Electronic Fund Transfer Act: Coverage, Liability, and Disputes

The Electronic Fund Transfer Act is the 1978 federal law that governs money moving electronically into or out of your bank account. It caps what you can lose to unauthorized debit card use or account fraud, forces your bank to investigate disputes on a strict clock, requires written disclosures before you start using electronic services, and lets you sue when a financial institution breaks the rules. The Consumer Financial Protection Bureau implements the statute through Regulation E, which fills in the operational detail.

Which Transactions the Law Covers

The statute defines an electronic fund transfer as any transfer of funds started through an electronic terminal, telephone, or computer that instructs a financial institution to debit or credit your account.¹ In practice, that pulls in most of what you do without writing a check:

Debit card purchases at a store terminal.
ATM withdrawals and deposits.
Direct deposits of payroll, Social Security, tax refunds, and other government benefits.
ACH payments for rent, utilities, insurance, and other recurring bills.
Transfers you set up by calling your bank.

Prepaid cards, payroll cards, and government benefit cards are covered too. A 2016 CFPB rule brought prepaid accounts under Regulation E with the same error-resolution and liability protections as checking accounts.² One caveat: if you haven’t verified your identity to register the prepaid account, the issuer doesn’t have to give you provisional credit while it investigates a dispute, though it still has to investigate.

What the EFTA Does Not Cover

The protections differ sharply depending on the payment method, so the exclusions matter as much as the inclusions.

Credit card transactions fall under the Truth in Lending Act and Regulation Z, not the EFTA. Credit card liability for unauthorized charges is capped at $50 regardless of when you report.
Bank-to-bank wire transfers processed through the Federal Reserve system are excluded from the EFTA’s definition. Wire disputes are governed by the Uniform Commercial Code.¹
Business and commercial accounts are outside the law. The EFTA protects accounts established primarily for personal, family, or household purposes.³
Paper checks and check-image transactions are excluded by statute, even when the bank processes them electronically on the back end.

Before filing a dispute, confirm the transaction actually used a covered method. Filing under the wrong law wastes time and can leave you unprotected during the delay.

Liability Limits for Unauthorized Transfers

This is where hesitation costs real money. The EFTA sets a tiered ceiling on your losses, and each tier hinges on how quickly you notify your bank after you learn a card is lost or spot an unauthorized transfer.⁴

Report within two business days of learning of the loss or theft: your maximum liability is $50, or the amount of the unauthorized transfers if that’s less.⁵
Report after two business days but within 60 days of the statement showing the transfer: liability rises to $500, but only for unauthorized transfers the bank can show would have been prevented by earlier notice.⁵
Fail to report within 60 days of the statement: unlimited liability for unauthorized transfers occurring after that window closes. The bank owes you nothing for losses it can prove would not have happened if you’d reported in time.⁴

The 60-day clock starts when your bank transmits the statement, not when you open it. That unlimited-liability tier applies even when your card was never physically stolen, such as in a data breach. Most consumers who lose their full refund lost it by not checking statements for a few months.

If extended travel, hospitalization, or a similar circumstance kept you from reporting, the bank must extend the deadlines to a reasonable period.⁴ You’ll need to explain why you couldn’t report sooner.

Reporting an Error and the Bank’s Deadlines

When you spot a duplicate charge, an unauthorized transfer, or a wrong dollar amount, notify your bank by phone or in writing. Your notice needs your name and account number, the amount you believe is wrong, and why you think an error occurred.⁶ Including the transaction date, merchant name, and transaction ID from your statement will speed things along.

Once the bank has your notice, a strict clock starts:

Within 10 business days, the bank must investigate, decide whether an error occurred, and report its findings to you within three business days after finishing. If it finds an error, it has one business day to correct your account.⁷
If it can’t finish in 10 business days, the bank can take up to 45 days total, but only if it provisionally credits the disputed amount within those first 10 business days and gives you full use of the funds during the investigation. It may withhold up to $50 of that credit if it reasonably believes the transfer was unauthorized.⁷

If the bank concludes no error occurred, it must send you a written explanation within three business days of finishing the investigation and provide copies of the documents it relied on if you ask.⁶ If it reverses a provisional credit, it must notify you first with its reasoning.

Longer Deadlines for Some Disputes

Three categories of dispute give the bank more time.⁷ For a transfer that hit your account within 30 days of your first deposit, the initial investigation window stretches to 20 business days. For transfers initiated outside the United States, the total window becomes 90 days. Point-of-sale debit card disputes also get 90 days. The provisional credit rule still applies.

Stopping Recurring Payments

If you’ve authorized a company to pull recurring payments — a gym, a subscription, a loan servicer — you can stop any future transfer by notifying your bank at least three business days before the scheduled date.⁸ Phone or writing both work, but if you call, the bank may require written confirmation within 14 days, and your oral stop-payment order expires if you don’t follow through.

When the amount of a recurring payment changes, either the payee or your bank must send you written notice at least 10 days before the transfer if the new amount differs from the previous transfer or from what you originally authorized.⁸

Sending Money Abroad

The Dodd-Frank Act added a separate set of EFTA rules for international remittance transfers.⁹ These apply to remittance providers such as Western Union, MoneyGram, and banks that send funds internationally on your behalf.

Before you pay, the provider must disclose the exchange rate, all fees it charges, third-party fees in the transfer chain, and the amount the recipient will receive in the destination currency.¹⁰ The provider must also warn you that the recipient’s bank could tack on fees. You get a receipt at payment with a promised delivery date.

Two rights are stronger for remittances than for domestic transfers:

You can cancel a remittance for a full refund of fees and taxes within 30 minutes of paying, provided the recipient hasn’t already received the money. The provider has three business days to refund.¹¹
You have 180 days from the disclosed delivery date to report errors, well beyond the 60-day domestic window. Reportable errors include wrong amounts, funds that never reach the recipient, and providers failing to honor their disclosed exchange rate.¹²

Disclosures Your Bank Must Give You

Before you start using any electronic transfer service, your bank has to hand you a written disclosure covering your potential liability for unauthorized transfers, the phone number and address for reporting problems, transfer-related fees, and your right to documentation.¹³ The contact information you’ll need in a dispute is in that paperwork, so keep it.

You’re also entitled to two forms of ongoing documentation. Every ATM or point-of-sale transfer generates a terminal receipt showing amount, date, account identification, and terminal location. And you get periodic statements at least monthly if there’s any electronic activity, quarterly at minimum, listing every electronic debit and credit, fees, beginning and ending balances, and where to report errors.¹⁴ The statement date starts the 60-day clock on your liability, so when it arrives matters.

Overdraft Opt-In

Your bank cannot charge overdraft fees on ATM withdrawals or one-time debit card purchases unless you’ve affirmatively opted in.¹⁵ The bank has to give you a standalone written notice explaining the program and get your consent before it can cover an overdrawing debit and then charge you for it. You can revoke consent at any time, and the bank must offer the same account terms whether you opt in or out.

Suing for Violations

If a bank violates any provision of the EFTA, you can sue. The statute creates a private right of action with three categories of recovery:¹⁶

Actual damages, meaning what the violation directly cost you: bounced-check fees from a wrongly denied provisional credit, late penalties, lost interest.
Statutory damages between $100 and $1,000 per individual action, even without provable financial loss. The court sets the amount based on how intentional and persistent the violation was.
Attorney fees and court costs if you win, which is what makes smaller claims worth pursuing.

Class actions are available, with total statutory damages for the class capped at the lesser of $500,000 or 1% of the defendant’s net worth.¹⁶ You have one year from the violation to file. If the bank corrects the underlying error through the resolution process, that correction shields it from civil liability for that error.

You Cannot Be Forced to Use Electronic Transfers

No creditor can require you to repay a loan through preauthorized electronic transfers, and no employer or government agency can require you to open an account at a specific bank as a condition of getting paid or receiving benefits.¹⁷ If an employer insists direct deposit into a particular bank is the only way to receive your paycheck, that’s a federal violation. You can always choose a different delivery method.

1
Office of the Law Revision Counsel. 15 USC 1693a – Definitions
2
Federal Register. Prepaid Accounts Under the Electronic Fund Transfer Act Regulation E and the Truth In Lending Act Regulation Z
3
Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
4
Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
5
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
6
Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
7
Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors
8
Consumer Financial Protection Bureau. 12 CFR 1005.10 – Preauthorized Transfers
9
GovInfo. 15 USC 1693o-1 – Remittance Transfers
10
eCFR. 12 CFR Part 1005 Subpart B – Requirements for Remittance Transfers
11
eCFR. 12 CFR 1005.34 – Procedures for Cancellation and Refund of Remittance Transfers
12
Consumer Financial Protection Bureau. 12 CFR 1005.33 – Procedures for Resolving Errors
13
Office of the Law Revision Counsel. 15 USC 1693c – Terms and Conditions of Transfers
14
Office of the Law Revision Counsel. 15 USC 1693d – Documentation of Transfers
15
eCFR. 12 CFR 1005.17 – Requirements for Overdraft Services
16
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability
17
Office of the Law Revision Counsel. 15 USC 1693k – Compulsory Use of Electronic Fund Transfers