You check your account, and money you didn't send is simply gone. Whether it was a hacker who got into your login, a scammer who talked you into wiring funds, or a fraudulent Zelle request you didn't authorize, the first question on your mind is probably the same: is the bank on the hook for this, or am I?
Levin Law’s bank fraud attorneys represent victims of bank account fraud nationwide. The safety of your finances is more important than ever, and making sure it is secure is a top priority. Call us today at (305) 402-9050 to discuss your situation.
Bank Account Fraud and the Liability Question
Bank account fraud liability is not a one-size-fits-all answer. Whether your bank, a payment platform, or you personally bear responsibility for a fraudulent transfer depends heavily on how the transaction was made, whether it was truly unauthorized or whether you were tricked into authorizing it yourself, and how quickly you reported the issue after it occurred.
Liability Depends on How the Money Left the Account
The single biggest factor in determining liability is the mechanism used to move the money. A transaction made without your knowledge or consent at all, such as a hacker directly accessing your account, is treated very differently under federal law than a transaction you were personally deceived into authorizing, such as wiring money to someone posing as a legitimate business or family member. This distinction, unauthorized versus authorized-but-fraudulently-induced, shapes nearly every legal protection available to you.
Regulation E: Your Protection for Unauthorized Electronic Transfers
Regulation E, the federal regulation implementing the Electronic Fund Transfer Act, provides specific consumer protections for unauthorized electronic transfers, including debit card transactions, ACH transfers, and other electronic movements of money from your account. Regulation E also limits how much a consumer can be held liable for when an unauthorized transfer occurs, provided the consumer reports the issue within specific timeframes.
The $50, $500, and Unlimited Liability Tiers
Regulation E generally establishes tiered liability limits based on how quickly a consumer reports unauthorized activity. If you report an unauthorized transfer within two business days of learning about it, your liability is generally limited to $50. If you report between two and 60 business days after your statement is sent, your liability can increase to up to $500. If you fail to report within 60 days of your statement being sent, your liability can become unlimited for transfers occurring after that 60-day period, meaning you could be responsible for the full amount of continued unauthorized activity.
The 60-Day Statement Deadline
This 60-day deadline is measured from when your bank sends the statement reflecting the unauthorized transaction, not from the date of the transaction itself. Because this distinction can significantly affect your liability exposure, reviewing your bank statements promptly and reporting any suspicious activity immediately is one of the most important things you can do to protect yourself.
Why Authorized-Push-Payment (APP) Scams Are Treated Differently
Authorized-push-payment scams, where a consumer is deceived into personally authorizing a transfer, such as wiring money to a scammer posing as a utility company or a romantic interest, generally fall outside Regulation E's core protections for unauthorized transfers. Because the consumer technically authorized the transaction, even though they were deceived into doing so, these cases often involve a more complicated legal analysis than a straightforward unauthorized transfer claim.
How Liability Differs by Payment Type
Different payment methods carry different legal frameworks and protections, which significantly affects how a fraud claim involving each type is evaluated.
Wire Transfers, Checks, ACH, Debit Cards, and Zelle
- Debit card and ACH transactions: Generally fall under Regulation E's protections when the transfer was genuinely unauthorized, giving consumers the tiered liability limits discussed above
- Wire transfers: Generally governed by a different body of law, including the Uniform Commercial Code as adopted by individual states, which can carry different liability standards than Regulation E
- Checks: Involve their own separate legal framework addressing forged or altered instruments, distinct from the rules governing electronic transfers
- Zelle and similar peer-to-peer payment services: Present a particularly complicated area, since many Zelle-related scams involve the consumer personally authorizing the transfer after being deceived, placing them outside Regulation E's core unauthorized transfer protections, even though the consumer was clearly a victim of fraud
Because each payment method triggers a different legal framework, identifying exactly how your funds were transferred is often the first step in understanding what protections may actually apply to your situation.
The Bank's Investigation and Provisional-Credit Duties
Under Regulation E, once a consumer reports an error or unauthorized transaction, the bank generally has specific obligations to investigate, including providing provisional credit to the consumer's account while the investigation is ongoing, in many circumstances.
According to the CFPB's error-resolution procedures, banks are generally required to complete their investigation within a specific timeframe and provide a written explanation of their findings, whether they ultimately determine the transaction was unauthorized or not.
What Does (and Doesn't) Shift Liability to You
Many consumers worry that if they made a mistake, such as using a weak password or falling for a convincing phishing email, this negligence will automatically expand their liability beyond Regulation E's standard tiers.
Generally, ordinary carelessness does not, by itself, remove Regulation E's protections for a genuinely unauthorized transaction. The key factor remains whether the transaction was actually authorized by you, not whether you could have been more careful in protecting your account credentials.
Steps to Take Right Away
If you discover unauthorized or fraudulent activity on your account:
- Contact your bank immediately to report the issue and request that your account be secured
- Change your online banking password and enable additional security features if available
- Document the date and time you discovered the fraud, since this timing can directly affect your liability under Regulation E's tiered structure
- Call Levin Law at (305) 402-9050 to discuss your situation and understand your rights before accepting your bank's initial response
Evidence to Preserve Before Accounts or Devices Change
Before making changes to your accounts or devices, preserve screenshots of the unauthorized transactions, any communications with the bank about the issue, including reference or case numbers provided, and any emails, texts, or messages connected to a scam if the fraud involved being deceived into authorizing a transfer. This documentation can become important if your dispute needs to be escalated further.
Escalating a Dispute: Regulators, Arbitration, or Court
If your bank denies your claim or you disagree with the outcome of its investigation, options for escalating the dispute generally include filing a complaint with the Consumer Financial Protection Bureau, pursuing arbitration if required under your account agreement, or filing a lawsuit if the bank's denial was inconsistent with its legal obligations under Regulation E or other applicable law.
When Bank Negligence or Security Failures Support a Claim
In some cases, a bank's own security failures, such as inadequate fraud detection systems or a failure to follow its own internal security protocols, can support a broader negligence claim against the institution, separate from the specific liability tiers established under Regulation E. These cases often require a detailed investigation into the bank's internal practices and whether they met reasonable industry security standards.
Talk to a Bank Fraud Attorney
Levin Law handles bank fraud and negligence litigation, including cases involving unauthorized transfers, authorized-push-payment scams, and broader bank security failures. Our team also handles cryptocurrency fraud litigation and cybersecurity and data privacy matters, giving us a wide-angle view of how financial institutions are expected to protect customer accounts and funds.
Securing your finances means securing the future of yourself and your family. If your bank has denied your fraud claim, or you are unsure how liability applies to your specific situation, contact Levin Law at (305) 402-9050 for a case review.
Frequently Asked Questions
Is My Bank Required to Refund Unauthorized Transfers?
Generally, yes, subject to Regulation E's tiered liability structure and the timing of your report. If a transfer was genuinely unauthorized and reported within the applicable timeframes, your bank is generally required to limit your liability and refund amounts beyond what you are responsible for.
What if I Was Tricked Into Sending the Money Myself?
If you personally authorized a transfer, even because you were deceived by a scammer, this generally falls outside Regulation E's core protections for unauthorized transfers, making these cases more legally complex and dependent on the specific facts involved.
Is Zelle or My Bank Liable for a Zelle Scam?
It depends on the specific circumstances. If the Zelle transfer was made without your authorization at all, Regulation E protections may apply. If you were deceived into personally authorizing the transfer, liability becomes more complicated and may depend on the specific facts of the scam and your bank's own policies and security practices.
How Long Do I Have to Report Fraud on My Account?
Under Regulation E, reporting within two business days of discovering unauthorized activity limits your liability to $50. Reporting within 60 days of your statement being sent can limit liability to $500. Waiting longer than 60 days can expose you to unlimited liability for continued unauthorized transactions occurring after that period.
