When Was the Electronic Funds Transfer Act Signed Into Law?

President Jimmy Carter signed the Electronic Fund Transfer Act into law on November 10, 1978, as Title XX of the Financial Institutions Regulatory and Interest Rate Control Act.¹ It was the first federal law written specifically for electronic money movement, and its rules still govern the debit cards, direct deposits, ATM withdrawals, and payment apps people use every day.

Why the Law Exists

By the late 1970s, automated teller machines, direct deposit payroll, and point-of-sale terminals were spreading quickly. The banking rules on the books had been built around paper checks and did not clearly address who was responsible when a computer moved money the wrong way.² The 1978 statute (commonly called EFTA) closed that gap by writing permanent consumer protections into federal law.

The statute is codified at 15 U.S.C. § 1693 and the sections that follow.¹ The Consumer Financial Protection Bureau now implements it through Regulation E, which contains the detailed rules banks and other institutions have to follow.

What Transactions the Law Covers

The act reaches any transfer of funds started through an electronic terminal, telephone, or computer that instructs a financial institution to debit or credit an account. In plain terms, that includes:

Debit card purchases at a store terminal
ATM deposits and withdrawals
Direct deposits of payroll or Social Security, and automatic bill payments coming out of your account
Telephone transfers between your accounts or to someone else

Checks, drafts, and other paper instruments fall outside the act and follow separate banking rules.³

Payment Apps Like Venmo and Zelle

Peer-to-peer payment services are covered when the transaction meets the definition of an electronic fund transfer. The CFPB has said that if a fraudster gets into your account and pushes money out through one of these apps, that qualifies as an unauthorized electronic fund transfer, so the same liability limits and error-resolution rights that apply to debit card fraud apply here too.⁴ Private network terms that call a transfer “final and irrevocable” do not override those federal protections.

Prepaid Cards

General-purpose reloadable prepaid cards are covered as well. Before you get the card, the issuer has to give you a short-form disclosure showing the monthly fee, per-purchase fee, ATM withdrawal fees, cash reload fee, and balance inquiry fees.⁵ Once you register the card, the full error-resolution and liability protections attach.

Personal Accounts Only

One boundary matters here. The act’s protections run only to accounts established primarily for personal, family, or household purposes. Business and commercial accounts are not covered, because the statute defines a “consumer” as a natural person.³

Your Core Protections

Disclosures You Should Receive

When you sign up for an electronic fund transfer service (or before your first electronic transfer, whichever comes first), the bank has to hand you written disclosures covering the fees, the phone number and address for reporting unauthorized or incorrect transfers, a summary of your potential liability, and a description of the error-resolution process.⁶

Statements come monthly for any cycle with an electronic transfer, and at least quarterly even if nothing happened.⁷ If the bank changes a term in a way that would cost you more, expose you to more liability, or limit your access to your account, it has to send written notice at least 21 days ahead of the change.⁸

Overdraft fees on ATM withdrawals and one-time debit card purchases require your affirmative opt-in. The bank has to give you a separate written explanation of the service, get your consent, confirm it in writing, and tell you that you can revoke your consent at any time.⁹

Stopping a Recurring Automatic Payment

For a preauthorized recurring charge like a gym membership or subscription, tell your bank to stop it at least three business days before the next scheduled transfer. Notice can be oral or written.¹⁰

If you call it in, the bank can require written confirmation within 14 days, and an oral stop that is never followed up in writing stops binding the bank after those 14 days.¹⁰ Sending the request in writing from the start is the cleaner move.

Disputing an Unauthorized or Incorrect Transfer

You have 60 days from the date the bank sends a statement to report a suspected error. Your notice needs to identify your account, describe the problem, and say why you think it is wrong.¹¹

Once you file, the bank generally has 10 business days to investigate and report back. It can take up to 45 days instead, but only if it provisionally credits your account for the disputed amount within those first 10 business days, and you get to use the funds while the investigation continues.¹¹

Three situations stretch those timelines. The bank gets 20 business days to provisionally credit and 90 days to finish the investigation when the disputed transfer:

Happened within 30 days after the first deposit to a new account
Was a point-of-sale debit card transaction, including mail and telephone orders processed as debit
Was initiated outside the United States

A routine ATM withdrawal at a domestic machine follows the regular 10-day and 45-day schedule.¹²

How Much You Can Lose to Fraud

Your out-of-pocket exposure to unauthorized transfers depends on how quickly you report:

Reported within 2 business days of learning about the loss or theft: liability is capped at $50, or the amount of the unauthorized transfers, whichever is less.¹³
Reported after 2 business days but within 60 days of the statement: liability can climb to $500 for transfers that hit after the two-day window and before you notified the bank.¹³
Not reported within 60 days of the statement: unlimited liability for unauthorized transfers occurring after that 60-day period.¹³

The statute allows exceptions for extenuating circumstances like extended travel or hospitalization, in which case the deadlines can be extended to what is reasonable. Reviewing each statement promptly is the way to keep those tiers on your side.

What Banks Face for Violating the Act

An individual consumer can sue for actual damages plus statutory damages of $100 to $1,000, together with attorney’s fees and court costs.¹⁴ Class-action statutory damages are capped at $500,000 or one percent of the institution’s net worth, whichever is less. A court that finds a suit was filed in bad faith or to harass can order the consumer to pay the bank’s attorney’s fees.

On the criminal side, anyone who knowingly and willfully gives false information, withholds required disclosures, or otherwise fails to comply can be fined up to $5,000, imprisoned up to one year, or both.¹⁵

1
GovInfo. Public Law 95-630
2
Office of the Law Revision Counsel. 15 USC 1693 – Congressional Findings and Declaration of Purpose
3
Office of the Law Revision Counsel. 15 USC 1693a – Definitions
4
Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs
5
eCFR. 12 CFR 1005.18 – Requirements for Financial Institutions Offering Prepaid Accounts
6
eCFR. 12 CFR 1005.7 – Initial Disclosures
7
eCFR. 12 CFR 1005.9 – Receipts at Electronic Terminals; Periodic Statements
8
Office of the Law Revision Counsel. 15 USC 1693c – Terms and Conditions of Transfers
9
eCFR. 12 CFR 1005.17 – Requirements for Overdraft Services
10
eCFR. 12 CFR 1005.10 – Preauthorized Transfers
11
Office of the Law Revision Counsel. 15 USC 1693f – Error Resolution
12
Consumer Financial Protection Bureau. 12 CFR 1005.11 – Procedures for Resolving Errors
13
Office of the Law Revision Counsel. 15 USC 1693g – Consumer Liability
14
Office of the Law Revision Counsel. 15 USC 1693m – Civil Liability
15
Office of the Law Revision Counsel. 15 USC 1693n – Criminal Liability