Does authorisation prove informed consent?¶

No. Authorisation proves completion of the required technical approval, not accurate understanding of the recipient, purpose or consequences.

Authentication cannot record the payer's belief¶

A correct PIN, password, biometric result or one-time code may occur while the person is deceived, coerced or coached. Provider records can show normal endpoint and network data even where an offender remains on a call or uses remote access.

Prove understanding separately¶

Preserve authentication, beneficiary creation, warnings, transaction and endpoint records alongside the calls, messages or documents leading to payment. Establish what warning appeared and whether another person directed the response.

Do not use “authorised” as shorthand for legitimate or voluntary, but test any claim of deception against the full record. Report technical approval and genuine agreement separately.