Thieves Moved My Savings Into Checking Before Draining It

You look at your accounts after your phone is stolen and the picture is confusing. Your savings balance is near zero, but there is no outgoing payment from savings. Instead, there is a transfer from savings into checking, and then one or more payments out of checking that emptied it. The thief used your own accounts as a staging area.

That consolidation step can be easy to overlook when you call the bank, because the money did not leave you at that moment. This article explains why the internal transfer may matter legally, why you should report every transfer, and how Regulation E's liability limits and provisional credit rules work. Our guide, My Phone Was Stolen and My Bank Account Was Drained: Your Rights, covers the full picture.

How the Consolidation Step Works

Phone theft can hand a thief more than a device. TidBITS, summarizing the Wall Street Journal's 2023 reporting on thieves who watched iPhone users enter their passcodes and then stole the phones, wrote that after locking owners out, "they may transfer money from bank accounts, apply for an Apple Card, and more, all while the user is completely locked out of their account."

Moving money from savings into checking before sending it out is one way that can happen. Whatever the reason behind it, the result is a chain of transfers: one inside your relationship with the bank, and one or more that took the money away.

Is a Transfer Between Your Own Accounts an "Electronic Fund Transfer"?

The Electronic Fund Transfer Act defines the term broadly. Under 15 U.S.C. § 1693a(7), an electronic fund transfer is "any transfer of funds, other than a transaction originated by check, draft, or similar paper instrument, which is initiated through an electronic terminal, telephonic instrument, or computer or magnetic tape so as to order, instruct, or authorize a financial institution to debit or credit an account."

A transfer from savings to checking made through a banking app or website is an electronic instruction to the bank to debit one account and credit another, which generally fits the words of that definition. The statute and Regulation E list exclusions, including certain wire-system transfers at § 1693a(7)(B) and 12 C.F.R. § 1005.3(c)(3), so whether a given transfer is covered can depend on how it was made.

Regulation E then defines an "unauthorized electronic fund transfer" at 12 C.F.R. § 1005.2(m) as one "from a consumer's account initiated by a person other than the consumer without actual authority to initiate the transfer and from which the consumer receives no benefit." A thief who moves your savings into checking as a step toward taking it fits the first part of that description. A bank might argue that the money stayed in your name for a time, so you received a "benefit." The federal court decisions we are aware of that address a thief's savings-to-checking transfer have treated it as potentially unauthorized, reasoning that a transfer used to set up a theft does not benefit the consumer: a federal trial court in Manhattan, ruling on a motion to dismiss in January 2025 in a case now on appeal to the Second Circuit, and a federal trial court in Colorado, ruling on summary judgment in February 2025. No federal appeals court has decided the question, and the facts matter. That is one reason the whole sequence matters: the internal transfer and the outgoing payments are parts of the same theft.

Report Every Transfer, Not Just the Outgoing One

When you report, list each transfer the thief made: the move out of savings, the credit into checking, and every payment out. Under 12 C.F.R. § 1005.11(b)(1), a notice of error should let the bank identify your name and account number and indicate why you believe an error exists, including "to the extent possible the type, date, and amount of the error." Naming both accounts puts the full sequence in front of the bank.

Timing matters for each account. The 60-day window in § 1005.11(b)(1) runs from the periodic statement on which the error first appears, and your savings statement may arrive on a different schedule from checking. A few other points from the Official Interpretations:

• Comment 11(a)-3: a bank must follow the error-resolution procedures when you report the loss or theft of an access device "if the consumer also alleges possible unauthorized use as a consequence of the loss or theft."
• Comment 11(a)-4: the procedures apply "even if the account has been closed."
• Notice may be given "in person, by telephone, or in writing" under § 1005.6(b)(5)(ii). Following up in writing is still wise, as explained below.

How the Liability Limits Work

Regulation E caps what a consumer can be made to bear, based mainly on how quickly the consumer reports. Under 12 C.F.R. § 1005.6(b), if you notify the bank within two business days after learning of the loss or theft of an access device, your liability cannot exceed the lesser of $50 or the unauthorized transfers before notice. Later notice raises the cap to $500, subject to conditions the bank must establish. A separate rule applies to transfers that appear on a statement you do not report within 60 days. If your delay was due to extenuating circumstances, such as extended travel or hospitalization, § 1005.6(b)(4) requires the bank to extend these times "to a reasonable period."

Two more rules help. Comment 6(b)-2 says negligence, such as "writing the PIN on a debit card," cannot be used to impose more liability than Regulation E permits. And in a lawsuit involving your liability, 15 U.S.C. § 1693g(b) puts the burden on the bank to show the transfer was authorized.

Provisional Credit While the Bank Investigates

A bank must generally finish its investigation within 10 business days. If it needs up to 45 days, § 1005.11(c)(2) requires it to provisionally credit your account within 10 business days and give you full use of the funds. One exception matters: a bank that requires written confirmation of an oral notice, and tells you so when you call, need not provisionally credit if it does not receive that confirmation within 10 business days. Send it promptly. See Your Bank’s 10-Business-Day Deadline: How Provisional Credit Works.

What If the Money Left by Wire?

Some takeovers end with a wire transfer rather than another kind of electronic payment. Courts are divided on whether the EFTA covers the debit to a consumer's account when a wire is ordered online. In March 2026, a federal court in California held that "the EFTA does not apply to consumer wire transfers," and noted that two federal appeals courts had agreed. A federal trial court in Manhattan reached a different conclusion in January 2025, ruling on a motion to dismiss that the wire exclusion did not bar EFTA claims based on a fraudulent online payment order that debited a consumer account; that case is stayed pending an appeal to the Second Circuit, which hears appeals from New York's federal courts. As of October 14, 2026, the appeal had been argued (April 6, 2026) and we were not aware of a decision.

If the EFTA does not apply, New York's UCC Article 4-A may. Under UCC § 4-A-204(1), a bank that accepts an unauthorized payment order that is not effective against the customer must refund it, with interest unless the customer failed to report within a reasonable time not exceeding 90 days, and under § 4-A-505, a customer who does not object within one year after receiving notification reasonably identifying the order is precluded from asserting that the bank is not entitled to retain the payment. Either way, prompt reporting of every transfer can help protect you.

If your bank later denied your claim, read My Bank Denied My Fraud Claim With the Same Form Letter. Is That an Investigation? and My Bank Says I Authorized the Transfer. I Didn't. Now What? When you are ready, tell us what happened. Consultations are free.