(a) (1) If an accepted payment order was transmitted pursuant to a security procedure for the detection of error and the payment order (A) erroneously instructed payment to a beneficiary not intended by the sender, (B) erroneously instructed payment in an amount greater than the amount intended by the sender or (C) was an erroneously transmitted duplicate of a payment order previously sent by the sender, the following rules apply:
(2) If the sender proves that the sender or a person acting on behalf of the sender pursuant to section two hundred six of this article complied with the security procedure and that the error would have been detected if the receiving bank had also complied, the sender is not obliged to pay the order to the extent stated in subdivisions (3) and (4) of this subsection;