A bank transfer does not have one universal refund deadline. The answer changes depending on what happened: an unauthorized payment, a transfer you approved after a scam, a wrong account number, a bank processing error, or a payment that was delayed or never completed. The payment rail and the country where the bank operates matter too.

If money has just left your account, call the sending bank now. Ask it to open a fraud or error case, trace the payment, and send a recall or return request. Speed matters because the receiving account holder may withdraw or move the funds. A recall is an attempt to recover the payment, not a guaranteed refund.

Bank transfer deadlines at a glance

The clock may start with the transaction date, the date a statement was sent, the date you discovered the fraud, or the date you notified the bank. Write down each of those dates.

First, identify what kind of payment it was

Use an accurate description when you contact the bank:

• Unauthorized: You did not make or approve the payment. Someone may have accessed your account and sent the money.
• Authorized push-payment scam: You approved the transfer yourself, but a fraudster deceived you about the recipient or the reason for paying.
• Mistaken transfer: You entered the wrong account number, routing number, sort code, or IBAN, or sent the wrong amount.
• Bank error: The bank used the wrong amount, duplicated a payment, failed to follow your instruction, or credited the wrong account.
• Failed or delayed transfer: Your account was debited, but the recipient did not receive the money or the transfer was not completed as promised.

Do not call an authorized payment "unauthorized" just because a scam caused it. Tell the bank exactly what you approved and what the fraudster did. That distinction can determine which protection applies.

United States: ACH, electronic transfers and wires

ACH and other consumer electronic fund transfers

Regulation E can cover an electronic fund transfer from a consumer account. Some ACH transactions fit that definition. Business accounts, traditional wires, and some payment-app transactions may be governed by different rules.

For an unauthorized EFT, the main U.S. time limits are:

• If an access device was lost or stolen, reporting the loss within two business days after learning about it can limit liability to $50.
• Reporting after two business days but within 60 calendar days after the statement was sent can increase possible liability to $500.
• After that 60-day statement period, liability for later unauthorized transfers can become much higher and may be unlimited.

The 60-day period is not a general deadline for reversing every bank transfer. It is mainly a notice and liability rule for certain consumer EFTs. Report the transaction immediately rather than waiting for the next statement.

Under the usual Regulation E error-resolution process, the bank generally must investigate and decide whether an error occurred within 10 business days. If it needs more time, it generally must provide provisional credit and can take up to 45 calendar days to finish the investigation. Longer periods can apply in certain cases, including some new-account, point-of-sale, and international transactions.

A bank can generally take an initial error report by phone. It may request written confirmation within 10 business days, so send the confirmation through secure messaging, at a branch, or by another method that creates a delivery record. If the bank concludes that no error occurred, it should provide a written explanation and tell you how to request the documents supporting its decision.

The Federal Reserve's Official Staff Commentary on Regulation E provides background on the U.S. error-resolution framework.

ACH payments made after a scam

If you entered or approved an ACH transfer after being deceived, the bank may classify it as an authorized transaction. The Regulation E procedure for an unauthorized transfer may not require a refund in that situation.

Still, report the scam. Ask the bank to:

1. Open a fraud or scam case.
2. Send an ACH return or recall request if available.
3. Contact the receiving institution.
4. Check whether the transfer was actually initiated by you or by someone who took over your account.

If a scammer used stolen credentials and initiated the payment without your approval, explain that clearly. The relevant facts are what happened at the time of authorization, not merely the fact that the payment was connected to fraud.

Traditional wire transfers

There is no general U.S. federal rule that guarantees a refund when a wire is reported within 60 days. A traditional domestic or international wire is generally handled under the account agreement, applicable state law, and funds-transfer rules such as UCC Article 4A rather than the ordinary Regulation E procedure.

The Federal Reserve's UCC Article 4A funds-transfer text shows why the payment order, authentication method, bank security procedures, and parties involved can matter.

Call the sending bank and request a wire recall. Have these details ready:

• Wire confirmation or trace number.
• Amount, date, and currency.
• Recipient name and account details.
• Receiving bank name and location.
• Fraudulent instructions, emails, invoices, or messages.

Once a wire has settled, the recipient may have withdrawn or transferred the money. The bank's recall is a bank-to-bank request, not a promise that the funds will come back. For suspected wire fraud, report the matter to law enforcement and the FBI's Internet Crime Complaint Center. Keep every case and confirmation number.

United Kingdom: unauthorized payments, APP scams and complaints

Unauthorized payments

A payment made without your consent is different from an authorized push-payment scam. Under the UK's payment-services rules, the bank will generally need to refund an unauthorized payment by the end of the business day after it becomes aware of the problem.

Exceptions can apply, including fraud by the customer or a serious failure to protect security information. Report the payment as soon as you discover it. The bank may ask when you noticed the transaction, how the account was accessed, and whether you shared a password, passcode, or verification code. Answer accurately and keep a record of the report.

Authorized push-payment scams

An APP scam occurs when a customer is tricked into authorizing a bank transfer to a fraudster. The mandatory UK reimbursement rules apply to eligible payments within the scheme's scope, generally including qualifying Faster Payments and CHAPS transactions. They do not automatically cover every international payment, business transfer, or payment made outside the covered payment rails.

For an eligible claim:

• Report the scam to the sending payment service provider as soon as possible.
• Make the claim within 13 months of the last payment in the claim.
• Reimbursement is normally due within five business days.
• A limited investigation extension can allow the process to take up to 35 business days.
• The current maximum reimbursement level is £85,000 per claim.

A claim below £85,000 is not automatically payable. The bank can examine whether the payment is covered and whether an exception applies, such as fraud or a failure to meet the required standard of care. If it rejects or reduces the claim, ask for the specific reason in writing.

What the eight-week period means

Eight weeks is often mentioned because it is the standard final-response period for many FCA-regulated complaints. It is not a deadline by which every bank transfer must be refunded.

Payment-services complaints can have a shorter response timetable. A firm will generally provide a final response within 15 business days, or, in exceptional circumstances, within 35 business days with an explanation. That complaint clock is separate from the five-business-day APP reimbursement period.

If the bank rejects your claim or misses the applicable response period, you can normally take the complaint to the Financial Ombudsman Service. Follow the instructions in the bank's final response, including the usual six-month referral limit from that response. Keep the statement, scam report, correspondence, and screenshots together.

Mistaken Faster Payments and failed transfers

A wrong sort code, account number, or payment amount is not automatically an APP scam. Contact the bank immediately and request a recovery attempt. It may contact the receiving bank, but recovery can fail if the funds have gone or the recipient disputes the return.

If the bank failed to follow your instruction or processed it incorrectly, describe that as a bank error rather than a typing mistake. Request a trace, correction, and written explanation.

European Union and SEPA transfers

Unauthorized payments under PSD2

For an unauthorized or incorrectly executed payment, PSD2 generally requires the payer to notify the payment service provider without undue delay and no later than 13 months after the account was debited. The analysis may differ if the provider failed to make the required account information available.

For an unauthorized transaction, the provider generally must refund the amount by the end of the next business day after learning of the transaction or receiving notice. Exceptions can apply, including where the provider has reasonable grounds to suspect fraud and follows the required procedure.

The 13-month period is a notice limit for the PSD2 remedy. It is not an EU cooling-off period that lets a consumer cancel any bank transfer after authorization.

SEPA credit transfers and wrong IBANs

A SEPA Credit Transfer is not the same as a SEPA Direct Debit. If you authorized a credit transfer but entered the wrong IBAN, the payment normally is not unauthorized merely because the intended recipient did not receive it.

Ask your bank for a SEPA recall immediately. The receiving bank or recipient may need to cooperate, and there is no universal guarantee that the money will be returned. Instant euro payments settle quickly, but speed of settlement does not create a general cancellation right after authorization.

If the bank used incorrect details, failed to execute the transfer, or caused an avoidable delay, request a formal investigation under the applicable payment-services rules. Keep the payment order, execution time, IBAN, and bank messages.

SEPA Direct Debit refunds

SEPA Direct Debit has a different refund process:

• Under the SEPA Core scheme, a payer can generally request a refund within eight weeks of the debit without giving a reason.
• If the debit was unauthorized or there was no valid mandate, the claim period can generally extend to 13 months.
• The SEPA Business-to-Business scheme does not provide the same unconditional consumer refund right as the Core scheme.

The European Payments Council's SEPA Direct Debit overview explains the difference between the Core and Business-to-Business schemes.

What to do in the first few hours

1. Call the sending bank

Use the number on your statement, bank card, or the bank's official website. Do not use a number supplied by the suspected fraudster.

Tell the bank you need an urgent payment recall, return request, or fraud investigation. Ask whether the payment is pending or settled, which payment rail was used, and whether it can still be stopped. Get a case number and the name or identification number of the employee who took the report.

2. Send written notice

Follow the call with a secure message or letter. Include:

• Your name and account number.
• Transaction date, amount, and currency.
• Payment reference, trace number, or confirmation code.
• Recipient details and destination bank.
• When you discovered the problem.
• Whether you authorized the payment and how the fraud or error occurred.
• Your request for a recall, refund, provisional credit, or trace.

For a U.S. consumer EFT, you can use clear wording such as: "I am reporting an error involving an unauthorized electronic fund transfer." If you approved a transfer after being deceived, say so instead: "I authorized this payment after being deceived and am reporting an APP scam."

3. Secure access to the account

Change your online-banking and email passwords from a trusted device. Ask the bank whether it should block online access, replace credentials, freeze the account, or issue a new card. If a phone number or email account was taken over, contact the mobile carrier or email provider.

Do not send more money to someone promising to release or recover the first payment. Recovery scammers often target people who have already reported a loss.

4. Preserve the evidence

Save the original messages, emails, invoices, payment instructions, phone numbers, web addresses, screenshots, call logs, bank alerts, and statements. Do not edit screenshots. Record the time of every call and upload.

For a business-email or wire scam, preserve email headers and the approval trail if available. For identity theft, keep police or fraud-report confirmation numbers.

5. Track the bank's deadlines

Ask the bank to confirm:

• The rule or payment scheme it is applying.
• The date it recorded your notice.
• The deadline for its investigation or reimbursement decision.
• Whether any credit is provisional.
• Which documents are still missing.
• How to challenge a denial.

An internal case deadline does not replace a statutory notice deadline. Make sure your initial report was recorded, even if the bank says it will call back.

If the bank refuses or delays

United States

Ask for the denial in writing and request the documents or reasoning used in the error investigation. If the bank says Regulation E does not apply, ask whether it classified the transaction as a wire, business payment, remittance transfer, or authorized payment.

After giving the bank a fair opportunity to respond, you may file a complaint with the Consumer Financial Protection Bureau. A CFPB complaint does not replace your original notice and does not turn a wire transfer into a Regulation E claim. State banking regulators or legal assistance may also be relevant for a large loss.

United Kingdom

Make a formal complaint if the bank disputes an APP reimbursement or unauthorized-payment claim. Ask for the final response and the exact reason for rejection. If the bank misses the applicable payment-services response period, or its final response does not resolve the issue, refer the matter to the Financial Ombudsman Service within the stated time limit.

European Union

Use the bank's formal complaints procedure first. If the response is unsatisfactory, the next route may be a national financial ombudsman, an alternative dispute-resolution body, or the relevant national authority. The correct route depends on the bank's country, payment rail, and whether the transfer crossed a border. There is no single EU complaint deadline that replaces the PSD2 notice period.

What if you missed the deadline?

Report the payment anyway. A late notice can weaken a legal refund right, but it does not make a recall request useless.

• United States: Late notice can increase liability for later unauthorized transfers. It does not mean every late report is automatically worthless, especially if the statement was unavailable or another bank error is involved. Ask for the bank's written basis.
• United Kingdom: A claim outside the APP scheme's 13-month reporting period may not qualify for mandatory reimbursement. You should still request recovery and make a formal complaint.
• EU: After 13 months, the PSD2 rectification route may be restricted. Other contractual or national-law options depend on the facts.
• Mistaken transfers: There is no universal deadline that guarantees recovery. The practical chance usually falls once the recipient withdraws or forwards the funds.

If the bank received your notice but failed to act promptly, keep proof of when you called and complain about that delay separately.

Refund, recall and chargeback are different

• Refund: Money returned under a bank rule, reimbursement scheme, error decision, or voluntary agreement.
• Recall: A request from the sending bank to the receiving bank to return a processed payment. A recall can fail.
• Chargeback: A card-network dispute process. It generally does not apply to an ordinary ACH, SEPA credit transfer, Faster Payment, or wire.

If you paid by debit or credit card rather than bank transfer, use the card issuer's dispute process and its stated deadline. The bank-transfer rules above may not apply.

This information covers U.S., UK, and EU or SEPA consumer payments. Business accounts, payment apps, international remittances, and national rules can differ. It is general consumer information, not legal advice. If the transfer has just gone out, call the sending bank now, obtain the recall or fraud case number, and send written notice rather than waiting for a statement.