Pablo is a respected customer of Citibank. Upon examining his monthly statement, Pablo discovers that an unauthorized person, using an automated teller machine (ATM), has withdrawn $400 from his account. Pablo remembers that a “nice-looking person” was standing next to him and operating a second ATM machine while Pablo was withdrawing $20. That person said that he was having troubles with his machine and wondered if Pablo would put his card into the second machine to see if it worked. Pablo accommodated the unknown person’s request. Then that person asked Pablo to again insert his card into the first machine to make sure it was still working. Pablo did not understand that when he left the ATMs, both machines were activated with his account. Further, the Citibank manager believes that the unknown person probably saw Pablo enter his four-digit number and then used Pablo’s number to withdraw the maximum amount allowed ($200) from each machine. The bank refuses to repay Pablo the $400. What law may assist Pablo? Do you think he can successfully sue the bank? Discuss the legal, ethical, and sustainable business impacts of the bank’s decision.