If money has left your U.S. bank account without your permission, call the bank's fraud department today. Use the number on the back of your debit card, a statement, or the bank's official website. Don't wait for a monthly statement, the recipient, or a platform investigation.

What you can recover depends on how the money moved and who approved it. An unauthorized ACH debit, debit-card charge, or some peer-to-peer payments can be reported as an electronic fund transfer error under Regulation E when the facts fit. A payment you personally approved after a scammer deceived you is often treated as authorized, so a refund isn't automatic. A completed wire usually has no standard chargeback path; ask for an immediate recall or hold instead. If you sent the wrong amount or the recipient never got the funds, report that specific error and ask the bank to trace or recall the payment. For PayPal, use PayPal's dispute process and separately tell your bank if money was pulled from your bank account without authorization.

First, identify the type of dispute

The word "fraud" doesn't decide your legal rights. The real question is who initiated or approved the payment.

Be precise. Calling an authorized payment "unauthorized" can send the claim through the wrong process and weaken your credibility.

What Regulation E covers

The Electronic Fund Transfer Act, implemented through Regulation E, is the main federal framework for certain consumer electronic fund transfers. It generally covers personal, family, or household accounts and can apply to electronic debits, ACH transactions, debit-card transactions, and some peer-to-peer payments. The Federal Reserve's Regulation E materials describe the disclosure and error-resolution framework.

It doesn't cover every movement of money. A traditional bank wire may fall outside the ordinary EFT error-resolution process. Business accounts can have different protections. PayPal's platform rules, a credit-card billing dispute, and European payment rules are separate systems.

Deadlines that actually matter

For a covered EFT error, report it no later than 60 days after the bank sent the statement showing it. That clock is tied to the statement date, not simply the day the transfer occurred.

If a lost or stolen access device is involved, reporting within two business days of learning of the loss or theft can limit liability to $50. Notice later, but still within the 60-day period, can raise potential liability to $500 in covered cases. Wait beyond 60 days and you may be responsible for later transfers that timely notice could have prevented.

Those limits apply only when the transaction and account fall within Regulation E. They don't guarantee reimbursement for a wire, a payment you approved, or a claim handled only under a platform's voluntary policy.

How long the bank can take

A bank generally has 10 business days to investigate a Regulation E notice of error. If it needs more time, it generally must provide provisional credit for the disputed amount within that period and can take up to 45 calendar days to finish. Some new-account, point-of-sale, or foreign-initiated transactions can allow a longer investigation.

If you report by phone, the bank may require written confirmation within 10 business days. Ask exactly what it needs and send it through a secure channel.

After the investigation, the bank should tell you the result. If it finds an error, it should correct the account as required. If it denies the claim, request the decision and the reasons in writing.

How to dispute a bank transfer

1. Call the bank immediately

Tell the representative the transaction is unauthorized, erroneous, or the result of a scam, whichever is accurate. Have the date, amount, payee, and transaction or trace number ready, plus when you discovered the problem and whether the payment is still pending. Say if your card, phone, login credentials, or another access device was lost or compromised.

Ask the bank to lock or replace compromised access, review recent activity, disable suspicious external-transfer connections, and submit a recall if the payment was a wire or ACH transfer. For a recurring debit, ask whether a stop-payment order can block future withdrawals.

Don't use a phone number from a suspicious text or email. Scammers sometimes pose as bank employees while trying to obtain one-time codes or remote access.

2. Put the notice in writing

A phone call starts the clock, but a written record shows what you reported and when. Use the bank's secure message system, online dispute form, branch process, or mailing address for error notices.

Keep a copy of everything you send. Request a case or reference number, confirmation of the date the bank received your notice, the deadline for any written affidavit or form, information about provisional credit, and the expected date for the investigation result.

A generic "fraud alert" isn't always the same as a formal Regulation E error notice. If the description is accurate, ask the representative to confirm that the bank recorded the dispute as an error or unauthorized EFT.

3. Preserve the evidence

Write a short timeline before details fade: when the transfer occurred, when you noticed it, when you called, who you spoke with, and what the bank said.

Keep the statement showing the transaction, screenshots of account activity, ACH trace numbers, wire references, confirmation numbers, and recipient information. Login alerts, password-reset notices, device alerts, and multi-factor authentication records can matter in an account-takeover claim. Save emails, texts, caller details, invoices, or payment instructions tied to a scam. For a non-delivery claim, a recipient statement that the money never arrived helps. A police report, or a report to the FTC or the FBI's Internet Crime Complaint Center, can support your account, but don't delay the bank notice while you file one.

Preserve original messages and export records when you can. Edited screenshots alone are weaker.

4. Watch the account while the bank investigates

Look for additional debits, provisional credit, fees, and reversals. Change online-banking and email passwords from a clean device, turn on multi-factor authentication, and remove unfamiliar devices or linked accounts.

If provisional credit appears, don't treat the investigation as finished. The bank may reverse it if it concludes that no covered error occurred. Keep enough money available to handle that possibility.

5. Answer follow-up requests on time

The bank may want an affidavit, a written statement, identification, or details about how the account was accessed. Answer truthfully and meet the deadline. If you personally approved a payment after being deceived, explain the deception. Don't claim that another person initiated a transfer you approved.

How the process differs by payment type

ACH transfers

For an unauthorized ACH debit from a checking or savings account, ask the bank to open a formal error claim and determine whether the debit can still be returned. Report every related transaction, not only the largest one.

A stop-payment request may block future recurring debits. It doesn't automatically recover a debit that has already posted. Contact the merchant too if the debit was recurring or tied to a subscription.

If you sent an ACH payment to the wrong person or a scammer, request a recall immediately. That's a recovery request, not necessarily an unauthorized EFT claim.

Zelle and other peer-to-peer payments

Zelle payments are tied to the bank account where the service is enrolled. Start with that bank or credit union and, if available, the service's in-app reporting option.

If someone took over your account and sent the Zelle payment without your knowledge, describe it as an unauthorized transaction and ask whether Regulation E applies. If you entered the recipient and approved the payment because of an impersonation or other scam, the bank may treat it as authorized. Reimbursement then depends on the bank's or service's policies and the facts. Money sent for goods or services that never arrived is generally a purchase or merchant dispute, not an unauthorized EFT.

Save the payment confirmation, recipient details, messages, and any impersonation evidence. Don't assume Zelle, the receiving bank, and your own bank must provide the same remedy in every case.

Wire transfers

Call the sending bank as soon as you notice the problem and ask for a wire recall, hold, or cancellation, depending on the wire's status. Give the wire reference, beneficiary details, receiving institution, amount, and any intermediary-bank information.

A pending wire may still be stoppable. Once it settles, the receiving bank may need to cooperate, and the funds may already have moved. There is no general chargeback process that guarantees a completed wire will be reversed.

An unauthorized wire from account takeover may receive a different legal analysis from a wire you personally approved. Ask which rules and account agreement the bank is applying.

PayPal payments

PayPal has its own unauthorized-transaction and purchase-dispute procedures. Use the current dispute route in your PayPal account and observe the deadline shown there.

If PayPal withdrew money from your bank account without your authorization, notify the bank separately and explain the funding path. If you authorized the PayPal payment but received a defective item or nothing at all, use the purchase or merchant dispute route instead of calling it an unauthorized bank transfer.

Don't give PayPal and the bank inconsistent accounts. Say whether the issue was account takeover, payment deception, non-delivery, or a product dispute.

International transfers and remittances

A U.S. international remittance transfer can have separate federal disclosure, cancellation, and error procedures if it qualifies as a covered remittance transfer. Those rules may provide a 180-day period to report certain errors, measured from the disclosed date of availability. That is not a blanket 180-day refund rule for every international wire.

Check the receipt for the promised availability date and error-reporting instructions. Report a missing, late, or incorrect transfer to the provider immediately.

SEPA and PSD2 rules apply to qualifying European payment services. They don't automatically govern a transfer from a U.S. bank account, so don't rely on a European deadline unless the account and payment service are actually within that system.

A short written dispute template

Use this only if it accurately describes what happened:

Subject: Notice of unauthorized electronic fund transfer

I am reporting an unauthorized electronic fund transfer from my account ending in [last four digits]. The transaction was [amount] on [date] to [payee or recipient], with reference number [number]. I did not authorize this transfer. I discovered it on [date and time] and notified the bank on [date and time].

Please investigate this notice of error, confirm receipt, tell me whether written verification or an affidavit is required, and explain the provisional-credit and final-decision deadlines. Attached are the statement, transaction details, timeline, and supporting records.

Sincerely, [Name and contact information]

If you approved the payment after being deceived, change the wording to describe the scam and request a recall or reimbursement review. Don't state that you "did not authorize" a payment you knowingly approved.

If the bank denies the dispute

A denial isn't the end, but an appeal should answer the bank's reason rather than repeat the original complaint.

Request the denial in writing. Ask which transaction was denied, whether the bank treated it as authorized, and which facts or documents supported that conclusion. Compare your notice date, statement date, written-confirmation deadline, provisional credit, and final decision with the bank's explanation.

Then submit a focused appeal. Add account-access records, communication logs, recipient information, or proof of a compromised device, and correct any factual mistake in the bank's file.

You can also file a complaint with the CFPB or the institution's appropriate regulator. A regulator can request a response and review how the complaint was handled. It doesn't guarantee a refund or act as your lawyer.

Report the scam to the FTC and the FBI's Internet Crime Complaint Center, and include those report numbers in your bank appeal. Those reports don't replace the bank notice. For a large loss, a licensed consumer attorney or legal-aid organization can assess whether the account agreement, applicable law, or the bank's handling supports another remedy.

Mistakes that can weaken a claim

Waiting until the end of the 60-day statement period is a common one. So is calling only the recipient and skipping the sending bank. Don't assume a wire has the same protections as an ACH or debit EFT, and don't describe an authorized scam payment as an unauthorized transaction. An affidavit with guesses or contradictions can hurt you. Failing to secure the account after the first suspicious transfer leaves the door open for more losses. Paying a "recovery service" that promises to retrieve the funds for an upfront fee is another trap.

Common questions

Can a bank reverse a transfer? Sometimes. A pending ACH or wire may be stopped or recalled. A settled wire can be difficult to recover. The payment rail, timing, receiving bank, and whether the funds remain available all matter.

Can I dispute a Zelle payment? Yes, with the bank or credit union connected to your Zelle account. An unauthorized payment sent through account takeover may receive different treatment from a payment you personally approved after a scam.

Does the 60-day rule mean the bank must refund me? No. It's a notice deadline for certain Regulation E errors. The bank must investigate a covered claim, but the outcome depends on whether the transaction qualifies and what the investigation establishes.

What if I missed the deadline? Notify the bank anyway and explain when you discovered the transfer. Ask it to review the claim under any applicable law, account agreement, or voluntary reimbursement policy. Late notice can affect liability, and waiting longer only reduces the chance of recovery.

Call the bank's official fraud channel now, write down the case number and the time of your notice, and follow up in writing the same day.