The CFPB Prepaid Rule is a set of federal protections for people who use prepaid accounts, giving you standardized fee disclosures before you buy, a cap on what you can lose to unauthorized charges, a formal process for disputing errors, and limits on inactivity fees and bundled credit features.1Consumer Financial Protection Bureau. Prepaid Accounts Under the Electronic Fund Transfer Act (Regulation E) and the Truth in Lending Act (Regulation Z) Most of these rights depend on one thing you have to do yourself: register the card with the provider.
Which Prepaid Accounts the Rule Covers
The rule applies to accounts whose main purpose is holding money and making payments at multiple, unrelated merchants or ATMs. That includes general-purpose reloadable cards sold at retail, payroll cards used to distribute wages, government benefit cards for programs like Social Security and unemployment insurance, and mobile wallets or peer-to-peer apps that let you store a balance.2eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
Several products sit outside the rule. Store gift cards, loyalty and promotional cards, and health-related accounts like HSAs and flexible spending arrangements are exempt. Needs-tested state and local benefit programs such as SNAP and TANF are also excluded, so the protections below do not apply to those cards.
Fee Disclosures Before You Get the Card
Before you acquire a prepaid account, the provider must give you two disclosures. The Short Form is a standardized table showing the most common costs: monthly or annual fee, per-purchase charge, ATM withdrawal fees for in-network and out-of-network machines, and other key fees the provider selects based on how often consumers incur them.3eCFR. 12 CFR 1005.18 – Requirements for Financial Institutions Offering Prepaid Accounts On a physical card the table appears on the outside of the packaging; for a digital account it must be prominently displayed before you finish signing up.
The Long Form lists every fee the provider could charge and the conditions that trigger each one. Because the formats are uniform across providers, you can hold two disclosures side by side and compare them honestly. A card with no monthly fee but expensive ATM withdrawals becomes obvious next to one that charges a small monthly fee and free withdrawals.
If a provider markets, packages, or sells a prepaid account primarily in a language other than English, it must provide both disclosures in that language too, though the Long Form must still be available in English on request. Payroll and government benefit cards have a narrow exception when the foreign-language help comes from an ad hoc translation service rather than the provider’s own materials.
How Much You Can Lose to Unauthorized Charges
Your liability for unauthorized transactions is tiered based on how fast you report the problem. Report a lost or stolen card within two business days of discovering it, and the most you can lose is $50.2eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E) Wait longer than two days but report within 60 days of the unauthorized transfer appearing in your account history, and your exposure rises to $500. Miss the 60-day window and you can be liable for every dollar stolen after the deadline passed.
The gap between $50 and losing the entire balance is a matter of a few days. Checking your account regularly is what keeps the lower cap available to you.
Registering Your Card Turns the Protections On
All of these protections depend on a step most people skip. An unregistered card, the kind you buy off a rack and start using immediately, carries much weaker protections. The provider is not required to follow the liability caps or error resolution procedures for accounts where it has not successfully verified the consumer’s identity.4eCFR. 12 CFR 1005.18 – Requirements for Financial Institutions Offering Prepaid Accounts Losing an unregistered card can mean losing the whole balance with no recourse.5Consumer Financial Protection Bureau. Why Do I Need to Register My Prepaid Card? Registration takes a few minutes online and usually requires your name, address, date of birth, and Social Security number.
Disputing Errors and Unauthorized Transactions
When you spot an incorrect charge or a transaction you did not authorize, notify the financial institution within 60 days. The clock starts on whichever comes first: the date you log in and view an electronic transaction history that shows the error, or the date the institution mails you a written history you requested that shows the error.4eCFR. 12 CFR 1005.18 – Requirements for Financial Institutions Offering Prepaid Accounts Some providers simplify things by investigating any error reported within 120 days of the transaction itself, no matter when you looked at your history.
Once the institution has your notice, it has 10 business days to investigate and tell you what it found.6eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors It can extend the investigation to 45 days, but only if it provisionally credits the disputed amount to your account within those first 10 business days. You get full use of that money while the investigation continues. For certain transactions, including point-of-sale debit purchases, international transfers, and transactions in the first 30 days of a new account, the window stretches to 90 days.
After the investigation, the institution must explain its findings and correct any confirmed error within one business day. If it decides no error occurred and it had issued a provisional credit, it can reverse the credit, but it has to tell you first and share the evidence it relied on.
Checking Your Balance and History
Prepaid providers do not have to send monthly statements. Instead, they must offer three alternatives: a telephone line where you can check your balance, an online transaction history covering at least the last 12 months, and a written transaction history covering at least 24 months that the provider sends promptly on request.3eCFR. 12 CFR 1005.18 – Requirements for Financial Institutions Offering Prepaid Accounts This matters beyond convenience. The 60-day deadline for reporting errors runs from when you access or receive this history, so regular check-ins are what keep your rights alive.
You Cannot Be Required to Use a Specific Card
No employer or government agency can require you to receive wages or benefits through a prepaid account at a particular financial institution.7Office of the Law Revision Counsel. 15 USC 1693k – Compulsory Use of Electronic Fund Transfers If your employer offers a payroll card, you must also be given the option of direct deposit to an account of your choice. Government agencies can offer a prepaid card as one option for benefit payments, but not the only one. The CFPB has also said that requiring even the first payment to land on a specified prepaid card violates the rule, even if you can redirect later payments elsewhere.8Federal Register. Compliance Bulletin on the Electronic Fund Transfer Act’s Compulsory Use Prohibition and Government Benefit Accounts This protection does not extend to needs-tested benefit programs like SNAP and TANF.
Overdraft and Credit Features on Prepaid Cards
Some prepaid cards come bundled with a line of credit or overdraft feature that lets you spend more than your loaded balance. These hybrid products trigger a second layer of federal rules under Regulation Z, the framework that also governs credit cards. The provider cannot open a credit line, solicit you for one, or link an existing credit account to your prepaid card until at least 30 days after you register the prepaid account.9eCFR. 12 CFR 1026.61 – Hybrid Prepaid-Credit Cards The waiting period gives you time to understand the prepaid account by itself before adding borrowed money to it.
The rule also separates your stored balance from any borrowed money. The provider must give you separate disclosures about the credit feature’s interest rates, repayment terms, and fees. Automatic deductions from your prepaid balance to repay the credit line require your separate authorization, so a credit payment cannot quietly drain the funds you loaded for everyday expenses.
When Inactivity Fees Are Allowed
A provider can charge a dormancy or inactivity fee only if all four conditions are met: the account has been inactive for at least 12 consecutive months, the fee was clearly disclosed before you bought the card, the disclosure appeared on the card or its packaging, and the provider charges no more than one such fee per month.10Office of the Law Revision Counsel. 15 USC 1693l-1 – General-Use Prepaid Cards, Gift Certificates, and Store Gift Cards A fee buried in fine print, or one imposed after just a few months of not using the card, violates federal law.
The disclosure has to spell out the fee amount, how often it can be charged, and the fact that it applies for inactivity. If you buy the card online or by phone, the provider must tell you about the fee before you complete the purchase.
If a Provider Breaks the Rules
You can sue a provider that violates the Electronic Fund Transfer Act. A successful individual lawsuit can recover the actual financial harm you suffered plus statutory damages of $100 to $1,000, even when your out-of-pocket loss was small.11Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability Courts also award attorney’s fees and costs to a winning consumer, which makes it possible to bring claims that would otherwise cost more to litigate than they are worth. Class actions are available when a provider’s noncompliance affects many consumers.
The statute of limitations is one year from the date of the violation, so acting quickly matters. You can also file a complaint directly with the CFPB, which has authority to impose its own penalties on providers that systematically fail to comply.