Your Rights Under the Electronic Fund Transfer Act
The Electronic Fund Transfer Act (15 U.S.C. § 1693), implemented through Regulation E (12 C.F.R. Part 1005), is the primary federal law governing electronic fund transfers. It covers debit card transactions, ATM withdrawals, direct deposits, automatic bill payments, person-to-person transfers, and online banking transactions. The law was enacted to establish the rights, liabilities, and responsibilities of participants in electronic fund transfer systems.
When something goes wrong with your bank account, whether an unauthorized transaction appears, your account is frozen without explanation, or your bank refuses to investigate a reported error, the EFTA and Regulation E impose specific legal obligations on your financial institution. These obligations are not voluntary courtesies. They are federal requirements, and banks that fail to comply may be held liable.
Understanding these protections is essential because bank account problems can escalate quickly. A frozen account can prevent you from paying rent, making car payments, buying groceries, or meeting other basic financial obligations. The EFTA exists precisely to ensure that consumers are not left without recourse when these situations arise.
What Counts as an Unauthorized Transfer
Under the EFTA, an unauthorized electronic fund transfer is a transfer from a consumer's account initiated by a person other than the consumer without actual authority to initiate the transfer and from which the consumer receives no benefit. This definition covers a range of situations that are more common than most people realize.
Examples of unauthorized transfers include:
- Stolen debit card transactions: Someone physically takes your debit card or obtains your card number and makes purchases or withdrawals you did not authorize
- Fraudulent ACH debits: A company or individual initiates an electronic withdrawal from your checking account without your permission
- Lost card usage: Your debit card is lost and someone else uses it before you can report it missing
- Skimming and cloning: Your card information is captured at an ATM, gas pump, or point-of-sale terminal and used to create a duplicate card
- Transactions exceeding authorization: You authorized a specific amount but the merchant or service provider charged more than you agreed to
It is important to distinguish unauthorized transfers from merchant disputes. If you voluntarily made a purchase with your debit card but are dissatisfied with the product or service, that is generally a merchant dispute rather than an unauthorized transfer under the EFTA. The legal framework and your bank's obligations differ depending on which category applies. However, if a merchant charges you an amount you did not agree to or continues to charge you after you have cancelled a service, those situations may qualify as unauthorized transfers.
How to Report an Error or Unauthorized Transaction
Regulation E establishes specific procedures and deadlines for reporting errors and unauthorized transactions to your bank. Following these procedures correctly is critical because your liability and your bank's obligations depend on when and how you report the problem.
Under 12 C.F.R. § 1005.11, you must notify your financial institution within 60 days of the date your bank sent the periodic statement showing the error or unauthorized transaction. Missing this deadline can have serious consequences for your rights, so it is important to review your bank statements promptly and regularly.
While you should call your bank immediately to report the problem, you should also submit your dispute in writing. A phone call alone may not be sufficient to preserve all of your rights. Your written notice should include your name and account number, a description of the error or unauthorized transaction, the dollar amount involved, and the date the transaction occurred. Send this notice via certified mail with return receipt requested so you have proof of when the bank received it.
Once your bank receives proper notice of an error, it is required to:
- Investigate within 10 business days (or 20 business days for new accounts open less than 30 days)
- Provisionally credit your account within 10 business days if the investigation will take longer, so you have access to the disputed funds while the bank investigates
- Complete the investigation within 45 days of receiving your notice (or 90 days for certain transactions, including point-of-sale transactions, transactions initiated outside the United States, and new account transactions)
- Report the results to you in writing within three business days of completing the investigation
These deadlines are not discretionary. If your bank fails to meet them, that failure may itself constitute a violation of federal law.
Your Liability Limits for Unauthorized Transfers
One of the most important protections under the EFTA is the limitation on consumer liability for unauthorized electronic fund transfers. Your maximum liability depends on how quickly you report the problem:
- Within 2 business days of discovering the loss or theft: Your maximum liability is $50
- Between 2 and 60 days after receiving the statement showing the unauthorized transfer: Your maximum liability is $500
- After 60 days from receiving the statement: You could face unlimited liability for unauthorized transfers that occur after the 60-day period
These are maximum liability amounts established by federal law. In practice, many banks and credit unions have adopted zero-liability policies that provide even greater protection. Visa and Mastercard, for example, both offer zero-liability policies for their debit card holders, meaning you may not be responsible for any unauthorized charges at all. However, these voluntary policies can have their own conditions and limitations, so the EFTA's statutory protections remain your baseline floor of protection.
The key takeaway is that speed matters. The sooner you report an unauthorized transaction or a lost or stolen card, the more limited your potential liability. Review your bank statements as soon as they arrive and report any discrepancies immediately.
When Banks Violate the EFTA
Despite clear legal obligations, banks and credit unions do not always follow the rules. The following are common EFTA violations that consumers encounter:
- Refusing to investigate: The bank declines to investigate a properly filed dispute, sometimes claiming the transaction was authorized without conducting a genuine inquiry
- Failing to provide provisional credit: The bank does not provisionally credit your account within 10 business days while the investigation is pending, leaving you without access to your money
- Missing investigation deadlines: The bank takes longer than 10 business days (or 45 days for the full investigation) without explanation or resolution
- Requiring a police report: Some banks insist that you file a police report before they will investigate your dispute. There is no requirement under the EFTA or Regulation E that a consumer must file a police report as a precondition to an investigation. While filing a police report can be helpful for your own records, a bank cannot refuse to investigate simply because you have not filed one
- Account closure or freeze in retaliation: Closing your account or freezing your funds in response to your filing a dispute rather than investigating it properly
- Denying a claim without adequate investigation: Issuing a denial letter without reviewing transaction records, surveillance footage, IP addresses, or other evidence relevant to whether the transaction was authorized
If your bank has engaged in any of these practices, its conduct may violate the EFTA and give rise to a legal claim.
What to Do Right Now
If you are dealing with an unauthorized transaction, a frozen account, or a bank that is not responding to your dispute, take the following steps immediately:
- Document everything. Take screenshots of your account showing the unauthorized transactions. Download or print your bank statements. Save any emails, chat transcripts, or letters from your bank. Record the dates and times of any phone calls you make to the bank, along with the names of the representatives you speak with.
- Notify your bank in writing immediately. Do not rely solely on a phone call. Write a letter or send a secure message through your bank's online portal identifying the disputed transaction, the amount, and the date. State clearly that you did not authorize the transaction and that you are requesting an investigation under Regulation E.
- Keep a copy of your written notice with proof of delivery. If you send a letter, use certified mail with return receipt requested. If you submit your dispute through the bank's website or app, take a screenshot showing the date and content of your submission.
- Note the date you reported the problem. This is critical for tracking the bank's deadlines. The bank has 10 business days to investigate and must provisionally credit your account if it needs more time. Mark these dates on your calendar.
- If the bank fails to respond or denies your claim improperly, contact an attorney. You do not have to navigate this process alone, and an attorney experienced in consumer protection law can evaluate whether the bank has met its legal obligations.
The EFTA requires your bank to investigate reported errors and unauthorized transactions within strict deadlines. If your bank is not following these rules, that may itself be a violation of federal law.
When to Contact an Attorney
You can consult with an attorney at any point in this process. Some consumers prefer to work through the dispute process with their bank first, and that is a reasonable approach. Others want guidance from the outset to make sure they preserve their rights and meet all applicable deadlines.
However, there are certain situations where speaking with an attorney is particularly important:
- Your bank has denied your dispute without conducting an adequate investigation
- Your bank failed to provide provisional credit within 10 business days
- Your bank missed the 10-day investigation deadline or the 45-day completion deadline
- The amount of the unauthorized transaction is significant
- Your bank froze or closed your account after you filed a dispute
- You are dealing with multiple unauthorized transactions or an ongoing pattern of fraud
Under the EFTA, a successful claim can result in several categories of recovery. You may be entitled to actual damages, which compensate you for the financial harm you suffered, including overdraft fees, late payment penalties, and other costs caused by the bank's failure to act. The statute also provides for statutory damages of up to $1,000 per violation, which are available even if your actual financial losses were small. In addition, a prevailing consumer is entitled to reasonable attorney's fees and costs, which means the bank pays for your legal representation if you win.
This fee-shifting provision is why most consumer protection attorneys, including our firm, handle EFTA cases at no upfront cost to the client. You should not let concerns about legal fees prevent you from exploring whether you have a viable claim.
Frequently Asked Questions
How long does a bank have to investigate a disputed transaction?
Under Regulation E, your bank must investigate your dispute within 10 business days of receiving your notice (20 business days for new accounts). If the bank needs more time, it must provisionally credit your account and complete its investigation within 45 days (90 days for point-of-sale transactions, foreign transactions, and new account transactions). These are firm deadlines established by federal law, not guidelines.
Can my bank close my account for filing a dispute?
Banks generally have broad discretion to close accounts under the terms of their account agreements. However, closing or freezing an account in retaliation for exercising your rights under the EFTA raises serious legal concerns. If your bank closed or froze your account after you filed a dispute, and the timing suggests the closure was related to your dispute rather than an independent business decision, that conduct may support an EFTA claim. An attorney can evaluate the specific facts of your situation.
Do I need to file a police report for an unauthorized transaction?
No. Neither the EFTA nor Regulation E requires you to file a police report as a condition of having your dispute investigated. While filing a police report can be useful for your own documentation and may assist in a criminal investigation, your bank cannot refuse to investigate your dispute or deny provisional credit simply because you have not filed a police report. If your bank is telling you otherwise, that may be a violation of federal law.
What damages can I recover under the EFTA?
The EFTA provides for three categories of damages. First, actual damages, which include financial losses you suffered as a result of the violation, such as overdraft fees, late payment charges, and other consequential costs. Second, statutory damages of up to $1,000 per violation, available regardless of whether you can prove specific monetary harm. Third, reasonable attorney's fees and litigation costs, which the bank must pay if you prevail. In cases involving a pattern or practice of violations, class action damages are also available.