Can You Sue a Bank for Not Refunding Your Money?

You can sue a bank for refusing to refund your money, and under the Electronic Fund Transfer Act a successful claim recovers your actual losses plus statutory damages of $100 to $1,000, along with attorney’s fees and court costs.¹ Whether suing a bank for not refunding your money actually works, though, depends on three things most people never think about until they are already in a dispute: whether the transaction legally counts as “unauthorized,” how quickly you reported it, and whether the bank missed one of its own strict investigation deadlines. Most people who lose these cases lose on the first point.

The “Unauthorized” Problem Decides Most Cases

The EFTA’s protections only cover unauthorized electronic fund transfers. That word does a lot of work, and it does not mean what most defrauded consumers assume it means.

If you logged into Zelle, Venmo, or your bank’s bill-pay system and sent money to someone you believed was legitimate, and that person turned out to be a scammer, the bank will typically argue the transfer was authorized because you initiated it. Being deceived about who the recipient was does not automatically make the transfer unauthorized under the statute. That is why so many romance-scam, contractor-scam, and fake-invoice victims find their banks unwilling to refund.

The Consumer Financial Protection Bureau has drawn one important line. When a third party tricks you into handing over your login credentials, debit card number, or a confirmation code, and the third party then uses those credentials to move money out of your account, the resulting transaction counts as unauthorized under Regulation E. The fraudster, not you, initiated the transfer.²

So the test comes down to who actually pressed the button. A scammer who impersonated your bank by phone, got your login, and then signed in and transferred funds: unauthorized, and the bank has to investigate. You sending $2,000 through Zelle yourself to a fake contractor: authorized, and your legal leverage is far weaker.

Before you spend money on a lawyer, be honest about which side of that line your situation falls on. If you initiated the transfer, your claim is uphill. If a stranger initiated it using stolen access, your claim is on solid ground.

Reporting Deadlines That Can Wipe Out Your Claim

Even a textbook unauthorized transfer loses its protections if you report it too late. Under the EFTA, your maximum liability for unauthorized transfers is tied almost entirely to timing.

Report the loss of your card or credentials within two business days of learning about it, and your liability caps at $50. Wait longer and your exposure jumps to $500 for any unauthorized transfers that happen between day three and the day you finally call. The bank must prove those later transfers would not have occurred had you reported on time, but that is a burden banks regularly carry.³

The worst scenario is ignoring your statements. If an unauthorized transfer shows up on a periodic statement and you fail to report it within 60 days of the bank sending that statement, you can be held liable for every unauthorized transfer that occurs after the 60-day window closes. There is no dollar cap on that exposure. A drained account with no recourse, because the statements sat unopened.⁴

One protection worth knowing: if your state’s law or your account agreement sets lower liability than these federal limits, the lower number controls.⁴

What the Bank Was Required to Do After You Reported

A lawsuit against a bank usually succeeds not because the underlying fraud is proven, but because the bank missed a legally mandated deadline during its investigation. Those deadlines are tight and specific.

After you notify the bank of a suspected error, it has 10 business days to investigate and determine whether an error occurred. If it finds an error, it must correct the account within one business day of that determination.⁵

If the bank needs more time, it can extend the investigation to 45 days, but only if it provisionally credits your account within those first 10 business days. The provisional credit must include interest where applicable, and you get full use of the funds while the investigation continues.⁵

Three situations stretch the window to 90 days: transfers initiated from outside the United States, point-of-sale debit card transactions, and transactions on accounts opened within the preceding 30 days. The provisional credit requirement still applies.⁶

If you reported the error over the phone and the bank asked for written confirmation, it had to tell you so at the time of the call and give you 10 business days to send the written version. Miss that deadline and the bank does not owe you provisional credit, though it still has to investigate.⁵

Common violations that drive EFTA lawsuits: missing the 10-business-day investigation deadline, failing to provide provisional credit when extending the investigation, and skipping the required written notice of investigation results. Each is an independent basis for liability. The bank can defend by showing the violation was unintentional and resulted from a genuine error despite reasonable procedures to prevent it, but that defense gets harder the more the violation looks like a missed calendar date.¹

What You Can Actually Recover

The EFTA’s damages structure is built to make small claims economically viable. A successful individual action recovers three things.

Actual damages: the money you lost because of the bank’s violation. That includes the unauthorized transfer itself plus consequential losses like overdraft fees, late payment penalties, and bills that bounced because the funds were missing.

Statutory damages: between $100 and $1,000, set by the court based on how often and how deliberately the bank violated the law.¹

Attorney’s fees and costs: the court awards reasonable fees to prevailing consumers. This is the provision that makes the whole thing workable. Without it, no lawyer would take a $300 unauthorized charge case; with it, attorneys know they get paid if they win, so consumers can actually find representation.

Class actions are capped at the lesser of $500,000 or 1% of the bank’s net worth, with no minimum per class member. Courts weigh the bank’s resources, the number of people affected, and whether the violation was intentional when setting those awards.¹

Two other legal theories sometimes travel alongside an EFTA claim. Breach of contract applies when the bank failed to follow its own account agreement on fraud protection or dispute resolution; the catch is that account agreements are drafted to limit the bank’s obligations, so read yours before relying on this theory. Negligence applies when the bank’s own security failures let someone into your account. Banks must safeguard customer information under the Gramm-Leach-Bliley Act, and the FTC’s Safeguards Rule spells out specific requirements including multi-factor authentication and encryption.⁷ State consumer protection laws may add remedies on top of the federal ones, including punitive or multiple damages for egregious conduct.

Check Your Account Agreement Before You Plan a Lawsuit

Most major bank account agreements contain mandatory arbitration clauses that require you to resolve disputes through private arbitration instead of court. These clauses almost always include class action waivers, which bar you from joining other affected customers in a single case.

The Federal Arbitration Act makes these provisions enforceable. A written agreement to arbitrate a dispute involving commerce is “valid, irrevocable, and enforceable” unless general contract defenses like fraud or duress apply.⁸ The Supreme Court has repeatedly upheld class action waivers in arbitration agreements, even when individual claims are too small to make solo litigation practical, and state laws that tried to ban such waivers have been struck down as preempted.

If your agreement has one of these clauses, you will almost certainly be bound by it. Arbitration is not necessarily a loss: it is faster, filing fees are often lower, some bank clauses require the bank to pay the arbitrator, and the EFTA’s remedies still apply. But you give up most appeal rights, discovery is limited, and the proceedings are private.

Try the Complaint Route First

Suing takes time and energy. Before you file anything, two federal agencies can apply pressure that often produces faster results.

Consumer Financial Protection Bureau

The CFPB takes complaints against banks, credit unions, and other financial companies through its portal at consumerfinance.gov/complaint. Once you submit a complaint with supporting documents, the CFPB forwards it to the company, which generally must respond within 15 days, with up to 60 days for complex cases. You get to review the response and provide feedback.⁹ A CFPB complaint does not bind the bank to any outcome, but banks pay attention because the complaints affect regulatory examinations and are published in a public database. Many disputes that stalled inside a bank’s own process move after a CFPB complaint lands.

Office of the Comptroller of the Currency

If your bank is a national bank or federal savings association, the OCC’s Customer Assistance Group handles complaints and provides informal guidance on banking laws. The OCC recommends contacting the bank directly first, checking HelpWithMyBank.gov for common questions, and then filing a formal complaint online if the issue stays unresolved.¹⁰

Choosing Between Small Claims and Civil Court

If arbitration does not apply and the complaint route failed, the next decision is which court. Small claims courts handle straightforward disputes with lower dollar amounts. Jurisdictional limits range from $2,500 to $25,000 depending on the state, with most falling between $5,000 and $12,500. The process is informal and built for people without lawyers; many small claims courts do not allow attorneys at all, which keeps the bank from burying you in legal fees.

For a dispute where the bank owes you a few hundred or a few thousand dollars and the facts are clear, small claims is the obvious choice. You file, present your evidence, and the judge decides.

Civil court is necessary when the claim exceeds the small claims limit, involves complex legal arguments, or seeks an injunction. Civil proceedings allow full discovery and expert testimony but take longer, cost more, and practically require an attorney. The EFTA’s fee-shifting provision offsets that cost if you prevail.

Documentation That Carries the Case

Whether you file a CFPB complaint, go to arbitration, or end up in court, the quality of your records decides whether you are believed. Start collecting the moment you spot the problem.

Pull bank statements covering several months before and after the unauthorized activity. Those statements establish your normal patterns and the full scope of the loss. Save transaction records, receipts, and screenshots from banking apps to pin down dates and amounts.

Your communications with the bank matter as much as the transaction records. Keep every email. Take notes during every phone call, including the representative’s name, the date, and what was said. Save copies of every letter you send and receive. If you reported the error orally and the bank asked for written confirmation, keep proof you sent it inside the 10-day window. These records show both that you met your reporting obligations and that the bank did or did not meet its investigation deadlines.

If you believe the bank’s security failures contributed to the unauthorized access, document what you can: missing multi-factor authentication, password resets without proper verification, known data breaches, prior incidents of unauthorized access the bank failed to address. That evidence supports a negligence claim running alongside the EFTA claim.

One Boundary: Credit Card Charges Are a Different System

Everything above applies to debit cards, electronic transfers, and bank accounts under the EFTA. Disputed credit card charges run under a different law, the Fair Credit Billing Act, which requires written notice to the creditor’s designated billing-dispute address within 60 days of the statement date and gives the creditor two billing cycles (no more than 90 days) to resolve it.¹¹ If your dispute is about a credit card charge rather than a bank account withdrawal, the deadlines, procedures, and remedies are different from the ones in this article.

1
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability
2
Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
3
Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
4
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
5
Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
6
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
7
Federal Trade Commission. FTC Safeguards Rule: What Your Business Needs to Know
8
Office of the Law Revision Counsel. 9 USC 2 – Validity, Irrevocability, and Enforcement of Agreements to Arbitrate
9
Consumer Financial Protection Bureau. Submit a Complaint
10
OCC. Consumer Complaints
11
Office of the Law Revision Counsel. 15 USC 1666 – Correction of Billing Errors