Finding a charge, transfer, or withdrawal you never approved can feel surreal. One minute your account looks normal. The next, money is missing, your debit card activity looks unfamiliar, or a peer-to-peer payment appears to have gone somewhere you never intended.
In general terms, federal law gives consumers important protections when unauthorized electronic transfers hit a personal bank account. Those protections often come from the Electronic Fund Transfer Act and Regulation E, which set rules for liability, timing, investigations, and refunds for many kinds of debit-card and account-based transactions. The details can get technical fast, but the core idea is simple: when funds disappear electronically without real authorization, the bank or credit union may have specific duties to investigate and, in many cases, restore funds.
In this post you’ll learn what counts as an unauthorized electronic transfer, what deadlines often matter most, how bank investigations typically work, where consumers get tripped up, and when an attorney may help evaluate whether a bank handled the claim properly. If you want a broader overview of the legal framework behind these disputes, this overview of bank-transfer fraud and consumer protections helps connect the bigger picture.
<aside> 💡 Scroll to the bottom for every post in this series.
</aside>
An unauthorized electronic fund transfer is generally a transfer from a consumer’s account initiated by someone without actual authority to do it and from which the consumer received no benefit. Regulation E covers many common electronic transactions involving consumer accounts, including ATM withdrawals, debit-card purchases, online transfers, some automatic withdrawals, and certain peer-to-peer payments funded from a bank account or debit card under the regulation’s scope, according to the CFPB’s Regulation E materials and Electronic Fund Transfers FAQs.
That broad category can include:
One especially important recent CFPB clarification is that if a third party fraudulently obtains account access information, later transfers initiated with that stolen information can still qualify as unauthorized electronic fund transfers under Regulation E. The CFPB’s FAQs specifically discuss scenarios involving phishing, fake bank calls, and stolen login credentials in that context, which has become increasingly relevant as scams shift from physical card theft to digital account takeover.
For beginners, the easiest way to think about Regulation E is that it often applies to electronic transfers out of a personal consumer account. The CFPB explains that covered electronic fund transfers can include transfers initiated by electronic terminal, telephone, computer, or similar means to debit or credit a consumer account.
Common examples include: