Overdraft Opt-In Rules: Covered Transactions, Consent, and Revoking

Under federal overdraft opt-in rules, a bank cannot charge you an overdraft fee on an ATM withdrawal or a one-time debit card purchase unless you have affirmatively agreed to its overdraft service in advance. The requirement lives in Regulation E at 12 CFR § 1005.17, and it has four moving parts: the bank must give you a standardized written notice, obtain your affirmative consent, confirm that consent in writing, and let you revoke at any time. Without an opt-in on file, the bank’s only lawful move is to decline the transaction at no charge.¹

Which Transactions the Opt-In Covers

The rule reaches two transaction types: ATM withdrawals and one-time debit card purchases.¹ Swipe a debit card at a store, or pull cash from an ATM, and if the balance isn’t there the bank needs your prior consent before paying the transaction and charging a fee. No consent, no fee.

It does not reach checks, ACH transfers, or recurring debit card payments. A monthly gym membership on autopay, an ACH rent draft, or a paper check can still trigger an overdraft fee under your account agreement, whether you opted in or not.¹ The line between a one-time debit and a recurring one matters: a single grocery purchase is protected, but a subscription set up with the same card is treated as a pre-authorized recurring charge and falls outside the rule. If you aren’t sure how a particular payment is classified, ask the bank.

What the Opt-In Notice Must Say

Before you can consent, the bank has to give you a notice “substantially similar” to Model Form A-9 in Appendix A to Part 1005.² The standardized format exists to keep fee terms out of dense fine print.

The notice has to cover:

The dollar amount of the overdraft fee, or, if it varies, the maximum fee you could be charged.¹
The maximum number of overdraft fees you can be charged in a single day, or a statement that there is no daily cap.¹
A clear statement that paying an overdraft is discretionary, so opting in does not guarantee coverage on any given transaction.
A description of alternatives, such as linking a savings account.

No federal law caps the fee itself. Each bank sets its own amount, and by 2025 the average had drifted closer to $27, though some institutions still charge as much as $37 per occurrence.³ The only reliable way to know your exposure is to read your own bank’s notice.

How the Bank Has to Get Your Consent

The notice must be delivered separately from other account paperwork. A bank cannot bury the opt-in inside a stack of account-opening forms and treat a single signature as consent to everything.¹

After receiving the notice, you get a reasonable opportunity to decide. The regulation recognizes several ways to give consent:⁴

In person by signing a form at a branch.
By mail, returning a completed consent form.
By phone, once the written notice has already been sent.
Online or through a mobile app, by checking a box and confirming the choice.

Electronic consent brings an extra evidentiary requirement. When you opt in through a website or app, the bank must retain a secure, unalterable electronic record showing that you personally took the action and the date you did.⁵ A bank that cannot produce that evidence for a particular customer has a compliance problem.

The opt-in cannot be a condition of opening an account. You are entitled to the same terms, features, and pricing whether you opt in or not; the only difference is whether the bank pays ATM and one-time debit overdrafts on your behalf.⁶ The bank also cannot retaliate against a customer who declines by refusing to pay check or ACH overdrafts it would otherwise cover.¹

Confirmation and Your Right to Revoke

Once you opt in, the bank must send you a written or electronic confirmation of your consent, and that confirmation has to tell you that you can revoke at any time.¹ Keep the confirmation. If a fee dispute comes up later, it is your record of what you agreed to and when.

Revoking is straightforward. You can opt out using the same methods available for opting in, and the bank must implement your revocation as soon as reasonably practicable.¹ After the revocation takes effect, the bank can no longer charge you fees for covering ATM or one-time debit overdrafts. Fees charged before revocation processed are not automatically reversed; those you would need to dispute directly.

If You Were Charged Without Opting In

If a bank paid an ATM or one-time debit overdraft without your opt-in, the rule is blunt: it cannot charge a fee for doing so.⁶ CFPB examinations have found banks that could not produce evidence a consumer had actually opted in before being charged, and the Bureau treats that as a Regulation E violation.⁵

Start with the bank. Ask for a refund and, if you have it, point to the absence of any signed or electronic opt-in record. If the bank refuses, you can file a complaint with the CFPB online or by calling (855) 411-2372. The CFPB forwards complaints to the institution, which generally has to respond within 15 days.

The Electronic Fund Transfer Act also gives you a private right of action. A bank that fails to comply with Regulation E is liable for your actual damages plus statutory damages between $100 and $1,000 in an individual suit, along with attorney’s fees. In a class action, total recovery can reach the lesser of $500,000 or 1% of the bank’s net worth.⁷

Alternatives to Opting In

Opting in is not the only way to avoid a declined transaction, and the opt-in notice itself is supposed to point to the alternatives.

A linked savings account, from which the bank sweeps funds to cover the shortfall. The transfer fee, if any, is usually far below a standard overdraft charge, and some banks have dropped it entirely.
An overdraft line of credit, a small credit line attached to your checking account. You pay interest instead of a flat fee, and these lines come with their own disclosures under Regulation Z.
Low-balance alerts by text or email. These cost nothing and give you a chance to move money before an overdraft happens.
Not opting in at all. ATM withdrawals and one-time debit purchases are simply declined when the balance is short, and you pay nothing.

Some banks add a grace buffer that waives the fee if the account is overdrawn by a small amount, often $50 or less, or give you until the end of the business day to cover the shortfall. These policies aren’t required by federal law and vary by institution, so check your bank’s specific terms.

1
eCFR. 12 CFR 1005.17 – Requirements for Overdraft Services
2
Consumer Financial Protection Bureau. Appendix A to Part 1005 – Model Disclosure Clauses and Forms
3
Consumer Financial Protection Bureau. Overdraft/NSF Revenue in 2023 Down More Than 50% Versus Pre-Pandemic Levels
4
Consumer Financial Protection Bureau. Supplement I to Part 1005 – Official Interpretations – Section 17(b) Opt-In Requirement
5
Consumer Financial Protection Bureau. Consumer Financial Protection Circular 2024-05 – Improper Overdraft Opt-In Practices
6
Consumer Financial Protection Bureau. 12 CFR Part 1005 (Regulation E) – 1005.17 Requirements for Overdraft Services
7
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability