna did not send the 2.16am email (which was not admitted) and Donna did not have actual or ostensible authority to send the 2.16am email (which was denied).
In these circumstances, r 14.14 of UCPR required, it seems to me, that the broader contentions now sought to be raised on the basis that Donna did not send the 2.16am email, be pleaded. They were not, and no amendment to the pleading, at least in this respect, was sought at any stage of the proceedings.
My reading of the pleadings is confirmed by the parties’ approach to the issues raised by the pleadings prior to final submissions.
Regrettably, the parties did not provide opening written submissions in this matter as the Standard Orders for Hearings annexed to District Court Civil Practice Note 16 do not require them. The parties did however exchange a Schedule of Issues. Pandora’s Statements of Issues relevantly couched, as the first issue the following:
“Did Donna Matthews have express, implied or ostensible authority to nominate a bank account on behalf of the plaintiff for the purposes of clause 8.3 of the Asset Sale Agreement dated 22 January 2024 (Asset Sale Agreement)?”
These issues are articulated, consistently with the Rejoinder, on the basis that Donna did nominate a bank account for the purposes of clause 8.3 of the ASA. No reference was made in the Defendant’s Schedule of Issues to an estoppel by representation (or ostensible authority) on the basis that someone other than Donna sent the 2.16am email.
For its part, the Plaintiff’s Statement of Issues proceeded on the basis of defining the relevant issue as to whether Donna sent the 2.16am email, and if so, did she have actual authority, or ostensible authority to send the email.
Nor did counsel for Pandora clearly raise or indicate in his opening submissions, an argument based on estoppel by representation (or ostensible authority) on the footing that was made in final submissions.
For these reasons, having found that Donna did not send or cause to be sent the 2.16am email, I do not think it is open on the pleadings for Pandora to maintain an estoppel based on a representation by MJC as to Donna’s authority.
If I am wrong, and have taken too restrictive an approach to the pleadings, and in deference to the arguments raised by parties, I will address the contention raised by Pandora that, by reason of its representations as to Donna’s authority, MJC should be estopped from denying Pandora’s reliance on the 2.16am email in transferring the purchase price to the false NAB account.
Counsel for Pandora emphasised that he relied upon an estoppel by representation to found Pandora’s reliance on the 2.16am email. Pandora’s closing submissions canvassed the principles concerning ostensible authority. The submissions made by the parties did not suggest that there was any real dispute about the principles of ostensible authority as opposed to their application in the circumstances of this case. As the authorities referred to below demonstrate, the basis of the doctrine of ostensible authority is found in estoppel.
However, it should be borne steadily in mind that the representation relied upon by Pandora was that Donna had, in substance, plenary authority which included the authority to nominate a bank account for the purpose of the ASA. That is, the representation which was relied upon for the purposes of the argument was a representation as to the extent of Donna’s authority.
In Freeman & Lockyear v Buckhurst Park Properties (Mangal) Limited (Freeman & Lockyear) [1964] 2 QB 480 Diplock LJ at 503 described ostensible authority in the following terms:
“‘An apparent’ or ‘ostensible’ authority … is a legal relationship between the principal and the contractor created by representation, made by the principal to the contractor, intended to be and in fact acted upon by the contractor, that the agent has authority to enter on behalf of the principal in to a contract of a kind within the scope of the ‘apparent’ authority, so as to render the principal liable to perform any obligations imposed upon him by such contract. … The representation, when acted upon by the contractor by entering into a contract with the agent, operates as an estoppel, preventing the principal from asserting that he is not bound by the contract. It is irrelevant whether the agent had actual authority to enter into the contract.”
This passage was endorsed by the High Court in Crabtree-Vickers Pty Limited v Australian Direct Mailing Advertising & Addressing Company Pty Ltd (Crabtree-Vickers) (1975) 133 CLR 72, and subsequently in Northside Developments Pty Ltd v Registrar-General (Northside Developments) (1990) 170 CLR 146 at 159 and 172 and Pacific Carriers Ltd v BNP Paribas (BNP Paribas) (2004) 218 CLR 451 at 466-467, [36]-[38].
“The representation which creates ‘apparent’ authority may take a variety of forms of which the commonest is representation by conduct, that is, by permitting the agent to act in some way in the conduct of the principal’s business with other persons. By so doing the principal represents to anyone who becomes aware that the agent is so acting that the agent has authority to enter on behalf of the principal into contracts with other persons of the kind which an agent so acting in the conduct of his principal’s business has usually ‘actual’ authority to enter into.”
“The holding out might result from permitting a person to act in a certain manner without taking proper safeguards against misrepresentation.”
Counsel for Pandora also submitted that for the purposes of these principles, departure from the representation of authority need not be unconscionable: see the Honourable Patrick Keane AC KC, Estoppel by Conduct and Election, 3rd Edition, 2023 at 1-027.
In Thompson v Palmer (1933) 49 CLR 507 at 547; [1933] HCA 61, Dixon J (as his Honour then was) said at 547 (as cited with approval by the High Court in BNP Paribas at [39]):
“The object of estoppel in pais is to prevent an unjust departure by one person from an assumption adopted by another as the basis of some act or omission which, unless the assumption be adhered to, would operate to that other's detriment. Whether a departure by a party from the assumption should be considered unjust and inadmissible depends on the part taken by him in occasioning its adoption by the other party*.* He may be required to abide by the assumption because it formed the conventional basis upon which the parties entered into contractual or other mutual relations, such as bailment; or because he has exercised against the other party rights which would exist only if the assumption were correct, … or because knowing the mistake the other laboured under, he refrained from correcting him when it was his duty to do so; or because his imprudence, where care was required of him, was a proximate cause of the other party's adopting and acting upon the faith of the assumption; or because he directly made representations upon which the other party founded the assumption.” [citations omitted; emphasis added]
“In my opinion, one circumstance in which it may be said that representations are permitted to be made is where a principal knows that an agent engaged on the principal’s behalf is making representations as to the agent’s authority, is able to prevent such representations being made or countermand them, but does not do so. There is arguably, in these circumstances, something like a representation by silence: the circumstances call for some action by the principal to ensure that persons are not misled by the agent, and the principal does not take that action.” (emphasis added)
These observations were referred to with approval in 183 Eastwood Pty Limited v Dragon Property Development & Investment Pty Limited [2023] NSWCA 72 (183 Eastwood) at [131]-[134] per Ward P (with whom Bell CJ and Leeming JA agreed).
Relevantly, in Northside Developments the High Court addressed the operation of a forgery in the context of the doctrine of ostensible authority, estoppel and the indoor management rule. There the common seal of the appellant, Northside Developments, was affixed to a mortgage of land in contravention of its articles of association. The common seal had been attested by the signature of a director of Northside Developments and countersigned by his son as “company secret**ary” who had not been appointed to that office.
In Northside Developments Brennan J stated at 172:
“As between a company and a party who deals with it, a company is bound by an act purporting to bind it not only when the person who does the act has the company’s authority to bind it by that act but also when the person is held out by the company as having that authority and the party dealing with the company relies on the person’s ostensible authority. Conversely, the company is not bound when the person who does the act has neither actual nor ostensible authority to bind the company by doing the act which the other party asserts to be binding on the company.” (emphasis added)
“A counterfeit signature or seal purports to be that which it is not, not because of any lack of authority, but simply because it is false. There is no representation that the forger is authorized to act as an agent and there is no room for the application of the indoor management rule. The forgery is truly a nullity. … Of course, if a company represents that a counterfeit signature or seal is genuine, it may be estopped from denying its authenticity.”
“There is then a false document made with the intention that it should be acted upon as genuine and that constitutes a forgery. What if, notwithstanding the fraudulent intent, there is ostensible authority, although no actual authority, to sign or seal the document on behalf of a Company? Would the document then constitute a forgery? There have been mixed answers to this last question … The answer is, however, of no real consequence for the purposes of the application of the indoor management rule. Clearly, if the person who signs the document or affixes the seal is held out by the company as having authority to act for it, an outsider dealing with that person is entitled to presume that the company correctly observed the procedures available to it to place the person in that position and the company would be estopped from denying his authority. If, whatever may be the position in the criminal law, the document is not in those circumstances to be regarded as a forgery, then the statement of Lord Loreburn that the indoor management rule cannot apply to a forgery is correct in a quite general sense.
In Slingsby v. District Bank Ltd (69), at first instance, Wright J. said:
“Though a man may be estopped by conduct from denying that a forgery in his signature, yet as forgery is a crime he cannot authorize it in advance (if indeed it is not a contradiction in terms to authorize a forgery) without being an accessory before the fact. Nor can he agree to be bound by it subsequently, so as to shield a criminal or compound a felony. Hence an act of forgery is a nullity and outside any actual or ostensible authority, and outside the principle of Lloyd v. Grace, Smith & Co.”
But the basis of the doctrine of ostensible authority is estoppel and there is no reason why a person should not, by reason of having held someone out as possessing authority, be precluded from asserting a forgery on the part of the latter. This was pointed out by Sir Wilfred Green M.R. in Uxbridge Permanent Benefit Building Society v Pickard [1939 2 KB 248 at 256] …” (emphasis added)
“I agree with the distinction drawn by Dawson J. between forgery which involves a counterfeit signature or seal and that which does not, and the consequences flowing from that distinction. The former is in truth a nullity, to which the indoor management rule does not speak. The latter, to which the term “forgery” is only loosely applied although it is used in some of the cases … turns upon the authority of those who purport to act on behalf of the company, an authority which may be inferred if the company holds out the person as authorized to act on its behalf or allows him to act as if he were so authorized. Where a person affixes the seal of a company to a document, without actual authority to do so, the consequences for the company will depend on its own conduct in relation to that person – what it has held that person as having authority to do or what it has allowed him to do without demur. In a particular case, the consequences might well be the same if the indoor management rule were applied, but it is in the principles of agency which operate in this area.” (emphasis added)
“The gist of an estoppel is “an assumption adopted by [a person] as the basis of some act or omission which, unless the assumption be adhered to, would operate to [that person’s] detriment”: Thompson v Palmer [(1933) 49 CLR 507 at 547)] per Dixon J … Whether or not a person will be allowed to depart from such an assumption depends upon the part played in the adoption of it by the other. See Grundt [Grundt v Great Boulder Pty Gold Mines Limited (1937) 59 CLR 641 at 675] … If the latter has knowledge of facts or ought to have knowledge of facts putting him or her to further inquiry, that is a matter which tells against the former having played such a part in the adoption of the assumption that he or she should be held to it.”
“… the principle of apparent authority protects the expectations of a third party which acts in reliance on a representation by a principal that an agent has authority to bind the principal. The protection is only justified, however, if reliance on the representation is reasonable. Thus, the doctrine will not protect a third party which has reason to believe that the agent is acting without authority and fails to make inquiries that a reasonable person would have made in the circumstances to verify that the agent had authority.”
Whatever representations were made by MJC about the authority of Donna to act on its behalf, I do not think that they bind MJC in the circumstances of this case.
As I have observed above, the circumstances of the sending of the 2.16am email and the evidence of Mr Campey demonstrate the engagement of an unknown fraudster or fraudsters of what Mr Campey described as a Business Email Compromise attack. Those person or persons, whose identity is not known, gained access to and control of Donna’s email account and caused the 2.16am email to be sent. The person or persons who sent the 2.16am email or caused it to be sent are not before the Court and are unknown.
There was no pleading and no submission by Pandora that any act or omission of MJC (or Donna) caused or enabled the unknown fraudster to intercept Donna’s email account. This was a form of digital forgery; the fraudster used the email address of Donna and MJC’s email domain and, impersonating Donna, copied her signature block in causing the 2.16am email to be sent to Pandora. It appeared to be, but was not, an email from the purported sender. There is no basis in the evidence, even if it were to have been pleaded to find that MJC or Donna clothed or held out the fraudster with any authority.
The person or persons who sent the 2.16am email plainly did not have any actual (express or implied) authority to send the email. Nor did MJC hold out the fraudster or fraudsters as having authority to send the 2.16am email. MJC made no representation, whether by silence or otherwise, that the person or persons who did cause the 2.16am email to be sent were authorised to do so.
Here the act which Pandora says should be binding on MJC is the act of sending the 2.16am email from Donna’s email address. However, the person or persons who did that act had neither actual nor ostensible authority to do so. Accordingly, as the reasons of Brennan J in Northside Developments set out in [193] above demonstrate, MJC cannot be bound by the act of the fraudster in gaining access to Donna’s email account and sending the 2.16am email.
The reasons of Dawson J and Toohey J compel the same conclusion. A document which in truth is a forgery may bind a company if the company holds out the person who signs the document or affixes the company seal, has authority to act for it. The 2.16am email was a forgery. However, MJC did not, by silence or otherwise, hold out the fraudster as having the authority to create or send the 2.16am email. When a person, as in the position of the fraudster in this case, creates and sends an email from a company account has neither actual nor ostensible authority to do so, then the company is not bound. Rather the document, the 2.16am email, is a nullity.
The position can be no different if looked at through the principles or taxonomy of estoppel by representation. MJC is not in any sense resiling from a representation, assuming it was made, that Donna had plenary authority. She did not send the email or cause it to be sent and was not purporting to exercise any authority of her own when the fraudster attacked her email account.
In the course of closing submissions, Pandora referred to Tina Motors Pty Limited v Australian & New Zealand Banking Group Limited [1977] VR 205 (Tina Motors) as an example of the type of estoppel relevant to the present case.
In Tina Motors, a Mr and Mrs Italiano opened two used car businesses through a corporate entity, being the plaintiff. A Mr Stella, who was Mrs Italiano’s brother-in-law, came to be involved in the operation of the company. Mr Stella forged Mr Italiano’s signature on several cheques.
During the period the forgeries were being perpetrated, a manager at the ANZ Bank spoke to Mr Italiano about Mr Stella’s cheque activity. Crockett J found that on two occasions Mr Italiano said to the bank manager:
“Any suspicion you may have concerning the signature may be put at rest. I am so convinced of Stella’s trustworthiness that I can assure you that the signature you are querying must be genuine if it is Stella who is presenting the cheque”.
“The bank was in real doubt as to the authenticity of the signature when it made each of its enquiries. So to enquire was its obligation. In turn the customer’s duty was to meet the enquiry. That duty was not discharged by prevarication or by telling the bank to make up its own mind or that it must take its own risks.”
Accordingly, the case was decided in the context of the mutual duties of care owed by bank and customer: see now the exposition in Philipp v Barclays Bank (to which I have referred at [198] above) as to a bank’s obligation to make enquiries, which had come to be known as the Quincecare duty following the decision in Barclays Bank plc v Quincecare Limited [1992] 4 All ER 363. Even so, it is difficult to see how the case assists Pandora.
The representation by Mr Italiano which Crockett J found on the evidence to be established was that the signature upon any cheque presented by Mr Stella for payment was genuine. Mr Italiano was himself authorised to sign cheques and it appears that when he spoke to the bank manager he was speaking as and for the plaintiff company. In any event, either Mr Italiano or the company represented that the signatures, which had been forged by Mr Stella, were genuine. The bank acted on these representations. In these circumstances, Crockett J found the requirement for an estoppel to be made out such that the plaintiff was precluded from denying the representations made by Mr Italiano.
The case does not, I think, assist Pandora. The representation found by the judge was a representation that cheques presented by the fraudster, Mr Stella, were genuine. Such conduct finds no analogue in the circumstances of the present case. Any representation by MJC about Donna’s authority was not a representation about the authority of the fraudster to create and send an email, which was not hers, for the purpose of nominating the bank account for transfer of the purchase price under the ASA.
Assuming that a representation about Donna’s plenary authority could be made out, that representation only extended to Donna’s authority to make decisions for, and send communications on behalf of, MJC. It did not convey any authority for an unknown third-party to make decisions for, and communicate on behalf of, MJC.
It is notable also that in Tina Motors the bank made enquiries of Mr Italiano because, as Crockett J found, it was in real doubt as to the authenticity of the signatures of the cheques being presented by Mr Stella. The representation relied upon from Mr Italiano was procured in the course of the bank’s performance of its obligation to make enquiry of its customer.
Putting to one side the obligations created by the relationship of bank and customer, Pandora made no inquiry of MJC about the authenticity of the 2.16am email when it processed the payment and transferred the purchase price to the false NAB account. This is a matter I will return to in addressing reliance on the representation alleged by Pandora.
In these circumstances, Pandora’s arguments relying on estopped by representation or ostensible authority, if they be different, must fail.
The 2.16am email was in substance a forgery by digital means. It was not in fact sent by Donna or by MJC. It was in circumstances where no estoppel or authority could be sheeted home to MJC, a nullity. For these reasons, it could not constitute a lawful nomination by MJC of a bank account for the purpose of clause 8.3 of the ASA.
I am fortified in reaching this conclusion by two decisions in the District Courts of other states which were helpfully drawn to the Court’s attention by the parties: the first is Factory Direct Fencing Pty Limited v Kong AH International Company Limited [2013] QDC 239 (Factory Direct) at [74] per Andrews SC DCJ. The second is Mobius Group Pty Limited v Inoteq Pty Limited [2024] WADC 114 (Mobius Group) at [183]-[187] per Massey DCJ.
In both cases, a fraudster impersonating one party emailed the other requesting payment to the fraudster’s bank account. In each case, the Court found that the disputed emails were not sent by the party whose email address was used by the fraudster. I note that in neither case, was there an argument raised as to ostensible authority or estoppel by conduct of the party whose email accounts had been accessed and used by the fraudster. In Mobius Group, Massey DCJ found at [183]-[184] and [186]:
“183. Furthermore, while the fraudulent email and the fraudulent invoice came from the email address nominated by the plaintiff, neither of those emails were in reality sent by the plaintiff. They were sent by the fraudster. In my view the position which the defendant asks me to accept does not reflect the reality of the situation.
- In my view, in the circumstances of this case, it is no answer to the plaintiff’s claim to contend that the defendant was entitled to rely on the fraudulent email and fraudulent invoice as having come from the plaintiff. Notwithstanding the use by the fraudster of the plaintiff’s email account to send those emails, those emails did not come from the plaintiff.
…
186 Ultimately the plaintiff did not provide the defendant with any notice that its bank account had changed. Notice of that change, which was not true, was given by someone else. If I were to uphold the defendant’s submission it would permit the defendant to remain wilfully blind to the realities of the situation. In my view such an interpretation would not reflect commercial reality. It would also have the potential to encourage other fraudsters who could operate on the basis that no checks needed to be made by payers in these circumstances.”
Similarly, in Factor**y Direct, the fraudster impersonating the seller had intervened in the parties’ email correspondence requesting payment to the fraudster’s bank account. Andrews DCJ found at [46] and [74] that the disputed emails were not sent by the seller.
To a large extent these cases, while involving scenarios with some similarities to the present, turn on their own facts and the legal issues raised by the parties in them. However, in neither case was the Court prepared to find that the fraudulent email was sent by the party whose email was subject to attack. The conclusions reached by Massey DCJ at [183]-[186] are consistent with characterising and treating the fraudulent email as, in law, a nullity. However, the question of the role and conduct of the recipient of the email will likely depend on the nature of the defences raised by the recipient of the email; it may depend on the role, if any, the plaintiff had in the gaining of access to or the attack on its systems and the content and the circumstances of the communications deployed for the purpose of the attack. As addressed below, I do think that the particular circumstances of the present case should have given rise to enquiries to verify that Donna had authority to give the purported nomination.
In case I am wrong in my conclusion, that as a matter of principle, any representations made by MJC about the authority of Donna to act, do not bind it in the circumstances of this case, I will address the salient elements of the estoppel raised by Pandora in its submissions.
Pandora submitted that MJC represented in its dealings with it, including by silence, that Donna had authority to act on MJC’s behalf. This was confirmed in closing submissions as a plenary authority to act on behalf of MJC.
Counsel for Pandora explained that the parties communicated with a manner of informality, usually by email. In these circumstances, Pandora made the following submissions.
First, the nature of the authority itself was relevant. In this case it was the provision of bank account details, not the entry of a significant transaction. They pointed to a level of informality in the act of providing bank account details, both in this case and in general.
Secondly, Donna was not an ordinary employee; she had a 50% interest in the parent company that controlled MJC and was a director and secretary of that parent company.
Thirdly, Donna referred to herself in her dealings with Pandora as the “franchisee”.
Fourthly, Donna was appointed by Pandora as a representative of franchisees on its franchisee panel.
Fifthly, there was no evidence of any communication to Pandora that Donna’s authority was limited in any way. Contrary to MJC’s assertion that Stephen only was authorised to deal with financial matters, the evidence was that Sam was directly involved in financial aspects of the transaction. As a family business, it was submitted, there was an informal allocation of roles internally which was not communicated to Pandora.
Sixthly, Donna was a named party to some of the key franchising agreements including, as I have observed above, as a Guarantor to the Franchise Agreement and a Covenantor and Vendor Party under the ASA.
Seventhly, Donna made decisions committing MJC financially such as a decision in September 2020 to create pop-up stores.
Eighthly, it was submitted that MJC allowed Pandora to labour under a misapprehension that Donna was a director.
For its part, MJC disputed the contention that it had represented to Pandora that Donna had plenary authority.
First, it took issue with the proposition that the provision of bank account details was not a significant transaction. The nomination of the bank account occurred in circumstances where that determined where the entire purchase price for the store assets and stock would be paid. In these circumstances the provision of bank account details was of great significance.
Secondly, the evidence was that Donna was a salaried employee of MJC. She was not involved in setting her own salary; she was not a director or officer of MJC. The fact that Donna had an interest in the parent company, was not relevant to whether Donna had ostensible authority to act on behalf of MJC. More fundamentally, the evidence revealed that while Donna was copied into some communications in respect to the negotiations of the ASA, she did not send any of the emails and does not appear to have made or responded to any proposals in respect of those negotiations.
Thirdly, MJC submitted that references by Donna to herself as the franchisee, where they appeared, were incapable of representing any form of authority to bind MJC in respect of financial decisions.
Fourthly, the appointment of Donna as a representative on Pandora’s franchisee panel, did not indicate one way or another whether Donna had authority to act on MJC’s behalf. Stephen was not cross-examined about Donna’s role on the franchisee panel and there was no evidence that membership of any such group conferred any authority at all.
Fifthly, MJC submitted there being no plain representation of plenary authority, that there was no need for any communication setting out the limits on Donna’s authority.
Sixthly, MJC accepted that while Donna was a main party to the key franchise agreements, these agreements defined her role as guarantor and covenantor. It emphasised that Stephen executed each of the formal agreements entered into with Pandora as the sole director of MJC.
Seventhly, MJC submitted that the evidence relied upon by Pandora as establishing that Donna made decisions committing MJC financially, did not establish that fact. They submitted that the evidence relied upon showed the limited role that Donna played in the operation of MJC; those emails related largely to Donna seeking permission from Pandora and help in addressing minor matters, clearly restricted to the day-to-day operation of the Kotara store.
Eighthly, in relation to Pandora’s submission that it laboured under a misconception that Donna was a director, MJC submitted that no person inside or outside of the group that approved the payment to the false NAB account, gave evidence that they believed that Donna was a director of MJC. Ms Sunder did not give evidence to this effect; her evidence was that she assumed that Stephen and Donna owned and operated the Kotara store together.
I am not satisfied that I could make a finding on the evidence that MJC represented to Pandora that Donna had, in effect, plenary authority. Donna’s role in the business related principally to stock selection and the day-to-day store management issues concerning the Kotara store. She did not sign the Franchise Agreement or the ASA as a director of MJC, and she did not sign the Deed of Termination and Release at all. She does not appear to have conducted the negotiations for the ASA or negotiated the deal which was capsulated in that document; at its highest, she was copied into emails concerning that subject matter. I do not think that the evidence concerning Donna’s appointment to Pandora’s franchisee panel advanced Pandora’s case; nor do I think that the email correspondence showing Donna asking for permission from Pandora to negotiate with Westfield in respect of a pop-up store in 2020 advanced Pandora’s case.
More significantly, while emails were sent to both Stephen and Donna concerning the performance and completion of the ASA agreement, including the requests by Ms Damodran for the tax invoices on 28 February, 4 March and 5 March 2024, on each occasion, Stephen responded to these emails by himself, and without copying in Donna. I do not regard the provision of bank account details under the ASA as a trivial matter.
While Donna attended (with Stephen and Sam) the 7 March 2024 Teams Meeting, there was no evidence that she led or contributed to any issue that was discussed at that meeting.
Even if it is accepted that Pandora, through Ms Sunder, believed that Stephen and Donna owned and operated the Kotara business, there was no clear and unequivocal representation by MJC that Donna had plenary authority to act for MJC. On the evidence Stephen, and to some extent Sam, addressed Pandora with respect to financial issues concerning the matters required to finalise the sale under the ASA.
While Pandora sent or copied in Donna to several emails in the period after 28 February 2024 without demur by MJC, I do not think the circumstances called for specific action from MJC to avoid Pandora from being misled, or to countermand a previous representation of plenary authority (see Essington Investments at [188] above). The email communications sent by Pandora did not require that Donna herself should carry out any particular task or respond to a particular matter in relation to the ASA. Further, when action or response was required by MJC, it was Stephen (or Sam in the case of the dispute concerning marketing credits) who responded on behalf of MJC.
The authorities establish that there are important limitations to the operation of the doctrine of ostensible authority which are concomitant with the requirements of an estoppel by representation. As Gaudron J said in North**side Developments, “if a person has knowledge of facts or ought to have knowle**dge of facts putting the person to further inquiry, that is a matter which tells against the party sought to be bound having played such a part in the adoption of the assumption that he or she should be held to it.” This principle also finds expression in the law of agency concerned with the ostensible authority.
The protection of the expectation of a third-party, which acts in reliance on a representation by a principal that an agent has authority to bind the principal, is only justified if reliance on the representation is reasonable. A third-party cannot rely on the apparent authority of an agent if it failed to make the enquiries that a reasonable person would have made in all the circumstances to verify that the agent had that authority: see the authorities and principles referred to at [194]-[195].
The submissions made by Pandora on reliance, tended to go to general matters relating to the circumstances in which they submitted the representation of plenary authority had been made.
Pandora referred to obligations under the Franchise Agreement to ensure that all hardware and software was secure from unauthorised access or use (clause 17.10(2)(f)) and further obligations relating to the protection of confidential information in the Franchise Agreement (clause 23.3): see [36] above. Pandora also raised compliance with the Privacy Act 1988 (Cth) during the course of the hearing and in closing submissions. These matters were said to inform the reasonableness of Pandora’s reliance on the representation made by MJC about Donna’s authority. However, neither of these obligations were pleaded or referred to in the Schedule of Issues or in the oral opening.
These matters could only be of relevance if, as I have found, Donna did not send the 2.16am email. Unsurprisingly, there was no evidence as to what, if any, steps had been taken by MJC to ensure that its hardware and software were secure from unauthorised access or use or to maintain the confidentiality of information. Nor was there any evidence of what was required by Pandora to comply with relevant obligations under the Franchise Agreement. There was, for example, no evidence of Pandora’s ‘Retail Management Guide’ referred to in clause 17.10(2)(f) of the Franchise Agreement (see [36] above). Also, perhaps unsurprisingly, there was no evidence from either of the witnesses who gave evidence for Pandora that they relied on the compliance by MJC with the relevant contractual or statutory obligations. In particular, Ms Sunder who received the 2.16am email, did not mention in her evidence that the clauses identified by Pandora in the Franchise Agreement had any effect on her consideration of that email.
In final submissions Pandora complained that MJC had avoided calling any real evidence relating to the circumstances of what it described as “the data breach” and called in aid the failure to call evidence from witnesses who had not addressed the topic: Commercial Union Assurance Co of Australia Limited v Fe**rrcom Pty Limited (1991) 22 NSWLR 389 at [27]. I think that these submissions are not sustainable in view of the manner in which the case was pleaded and opened. The issues that Pandora sought to litigate as reflected in its pleadings, did not, it seems to me, call into question the extent to which it maintained the security of its systems from unauthorised access. Rather, as I have found, Pandora’s case in this respect was pleaded on the basis that Donna sent the 2.16am email, and that she had authority to do so.
Ultimately, I do not think that, in these circumstances, obligations under the Franchise Agreement with respect to the security of MJC’s hardware and software, the protection of confidential information, or compliance with the Privacy Act 1988 (Cth) advanced Pandora’s case that its reliance on the representation concerning Donna’s authority was reasonable. There was no evidence of communications between the parties about these matters. There was, for instance, no evidence about the steps, if any, which were taken by MJC to comply with its contractual or statutory obligations or any steps taken by Pandora to ensure or direct compliance by MJC. Neither of Pandora’s witnesses gave evidence on these matters.
Pandora submitted that the parties communicated informally and primarily by email, and cited as an example of this, Stephen’s issuing of the tax invoices without any information in the body of the email and addressed to a paralegal. Pandora also emphasised that the relevant act was the nomination of a bank account rather than entry into a contract. I accept that these matters are relevant to an assessment of the reasonableness of Pandora’s reliance on the 2.16am email in the circumstances it was sent. They were not, however, determinative.
Pandora also relied on Ms Sunder’s evidence that when she read the 2.16am email, she did not notice anything unusual about it or its attachment and that she did not see the exposed email address of Stephen, which, as I have observed above, was incorrect. It will be necessary to assess this evidence in the context of the content and circumstances of the sending of the 2.16am email and Ms Sunder’s oral evidence.
The circumstances surrounding Pandora’s reliance on the 2.16am email and the NAB attachment are also relevant to the resolution of other remaining issues in the proceedings; including the further estoppel relied on by Pandora.
Had it been necessary for me to do so, for the following reasons I would not have found Pandora’s reliance on the 2.16am email, as a nomination of a bank account for the purpose of the ASA, reasonable. In my judgment, the circumstances and content of that email and its attachment, ought to have put Pandora on enquiry to check or verify that Donna (or whoever else sent the email) had authority to do so.
The request for payment into a new and different account was one that I think required close attention in circumstances where MJC had, upon request, provided invoices with the NAB Kotara account on two occasions in the previous days. Pandora had requested those invoices and they had been provided. While Stephen’s emails attaching those invoices did not contain further information, it was not necessary for him to do so. The request to which he was responding was clear, and the information contained in the attached invoices was also clear. The request for the provision of those invoices was required under the terms of the ASA. There was no mention in the days leading up to 8 March 2024 that MJC had changed its bank account details or that it was intending to do so.
As submitted by MJC, the 2.16am email was sent and received at 2.16am in the morning. The email purported to be sent from Donna, a Newcastle resident, and was received by Ms Sunder in Sydney at that time. This was an unusual and suspicious time for the email to be sent. In her affidavit evidence, Ms Sunder said it was not unusual for her to receive emails overnight. In cross-examination she said that she could not say for certain whether she took note of the time the email was sent when she looked at it on the morning of 8 March 2024 but gave this evidence:
“Q How often did you receive emails from franchisees in Australia at 2.16am in the morning?
A. I don’t recall.
Q. Had it ever happened?
A. I don’t recall taking note of that.
Q. Did you notice the time when the 2.16am document came in?
A. On the 8 March?
Q. Yes, on 8 March, sorry, not when it came in. Did you notice the time that the 2.16am email had arrived in your inbox?
A. I can’t say for certain if I took note.
Q. If you had noticed [the time] would that have been important to you?
A. Yes.
Q. Would you have been suspicious?
A. Maybe.”
The 2.16am email was not, as I have observed above, a response to the most recent and relevant email in the thread concerning the arrangements for the payment of the purchase price. It was a response to the 6 March 2024 email from Mr Zhang, and not the 7 March 2024 3.19pm email from Ms Sunder. This is of significance because the email did not pick up Ms Sunder’s own direction to Mr Zhang to direct payment to the NAB Kotara account. Moreover, the context of the 2.16am email was that a valid tax invoice had been provided earlier and accepted. Ms Sunder had participated in a Teams Meeting with both Stephen and Donna on 7 March 2024 in which no mention had been made of a change of a bank account and then provided a request to the group asking Mr Zhang to arrange the payment to a specified bank account. As MJC submitted, the fact that the purported change in bank account details came in the early hours of the next day in those circumstances, was odd and suspicious.
The 2.16am email made no express reference to and effectively ignored the earlier invoices which had been provided upon request by Pandora. The 2.16am email did not purport to provide new invoices with updated bank account information. As matters stood, the earlier invoices which had been provided for GST purposes, did not match the false NAB account. This was inconsistent with the manner in which Ms Damodran had indicated that the payment would be made in her email of 28 February 2024 – the fraudster’s nomination did not align with the details provided in the invoices.
I consider that the fact that the bank account details came from Donna and not from Stephen, who had sent both invoices for the Kotara and Charlestown stores on 4 and 5 March 2024, was unusual. Stephen had not copied Donna into his emails sending the relevant invoices. Ms Sunder received from Ms Damodran each of Stephen’s emails attaching the invoices that had been requested. The 2.16am email would have appeared to be the first email sent by Donna concerning MJC’s bank accounts or the exit arrangements with Pandora.
MJC submitted that the ‘snip’ in the 2.16am email which set out the false NAB account details was substantially larger than in the email sent by Ms Sunder to Mr Zhang on 7 March 2024, and this was a factor that should have put Pandora on inquiry concerning the 2.16am email.
In my opinion, the NAB attachment ought, on an ordinary reading, have generated suspicion:
(a) the date of the document was 6 March 2024. That was a date before Ms Sunder’s email of 7 March 2024 at 3.19pm. There was no indication of any kind by MJC on 6 or 7 March that the bank account for the purposes of the ASA was anything other than the NAB Kotara account. In particular, there was no mention at the Teams Meeting that occurred on the previous day, that the account had been changed; (b) the opening sentence of the NAB attachment stated confirmation of bank account information by the “National Australia Bank of Australia”; (c) the NAB attachment included the statement “Should you have any questions please do not hesitate to contact us”. Yet there was no phone number or email address contained in the document for that purpose; (d) the signature of the person who purported to sign the letter did not appear to match the name of the person who purported to send the letter; and (e) the document contained no ABN, ACN and no details of an Australian Credit Licence Number or an Australian Financial Services Licence Number. Nor did it contain a reference number or barcode.
MJC made a submission that the bank branch identified in the NAB attachment did not exist, but there was no evidence adduced about this.
Ms Sunder said in her oral evidence that she “would have” looked at the NAB attachment. She was taken to the NAB attachment and asked whether she was able to say more confidently that she did look at it on 8 March 2024. Ms Sunder said:
“A. My answer stays the same. I would have looked at it.
Q. It was your practice was it, to open attachments?
A. Yes.”
“Q. Did it [the NAB attachment] look like any bank document you’d ever seen before?
A. Not that I recall specifically from now.”
“Q. Isn’t it unusual that there is no contact information provided?
A. Yes.
Q. Do you think you would have noticed that at the time?
A. No.”
“Q. Taking you back to the NAB document, given that you did notice the date on it of 6 March, didn’t it seem odd to you that no one at that meeting [the Teams Meeting] told you on 7 March that the bank account details would be changed?
A. No.
Q. Does it seem odd to you now?
A. Possibly.”
I accept Ms Sunder’s evidence that she did not see that the email address used for Stephen had been misspelt in the 2.16am email. The copy of the email exhibited to her affidavit did not expose the addresses of the recipients and Ms Sunder gave evidence that the program she used was not set to expose the addresses on emails. And as Mr Campey explained, the registration of the domain ‘matthesw.jewellers.com’ on 8 March 2024 meant that subsequent emails sent by Ms Sunder and Mr Zhang would not be returned undeliverable (see [138] above).
Ms Sunder’s role and responsibility in arranging for the payment to be made, was not entirely clear. Her evidence was that as Finance Manager at Pandora she was responsible for transaction accounting and financial reporting including payment transactions. She said that she was responsible for ensuring that payment was for the correct amount and correctly processed. However, her evidence was that the Global Business Service team provided shared services to the Australian business, and that shared transaction accounting functions for Australia, New Zealand and other parts of Asia were based in the Shanghai office of, I infer, Pandora Jewellery (Shanghai) Company Limited (see [97] above). These included the transaction accounting team who processed all payments made by Pandora to franchisees in those areas. Significantly, in her 9.11am email when she directed Mr Zhang to make payment of the Purchase Price, she requested Mr Zhang to send through a remittance “as soon as the payment is authorised”.
This suggests that there was an authorisation function for the Global Business Service team in Shanghai of which Mr Zhang formed a part. The Westpac remittance which was attached to the 2.12pm email, as I have observed earlier, identified that three persons were involved in creating or authorising the payment from Pandora’s Westpac account (see [95] and [96] above). That document identifies that Ms Lin processed the request for payment and that it was then authorised by two others, first Ms Li and then Mr Yuqi Zhan, whom Ms Sunder described as ‘the boss’ of the shared business service in Shanghai. The process of authorisation, it can be inferred, was a matter of significance for Pandora. Two persons, including the head of the team responsible, other than the person initiating payment, were required to give their authorisation.
The role of and the actions taken by the shared business team in processing and authorising the payment of the amount transferred to the false NAB account was not identified with any clarity in the evidence. None of Mr Zhang, Mr Yuqi Zhan, Ms Lin, Ms Li or Ms Phoebe Zhang gave evidence in the proceedings. It is not clear what, if anything, they looked at or what, if any, steps they took if any of them did inspect the 2.16am email and the NAB attachment. Nor is it clear what processes needed to be undertaken to identify and authorise a beneficiary of new account details to make the electronic funds transfer on Westpac’s electronic banking systems; for instance, whether there was a process for matching the account details with the account holder, or identifying the new account holder.
The evidence disclosed that the amount was transferred to the false NAB account on the same day it was processed, notwithstanding the size of the payment, that it was to a new account for the beneficiary of that payment, that it was an interbank transfer and the remittance referred to an ‘overnight’ payment method. No explanation was proffered as to how this occurred.
Ms Sunder’s evidence confirmed that the reference on the Westpac remittance document to ‘Additional Payment Information’ was to internal approval processes of Pandora to make the payment. She explained that Ms Lin and Ms Li, so far as she was aware, did not still work for Pandora. Mr Yuqi Zhan however, did. Mr Cutcliffe’s evidence was that Mr Jonathan Zhang and Ms Phoebe Zhang, who worked in Mr Zhang’s team in Shanghai, were still with the organisation. Otherwise, there was no explanation by Pandora why none of the personnel who worked in Shanghai, apparently for Pandora Shanghai, and participated in the approval process for the payment, or received the 2.16am email, were not called to give evidence in the proceedings. In these circumstances, I am entitled to assume that the evidence of Mr Yuqi Zhan, Mr Jonathan Zhang and Ms Phoebe Zhang, would not have assisted Pandora: Jones v Dunkel (1959) 101 CLR 298; Kuhl v Zurich Financial Services Australia Limited (2010) 243 CLR 361 at 384-385 [63]-[64]; ASIC v Hellicar (2012) 247 CLR 345 at 409 [155].
MJC also submitted that I should draw inferences from Pandora’s failure to call other recipients of the 2.16am email. I am not persuaded that I should draw inferences from the absence of evidence from the other recipients. For instance, the evidence was that Ms Mckinnon was the Franchise Operations Co-ordinator reporting to Mr Cutcliffe, and that Ms Barr was the Divisional Sales Manager whose role was described as managing some of the practical, ‘on-the-ground’ processes, relating to the transfer of business. There was no suggestion in the evidence that these persons were involved in the processing or authorisation of the payment of the purchase price.
However, Pandora did not raise any queries in relation to the 2.16am email with MJC. There was no phone call or email communication asking anyone at MJC to check the new account details were correct and could be relied upon. Ms Sunder’s 9.11am email requested Mr Zhang to arrange for payment and to send through a remittance advice once payment was authorised by the Global Business Services Team. It did not ask MJC to do anything or to check anything before the payment was authorised and made.
For these reasons, I do not consider, had it been necessary to do so, that I would have found Pandora’s reliance on the 2.16am email and its attachment to be reasonable in the circumstances. Pandora failed to make enquiries that a reasonable person would have made to verify that the nomination in the 2.16am email, to pay into a new and different bank account, was authorised by MJC.
Pandora submitted that its reliance on the representation it alleged was detrimental in that it led to the payment of monies to the false NAB account. As I have observed, Ms Sunder received no bounce-back to the incorrect email address for Stephen when she provided the payment instruction to Mr Zhang at 9.11am. Ms Sunder’s evidence was that if she had been informed of the fact that the banking details were incorrect or that the 2.16am email was not authentic, she would have taken steps with Westpac to stop the payment or asked Westpac to contact NAB and inform it of the fraud.
Pandora submitted that when the fraud was disclosed to NAB, it was able to remove the funds that remained in the false NAB account within a matter of hours – a transaction report dated 14 March 2024, which it tendered, showed the removal of funds from the false NAB account at 5.08pm.
On this basis Pandora submitted that its detriment in relying on MJC’s representation equates to the total sum of its liability.
MJC did not, so far as I could tell, put on submissions addressing this issue.
I accept Ms Sunder’s evidence that if she had been informed of the fact that the bank account referred to in the 2.16am email was not a bank account of MJC or that the 2.16am email was not authentic, she would have taken further action. If it had been necessary to determine, I would have found that Pandora suffered detriment by reason of its reliance on the representation it alleged.
For completeness, MJC had raised, during the course of the hearing, the operation of s 14 of the Electronic Transactions Act 2000 (NSW), which concerns the attribution of electronic communications. However, it disavowed reliance upon that section in its closing submissions, in view of the fact that no finding was sought by Pandora that Donna had sent the 2.16am email. Accordingly, it is not necessary for me to consider the operation or effect of s 14. However, without there being dedicated argument on the matter, I do have sympathy with Pandora’s submission that s 14 expressly preserves reliance upon communications sent by a person within the scope of that person’s apparent authority; that seems to me to be the effect of s 14(2).
Pandora argued that MJC failed to mitigate its loss. It said that MJC was put on notice by the 9:11am email and the 2:12pm email. By those emails, it submitted that MJC was put on notice that payment was “already processed”, that a remittance advice had been issued and was attached to the 2:12pm email, and that the remittance advice indicated payment was to be ‘overnight’ in relation to a new MJ Concepts Kotara bank account. It also submitted that the 9:11am email and the 2:12pm email were part of the email chain which contained information in relation to the change in bank account details.
Pandora submitted that in the circumstances, MJC ought reasonably to have taken steps to notify Pandora, at the latest by Monday 11 March 2024, that the change in bank account details was unauthorised. In not doing so, it submitted that MJC failed to act reasonably in mitigation of its loss.
The parties did not appear to dispute the principles applicable to the defence raised by Pandora that MJC had failed to mitigate its loss.
Damages cannot be recovered for any loss that could have been prevented by reasonable mitigating action of the injured party. In its essence, the defendant must show that the plaintiff has acted unreasonably in some respect, either by acts (incurring unnecessary or unreasonable expenses) or omissions (failing to take steps that reasonably should have been taken to reduce the loss): see Ceerose Pty Ltd v The Owners – Strata Plan No 89074 (Ceerose) [2025] NSWCA 235 at [29], per Kirk JA, with whom Leeming and Ball JJA agreed. Clearly, the issue in this case was whether MJC failed to take steps that reasonably should have been taken to reduce its loss.
The party in breach has the onus, both legal and evidential, of establishing failure to mitigate: TC Industrial Plant Pty Ltd v Robert's Queensland Pty Ltd (1963) 180 CLR 130 at 138.
Neither excessive diligence nor perfection is required of a plaintiff in minimising its loss. In Ceerose at [30] and [31], Kirk JA referred to two authorities which summarised the position:
(a) In Lodge Holes Colliery Company Limited v Wednes**bury Corporation [1908] AC 323 at 325, Lord Loreburn LC said:
“Now I think a Court of justice ought to be very slow in countenancing any attempt by a wrong-doer to make captious objections to the methods by which those whom he has injured have sought to repair the injury. … Errors of judgment may be committed in this as in other affairs of life. It would be intolerable if persons so situated could be called to account by the wrong-doer in a minute scrutiny of the expense, as though they were his agents, for any mistake or miscalculation, provided they act honestly and reasonably.”;
(b) In Karacominakis v Big Country Developments Pty Limited [2000] NSWCA 313; (2000) BPR 18,235 at [187] Giles JA said:
“A plaintiff who acts unreasonably in failing to mitigate his loss from the defendant’s breach of contract will have his damages reduced to the extent to which, had he acted reasonably, his loss would have been less. This is often misleadingly referred to as a duty to mitigate, although the plaintiff is not under a positive duty. The plaintiff does not have to show that he has fulfilled his so-called duty, and the onus is on the defendant to show that he has not and the extent to which he has not. Since the defendant is a wrongdoer, in determining whether the plaintiff has acted unreasonably a high standard of conduct will not be required, and the plaintiff will not be held to have acted unreasonably simply because the defendant can suggest other and more beneficial conduct if it was reasonable for the plaintiff to do what he did.”
“A plaintiff “cannot be said to have really incurred any loss which might have been avoided by his taking such steps as a reasonably prudent man in his position would have taken to avoid further loss to himself”: Driver v War Services Homes Commissioner (1923) 44 ALT 130 at 134 per Irvine CJ (emphasis added). A plaintiff cannot recover damages for losses “which he would not have incurred had he acted reasonably in the ordinary course of his business”: TCN Channel 9 Pty Ltd v Hayden Enterprises Pty Ltd (1989) 16 NSWLR 130 at 162 per Priestley JA (emphasis added). Subject to the criterion of reasonableness, the plaintiff “is completely free to act as he judges to be in his best interests”: The Soholt [1983] 1 Lloyd’s Rep 605 at 608 per Sir John Donaldson MR (emphasis added). “The word ‘reasonable’ has in law the prima facie meaning of reasonable in regard to those existing circumstances of which the actor, called on to act reasonably, knows or ought to know”: In re a Solicitor [1945] KB 368 at 371 per Scott, Lawrence and Morton LJJ; see also Adams v Eta Foods Ltd (1987) 78 ALR 611 at 621 per Gummow J.”
(a) whether MJC’s claim was a claim in debt; and (b) if the claim is to be characterised as a claim in damages for breach of contract, what was the date of breach?
“… An action in debt is distinct from an action for damages for breach of contract (Young v Queensland Trustees Ltd (1956) 99 CLR 560 at 567; [1956] HCA 151; Edwards v Australian Securities and Investments Commission (2009) 235 FLR 207 at 223-224; [2009] NSWCA 424 at [80]). This distinction is important because the principles of mitigation do not apply to claims in debt (Re Castleplex Pty Ltd (in liq) [2010] QCA 59 at [65] (McMeekin J); Starrs v Retravision (WA) Ltd [2012] WASCA 67 at [72]) (see also J.W. Carter, Contract Law in Australia (7th ed, 2018, LexisNexis Butterworths) at 823 [35]-[37]). This is so because such a plaintiff does not need to prove that it suffered a loss represented by the difference between the position it is in and that which it would have been in if there had been no breach of duty or contract by the defendant. Suing in debt, its task is, relevantly, to prove a contractual promise by the defendant to pay it a specific sum that has accrued and is ascertainable under the contract without any need for independent assessment by the court.”
“Third, mitigation issues relate to claims for damages. No question of mitigation arises if the plaintiff's claim is to enforce payment of a contract debt.”
Pandora also referred, following a query from the Court, in its submissions to other authorities establishing the point: see Hexiva Pty Ltd v Lederer [2006] NSWSC 1129 at [66] per Brereton J; Netforce Pty Ltd v ITC Group Pty Ltd [2010] NSWSC 443 at [74] per Davies J; Australian and New Zealand Banking Group Limited v Liebmann [2010] NSWSC 545 at [57] per Einstein J.
As to the second of the further issues, the parties accepted that assuming that the claim could not be properly characterised as a claim for an action in debt, any failure to mitigate is to be assessed from the date of the relevant breach of contract. The parties each made submissions assuming there to be a breach, as to what that date was.
In this respect, both parties relied on the decision of Handley JA in Bak v Glenleigh Homes Pty Limited (Bak) [2006] NSWCA 10, where his Honour said (at [5]):
“I am not aware of any authority on the nature of the “duty” to mitigate in contract where the innocent party was not aware of the facts giving rise to the breach, and the question must be considered in principle. The duty is only to do what is reasonable, and the prima facie measure of damage is only reduced if the innocent party has neglected to take reasonable steps. If the innocent party is not aware of the facts giving rise to the breach he cannot, by doing nothing, be said to act unreasonably. The question therefore must be whether he ought, acting reasonably, to have been aware of the breach.”
“Similarly, in Smith New Court Securities Ltd v Citibank NA [1997] AC 254; [1996] 3 WLR 1051 (at p 1060) Lord Browne-Wilkinson noted that no question of a duty to mitigate could arise for so long as the plaintiff was unaware of the wrong (which in that case was fraud); and in County Ltd v Girozentrale Securities [1996] 3 All ER 834 at 858d-f Hobhouse LJ made clear that no question of mitigation of loss arose until the relevant breach was discovered.”
“The innocent party’s so-called duty to mitigate his or her damage in a contract case arises on breach, subject to the question of knowledge, and not when damage is first suffered or noticed: Bak v Glenleigh Homes Pty Ltd [2006] NSWCA 10 at [3] (Handley JA, Hodgson and McColl JJA agreeing), citing the principles summarised in McGregor on Damages (17th ed, Thomson Reuters, 2003) at pp 224-5, which include the following (which also appears in the current edition (21st ed, Thomson Reuters, 2021) at [9-021]):
A claimant need take no steps in mitigation until a wrong has been committed against him. …”
In its Statement of Claim, MJC claimed damages for a liquidated amount, being the purchase price under the ASA and sought interest on that amount under the ASA.
Counsel for MJC opened its case on the basis that Pandora had not paid MJC the sum due under the ASA and that MJC was claiming to recover the purchase price as a debt due under the ASA:
“In a nutshell, the plaintiff's case is it's suing as a debt collection matter to recover the debt due under the written asset sale agreement.”
“9. The Plaintiff complied with all its obligations on Completion on or before 4 5 March 2024 and the Plaintiff claims payment of $467,378 plus interest up to judgment in debt.”
Ultimately, Pandora did not oppose the amendment, and orders were made granting leave to MJC to amend its claim in the form it proposed.
MJC argued that its claim was an action in debt for a liquidated sum, and, alternatively, it made a claim for damages for breach of contract.
For its claim in debt, MJC submitted that it must show a liquidated debt for a sum stated or a sum ascertainable pursuant to the contract, executed consideration on the part of the plaintiff and that the debt had become due. It submitted that all three requirements had been met.
In Pavey & Matthews Pty Ltd v Paul (Pavey & Matthews) (1987) 162 CLR 221 at 230-231, Brennan J traced the history of the actions of indebitatus assumpsit and the action of debt. Brennan J observed at 230-231:
“When one party completes work which he has contracted with another party to perform and the other party fails to pay what was agreed, the party who has done the work is entitled prima facie to sue for what is owing either on the contract or on the debt which arises on performance of the contract. The origin of the alternative remedies is to be found in the history of that fruitful action, indebitatus assumpsit. The action depended on the fiction that there is a separate and subsequent promise to pay a debt - indebitatus assumpsit - though the debt arises out of a contract: see Ibbetson "Sixteenth Century Contract Law: Slade's Case in Context" (1984) 4 Oxford Journal of Legal Studies 295, at pp.315-317. An action lay for damages for breach of the fictional subsequent promise to pay the debt - damages which in theory might not be in precisely the same amount as the debt: see Baker "New Light on Slade's Case" (1971) Cambridge Law Journal 51, at pp.55,56; Ibbetson, p.309. A debt for a certain sum could also found an action of debt. But whereas indebitatus assumpsit led to a judgment in damages, judgment in an action of debt was given for the precise amount of the debt: see Ames Lectures on Legal History (1913), p.89. However, indebitatus assumpsit and debt were both actions founded on the debt; in the cases where the debt arose out of a contract, the actions were not founded on the contract. The debt, though arising from the contract, was itself a cause of action. As Dixon C.J., McTiernan and Taylor JJ. observed in their judgment in Young v. Queensland Trustees Ltd. (1956) 99 CLR 560, at p 567:
“The common law does not and never did conceive of indebtedness in a sum certain for an executed consideration as a mere breach of contract: it is rather the detention of a sum of money and that was so whether the creditor enforced his demand by an action of debt or by indebitatus assumpsit."”
“The important difference between a claim in debt and a claim for damages for breach of contract is that a claim in debt is a claim to enforce a primary obligation. Hence “[t]he question is whether the sum has been ‘earned’, not whether the contract has been breached”: J W Carter and M J Tilbury, Remedial Choice and Contract Drafting (1998) 13 JCL 5 at 21.”
As mentioned earlier (at [293] above), in Hill Foundation, Macfarlan JA observed that, suing in debt, the plaintiff’s task was, relevantly, to prove a contractual promise by the defendant to pay a specific sum that has accrued and is ascertainable under contract without any need for independent assessment by the Court.
MJC submitted that the sum comprised by the Purchase Price had been earned. The consideration for the Purchase Price was the sale and delivery of the Assets (as defined in the ASA). This occurred on the handover of the Kotara premises and the stock following the stocktake on 5 March 2024.
As discussed above, the Purchase Price was calculated under the ASA by reference to Item 5 of Schedule 1 to the ASA (see [45]). It was defined in Item 5 as $55,000 plus Stock Value (calculated in accordance with clause 5) less the value of Employee Liabilities Adjustment. The Value of Employee Liability Adjustment was nil. Accordingly, the Purchase Price was $55,000 plus Stock Value, subject to any adjustments at completion.
The stocktake was conducted on 5 March 2024. The parties subsequently agreed on the amount to be paid as the Purchase Price, being the amount of $467,378. This amount was set out in Mr Zhang’s email of 6 March 2024 at 5:24pm which itemised the net payment, including GST, considering all outstanding balances to date. MJC accepted the amount and following the Teams Meeting on 7 March 2024, Ms Sunder (in her email of 7 March 2024 at 3:19pm) asked Mr Zhang to arrange payment of $467,378 to the Kotara NAB account. I accept MJC’s submission that there was nothing further for MJC to do and that consideration was no longer executory by 7 March 2024.
So far as MJC was concerned, it had delivered the Assets and handed over the keys and access to the Kotara premises. There is no uncertainty in the amount that was to be paid by Pandora, and it, in fact, attempted payment of the agreed amount but paid it into the false NAB account.
Pandora sought to meet MJC’s characterisation of its claim as a liquidated amount in debt, firstly on the basis that there was not a promise to pay a ‘sum certain’ under the ASA. It submitted that there was no promise in the ASA to pay $467,378 by a certain date. Rather, the Purchase Price was to be determined as the amount payable for the Assets in Item 5 of Schedule 1 to the ASA. That calculation included the determination of Stock Value in accordance with Clause 5 of the ASA.
Accordingly, it submitted that at the time of entering the ASA the promise to pay the Purchase Price was not a promise to pay a ‘sum certain’, nor was it for an executed consideration. There was, it submitted, no ‘sum certain’ under the ASA for a liquidated amount.
I do not think that the fact that the ASA did not set out a sum certain for the payment of the Purchase Price, necessarily changes the character or nature of MJC’s claim. The promise by Pandora was to pay a specific sum (to be calculated in accordance with the terms of the ASA). That amount was, as Macfarlan JA said in Hill Foundation, ascertainable under the ASA without any need for independent assessment by the Court. As mentioned above, the Purchase Price was calculated by the parties following a stocktake and other adjustments and agreed to by the parties. Pandora attempted to pay that sum. It was not asserted that any other amount was payable under the terms of the ASA.
Pandora’s submissions properly accepted that a debt may still exist notwithstanding the requirement for subsequent calculation of the relevant sum. In Commissioner of Taxation v Bendel [2026] HCA 18, the High Court observed (at [176]):
“A debt is “a sum of money which is now payable or will become payable in the future by reason of a present obligation”. As the Full Court's reasons recognised, a “debt” may exist whether or not a payment has been made under an obligation of repayment. The existence of a debt no more depends on a breach of trust than it does on a breach of contract. As Dixon CJ, McTiernan and Taylor JJ said in Young v Queensland Trustees Ltd, the “common law does not and never did conceive of indebtedness in a sum certain for an executed consideration as a mere breach of contract: it is rather the detention of a sum of money and that was so whether the creditor enforced his demand by an action of debt or by indebitatus assumpsit”. That the resolutions set aside a portion of the Trust's net income rather than an amount for each beneficiary does not mean that no debt existed. A debt may exist even if the sum owed under it is to be calculated or assessed subsequently.” [The following cases were footnoted: Crisp & Gunn Co-operative Ltd v Hobart Corporation (1963) 110 CLR 538 at 543; Pavey & Matthews at 250-251 per Deane J; Victorian WorkCover Authority v Esso Australia Ltd (2001) 207 CLR 520 at 533-534 [30]].
Here there was in fact, by 7 March 2024, no further need for the parties to calculate or assess the sum to be paid as the Purchase Price. It had been determined to the satisfaction of both parties.
I am also not able to accept that so far as MJC was concerned, consideration was executory. It had dealt with and delivered the Assets as defined in the ASA and had handed over the keys and access to the Kotara premises. It was not suggested that there was anything more for MJC to do. Indeed, it was on that basis that Pandora tried to effect the payment of the Purchase Price.
In this sense, the relevant sum, being the Purchase Price, had been ‘earned’. The right to payment under the ASA had matured into a debt payable upon the performance by MJC of its obligations under the ASA and in accordance with terms in the ASA prescribing the manner of payment of the Purchase Price: see Advanced National Services at [47] and [52].
As discussed below, under Item 7 of Schedule 1, the ASA required the Purchase Price to be paid within five business days of the date of Completion.
Pandora also made a second argument on the basis that MJC’s claim for damages was pleaded upon a breach causing ‘loss and damage from such breach’, citing [11] of the Amended Statement of Claim. It submitted that MJC alleged in [8] and [10] of the Amended Statement of Claim breaches of clauses 6 and 8 of the ASA, which included executory consideration in the form of conditions precedent to be performed by MJC at completion.
To the extent that this argument relied upon the fact that MJC made a claim for damages, I think it is tolerably clear that MJC seeks recovery of the Purchase Price under the ASA for breach of contract, in the alternative. That does not, it seems to me, prevent it from seeking recovery of that amount as a debt. This was the purpose of the amendment which MJC brought to [9] of the original Statement of Claim, and in respect of which leave was granted on the basis that it was not opposed by Pandora. MJC is entitled, it seems to me, to pursue alternative remedies to recover the purchase price under the ASA.
Insofar as the second argument raised by Pandora relies upon consideration being executory in the form of conditions precedent to be performed by MJC at completion, as I have found above, in my view, MJC had performed its obligations under the ASA; it had ‘earned’ the Purchase Price under the ASA.
For these reasons I consider that the claim by MJC against Pandora in these proceedings for the payment of the Purchase Price under the ASA in the amount of $467,378 is a claim or action for the enforcement of a contractual debt. It follows from the authorities to which I have referred above that the question of whether MJC failed to mitigate its loss, does not arise.
The next issue which arises, if I am wrong in finding that MJC’s claim is one for the enforcement of a contractual debt, is the date of Pandora’s breach of the ASA, assuming there to have been a breach. This issue is of significance because the parties both accepted that, in accordance with the authorities I have mentioned above, that the innocent party’s so-called duty to mitigate loss in a contract case arises on breach, subject to the question of knowledge, and not when damage is first suffered or noticed. In this case the date of breach is relevant because by 12 March 2024 a very substantial portion of the monies had been removed from the false NAB account: see [111]-[112] above.
Under Item 7 of Schedule 1 of the ASA, the payment of the Purchase Price was required to be paid to MJC within five business days of the date of Completion. As no Deposit was paid, the entire Purchase Price was subject to this temporal stipulation.
Pandora submitted, focusing on the requirement in Item 7 for payment to be made to the V**endor, the date of breach should be taken to be 8 March 2024, which is when the payment was made into the false NAB account: see [110] above. It pointed out that clause 8.3 relevantly permitted that the payment could be made by immediately available funds to a ‘bank account nominated by the party to whom the payment is due’. Accordingly, it submitted that, assuming that there was a breach, the breach was the making of the payment which was not in accordance with the nomination of MJC.
I do not accept these submissions accord with the proper construction of the ASA. On a plain reading of its text, Item 7 of Schedule 1 required the Purchase Price to be paid to the vendor within a specified time, namely within five business days of the date of Completion. This is what a reasonable businessperson would have understood Item 7 to mean. It was only upon the expiry of that period that Pandora was in breach of its obligation to pay. This is consistent with the commercial purpose of such a clause. A number of matters might conceivably cause some short delay after completion in the ability of the purchaser to effect payment of a not insubstantial amount to the vendor. This could possibly relate to the immediate availability of funds or to the ability of a purchaser to effect successful payment by electronic funds transfer to the account of the vendor.
By way of illustration, I do not think that Pandora would have been in immediate breach of the ASA if those authorising the payment had, by an inadvertent typographical error, paid monies to a different account. Those funds might be able to be retrieved from the erroneous recipient within the stipulated period, or Pandora could choose to pay the amount within the stipulated period and seek to recover the funds erroneously paid, without being in breach of the agreement. And in the circumstances of this case, if the funds could have been retrieved from the false NAB account within the period specified in Item 7, I do not think that the breach would have accrued upon which MJC could have sued under the ASA. As MJC submitted, the ASA did not oblige Pandora to refrain from paying any monies to any person for any reasons. It simply imposed a positive requirement to pay the Purchase Price in a manner specified and by the time stipulated in Item 7.
The parties’ commercial bargain was that the purchaser had a period of time to effect payment after Completion. The breach did not accrue until after that time had expired. No submission was made about any anticipatory breach.
It will be recalled that Item 7 of Schedule 1 of the ASA required that the Purchase Price be paid to the Vendor “within five (5) business days of the date of Completion”. Completion was defined in clause 1.1(10) as:
“1.1(10) Completion means the performance of the acts set out in clause 8 to be performed on the Completion Date”.
“1.1(11) Completion Date means the date specified in Item 2 of Schedule 1, or any other date agreed in writing by the Vendor and the Purchaser.”
Item 2 of Schedule 1 specified 4 March 2024 as the Completion Date.
Pandora argued (alternatively) that the date of completion for the purpose of Item 7 was 4 March 2024 rather than the action date of completion. However, clause 8.1 provided that Completion must take place at the Premises on the Completion Date, or on such other day and place as may be agreed by Pandora.
Completion under clause 8.2 also required a number of matters to be performed including the delivery of the Assets to Pandora and the handing over of keys and codes required to gain access to the Kotara store. Donna’s unchallenged evidence was that this did not occur until 5 March 2024. The stocktake process at the Kotara store commenced on 4 March 2024 but was not finalised until 5 March 2024. On that day, Donna attended the Kotara store to finalise the stocktake with a number of Pandora staff and handed the keys to Ms Barr after Sam had agreed that the stocktake was in order.
I find that Completion took place on 5 March 2024 and that was the date of Completion for the purpose of Item 7 of Schedule 1. It was on that day that the acts required by clause 8.2 were performed. On the evidence, this was done on an entirely consensual basis. Accordingly, 5 March 2024 was the date of Completion.
Saturday 9 March and Sunday 10 March 2024 were not Business Days as defined in clause 1.1(6) of the ASA. Therefore, I accept MJC’s submission that the time to pay under Item 7 of Schedule 1 of the ASA expired at midnight on Tuesday 12 March 2024. Pandora first breached the ASA on the expiry of the fifth business day after, that is on Wednesday 13 March 2024. By that time, $434,710.77 had been removed from the false NAB account (see [112] above), leaving a balance remaining as at 13 March 2024 in that account of $32,677.23.
(a) there was an email chain which contained an email purportedly from Donna containing an unknown bank account for the payment; (b) instructions in that email (the 2.16am email) to change the bank account; (c) a remittance attachment which referred to a ‘new’ “MJ Concepts Bank Account”; and (d) the fact of a payment being processed ‘overnight’.
The evidence was that MJC did not raise concerns about the failure to pay the Purchase Price until 14 March 2024, that is, the day after I have found Pandora was first in breach of the ASA. It will be recalled that, after midday on 14 March 2024, Sam wrote to Mr Zhang following up payment for the Kotara store; both Mr Zhang and Ms Sunder responded in short order that the monies had been paid into the false NAB account (see [118]-[124]).
Each member of the Matthews family and Danielle gave evidence to the effect that up to that time, they did not know that the monies had been paid into an unauthorised bank account. I do not think there is reason to disbelieve their evidence.
MJC submitted that, on the basis of this evidence, MJC was not aware of the breach at any time before 14 March 2024. Contrary to the submissions of MJC, I do not think that this disposes of the contention that it failed to take steps to mitigate. As Handley JA said in Bak, the question is whether the innocent party, ought, acting reasonably, to have been aware of the breach (see [297] above). The decision of Handley JA has been approved by the Court of Appeal in Chand (see [298] above). Nevertheless, it seems to me that in assessing the question of whether the innocent party ought, acting reasonably, to have been aware of the breach, it is necessary to take into account the date of breach as I have found, namely the end of the day on 12 March 2024, and it is appropriate to take into account the nature and effect of the fraud that was perpetrated.
Donna gave evidence that she did not see either the 2.16am or the 2.12pm emails. As will be recalled, Adam’s evidence was that he found emails from Pandora sent or copied to Donna and referring to the sale of the Kotara business in a folder that was not contained in her inbox. I have accepted her evidence that she did not see either email.
The 2:12pm email was undeniably seen by Danielle, and she made reference to it at the Race Day luncheon on 8 March 2024 to each member of the Matthews family.
Donna’s evidence was that she told Danielle that she did not receive any email when the issue was raised by Danielle at the Race Day. Pandora submits that this is relevant because Donna was both listed as a recipient to Mr Zhang’s 2:12pm email and the person to whom his salutation was directed.
Danielle did not recall Donna saying that “I didn’t get anything” in relation to the 2:12pm email. Danielle did accept it would have been odd if they did not receive emails at the same time as it was addressed to both of them.
Accepting that Donna said something to the effect that she did not receive anything in relation to the 2:12pm email, I do not think this circumstance rises so high as to create a suspicion on the part of any of the Matthews family that may have heard this exchange that payment had been processed to be transferred into the wrong account, or that payment would not be made into the Kotara NAB account in the usual course of events.
Donna’s evidence was that she was not expecting any email about payment for the Kotara store on 8 March 2024, the day of the Race Day luncheon. Pandora submitted that Donna’s statement to Danielle that she had not received the email when Danielle raised it at the luncheon, was contradictory with her earlier evidence and the Court should accept that the true position was that Donna was expecting to receive an email about the Kotara store. But I did not see a substantial inconsistency in Donna’s evidence – that she was not expecting an email about payment on the day after the Teams Meeting on 7 March 2024, does not seem to me to be inconsistent with a statement that she did not get the email that Danielle referred to at the luncheon. The burden of the evidence was that, although she received emails from Pandora after 28 February 2024 and attended the Teams Meeting, Donna did not involve herself in the communications required to effect payment under the ASA.
Donna’s evidence was that she had not seen the 2.16am email or the 9.11am email until shortly prior to the hearing. I accept this evidence and it was not challenged in cross-examination. It was not put to Donna that she had ever seen the 2.12pm or 3.53pm emails.
Donna agreed that she was pleased that Danielle had communicated to her something positive about Pandora making payment, and that she had lost trust at this point with Pandora. Donna’s evidence was that she did not have access to the Kotara NAB account but accepted that there were other members of the family who could have checked the account.
A challenge was made to Donna’s credit on the basis that she did not accept that she had an interest in the receipt of the Kotara monies. However, it seems to me that Donna understood the questioning to relate to whether it was her role to check the bank account in respect of which she said – “I didn’t deal with that type – part, part of the business”. There then followed an exchange where it was put to Donna:
“Q. Are you suggesting you didn’t have any interest one way or the other as to whether this large amount of money, $467,000, reached the account of Kotara? You had no interest in that?
A. No.
Q. I want to suggest that’s false evidence, do you accept that?
A. No.
Q. That you clearly had an interest both financial and generally in relation to whether or not Pandora made that payment. You reject that, do you?
A. Say that again?
…
Q. That you personally had a financial interest through your shareholding and a general interest as to whether or not Pandora had put those monies in Kotara’s bank account?
A. I, I don’t - I can’t answer it, sorry.”
I am not prepared to find Donna’s evidence in this regard was not credible or that it impacted other evidence that she gave. In any event, Donna did not have access to the Kotara NAB account and whether or not she was interested in the general or financial sense in payment being received from Pandora, I accept that she left it to other members of the family to ensure the manner of payment of the purchase price, and its eventual receipt by MJC.
Stephen did not receive any of the 9.11am, 2.12pm or 3.53pm emails. He accepted that it was important to check the bank account to know money had been received. He also accepted that the relationship with Pandora had soured. Stephen also did not have access to the Kotara NAB account and assumed someone in the accounts department would have been checking. He gave this evidence, which I accept:
“Q. As at 8 March 2023, when did you think payment would be made?
A. To tell you the truth, I don't think I gave it a great deal of thought. We had a lot going on, so it was in Danielle's hands.
Q. What about the following week? So the 8th is the Friday. The week of the 11th you weren't starting to worry about the money coming in?
A. We assumed, given Pandora's track record, on returning funds to us, through credits and what not, it would take some time and it was going to be paid out of Shanghai, so again, assumed that it would be some time for that to happen.”
While Danielle had alerted Stephen at the Race Day luncheon that she had received an email from Pandora concerning the payment, I do not think that there is reason to disbelieve Stephen’s evidence concerning his expectations as to payment by Pandora.
A challenge was made to Stephen’s credit on the basis that he denied that he had an expectation that money was “coming in” from 8 March 2024 and that such denial was self-serving. However, Stephen’s denial was expressly qualified by his ‘previous comment’ which included the passage of his evidence which I have extracted at [352] above. That evidence was consistent with surrounding circumstances which were not in dispute. There was some documentary evidence suggesting that it had taken Pandora some time for credits in favour of MJC to be processed. I formed the view that Stephen gave his evidence in a direct and calm manner, and made appropriate concessions, such as the souring of relations with Pandora. I did not form the view that his evidence was ‘self-serving’.
In essence, Stephen did not believe, despite the fact that relations between franchisor and franchisee had soured, that there was going to be an issue with the payment of the purchase price. He assumed that others would be checking when the payment would be made.
Sam’s evidence was that he did not have access to the Kotara NAB bank account, but from time to time he asked Danielle to check matters in that account. He said, candidly, that he did not have complete trust in Pandora, but that he “wouldn’t have thought that Pandora would hold back a payment like that”. Sam had over 13 years’ experience working at the Commonwealth Bank of Australia. His understanding was that the transfer was an international payment coming from Shanghai and that such a payment “regularly takes three business days at least to process”. It appears that on this basis he had not asked Danielle to check the bank account on the Monday morning. I accept that evidence
Sam did receive the 3.53pm email. He said he did not recall when he first opened that email but said that if it wasn’t on the afternoon of 8 March 2024, it would have been on the following day. He did not recall opening the attached remittance in that email. He accepted that it was possible that he did.
Sam was taken to the Westpac remittance document and maintained his evidence that he assumed that the monies were coming from overseas. He said that he did not assume that MJC was to be paid from an Australian bank account.
Adam did not receive the 9.11am, 2.12pm or 3.53pm emails. He did recall that at the Race Day luncheon Danielle gestured to her mobile phone but could not recall the specific words that she used. He said that the impression he received from the interaction that it was only a matter of time before the settlement monies would be received.
Adam said that he did check the Kotara NAB account during the following week, but he did not have any concerns about the money being received. He didn’t know how long it would take for the money to come through.
Adam did not gain the understanding from his interaction with Danielle at the Race Day luncheon that the payment had been processed. Adam, it should be noted, had not been privy to the email communications concerning the completion of or the purchase price for the Kotara transaction. Adam could not recall at what point the purchase price was agreed upon.
Adam said that he had access to the Kotara NAB account from NAB’s online portal which he could access on his mobile phone. He said he could not recall whether he checked the Kotara NAB account on the Friday or over the weekend, but he did recall checking a couple of times in the week of 11 March 2024 to see if the money had come in. He said he thought that it may have been two or three times.
Adam accepted that when he checked the bank account, he must have seen that the money had not arrived, and he accepted that he did not tell anyone about the fact that it hadn’t arrived. Adam explained why he did not do so in his oral evidence:
“Q. Is there a reason why you didn't tell anyone else in the family that the money hadn't come in?
A. There's a few reasons. One, it was an international payment so my understanding is that there were finances done out of Shanghai for Pandora so my understanding was that international payments would take longer. It was a large sum of money, which, as I've already suggested, I assumed that that would take longer than an overnight payment that this might suggest. I also wasn't really aware of when Pandora were pressing the button to make the payment, so I didn't really know when they were sending it, so therefore I didn't really know when to expect it. So nothing in that week within me thought that something may have gone wrong.”
I accept Adam’s explanation for why he did not tell anyone else in the family that the money had not been received, and for the reasons that he gave, that he did not think, as he said, “something may have gone wrong”.
As I have said, Danielle did receive the 2:12pm email. This email attached the Westpac remittance document and contained the threads of the 9:11am and the 2:16am emails. Danielle said she did not read the earlier emails or the attachment. I do not think that there is any reason not to accept her evidence. She is no longer employed by the Matthews family businesses, and I found she gave her evidence in a measured way and made appropriate concessions.
I do not think that the 2:12pm email on its face would have excited enquiry or aroused suspicions of wrongdoing or irregularity; it stated that payment was already processed and attached a ‘payment remittance’. It did not say that payment had been effected and did not state the account into which payment had been processed or provide any details of that account.
On the face of the email sent to her, there was no particular reason to check the remittance advice, or to check the accuracy of what had been represented in Mr Zhang’s email, even if Donna said that she had not received it. Danielle’s evidence was that she did not usually check remittance advices because her practice was to perform reconciliation manually using the business’ ‘Xero’ system upon payment.
In the circumstances, I do not think it was unreasonable for Danielle not to read the remittance advice.
The remittance, had it been read, did not say that payment had been made; rather, that payment was in progress. Importantly, the remittance did not set out the actual details of the proposed recipient account.
The remittance document did say, as Pandora submitted, that the payment method was ‘overnight’. It submitted that this conveyed the fact of a payment being processed ‘overnight’. However, coupled with the reference that the status of the payment was in progress, I do not think that, even if it had been read, the payment method ‘overnight’ would have conveyed that the payment would be made and received by the recipient overnight. This was especially so in circumstances where the payment type was a new beneficiary. It would have been understood that the payment would be processed from Pandora’s account by the paying bank overnight.
Danielle gave evidence that she did not recall Pandora paying any amounts to MJC; the amounts Pandora owed to Kotara were credited to amounts MJC were required to pay Pandora under the Franchise Agreement. Her evidence was that, had she read the remittance document, she would have regarded the statement that ‘the account details for this beneficiary had not been used previously’ as true. In these circumstances, the fact that a new beneficiary was stated on the document would not itself have excited a suspicion. As I have said, the remittance document did not set out the actual details of the new but false NAB account.
Danielle did not read the earlier emails, including the 9.11am and 2.16am emails which appeared in the thread under the 2.12pm email. She had not been sent those earlier emails so that their significance would not have been apparent to her. Mr Zhang’s 2.12pm email was sent to her, presumably because Danielle’s name appeared below the account details of the false NAB account in the 2.16am email. However, that same statement had appeared in the invoices which she had helped Stephen prepare on 5 March 2024. As the person responsible for accounts receivable for MJC and the Matthews group, it would not have been, in my opinion, a surprise to receive an email of the kind sent by Mr Zhang.
The email stated that the payment had been processed. It called for no particular action to be taken by MJC and did not on its face reveal that something untoward may have happened. It did not state in terms that new account details had been provided to Pandora, or to check or confirm those details. In the circumstances, I do not think it was unreasonable for Danielle not to have read the emails which appeared in the thread below the 2.12pm email.
As I have said, Sam received the 3.53pm email which also attached the Westpac remittance. He opened that email. He understood that the payment had been processed but that it would take at least three business days, based on his experience, to arrive at the receiving bank.
Sam said that it was possible that he read the Westpac remittance attached to the email. Had he read it, it would not have revealed either the details of the false NAB account, or the name of the person or entity who held that account. His evidence was that there would be a delay on account of the international nature of the transaction. Accordingly, I do not find that had Sam read the attachment, it would have aroused suspicions.
The 3.53pm email, as I have said, did not include in its thread the 2.16am email. Whatever might have been the reasons of the fraudster for excising the 2.16am email, its presence could not have been detected by Sam.
(a) Stephen did not receive any of the relevant emails and Sam only received the 3.53pm email (which did not contain the 2.16am email). Donna did not read the emails; they were later found in a folder, which was not in her email inbox; (b) Danielle received the 2.12pm email and told others at the Race Day luncheon that she received an email from Pandora concerning payment of the purchase price for the Kotara store. That email stated that payment had been processed by Pandora. It called for no particular action to be taken by MJC and did not state in terms that the new bank account details had been provided to Pandora. Danielle did not receive the earlier emails; (c) the Purchase Price was a significant amount for the Matthews family, especially where they would not be able to trade from the Kotara and Charlestown stores as Pandora franchisees; (d) relations between the Matthews family and Pandora had soured as a result of the early termination of the franchises; (e) members of the Matthews family were attending to the completion (including the stocktake) of the buyback arrangements for the Charlestown Store as well as setting up a new jewellery store in Darby Street, Newcastle; (f) the payment of the Purchase Price by Pandora was being arranged by a team in the Shanghai office – this led to an expectation that the payment was to be made from overseas and that the payment had an international element to it; (g) from time-to-time payments in the form of credits from Pandora to MJC had not been effected immediately; (h) the ASA had provided for a period of time after completion for the payment of the Purchase Price; and (i) Pandora did not, in the circumstances, ask that the details of the false NAB account be checked before payment was to be made.
Further, in assessing the overall reasonableness of MJC’s conduct, I must take into account, as I have found, that Pandora did not breach the ASA until 13 March 2024. MJC raised concerns on the following day, by which time all but a very small proportion of the purchase monies had been dissipated. The reasonableness of its actions falls to be assessed from 13 March 2024. However, there was nothing in particular that was received by MJC or brought to its attention by Pandora from that time that would have caused MJC to entertain suspicion about the payment, or to make a claim on Pandora immediately upon the funds not having been paid in accordance with the ASA.
Ultimately, having assessed the evidence of each member of the Matthews family and Danielle, and given consideration to the other matters to which I have referred, I am not persuaded that MJC acted unreasonably by failing to alert Pandora that the Purchase Price had not been paid into the Kotara NAB account until 14 March 2024. As Giles JA said in Karacominakis, a high standard of conduct is not required. The manner in which the fraud was perpetrated had the consequence that Stephen did not receive any of the key emails. The only person who saw the 2.12pm email was Danielle. The reasons given by each of the witnesses for not raising concerns at an earlier time, assessed individually and collectively, were not in the circumstances unreasonable. The terms conveyed in the 9.11am and 2.12pm emails were not such as to arouse suspicion, if they had been read, that something was amiss and the non-receipt of funds into MJC’s account for a relatively short period would not have excited concern where the payment appeared to have an international character and there had been some previous delays in Pandora making payments. And, MJC did in fact raise concerns with Pandora about payment on the day after Pandora had breached the ASA by failing to pay the Purchase Price.
The defence raised by Pandora that MJC failed to take reasonable steps to mitigate its loss, must fail.
It follows that if I have concluded wrongly that MJC’s claim for the Purchase Price can be brought as an action in debt, MJC can sue for breach of contract. Pandora has breached the terms of the ASA by failing to pay the Purchase Price within the period and in the manner specified in Item 7 of Schedule 1 of the ASA. The appropriate measure of damages in this case would be to seek to put MJC in the same position as if the contract had been performed: Robinson v Harman (1848) 1 Exch Rep 850; 154 ER 363. If the contract had been performed, MJC would have received the Purchase Price as assessed by the parties. Subject to the consideration of the further estoppel pleaded by Pandora, MJC would be entitled to judgment in that amount.
In its closing submissions, Pandora submitted that it did not cause MJC’s loss, but rather MJC had caused any loss it suffered by failing to take steps to confirm that the payment had arrived in the Kotara NAB account once it was on notice that the payment had been processed.
In its closing written submissions, Pandora referred to Alexander v Cambridge Credit Corporation Limited (1987) 9 NSWLR 310, where McHugh JA stated at 361:
“Notwithstanding that a defendant’s act or omission has a causal connection with the damage of the person aggrieved, no liability arises if an independent intervening act or event in conjunction with the defendant’s act or omission has brought about the plaintiff’s damage and the intervening act or event that can be treated in a practical sense as the sole cause of the damage.”
Pandora’s submission was not further explained and was not mentioned in oral submissions.
The final defence raised by Pandora was that if the 2:16am email was not a nomination in writing upon which it could rely, MJC was estopped from denying that Pandora failed to comply with its obligations under the ASA. Relatively, little attention was devoted to this defence (pleaded at [5] of Pandora’s Rejoinder) in Pandora’s closing submissions.
It was cast as an estoppel founded on a representation that Pandora had complied with its obligations under the ASA. That representation, it was submitted, arose by silence, in the sense as I understood it, of the failure by MJC to respond to the ‘confirmation emails’, being the 9:11am email from Ms Sunder and the 2:12pm email from Mr Zhang. As such, it covers much the same factual ground as the defence raised by Pandora, that MJC failed to take reasonable steps to mitigate its loss. Indeed, counsel for Pandora relied on the same submissions that MJC was put on notice that payment was already processed as stated by Mr Zhang and that the 2:12pm email was part of the same email thread as the earlier 9:11am and 2:16am emails which contained information relating to the change in the bank account: see [338] above.
Pandora submitted that it relied on the representation alleged to its detriment by not taking steps to stop the payment or to recover payment from the false NAB account.
“37 Estoppel by representation is a common law estoppel, arising where one party makes a representation as to existing fact (sometimes said to include the legal complexion of facts) on which the other party founded an assumption and it would be unjust to permit the representor to depart from the assumption: see for example Thompson v Palmer [1933] HCA 61; (1933) 49 CLR 507 at 547; Grundt v Great Boulder Pty Gold Mines Ltd [1937] HCA 58; (1937) 59 CLR 641 at 657, 674-6; Waltons Stores (Interstate) Ltd v Maher at 398, 413-5. The representor is held to the representation because of the purpose of the doctrine, see Dixon J in Grundt v Great Boulder Pty Gold Mines Ltd at 674-5: his Honour said –
"That purpose is to avoid or prevent a detriment to the party asserting the estoppel by compelling the opposite party to adhere to the assumption upon which the former acted or abstained from acting. This means that the real detriment or harm from which the law seeks to give protection is that which would flow from the change of position if the assumption were deserted that led to it. So long as the assumption is adhered to, the party who altered his situation upon the faith of it cannot complain. His complaint is that when afterwards the other party makes a different state of affairs the basis of an assertion of right against him then, if it is allowed, his own original change of position will operate as a detriment. His action or inaction must be such that, if the assumption upon which he proceeded were shown to be wrong and an inconsistent state of affairs were accepted as the foundation of the rights and duties of himself and the opposite party, the consequence would be to make his original act or failure to act a source of prejudice."
38 The relevant detriment is that flowing from representee's original change of position, his action or inaction in reliance on the representation. According to the doctrine, the relief must be by holding the representor to the representation because only in that way will the change of position not bring detriment.”
“Broad general grounds of estoppel are sometimes invoked such, for instance, as the rule of policy so often repeated, to the effect that, where one of two innocent parties may suffer, the loss should fall on him by whose indiscretion it has been occasioned. Upon this approach to such questions, I have expressed my opinion in Thompson v Palmer (1933) 49 CLR 407 at 545-547 and I shall not repeat myself here. See, further, Newbon v City Mutual Life Assurance Society Limited (1935) 52 CLR 723 at 734-735 and Grundt v Great Boulder Goldmines Pty Limited (1937) 59 CLR 641 at 674-677. In the end an assumption on the one side must be induced or assisted and on the other side the conduct of the party to be precluded must be such that he ought not to be permitted to depart from that assumption.”
“120 For estoppel based on representation, five elements must be established:
(a) it must be shown that the plaintiff made an assumption based on the representation;
(b) the representation must be clear and unambiguous. The “representation is sufficiently clear and unambiguous if it is reasonable for the representee to have interpreted the representation in a particular way, being a meaning which it is clearly capable of bearing and upon which it is reasonable for the representee to rely”: Galaxidis v Galaxidis [2004] NSWCA 111, at [93] per Tobias JA; see Sullivan v Sullivan [2006] NSWCA 312, at [84]-[85] per Hodgson JA;
(c) there must be reasonable reliance on the representation: Galaxidis v Galaxidis [2004] NSWCA 111, at [93] per Tobias JA;
(d) detriment must flow to the representee in reliance on the assumption: Verwayen, CJ at 415.5; see also Brennan J at 429.4, and Deane J at 444.5. “The relevant detriment does not consist in a loss attributable merely to non-fulfilment of the promise”: Verwayen, per Brennan J at 429.5;
(e) it must be unconscionable for the defendant to resile from the representation.”
Counsel for Pandora did not appear to take issue with this statement of principle other than submitting (as I have mentioned above) that unconscionability was not an element of an estoppel by representation.
MJC submitted that mere silence is not a representation; something more is required. It relied upon Behan v Obelon Pty Limited [1984] 2 NSWLR 637 at 639 where Samuels JA said:
“The general rule is that silence does not affirm because, in the ordinary case, a party to a contract is under no duty to disclose material facts known to him but not to the other party: see per Lord Atkin in Bell v Lever Brothers Ltd (1932) AC 161, at 227. It is therefore only in the exceptional cases, such as contracts uberrimae fidei and in fiduciary relationships, where disclosure is required, that an affirmation may be made by silence.”
However, silence can amount in some circumstances to a representation founding an estoppel. As has been seen above in the context of ostensible authority, Hodgson JA (in a passage picked up subsequently in 183 Eastwood) said that where a principal knows that an agent engaged on its behalf is making representations as to the agent’s authority but is able to, but does countermand them, there is arguably something like a representation by silence; the circumstances call for some action by the principal to ensure that persons are not misled by the agent, and the principal does not take that action: see [191] above.
Counsel for Pandora referred to Estoppel by Conduct and Election, 3rd Edition, 2023 where the learned author, the Honourable Patrick Keane AC KC states at [3-014] that where a party to a negotiation or transaction becomes aware that the other is mistaken, his failure to correct the mistake may be an implied representation that the fact is as the other believed. Reference is there made to Grundt v Great Boulder Pty Gold Mines Limited (1937) 59 CLR 641 (Grundt v Great Boulder) where Dixon J said that a party estopped:
“… may be required to abide by the assumption because … knowing the mistake the other laboured under he refrained from correcting him when it was his duty to do so”.
“[H]aving held that the company was not in breach of any duty owed by it to the banks it is not possible to establish … an estoppel arising from mere silence, omission or failure to act. Mere silence or inaction cannot amount to a representation unless there be a duty to disclose or act … Unless conduct can be interpreted as … an implied representation it cannot constitute an estoppel.”
“Before there is an estoppel from failure to speak, there must be a duty to do so, a duty the sanction of which is preclusion, not liability.”
In Kramer v Stone (2024) 281 CLR 484 at 501-503; [2024] HCA 48 at [36]-[41], the High Court considered the requirements of equitable estoppel. In the course of that consideration, the plurality confirmed that the requirement that representations in estoppel by representation must be “clear and unequivocal”. Unequivocal means leaving no doubt or unambiguous: Penya v Penya [2026] NSWCA 73 at [37]-[40], [44] (Bell CJ, with whom Mitchelmore and Adamson JJA agreed).
In Kramer v Stone at [58] the plurality observed that like common law estoppels described by Dixon J in Thompson v Palmer, equitable estoppels could arise from “encouragement to adhere to an assumption or expectation already formed” or from acquiescence which is “the result of a party’s failure to object to the assumption or expectation on which the other party is known to be conducting their affairs”. In that context the plurality said at [59]:
“In assessing whether a person who is subject to an estoppel bears “responsibility for the detrimental reliance” of the other party, there is a significant difference between a person whose promise causes another’s detriment and a person who merely omits to act where action could spare the other party from detriment. Any responsibility in the latter case must require the omission to occur with knowledge of that person’s rights and of the other’s mistake so as to give rise to a duty to speak.” (citations omitted).
The first email relied upon by Pandora is the 9:11am email sent by Ms Sunder. In that email, Ms Sunder requested Mr Zhang to arrange payment of $467,378 and send through a remittance “as soon as the payment is authorised”. As MJC submitted, this was not a representation that Pandora had complied with its obligations under the ASA by making payment of the Purchase Price to the false NAB account in terms of the pleaded representation in [5](a) of the Rejoinder. Rather, it was a statement that Ms Sunder requested arrangement for the payment, the authorisation for which had not yet been made.
MJC did not in fact respond to that email. However, the email did not ask MJC to do anything, whether to check the details of, or to confirm, a new account. On the face of the email, there was no reference to a new bank account. Ms Sunder’s email contemplated that payment still needed to be authorised. In these circumstances, the fact that MJC did not respond to this email could not amount to a clear and unequivocal representation that Pandora had complied with its contractual obligations.
For the reasons I have developed earlier, the email was not received by Stephen or seen by Donna. It had not been sent to any other person associated with MJC. The 9.11am email did not, however, ask for a reply, nor did the subject matter call for a reply. If read, it was an information update as to the stage that the payment process had reached.
The second email relied upon by Pandora is the 2:12pm email, with the Westpac remittance attached. I have made observations concerning that email at paragraphs [372] and [373] above. In that email, Mr Zhang confirmed that payment ‘is already processed’ and provided a payment remittance. As MJC submitted, the email was a further update as to the stage of the payment process had reached. In the context of the 9:11am email, the phrase “the payment is already processed” would have been understood as conveying that internal approval processing of the payment had been completed, and along with the remittance, that payment had been processed with Pandora’s bank.
The 2:12pm email did not request any action on the part of MJC. It invited the recipient to inquire if there were any questions, but it did not ask for any account details to be checked or confirmed and did not refer to the fact that a new or different account had apparently been nominated. It did not call for any reply. The email stated that payment had been processed, not that it had been made.
As I have found above, the 2:12pm email was not received by Stephen, and Donna did not see the email because it was not in her email inbox. Danielle did receive the email and did raise it with members of the Matthews family who attended the luncheon at the Newcastle Racecourse. However, the evidence reveals that what she conveyed was that, in substance, the payment had been processed; that is, that it would be, but had not been paid: see [100]-[104] above.
I have made observations about the remittance advice which was attached to the 2:12pm email in the course of considering the failure to mitigate at [368] to [370] above. Those observations are apposite here. Importantly, the remittance advice did not state that payment had been made, rather that it was in progress. It did not contain the account details of the false NAB account, or the name of that account holder, or the beneficiary’s bank information. The remittance made it clear that payment was in progress rather than having been made.
The terms of the content of the 9:11am email and the 2:12pm email can be contrasted with the explicit requests made by Ms Damodran in her 28 February 2024 email in making her original and subsequent requests for tax invoices (see [68] above) and the explicit request by Mr Zhang in his email on 6 March 2024 to provide banking details, if they had not already been provided to the legal team. Neither of the emails relied upon by Pandora made any request for confirmation or checking, and neither of them, on their face alerted MJC to the fact which must have been apparent to Pandora that there had been a recent change in the bank account details which had been provided to it.
In the circumstances, I am not prepared to find that by its silence, in response to the 9:11am and 2:12pm emails, MJC made a representation that it accepted that Pandora had complied with its contractual obligations under the ASA. The terms of the emails themselves in the circumstances in which they were sent, and the relationship between the parties was not one that called for a positive response to those emails, especially in circumstances where payment was not required to be made under the terms of the ASA until five business days after the date of Completion.
MJC was not aware that Pandora was under a mistaken belief that it had processed payment into an account that had been nominated by MJC such that it believed it had complied with its obligations under the ASA. There is no suggestion in the evidence that any of the members of the Matthews family or Danielle had such an awareness or even a suspicion that the payment that had been processed was into someone else’s account. I have referred to their evidence at [342]-[375] above. They each expected that payment would be made, not that it had been made, and until 14 March 2024, none of them was aware or suspected that payment had or would be made to an unfamiliar account. Accordingly, there was no relevant duty to speak so as to correct the mistaken assumption that had apparently been formed by Pandora.
The ‘confirmation’ emails indicated that payment had been approved and processed by Pandora and by implication that Pandora expected that payment to be effected, that is transferred from its bank account to the account nominated by MJC. They did not call for a specific response, and they did not ask that the bank details be checked or confirmed. In my judgment, the absence of a response to the emails in the circumstances, did not amount to a clear and unequivocal representation that Pandora had complied with the ASA.
I also accept the submission made by MJC that there is no evidence that any person at Pandora made an assumption by reason of the absence of a response to the two emails, to the effect of the representation pleaded. Mr Zhang (who sent the 2.12pm email) and the payment authorisers, Mr Yuqi Zhan and Ms Li, did not give evidence. None of the other recipients (on the Pandora side) of the 9.11am and the 2.12pm emails were called to give evidence. There is no evidence that any such persons relied upon the silence to abstain from acting. As I have found earlier, Ms Sunder did give evidence that she would have acted if she had been told that the 2:16am email was not a genuine email (see [25] of her affidavit). However, this was not evidence related to the pleaded estoppel which relied on the failure to respond to the confirmation emails to support a representation that Pandora’s contractual obligations had been complied with.
I am not satisfied that there was evidence of reliance, reasonable or otherwise, by Pandora on the pleaded representation that its contractual obligations had been complied with.
As Dixon J said in Grundt v Great Boulder at 675 and picked up and explained by Gaudron J in Northside Development**s (in the extract referred to at [197] above), whether or not a person will be allowed to depart from an assumption depends on the part played in the adoption by the other. If the latter has knowledge of facts, or ought to have knowledge of facts putting him or her to further inquiry, that is a matter which tells against the former having played such a part in the adoption of the assumption that he or she should be held to it.
For the reasons I have identified earlier in these reasons, the content and circumstances of the sending of the 2.16am email ought to have put Pandora on inquiry. Without repeating all of the observations and findings I have made at [256] to [278] above, the 2:16am email was suspicious due to the time it had been sent, and from whom it had been purportedly sent, due to there being no suggestion by MJC that the bank account had or would be changed prior to 8 March 2024, due to the fact that it was not responsive to Ms Sunder’s email of 7 March 2024 at 3.19pm, and due to the date of and the errors and omissions in the NAB attachment. In the circumstances, Pandora did not either before or after payment of the Purchase Price had been transferred from its account into the false NAB account, check with MJC to confirm the reliability of the 2.16am email.
In these circumstances, I do not think that, if Pandora did rely on an assumption that the ASA had been complied with, MJC played such a part in the adoption of that assumption that it should be held to it. Pandora’s reliance on the absence of response to the 9.11am and 2.12pm emails to form an assumption that the contract had been complied with was not, in the circumstances, reasonable.
If, contrary to the findings I have made, the pleaded representation was made out and Pandora had reasonably relied on it, I would have found that Pandora had changed its position by failing to take steps to stop the payment or to recover payment from the false NAB account, such that it would have satisfied the element of detriment for the purposes of the estoppel.
For these reasons, the defence founded on an estoppel as to contractual compliance must fail.
It is possible to have some sympathy with the position of Pandora as a victim of the fraud that I have found, that was executed through the gaining of access to MJC’s email domain and the impersonation of an email from one of its employees. However, I am required to determine the matter on the basis of the pleadings. No allegation was made to found any claim in the defence (or any cross-claim) on the basis that MJC’s systems were in some way inadequate or deficient so as to allow, encourage or permit the fraud to be perpetrated. It could not be submitted as the matter was pleaded, that MJC courted the risk of an attack by the way it managed or operated its information technology systems or its email domain.
It is noteworthy that an attempt had been made by Pandora to introduce claims under the Civil Liability Act 2002 (NSW) to apportion liability to other third parties such as the fraudster, the owner of the domain and mail service from which the 2.16am email had been sent, or MJC itself. An application to amend the Defence to include such claims was made a few weeks before the hearing; but that application was refused by a Judge of this Court: MJ Concepts Pty Limited v Pandora Jewellers Pty Limited [2026] NSWDC 150.
Rather, a forensic choice appears to have been made that Donna sent the 2.16am email. It was on this basis, as I have observed above, that the pleadings concerning representations as to Donna’s authority and ostensible authority arose and were developed. In closing submissions, counsel for Pandora (quite properly on the evidence) did not ask the Court to find that Donna had sent the 2.16am email.
Further, following the grant of leave to MJC to amend its claim so as to clarify that it had a claim in debt, the defence raising a failure to mitigate was further exposed because Pandora accepted (again quite properly) that such a defence was no answer to an action in debt.
Ultimately, in the way that the fraud was perpetrated, Pandora was, on my findings, put on inquiry that the 2.16am email was a nomination by MJC of the bank account into which the monies were to be paid. Pandora did not in its subsequent emails to MJC seek that the new bank account details should be checked or confirmed. In this way, although both parties were innocent to the fraud, for the reasons that I have earlier developed, the loss should fall, in the words of Dixon J in Tobin v Broadbent (see [388] above), on Pandora ‘by whose indiscretion it has been occasioned’.
It follows from my reasons that each of the defences raised by Pandora have not been successful.
MJC’s entitled to judgment in the amount of the Purchase Price under the ASA, being an amount of $467,378, either as a debt, or for damages for breach of contract.
MJC claimed interest under the terms of the ASA in its Statement of Claim: see [12]-[13].
Clause 23 of the ASA provided:
‘Interest
If a party fails to pay an amount on the due date for payment that party must pay to the other party interest at the Default Rate on that amount, calculated and payable daily, computed from the due date until the amount is paid in full.”
Clause 1.1(17) of the ASA defined Default Rate as meaning interest at the rate of 5% per annum.
In light of the conclusions I have reached, MJC is entitled to claim interest on the amount of the Purchase Price at the rate of 5% in accordance with clause 23 of the ASA from 13 March 2024 to the date of judgment.
MJC indicated, during closing submissions, that it would provide to the Court an updated Schedule calculating the interest that it contended it was entitled to in the event it was successful. No such Schedule or calculation appears to have been provided.
I will allow the parties an opportunity to confer for the purpose of agreeing to the calculation of interest on the basis of my reasons. If it becomes necessary to do so, I will determine any dispute as to the assessment of that amount.
The parties indicated that, depending on my conclusion, they may wish to be heard on the question of costs. In those circumstances I will make orders for the exchange of short written submissions if any party wishes to make application for a special costs order.
In the absence of any such application, it is my preliminary view that costs should follow the event. MJC has had substantial success on the issues which have been ventilated and, in the final result. If the parties do not file submissions in accordance with the orders I will make, then I propose to order that the Defendant pay the Plaintiff’s costs.
I will endeavour to determine any ensuing dispute between the parties on the papers.
Accordingly, the orders of the Court are:
Judgment for the Plaintiff in the sum of $467,378.
The parties provide my Associate with an agreed form of order for the payment of interest by 14 August 2026.
If the parties are unable to agree on a form of order for the payment of interest, then each party file and serve and provide to my Associate submissions (not more than 2 pages in length) in relation to the appropriate order for the payment of interest by 21 August 2026.
If any party wishes to make any application for a costs order in relation to the costs of the proceedings then:
(a) that party file and serve and provide to my Associate submissions (not more than five (5) pages in length) together with any affidavit in support by 14 August 2026; and (b) the opposing party file and serve and provide to my Associate any submissions (not more than five (5) pages in length) together with any affidavit in response by 21 August 2026.
**********
Typographical amendments to [413] and [414]
MJ CONCEPTS KOTARA PTY LIMITED
PANDORA JEWELLERY PTY LIMITED (No 2)
[2026] NSWDC 150
[2024] WADC 114
[1956] HCA 151
[2012] WASCA 67
(1987) 9 NSWLR 310
(2012) 247 CLR 345
(1990) 169 CLR 279
(1991) 22 NSWLR 389
(1975) 133 CLR 72
(1982) 148 CLR 658
(1959) 101 CLR 298
(2024) 210 CLR 484
(2010) 243 CLR 361
(1990) 170 CLR 146
(2004) 218 CLR 451
(1987) 162 CLR 221
(1963) 180 CLR 130
(1933) 49 CLR 507
(1947) 75 CLR 378
(1956) 99 CLR 560
(1937) 59 CLR 641
(1989) 16 NSWLR 130
(1987) 78 ALR 611
(2009) 235 FLR 207
(1963) 110 CLR 538
(2001) 207 CLR 520
(1933) 49 CLR 407
(1935) 52 CLR 723
(1937) 58 CLR 710
(2024) 281 CLR 484