What Is an Electronic Funds Transfer? Liability and Disputes

An electronic funds transfer, often shortened to EFT, is any movement of money you set in motion through an electronic terminal, phone, computer, or similar technology that tells a bank to debit or credit an account. Direct deposit of your paycheck, a debit card swipe, an ATM withdrawal, and a Zelle payment all qualify. Because these transfers happen without paper, federal law gives you a specific set of protections: your liability for unauthorized transactions is capped (as low as $50 if you report quickly), and your bank has firm deadlines to investigate errors and correct mistakes.

Two laws do most of the work. The Electronic Fund Transfer Act, at 15 U.S.C. § 1693 and following, sets the baseline rights.¹ The Consumer Financial Protection Bureau’s Regulation E, at 12 CFR Part 1005, fills in the operational rules on disclosures, error resolution, and consumer liability.

Common Types of Electronic Funds Transfers

The legal definition sweeps in most everyday electronic transactions.² The main categories:

ACH transfers, which move money in batches through the Automated Clearing House network. This is the pipe behind direct deposit, autopay for utility bills, and most recurring subscriptions.
Debit card purchases at a checkout terminal and cash withdrawals at an ATM.
Person-to-person payment apps such as Venmo, Zelle, and PayPal, which generally operate through accounts that meet Regulation E’s definition of a consumer or prepaid account.³
Real-time payments through the Federal Reserve’s FedNow Service and The Clearing House’s RTP network, both of which move funds around the clock with immediate access for the recipient. As of December 2025, FedNow’s per-transaction limit is $10 million, matching RTP.⁴⁵⁶

What Is Not an Electronic Funds Transfer

Some transactions look electronic but sit outside the EFTA, which matters because they carry different (usually weaker) consumer protections:

Wire transfers through Fedwire or similar systems.
Any transfer that originates from a paper check or draft, even if processed at an electronic terminal.
Automatic internal transfers between your own accounts at the same bank under a standing agreement, such as an overdraft sweep from savings to checking.
Transfers whose primary purpose is buying or selling SEC- or CFTC-regulated securities or commodities.
A one-off phone transfer you arrange directly with a bank employee outside any recurring plan.³

Wire transfers are the most consequential exclusion. They run under Article 4A of the Uniform Commercial Code, which asks whether the bank used a “commercially reasonable” security procedure rather than capping consumer losses at $50.⁷ Once a wire settles, getting the money back typically depends on the receiving bank’s cooperation. Before sending a large wire, verify the recipient’s instructions through a trusted channel.

Your Liability if a Transfer Is Unauthorized

The EFTA uses a tiered liability system tied to how fast you report the problem. When you notify your bank sets your maximum exposure:

Within 2 business days of learning about a lost or stolen card or access device: liability capped at the lesser of $50 or the amount of unauthorized transfers made before you gave notice.
After 2 business days but within 60 days of your statement: liability can rise to the lesser of $500, or $50 plus the unauthorized transfers that occurred after the two-day window but before your notice. Even then, only transfers the bank can show it would have prevented had you reported sooner count against you.
More than 60 days after your statement: unlimited liability for unauthorized transfers occurring after the 60-day window, if the bank can show timely notice would have prevented them.⁸

The lesson is simple. Report fast. A few days of delay can multiply what you owe tenfold.

When a Scam Counts as Unauthorized

This is the question that trips up most people using payment apps. If a scammer moves money out of your account, is it “unauthorized” under Regulation E?

The dividing line is who actually pressed the button. If a fraudster gets your login credentials, or a texted confirmation code, by pretending to be your bank and then uses those credentials to initiate the transfer, the CFPB has confirmed the resulting transfer is unauthorized under Regulation E. Your liability caps apply.⁹

But if you personally send the payment because someone lied about what you were paying for, the transfer was technically authorized. Regulation E generally does not require your bank to reimburse you in that scenario. Some banks voluntarily cover certain scam losses, but that is policy, not a legal right.

How to Dispute an Error on Your Account

The EFTA gives you a formal process for challenging incorrect charges, duplicate transactions, or unauthorized transfers. You have 60 days from the statement showing the error to notify your bank. Your notice should include your name and account number, identify the transaction, state the amount, and explain why you think it is wrong.¹⁰

Once you notify the bank, the clock starts:

The bank has 10 business days to investigate and report its findings.
It can extend the investigation to 45 days, but only if it puts a provisional credit for the disputed amount back in your account within those first 10 business days. You get full use of the money while the investigation continues.
If the bank concludes no error occurred, it must explain its findings in writing and give you the documents it relied on if you ask. It may then reverse the provisional credit.

Stopping a Recurring Payment

If a subscription, gym membership, or other merchant debits your account on a schedule, you can stop the next payment. Give your bank the stop-payment order at least three business days before the scheduled date. Oral notice works, but the bank may require written confirmation within 14 days; if it does, it has to tell you so when you call and give you the address to send the confirmation. Miss the 14-day follow-up and the oral order lapses.¹¹¹²

A stop-payment order typically stays in effect for six months. If you haven’t also canceled the underlying authorization with the merchant, you may need to renew it. Banks commonly charge a fee for the service, often between $15 and $36, though online requests are sometimes cheaper and premium accounts may waive it. One important consequence: if you place a valid stop-payment order and the bank lets the transfer through anyway, it is liable to you for the resulting damages.¹³

Overdraft Opt-In for Debit and ATM Transactions

Your bank cannot charge you an overdraft fee for covering a one-time debit card purchase or ATM withdrawal unless you affirmatively opted in to its overdraft service. To collect an opt-in, the bank must give you a standalone written notice about the service, offer a reasonable chance to consent, obtain your agreement, and send a written confirmation that includes your right to revoke consent at any time.¹⁴

The bank also cannot punish you for declining. It can’t start rejecting your checks or ACH autopays because you turned down debit and ATM overdraft coverage. If you never opted in, the bank must simply decline the debit or ATM transaction at the terminal rather than approving it and charging a fee.

Sending Money Internationally

International remittance transfers run under a separate part of Regulation E (Subpart B). Before you pay, the provider must give you a disclosure showing the transfer amount, its fees and taxes, the exchange rate (rounded to at least two decimal places), any intermediary-bank fees, and the total the recipient will receive in the destination currency.¹⁵

You can cancel within 30 minutes of paying, as long as the recipient hasn’t already collected the funds. The provider then has three business days to refund everything, including fees and taxes.¹⁶

The error-resolution window is longer than for domestic EFTs. You have 180 days after the disclosed availability date to report an error. The provider has 90 days to investigate and must report its findings within three business days of finishing. If an error occurred, it must correct it within one business day of getting your chosen remedy.¹⁷

If Your Bank Breaks the Rules

The EFTA holds your bank accountable for its own failures. Under 15 U.S.C. § 1693h, a financial institution is liable for damages if it fails to complete a transfer you properly instructed, fails to credit a deposit as agreed (leaving you short for a later transfer), or ignores a valid stop-payment order.

The bank has some defenses: insufficient funds in your account, funds frozen by legal process, a transfer that would exceed a credit limit, an ATM out of cash, a natural disaster or other event beyond its control (with reasonable care shown), or a technical malfunction the customer knew about at the time.¹³

When a bank violates the EFTA, you can sue. Available recovery includes actual damages, statutory damages between $100 and $1,000 per individual lawsuit (even without proof of financial loss), and attorney fees and costs. Class actions can recover up to the lesser of $500,000 or 1 percent of the institution’s net worth.¹⁸ If the violation was a genuine unintentional error despite reasonable procedures, liability shrinks to actual damages. If a consumer sues in bad faith, the court can award the bank its attorney fees.

1
Office of the Law Revision Counsel. 15 USC 1693 – Congressional Findings and Declaration of Purpose
2
Office of the Law Revision Counsel. 15 USC 1693a – Definitions
3
eCFR. 12 CFR 1005.3 – Coverage
4
Federal Reserve Financial Services. About the FedNow Service
5
The Clearing House. Real Time Payments
6
Federal Reserve Financial Services. FedNow Transaction Limit Increase
7
Legal Information Institute. UCC 4A-202 – Authorized and Verified Payment Orders
8
eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
9
Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
10
Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
11
Office of the Law Revision Counsel. 15 USC 1693e – Preauthorized Transfers
12
eCFR. 12 CFR 205.10 – Preauthorized Transfers
13
GovInfo. 15 USC 1693h – Liability of Financial Institutions
14
eCFR. 12 CFR 1005.17 – Requirements for Overdraft Services
15
eCFR. 12 CFR Part 1005 Subpart B – Requirements for Remittance Transfers
16
eCFR. 12 CFR 1005.34 – Procedures for Cancellation and Refund of Remittance Transfers
17
eCFR. 12 CFR 1005.33 – Procedures for Resolving Errors
18
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability