What Is Electronic Funds Transfer? Liability, Errors, and Disputes

An electronic funds transfer is any movement of money you set in motion through an electronic terminal, phone, computer, or similar technology that tells a bank to debit or credit a consumer account. Direct deposit of your paycheck, a debit card swipe, an ATM withdrawal, a Zelle payment, a scheduled autopay — all of these qualify. Federal law, through the Electronic Fund Transfer Act (EFTA) and its implementing rule, Regulation E, caps your liability for unauthorized transfers (as little as $50 if you report quickly), gives you a formal process for disputing errors, and requires your bank to disclose fees, limits, and your rights before your first transfer.1Office of the Law Revision Counsel. 15 USC 1693 – Congressional Findings and Declaration of Purpose

What Counts as an Electronic Funds Transfer

The EFTA defines an EFT broadly: any transfer of funds initiated through an electronic terminal, phone, computer, or magnetic tape that instructs a financial institution to debit or credit a consumer’s account.2Office of the Law Revision Counsel. 15 USC 1693a – Definitions That definition captures most of the ways money moves in everyday life:

  • Automated Clearing House (ACH) transfers, which handle direct deposit of paychecks and government benefits, recurring bill payments, and other scheduled debits and credits.
  • Debit card purchases at a point-of-sale terminal.
  • ATM withdrawals, deposits, and transfers.
  • Person-to-person apps that draw from a bank account or prepaid account, such as Venmo, Zelle, and PayPal.3eCFR. 12 CFR 1005.3 – Coverage
  • Phone-initiated transfers made under a standing plan or agreement with your bank.

The Consumer Financial Protection Bureau implements the EFTA through Regulation E (12 CFR Part 1005), which adds detailed rules on disclosures, error resolution, and consumer liability.

Transactions That Fall Outside the Rules

Several common transactions are explicitly excluded from the EFTA, and that matters because the consumer protections described below do not apply:

  • Wire transfers through Fedwire and similar systems.
  • Transfers whose primary purpose is buying or selling securities or commodities regulated by the SEC or CFTC.
  • Any transfer originating from a paper check or draft, even if the check is scanned or processed electronically.
  • Automatic transfers between your own accounts at the same bank, such as an overdraft sweep from savings to checking.
  • A one-time phone transfer you arrange directly with a bank employee outside a recurring plan.3eCFR. 12 CFR 1005.3 – Coverage

Wire transfers in particular come with weaker protections, discussed below.

Your Liability if Someone Else Uses Your Account

The EFTA ties how much you can be forced to pay for unauthorized transfers to how quickly you report them. There are three tiers:

  • If you notify your bank within two business days of learning that your card, PIN, or other access device was lost or stolen, your liability is capped at the lesser of $50 or the total of the unauthorized transfers made before you gave notice.
  • If you wait longer than two business days but still report within 60 days of the statement showing the first unauthorized transfer, your exposure can rise to the lesser of $500 or $50 plus the transfers that happened after the two-day window — and only those the bank can show it would have prevented had you reported sooner.
  • If more than 60 days pass after the statement is sent, you can face unlimited liability for transfers occurring after the 60-day window, if the bank shows timely notice would have stopped them.4eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers

The takeaway is simple. Call the bank the day you notice something wrong. A delay of a few days can multiply what you owe tenfold.

When a Scam Counts as an Unauthorized Transfer

A common question with payment apps: if a scammer tricks you, does Regulation E protect you? It depends on who actually moved the money.

If a scammer gets hold of your login credentials, a texted confirmation code, or your phone, and then uses that access to initiate a transfer, that transfer is unauthorized under Regulation E. The CFPB has said this explicitly: when a third party fraudulently induces a consumer into sharing account access information and then uses it to move money out, the resulting transfer is an unauthorized EFT.5Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs

The line is who pressed the button. If the scammer initiated the transfer, Regulation E’s liability caps apply. If you personally sent the payment because someone lied to you about what you were paying for, the transfer was technically authorized and the EFTA generally does not require your bank to reimburse you. Some banks voluntarily cover certain scam losses, but that is a matter of bank policy rather than legal right.

How to Dispute an Error With Your Bank

If you spot an incorrect charge, a duplicate transaction, or an unauthorized transfer on your account, the EFTA gives you a dispute process with firm deadlines on both sides.

You must notify your bank within 60 days of receiving the statement that shows the error. Your notice needs your name and account number, enough information to identify the suspected error and its amount, and your reasons for believing it is wrong.6Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution

Once you give notice, the bank has 10 business days to investigate and tell you what it found. It can extend the investigation to 45 days, but only if it provisionally credits the disputed amount back to your account within the initial 10-business-day window. You can use the provisional credit while the investigation continues. If the bank determines no error occurred, it must explain its findings to you in writing, and it must give you the documents it relied on if you ask.6Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution

Stopping a Recurring Payment

If you have authorized a company to debit your account on a repeating schedule — a gym membership, a streaming service, an insurance premium — you have a right to stop it. Notify your bank at least three business days before the next scheduled payment. The notice can be oral or written.7Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers

If you call rather than write, the bank can require written confirmation within 14 days, and it must tell you so and give you an address when you make the oral request. Miss the 14-day deadline and the oral order expires.8eCFR. 12 CFR 205.10 – Preauthorized Transfers A stop-payment order typically stays in effect for six months, so you may need to renew it if you have not canceled the underlying agreement with the merchant.

Banks commonly charge a fee for a stop-payment order, often in the range of $15 to $36, though online requests sometimes cost less and some accounts waive the fee. If you placed a proper stop-payment order and the bank let the transfer go through anyway, the bank is liable to you for the resulting damages.9GovInfo. 15 USC 1693h – Liability of Financial Institutions

Overdraft Fees on Debit Card and ATM Transactions

Your bank cannot charge an overdraft fee for a one-time debit card purchase or ATM withdrawal unless you have affirmatively opted in. Regulation E requires the bank to give you a standalone written notice describing the service, a reasonable opportunity to consent, your actual agreement, and a written confirmation that explains you can revoke consent at any time.10eCFR. 12 CFR 1005.17 – Requirements for Overdraft Services

The bank also cannot retaliate for declining. If you say no to debit and ATM overdraft coverage, the bank is not allowed to start bouncing your checks or ACH payments because of that choice. If you never opted in, the bank must decline debit and ATM transactions that would overdraw your account rather than approving them and charging a fee.

What the Bank Must Tell You Up Front

Before you make your first electronic transfer, or when you first sign up for an EFT service, the bank must give you a written disclosure covering the key terms: the liability limits for unauthorized transfers, how and where to report a lost card or suspicious activity, the types of transfers you can make and any limits, applicable fees, your right to stop a preauthorized transfer, how to dispute an error, when the bank is liable for failing to complete a transfer, how it may share your account information, and a note that ATM operators may add fees.11eCFR. 12 CFR 1005.7 – Initial Disclosures If you cannot find this disclosure, ask for it; the bank was required to give it to you.

Sending Money Internationally

When you send money abroad through a bank or money transfer company, a separate part of Regulation E — Subpart B — applies. Before you pay, the provider must disclose the transfer amount, its own fees and taxes, the exchange rate (to at least two decimal places), any third-party fees imposed by intermediary institutions, and the total the recipient will receive in the destination currency.12eCFR. 12 CFR Part 1005 Subpart B – Requirements for Remittance Transfers

You can cancel the transfer within 30 minutes of payment, as long as the recipient has not yet received the funds. A valid cancellation entitles you to a full refund — fees and taxes included — within three business days.13eCFR. 12 CFR 1005.34 – Procedures for Cancellation and Refund of Remittance Transfers

The error-resolution window for international remittances is far longer than for domestic EFTs. You have 180 days from the date the funds were supposed to become available to the recipient to report an error. The provider then has 90 days to investigate and must report its findings within three business days of finishing. If an error occurred, the provider must correct it within one business day of hearing which remedy you want.14eCFR. 12 CFR 1005.33 – Procedures for Resolving Errors

Wire Transfers Follow Different Rules

Wire transfers sent through Fedwire or similar interbank systems are not covered by the EFTA. They are governed by Article 4A of the Uniform Commercial Code, adopted in some form by every state. Article 4A does not cap consumer losses at $50. It instead asks whether the bank used a “commercially reasonable” security procedure to verify the payment order and whether the bank followed that procedure in good faith. If both are true, the order is treated as authorized even when it turns out to be fraudulent. What counts as commercially reasonable depends on the customer’s transaction patterns, the alternatives the bank offered, and industry norms for similar customers.15Legal Information Institute. UCC 4A-202 – Authorized and Verified Payment Orders

In practice, wire transfers carry weaker consumer protections than ACH payments or debit transactions. Once a wire settles, recovering the funds often depends on whether the receiving bank cooperates, not on a statutory right to reimbursement. Before you send a wire — especially for a large purchase such as a real estate closing — verify the recipient’s instructions through a known phone number or in person, not by replying to the email that gave you the instructions.

When the Bank Owes You Money

The EFTA also makes the bank itself liable when it fails to do its job. Under 15 U.S.C. § 1693h, a financial institution is liable for all damages when it:

  • Fails to complete a transfer in the correct amount or on time after you properly instructed it.
  • Fails to credit a deposit as agreed, leaving your account short for a transfer you had arranged.
  • Fails to honor a valid stop-payment order.

The bank has limited defenses. It is not liable if your account had insufficient funds, the funds were frozen by legal process, the transfer would have exceeded a credit limit, or an ATM ran out of cash. A bank can also avoid liability by showing the failure resulted from a natural disaster or other event beyond its control, as long as it had used reasonable care, or from a technical malfunction the consumer knew about at the time.9GovInfo. 15 USC 1693h – Liability of Financial Institutions

Suing a Bank That Breaks the Rules

If a bank violates the EFTA — by ignoring a dispute, failing to give required disclosures, or exceeding the liability limits — you can sue. The statute provides for:

  • Actual damages: the real financial harm you suffered.
  • Statutory damages between $100 and $1,000 per individual lawsuit, regardless of whether you can prove any out-of-pocket loss.
  • Attorney fees and court costs if you win.

Class actions are also available, with class-wide damages capped at the lesser of $500,000 or 1 percent of the institution’s net worth.16Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability A bank whose violation was unintentional and resulted from a genuine error despite reasonable procedures is liable only for actual damages. If a court finds a lawsuit was brought in bad faith or for harassment, the court can order the consumer to pay the bank’s attorney fees.