This article is provided for educational and informational purposes only. It does not constitute legal, financial, or tax advice, and no attorney-client relationship is formed by reading it. Laws, regulations, official guidance, and related information vary by jurisdiction, change frequently, and may have changed or become outdated since the publication date. Always verify current information with authoritative sources and consult a qualified professional about your specific circumstances. The author and publisher assume no liability for actions taken based on this information.
Key Facts
- Federal level: Regulation E implements the Electronic Fund Transfer Act and governs covered electronic transfers involving consumer asset accounts.
- Federal level: Covered electronic fund transfers can include debit-card, ATM, ACH, mobile, and person-to-person payments when the regulatory definitions are met.
- Federal level: Regulation E defines specific account errors and establishes a notice, investigation, correction, and documentation process.
- Federal level: A consumer’s possible liability for an unauthorized transfer can depend on the type of access involved and when the financial institution receives notice.
- Federal level: Regulation E also sets rules for preauthorized transfers, receipts, periodic statements, certain overdraft services, prepaid accounts, gift cards, and remittance transfers.
Regulation E is the federal rule for many electronic movements of money into or out of a consumer account. It implements the Electronic Fund Transfer Act, commonly shortened to EFTA, and appears in Title 12, Part 1005 of the Code of Federal Regulations.
The rule does more than address fraud. It defines covered accounts and transfers, requires disclosures and records, limits liability in specified circumstances, and creates procedures for resolving errors.
Coverage starts with the account and the transfer
A covered “account” is generally a checking, savings, or other consumer asset account established primarily for personal, family, or household purposes. Regulation E also includes qualifying prepaid accounts within its account definition.
An electronic fund transfer, or EFT, is a transfer initiated through an electronic terminal, telephone, computer, or magnetic tape to order, instruct, or authorize a financial institution to debit or credit a consumer’s account. Debit-card purchases, ATM transactions, ACH transfers, and some mobile or person-to-person payments can fit that definition.
A transaction is not covered merely because technology appears somewhere in the process. The account, transfer, institution, and any regulatory exclusion all matter, so Regulation E does not operate as a general law for every payment dispute.
An unauthorized EFT has a defined meaning
An unauthorized EFT generally means a transfer initiated by someone other than the consumer without actual authority, from which the consumer receives no benefit. The definition contains exceptions, including transfers initiated by a person whom the consumer furnished with the access device, unless the consumer has notified the financial institution that the person is no longer authorized.
The CFPB’s current compliance aid explains that a fraudster’s credit-push P2P transfer can be an unauthorized EFT when stolen credentials or fraudulent inducement gave the third party access to the consumer’s account. The legal classification turns on who initiated the transfer and the regulatory definition, not simply on the payment app’s label.
Regulation E’s liability framework is time-sensitive. For an access-device loss or theft, notice within two business days after learning of the loss or theft generally caps liability at the lesser of $50 or the amount of unauthorized transfers before notice. Later notice can increase the potential amount, and a separate 60-day statement rule can affect liability for later transfers.
Error resolution covers more than unauthorized payments
A Regulation E “error” includes an unauthorized EFT, an incorrect EFT, an omitted transfer, certain bookkeeping errors, an incorrect amount of cash from an electronic terminal, and qualifying requests for required documentation or clarification. A routine balance inquiry or request for duplicate records for tax purposes is not an error under this definition.
A qualifying error notice generally must reach the financial institution no later than 60 days after it sends the periodic statement that first reflects the alleged error. The notice must enable the institution to identify the consumer and account and indicate why an error is believed to exist, including the type, date, and amount when possible.
The notice may be oral or written. An institution may require written confirmation within 10 business days of an oral notice, but it must begin the investigation promptly and may not wait for that confirmation before starting.
The investigation follows a structured timeline
The ordinary rule gives the institution 10 business days to investigate and determine whether an error occurred. If it cannot finish within that period, it may take up to 45 days when it provisionally credits the alleged amount within 10 business days and satisfies the other conditions in Section 1005.11.
Different deadlines can apply to new accounts, point-of-sale debit transactions, and transfers not initiated within a state. When the institution finds an error, the regulation requires prompt correction; when it finds no error or a different error, it must provide a written explanation and note the right to request the documents used in the investigation.
Recurring transfers have their own safeguards
Preauthorized electronic debits from a consumer account must be authorized by a writing signed or similarly authenticated by the consumer, and a copy must be provided to the consumer. A consumer may stop a preauthorized EFT by notifying the financial institution at least three business days before the scheduled transfer, subject to the regulation’s confirmation rules.
When recurring transfers vary in amount, the payee or institution generally must provide advance notice of the amount and date, unless the consumer has chosen an agreed range or another permitted notice arrangement. These rules distinguish advance authorization for a series of transfers from approval of a single payment.
Regulation E does not replace every other consumer law
Regulation E focuses on electronic fund transfers and consumer asset accounts. A payment problem can raise subjects outside Regulation E’s defined EFT coverage, including a separate question about a credit bureau file, so the rule should not be treated as a complete statement of every law that might govern a transaction.
The practical value of Regulation E is its structure: first identify a covered account and EFT, then classify the issue, apply the correct notice rule, and follow the investigation and documentation requirements attached to that classification.
