10.1 If a transfer received by the bank (or a request to cancel or modify a transfer) has been sent in accordance with the security procedures applicable to the service and therefore claims to have been transferred or authorized by the customer, it is considered effective as a transfer (or request) of the customer, even if the transfer (or request) has not been authorized by the customer. If the bank has accepted the transfer (a) in accordance with the security procedures regarding such a transfer, (b) in accordance with a written agreement or instruction from the customer limiting the acceptance of transfers on behalf of the customer and (c) in good faith, the customer is obliged to pay the bank the amount of such transfer. . . .