Electronic Fund Transfer Act: What it is and how it protects consumers

The Electronic Fund Transfer Act (EFTA), sometimes referred to as Regulation E or Reg E, is a federal law that provides some guardrails for consumers against fraud and account errors. While it covers most types of transactions, there are some crucial exceptions.

What is the Electronic Fund Transfer Act?

The EFTA was enacted in 1978 in response to a growing shift from using physical checks as payment to electronic payment methods. As such, the EFTA protects electronic transactions, like debit card payments and online transfers, by granting consumers the right to dispute transactions and setting standards for unauthorized transactions.

Some examples of unauthorized transactions include:

• A debit card gets stolen and is used by the thief to make a purchase.
• Your personal information is stolen and used to transfer money out of your account using Zelle.
• A subscription service charges a monthly fee after you cancel the subscription.
• Someone threatens you at an ATM and forces you to make a withdrawal.
• The financial institution that hosts the account makes a bookkeeping error affecting you.

Additionally, the EFTA provides guidelines on overdraft protection. It prohibits banks from charging an overdraft fee without the account holder’s permission. In other words, the account holder must opt-in to an overdraft protection program that charges a fee for overdrafts, and if not, then the transaction will simply be declined. This policy does not apply to recurring payments such as utility bills.

Credit card transactions are not included in EFTA regulations, since they are covered by a separate law called the Fair Credit Billing Act.

What does the EFTA protect and not protect?

Under the EFTA, most types of electronic transactions are protected from errors and fraud, though there are some exclusions. Here are the types of transactions that are protected and those not protected by the EFTA.

EFTA requirements for financial institutions

The EFTA mandates that banks, or any provider of electronic transfer services, must give consumers certain disclosures about those transfers. These disclosures can be in paper or electronic form, as long as they’re provided before the first transaction is made.

Financial institutions must disclose the following information to consumers:

• Consumer’s liability for unauthorized transactions
• A telephone number and address for reporting loss, theft or unauthorized transactions
• The institutions’ business days
• Any limitations on the amount of money that can be transferred or how frequently transfers can be made
• All fees related to the electronic transaction, including those not charged directly by the institution (such as an ATM operator’s fee)
• Consumer’s right to receipts and periodic statements
• Consumer’s right to stop payment of a preauthorized electronic transfer
• The institution’s liability to the consumer if it fails to make or stop certain transactions
• The circumstances under which an institution would need to provide the consumer’s personal information to a third party
• An error resolution notice
• Any change in the institution’s terms that affect fees, consumer liability or limitations on electronic transactions

Are there limits to how much money is protected?

There are no limits to how much money is protected in a single transaction. However, consumers may be held liable for some or all of the unauthorized transaction amount depending on when they report them.

If the unauthorized transaction is reported within two days, the consumer is liable for no more than $50. If it’s reported within 60 days, the consumer may lose up to $500. After 60 days, there is no requirement for a financial institution to investigate an unauthorized transaction and the consumer may be liable for all of the lost money.

How to dispute an unauthorized transaction

1. Take action as soon as possible

Always report unauthorized transactions as soon as you notice them, so that you aren’t held liable for any stolen or lost money. It’s important to regularly check your account and look out for any suspicious withdrawals. One way to help monitor your account for suspicious activity is to set up bank alerts.

Even if it is a small amount, it’s important to report the transaction so that the thief does not continue to steal larger sums.

2. Report the unauthorized transaction to your financial institution

If you’ve noticed an unauthorized transaction, call your financial institution to report it. The Consumer Financial Protection Bureau (CFPB) also recommends that you follow up with a written letter describing the transaction and keep a copy of it for your records.

3. Keep track of the financial institution’s response

The financial institution has 10 business days to begin an investigation into the report, as enforced by the EFTA. After the investigation concludes, the institution must share its results with you within three days. Investigations may take up to 45 days in some cases, but the bank must give you the disputed funds until the investigation concludes.

If the bank or credit union does not adhere to these guidelines, you can submit a complaint online to the CFPB. The financial institution may owe you punitive damages between $100 and $1,000 for not following the EFTA rules.

Bottom line

The EFTA ensures that you will be responsible for a minimal amount of lost or stolen money — but that’s only if you report any unauthorized transactions quickly. You have 60 days to dispute the transaction before becoming liable for all of the amount in question.

Since checks and wire transfers are not covered by the EFTA, it may be safer to send money by other means when possible.