An electronic funds transfer, or EFT, is any movement of money started through a computer, phone, card terminal, or similar electronic instruction rather than a paper check or cash. Federal law defines the term broadly enough to cover a payroll direct deposit, a Venmo payment, an ATM withdrawal, and a debit card swipe at the grocery store.1Office of the Law Revision Counsel. 15 USC 1693a – Definitions The same law caps your losses at $50 if a card is lost or stolen and you report it fast, but the cap climbs sharply the longer you wait.
What the Law Counts as an EFT
The Electronic Fund Transfer Act defines an EFT as any transfer of funds initiated through an electronic terminal, telephone, or computer that instructs a bank to debit or credit an account.1Office of the Law Revision Counsel. 15 USC 1693a – Definitions Point-of-sale purchases, ATM withdrawals, direct deposits, automated bill payments, and preauthorized phone transfers all fit.
A few things are carved out. Securities trades through a registered broker-dealer are excluded. Automatic transfers between your own savings and checking accounts set up to cover overdrafts are excluded. One-off phone transfers that aren’t part of a recurring arrangement sit outside the definition too.1Office of the Law Revision Counsel. 15 USC 1693a – Definitions Wire transfers between banks or businesses through Fedwire are also excluded, which matters because business wires fall under a completely different legal framework.
The Common Forms You’ll Actually Use
ACH Transfers
Automated Clearing House transfers are the workhorse. They process in batches, which keeps them cheap but not instant. Standard ACH settles the next business day, while same-day ACH offers multiple windows that can settle as early as the same afternoon. Most recurring bill payments, subscription charges, and payroll deposits move through this network.
Wire Transfers
Wires settle individually and in real time, which makes them the standard for large or time-sensitive payments like a real estate closing. Domestic wires through Fedwire usually complete within hours. The speed costs money: most banks charge senders between $15 and $50 per domestic wire.
ATM and Debit Card Transactions
Pulling cash from an ATM or paying with a debit card are both EFTs. The money leaves your checking account immediately, unlike a credit card charge, where the issuer extends a short-term loan. That difference matters when fraud happens, because the funds are already gone while you wait for the dispute to resolve.
Real-Time Payments
Two newer networks allow instant transfers that settle in seconds, around the clock. The Federal Reserve’s FedNow Service, launched in July 2023, connects over 1,500 financial institutions across all 50 states.2Board of Governors of the Federal Reserve System. FedNow Service Frequently Asked Questions The Clearing House’s RTP network offers the same instant settlement with a per-transaction limit of $10 million.3The Clearing House. Real Time Payments Neither network batches transactions or shuts down on weekends, and the recipient has immediate use of the funds.
Peer-to-Peer Payments
Zelle, Venmo, and Cash App qualify as EFTs because they use electronic instructions to move money between consumer accounts. Regulation E’s fraud protections apply when someone gains unauthorized access to your account and sends money without your permission. The tricky part: if you send the money yourself because a scammer deceived you, the transfer may not count as “unauthorized” under the law, which limits your right to get it back. The line between a transfer you didn’t make and one you were tricked into making is one of the most contested areas in EFT consumer protection right now.
What You Need to Send One
Sending an EFT requires the recipient’s nine-digit bank routing number and their individual account number. Both appear at the bottom of a physical check, with the routing number on the left. For wires, your bank will also ask for the recipient’s full legal name and sometimes the receiving bank’s physical address.
A single wrong digit can delay a payment by days or send it to the wrong account. Most banks run a validation check, but not every mismatch gets caught. Double-check both numbers before you confirm.
Banks increasingly require multi-factor authentication for transfers, especially for larger amounts or first-time recipients. These layers exist because an EFT, once completed, is much harder to reverse than a check you can stop-payment on.
How Long It Takes
During processing, you’ll typically see a “pending” status in your online banking. Standard ACH payments arrive within one to two business days. Same-day ACH can settle within hours if submitted before the cutoff. Wires usually complete the same day if sent early enough. FedNow and RTP settle in seconds regardless of time or day.2Board of Governors of the Federal Reserve System. FedNow Service Frequently Asked Questions
Every EFT generates a confirmation number or transaction ID. Keep it. If a payment goes missing or posts for the wrong amount, that ID is the fastest way to trace what happened. For any EFT you start at an electronic terminal, the bank must give you a written receipt showing the amount, date, account, and terminal location.
Your Liability When a Card Is Lost or Stolen
The Electronic Fund Transfer Act sets firm limits on how much you can lose to unauthorized transactions, but those limits depend entirely on how quickly you act. The clock starts when you learn your card or access credentials are compromised, not when the fraud happens.
- Report within 2 business days and your maximum liability is $50, or the total unauthorized amount, whichever is less.4Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- Report after 2 business days and liability can rise to $500, covering unauthorized transfers that occurred after those first two days and before you reported, if the bank can prove those transfers wouldn’t have happened had you reported sooner.4Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
- Fail to report within 60 days of your statement and you lose protection entirely for unauthorized transfers happening after that window closes, with no dollar cap, if the bank can show timely reporting would have prevented them.5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
The jump from $50 to potentially unlimited liability makes checking your statements regularly one of the most valuable financial habits you can have.
Disputing an Error on Your Account
Regulation E covers more than stolen-card fraud. You can file an error notice with your bank for an unauthorized transfer, an incorrect amount, a transaction missing from your statement, a computational error, the wrong amount dispensed from an ATM, or a transfer not properly identified on your statement.6eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors You can even file a notice just to request more information about a transfer you don’t recognize.
To trigger the bank’s investigation duty, your notice must reach the institution within 60 days after it sent the statement showing the error. The notice needs your name and account number, the transaction you believe is wrong, the suspected amount, and why you think an error occurred.7Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors You can report by phone or in writing, but a phone report can be followed by a bank request for written confirmation within 10 business days.
Once the bank has a valid error notice, it has 10 business days to investigate and report findings. Alternatively, it can provisionally credit the disputed amount within those 10 days and take up to 45 days total to finish the investigation. During that time, you have full use of the provisional funds.8Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
The 45-day window stretches to 90 days in three situations: the disputed transfer originated outside the United States, it was a point-of-sale debit card transaction, or it happened within the first 30 days after you opened the account.6eCFR. 12 CFR 1005.11 – Procedures for Resolving Errors If the bank concludes no error occurred, it must explain its findings in writing and may reverse any provisional credit, but it has to give you notice before doing so.
Stopping a Recurring Payment
If you’ve authorized a company to pull automatic payments from your account for a gym membership, insurance premium, or streaming service, you can revoke that authorization. The law requires you to notify your bank at least three business days before the next scheduled transfer date.9GovInfo. 15 USC 1693e – Preauthorized Transfers You can do this by phone or in writing.
If you call, the bank can require written confirmation within 14 days. Without that follow-up, the verbal stop-payment order expires and the bank can honor the next debit.10Consumer Financial Protection Bureau. 12 CFR 1005.10 – Preauthorized Transfers Always follow a phone call with an email or letter, and keep a copy.
If your bank fails to stop the transfer after proper notice, the bank is liable for damages caused by that failure.11Office of the Law Revision Counsel. 15 USC 1693h – Liability of Financial Institutions Also notify the company itself. Revoking the authorization at your bank stops the money from leaving, but the company may not realize you’ve canceled and could send the account to collections.
Overdraft Fees on Debit Transactions
Before a bank can charge you an overdraft fee for covering an ATM withdrawal or a one-time debit card purchase that exceeds your balance, it must get your explicit consent. The opt-in requires a separate written notice describing the overdraft service, a chance to agree, and written confirmation of your decision.12Consumer Financial Protection Bureau. 12 CFR 1005.17 – Requirements for Overdraft Services
If you never opted in and the bank pays a debit transaction that overdrafts your account anyway, it cannot charge a fee.12Consumer Financial Protection Bureau. 12 CFR 1005.17 – Requirements for Overdraft Services You can revoke your opt-in at any time. The rule covers ATM withdrawals and one-time debit card swipes. It does not apply to recurring automatic payments or paper checks.
Business Accounts Don’t Get These Protections
Everything above applies to consumer accounts held by individuals for personal, family, or household use. If you run a business and an unauthorized wire drains your operating account, the EFTA and Regulation E do not apply. The $50 and $500 caps, the error resolution procedures, the investigation timelines: none of it covers business accounts.13eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
Business wire transfers fall under UCC Article 4A instead. If the bank followed a “commercially reasonable” security procedure in good faith when it accepted the fraudulent payment order, it can hold the business responsible for the loss even though the business never authorized the transfer. This gap catches a lot of small business owners off guard. They assume their business checking carries the same protection as their personal account. It doesn’t.
International Transfers Have Their Own Rules
When you send money abroad through a remittance transfer provider, Regulation E requires the provider to disclose, before you pay, the exchange rate, all fees, any covered third-party fees like intermediary or pickup-agent charges, and the total amount the recipient will receive in foreign currency. You get the same information again on the receipt.
Error reporting also works on a different clock. Instead of 60 days, you have 180 days from the disclosed delivery date to report a problem.14eCFR. 12 CFR 1005.33 – Procedures for Resolving Errors If you requested documentation about the transfer, the deadline runs to the later of 180 days from delivery or 60 days after the provider sends what you asked for.
A Note on Prepaid Cards
Prepaid debit cards, including the kind you buy at a drugstore or receive as a payroll card, are covered by Regulation E, including the liability caps and error resolution procedures. There’s a catch for unregistered cards. If the issuer hasn’t completed identity verification for your account, it can skip the provisional credit step during an investigation and take the full 45 or 90 days without putting any money back in the meantime.15Federal Register. Prepaid Accounts Under the Electronic Fund Transfer Act Registering the card, usually by giving your name, address, and date of birth through the issuer’s website, unlocks the provisional credit requirement. If you keep any meaningful balance on a prepaid card, register it.