Bank liability for Zelle scams is limited under current law: if you were tricked into pressing “send” yourself, most banks will deny reimbursement, and the one federal court to fully rule on the question sided with the bank. That said, the ground is shifting. The Consumer Financial Protection Bureau reads the rules differently, Zelle’s own policy now covers certain imposter scams, and an appeal pending before the Ninth Circuit could rewrite the answer. What you do in the first 48 hours after the transfer often matters more than the legal theory.
Why Banks Say You “Authorized” the Transfer
The fight comes down to one word in federal regulation. The Electronic Fund Transfer Act and its implementing rule, Regulation E, cap consumer liability for “unauthorized” electronic fund transfers and require banks to investigate and reimburse in most cases. Regulation E defines an unauthorized transfer as one “initiated by a person other than the consumer without actual authority to initiate the transfer and from which the consumer receives no benefit.”1eCFR. 12 CFR 1005.2 – Definitions
Banks read that definition literally. You opened the Zelle app. You typed in the amount. You confirmed the recipient. You approved the payment. In their view, the transfer was authorized, and the fact that a scammer lied to you about who they were or why the money was needed does not change that.
Scam victims read it the other way. Consent obtained by deception, they argue, is not real consent. A customer who moves money because a caller claiming to be from the bank’s fraud department told them to has not truly authorized anything.
What the Tristan Ruling Means for Your Claim
That argument was the heart of Tristan v. Bank of America, a class action filed in 2022 on behalf of customers who lost money to scammers posing as Bank of America fraud specialists. The pattern was familiar: a text warning of suspicious activity, a follow-up call from what looked like the bank’s real number, and instructions to move funds to a “secure” account through Zelle. When customers reported the loss, the bank denied the claims because the customers themselves had initiated the transfers.
The federal district court sided with Bank of America. It dismissed the Electronic Fund Transfer Act claim without leave to amend, then granted summary judgment for the bank on the remaining contract-based claims. The practical takeaway: at the trial court level, a customer who was tricked into sending a Zelle payment could not recover from the bank under either federal consumer protection law or the bank’s own account agreements.
The plaintiffs appealed to the U.S. Court of Appeals for the Ninth Circuit, where the case is docketed as No. 24-6704.2Justia Dockets. Tristan, et al. v. Bank of America, N.A., et al. 24-6704 Briefing was scheduled for early 2025 and no decision has been issued. A reversal would create binding precedent across the western United States on whether banks can be held liable for scam-induced Zelle transfers. Until that happens, the district court’s ruling stands as the leading answer, and it favors the bank.
Where the CFPB Disagrees
The Consumer Financial Protection Bureau, the agency that actually enforces Regulation E, reads the rule differently than the Tristan court did. In its official guidance, the CFPB states that when a scammer fraudulently obtains a consumer’s account access information and uses it to initiate a transfer, that transfer meets Regulation E’s definition of an unauthorized electronic fund transfer.3Consumer Financial Protection Bureau. Electronic Fund Transfers FAQs The CFPB has also clarified that a consumer tricked into handing over account information has not “furnished an access device,” meaning the exception that would otherwise let the bank off the hook does not apply.
Courts are not strictly bound by that interpretation, but it carries weight, and the CFPB has filed its own separate lawsuit against Bank of America, JPMorgan Chase, and Wells Fargo over their handling of Zelle fraud. If you are pushing back on a denial, the CFPB’s position is worth citing directly.
When Zelle’s Own Rules Require Reimbursement
Zelle’s operator, Early Warning Services, expanded its reimbursement rules in mid-2023 under pressure from Congress and regulators. Participating banks now must reimburse victims of certain imposter scams: specifically, scams where the criminal poses as a government agency, a bank, or an existing service provider.4U.S. Senate Permanent Subcommittee on Investigations. A Fast and Easy Way to Lose Money: Staff Report on Zelle A scammer impersonating a Bank of America employee, as in Tristan, would fall inside that policy today.
The coverage does not stretch further than that. Romance scams, marketplace scams, and scams involving anyone other than a government official, bank employee, or service provider stay outside the policy. A Senate investigation found that across Bank of America, JPMorgan Chase, and Wells Fargo, nearly nine out of ten consumers who disputed a Zelle transaction as a scam in 2023 received no reimbursement, and the three banks together rejected roughly $560 million in scam disputes between 2021 and 2023.4U.S. Senate Permanent Subcommittee on Investigations. A Fast and Easy Way to Lose Money: Staff Report on Zelle Knowing your scam falls inside Zelle’s imposter policy gives you a specific rule to point to when you dispute the transaction.
Reporting Deadlines That Set Your Liability
Regulation E ties your maximum liability to how fast you notify the bank. These caps only apply to transfers the bank agrees are unauthorized, and that is exactly the fight in Zelle scam cases, but the timing rules still shape every dispute.5eCFR. 12 CFR 1005.6 – Liability of Consumer for Unauthorized Transfers
- Notify within 2 business days of discovering the problem, and your liability is capped at $50 or the amount of unauthorized transfers before you notified the bank, whichever is less.
- Notify after 2 business days but within 60 days of the statement showing the transfer, and your liability can climb to $500, plus any losses the bank can show would have been avoided with earlier notice.
- Wait longer than 60 days from that statement, and you face potentially unlimited liability for transfers that happen after the 60-day window, if the bank can prove earlier notice would have prevented them.
Faster reporting also strips the bank of procedural arguments for denying the claim. If the loss is disputed, timing is one of the few facts you fully control.
What to Do in the First 48 Hours
Call your bank’s fraud department first, using the number on the back of your debit card rather than any number a caller gave you. Report the transaction as fraud, ask for a case number, and write down the representative’s name. Follow the call with a written dispute through the bank’s secure messaging system or by mail. A paper trail protects you if the bank later says you never reported it or reported it late.
File a complaint with the Consumer Financial Protection Bureau at consumerfinance.gov or by calling (855) 411-2372. The CFPB forwards your complaint to the bank, which generally has 15 days to respond, with an outside limit of 60 days.6Consumer Financial Protection Bureau. Learn How the Complaint Process Works These complaints create a public record and often prompt a more serious internal review than a phone call.
Report the scam to the FBI’s Internet Crime Complaint Center at ic3.gov. IC3 will want your contact information, whatever you know about the scammer (names, phone numbers, email addresses, account numbers), transaction dates and amounts, and a description of what happened.7Internet Crime Complaint Center (IC3). Frequently Asked Questions Save screenshots of every text message, call log, and transaction record before you file. If the report is filed quickly enough, the FBI’s Recovery Asset Team can sometimes freeze funds before the scammer moves them.
Consumers who report immediately, cite Zelle’s imposter-scam policy when it applies, and preserve every piece of evidence are the ones best positioned to recover, both now and if the Ninth Circuit or the CFPB shifts the rules in their favor.