Can You Sue a Bank for Not Refunding Your Money?

You can sue a bank for not refunding your money, and if you win under the Electronic Fund Transfer Act you can recover your actual losses plus statutory damages between $100 and $1,000, along with attorney’s fees and court costs.¹ Whether you actually win comes down to three things: whether the transaction legally counts as unauthorized, whether you reported it inside the deadlines, and whether the bank broke its own investigation rules. Most people who lose these cases lose on the first or second point before the bank’s conduct even matters.

Was the Transaction Actually Unauthorized?

This is where most refund disputes fall apart. The EFTA’s protections only reach unauthorized electronic fund transfers. If you logged into Zelle, Venmo, or your bank’s wire portal and sent the money yourself, the bank will argue the transfer was authorized because you initiated it, and that argument can hold up even when you were clearly defrauded about who was on the other end.

The Consumer Financial Protection Bureau has drawn one important line. When a third party tricks you into handing over your login credentials, debit card number, or a confirmation code, and that third party then uses what you gave up to move money out of your account, the resulting transfer counts as unauthorized under Regulation E. The fraudster, not you, initiated the transfer.²

The distinction is who pressed the button. A scammer who impersonated your bank by phone, got your login, and then logged in and transferred funds triggered an unauthorized transfer, and the bank owes you an investigation under Regulation E. But if you sent $2,000 through Zelle to someone you thought was a legitimate contractor and it turned out to be a scam, the bank’s obligation is far weaker because you authorized the transfer even though you were deceived about the recipient.²

If your dispute involves a credit card charge rather than a debit or transfer out of your bank account, a different statute applies (the Fair Credit Billing Act) with its own written-notice deadline and its own procedures. The rest of this article covers bank-account transactions governed by the EFTA.

How Quickly You Reported Sets Your Ceiling

Even when the transaction is unauthorized, your reporting timeline determines how much you can recover. Under the EFTA, if you notify your bank within two business days of learning that your card or credentials were compromised, your liability is capped at $50.³

Wait past two business days and your exposure jumps to $500 for any unauthorized transfers that happen between day three and the day you finally report. The bank has to prove those later transfers would not have occurred if you had reported on time, but it is a burden banks regularly meet.³

The worst scenario is ignoring your statements. If an unauthorized transfer appears on a periodic statement and you fail to report within 60 days of the bank sending it, you can be liable for every unauthorized transfer that happens after that 60-day window closes, with no dollar cap. A drained account, no recourse, because the statements sat unopened.⁴

One protection cuts the other way: if your state’s law or your bank’s own account agreement caps your liability lower than these federal numbers, the lower amount controls.⁴

What the Bank Had to Do After You Reported

Once you notify the bank of a suspected error, the clock starts. The bank must investigate and decide whether an error occurred within 10 business days, and if it finds one, correct it within one business day of that determination.⁵

If the bank needs longer, it can extend the investigation to 45 days, but only if it provisionally credits your account within the original 10-business-day window. You get full use of those funds while the investigation continues.⁵

The window stretches to 90 days in three situations: the transfer was initiated outside the United States, it was a point-of-sale debit card transaction, or the account was opened within the preceding 30 days. The provisional credit requirement still applies.⁶

If the bank asked you to confirm your oral report in writing, it had to tell you so at the time of your call and give you 10 business days to send the written confirmation. Miss that deadline and the bank does not owe you provisional credit, though it still must investigate.⁵

Each of these deadlines is a potential lawsuit. If the bank blew past the 10-day investigation window, refused to provisionally credit while extending, or never sent you written notice of the investigation results, those are independent violations. That matters because you do not have to prove the underlying transfer was unauthorized to win an EFTA claim; you have to prove the bank broke the statute’s procedures. The bank can defend by showing the violation was unintentional and resulted from a genuine error despite reasonable procedures, but that defense is thin when the failure was simply ignoring a deadline.¹

What You Can Recover If You Sue

The EFTA’s damages structure is built to make small cases worth bringing. A successful individual claim recovers three categories:

Actual damages, meaning the money you lost because of the bank’s violation, including the unauthorized transfer amount and consequential losses like overdraft fees or late payment penalties caused by the bank’s failure to act.
Statutory damages between $100 and $1,000 per action, set by the court based on how often and how deliberately the bank violated the law.
Reasonable attorney’s fees and court costs, awarded to the prevailing consumer.¹

The attorney’s fee provision is what makes these cases viable. Nobody hires a lawyer to chase a $300 charge on their own dime; with fee-shifting, attorneys will take the case because they get paid if they win.

Class actions are capped at the lesser of $500,000 or 1% of the bank’s net worth, with no minimum recovery per class member. Courts consider the bank’s resources, the number of people affected, and whether the violation was intentional when setting the amount.¹

State consumer protection laws may add remedies on top. Some states allow punitive damages for egregious conduct, and some authorize double or treble damages for deceptive banking practices. Two other legal theories can support a suit against the bank: breach of contract when the bank ignored the terms of your account agreement, and negligence when the bank’s own security failures let the fraud happen. The federal Safeguards Rule requires financial institutions to protect customer information with measures including multi-factor authentication and encryption, and a bank that skipped basic security has a hard time arguing it exercised reasonable care.⁷

File a CFPB Complaint Before You Sue

Litigation is slow and expensive. Before you get there, a complaint to the Consumer Financial Protection Bureau applies pressure that often works faster than a lawsuit. You file through the online portal at consumerfinance.gov/complaint with your supporting documents, the CFPB forwards it to the bank, and the bank generally must respond within 15 days, with up to 60 days for complex cases. You get to review the bank’s response and give feedback.⁸

A CFPB complaint is not a lawsuit and does not bind the bank to any outcome, but banks take these seriously because they factor into regulatory examinations and go into a public database. Many consumers who hit a wall in the bank’s internal dispute process see movement once the CFPB forwards the complaint.

If your bank is a national bank or federal savings association, the Office of the Comptroller of the Currency’s Customer Assistance Group handles complaints separately. The OCC recommends contacting the bank first, checking HelpWithMyBank.gov, and then filing formally if the issue is still unresolved.⁹

Check Your Account Agreement for an Arbitration Clause

Before planning a courthouse strategy, read your account agreement. Most major bank agreements include mandatory arbitration clauses requiring you to resolve disputes through private arbitration, and almost all of those clauses include class action waivers preventing you from joining with other affected customers.

The Federal Arbitration Act makes these provisions enforceable. Under that statute, a written agreement to arbitrate a dispute involving commerce is “valid, irrevocable, and enforceable” unless it can be invalidated on general contract grounds such as fraud or duress.¹⁰ The Supreme Court has consistently upheld class action waivers in arbitration agreements even when individual claims are too small to make solo litigation practical, and state laws that tried to ban such waivers in consumer contracts have been struck down as preempted. If your agreement has one, you will almost certainly be bound by it.

Arbitration is not automatically a loss. It is faster and less formal than court, filing fees are often lower, and some bank arbitration clauses require the bank to pay the arbitrator’s fees. You give up most appeal rights, discovery is limited, and the proceedings are private. Your EFTA damages and attorney’s fees still apply in arbitration.

Small Claims Court or Civil Court

If arbitration does not apply, the choice of court usually comes down to how much money is at stake. Small claims courts handle straightforward disputes with jurisdictional limits ranging from $2,500 to $25,000 depending on the state, with most falling between $5,000 and $12,500. The process is informal and built for people without lawyers, and many small claims courts do not allow attorneys at all, which keeps the bank from burying you in legal fees.

Civil court is necessary when the claim exceeds the small claims cap, involves complex legal arguments, or seeks an injunction. Civil proceedings allow full discovery and expert testimony but take longer, cost more, and effectively require an attorney. The EFTA’s fee-shifting helps if you win, but you are still committing to a formal litigation process.

Records That Make or Break Your Case

Whichever route you take, your records decide your credibility. Start collecting the day you notice the problem.

Pull bank statements covering several months before and after the disputed transactions to show your normal account patterns and the full scope of the loss. Save transaction records, receipts, and screenshots from the banking app to lock down dates and amounts.

Your communications with the bank matter as much as the transaction records. Save every email, take notes on every phone call (the representative’s name, the date, what was said), and keep copies of every letter sent or received. If you reported orally and the bank asked for written confirmation, keep proof you sent it within the 10-day window. These records prove both that you met your reporting obligations and whether the bank met its investigation deadlines.

If security failures on the bank’s side contributed to the unauthorized access, document what you can: missing multi-factor authentication, password resets granted without proper verification, a known breach, or prior incidents of unauthorized access on your account that the bank failed to address. That evidence supports a negligence claim on top of the EFTA violation.

1
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability
2
Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
3
Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
4
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
5
Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
6
eCFR. 12 CFR Part 1005 – Electronic Fund Transfers (Regulation E)
7
Federal Trade Commission. FTC Safeguards Rule: What Your Business Needs to Know
8
Consumer Financial Protection Bureau. Submit a Complaint
9
OCC. Consumer Complaints
10
Office of the Law Revision Counsel. 9 USC 2 – Validity, Irrevocability, and Enforcement of Agreements to Arbitrate