(a) If an accepted payment order was transmitted pursuant to a security procedure for the detection of error and the payment order (i) erroneously instructed payment to a beneficiary not intended by the sender, (ii) erroneously instructed payment in an amount greater than the amount intended by the sender, or (iii) was an erroneously transmitted duplicate of a payment order previously sent by the sender, the following rules apply:

1. (1) If the sender proves that the sender or a person acting on behalf of the sender pursuant to section 4A–206 complied with the security procedure and that the error would have been detected if the receiving bank had also complied, the sender is not obliged to pay the order to the extent stated in paragraphs (2) and (3).
2. (2) If the funds transfer is completed on the basis of an erroneous payment order described in clause (i) or (iii) of subsection (a), the sender is not obliged to pay the order and the receiving bank is entitled to recover from the beneficiary any amount paid to the beneficiary to the extent allowed by the law governing mistake and restitution.
3. (3) If the funds transfer is completed on the basis of a payment order described in clause (ii) of subsection (a) the sender is not obliged to pay the order to the extent the amount received by the beneficiary is greater than the amount intended by the sender. In that case, the receiving bank is entitled to recover from the beneficiary the excess amount received to the extent allowed by the law governing mistake and restitution.