If you find a bank transfer you did not approve, call the sending bank or payment provider right away. Use the first call to secure the account, request a stop or recall, and open a fraud or error case. Then follow up in writing with the date, amount, transaction reference, and when you discovered the problem.

If you sent the money yourself because someone lied to you, tell the bank exactly that. A transfer made after an account takeover is different from a payment you approved because of an impersonation, fake invoice, or false promise. The second may be treated as authorized even though your consent was obtained through fraud, so it may not qualify for the same unauthorized-transfer protections.

Identify the payment rail first

The rules and recovery routes depend on how the money moved.

A wire transfer often does not use the ordinary Regulation E error-resolution track. The bank's wire agreement, state law, and UCC Article 4A may be more relevant. An international payment is not automatically a covered remittance transfer either. The sender, recipient, provider, and transaction facts control. Many P2P payments can be covered electronic fund transfers when they meet the federal definition, but the account relationship and payment details still matter.

What to do first

1. Lock down the account

If your phone, computer, email, or banking login may be compromised, use a clean device. Change your bank and email passwords, sign out of other sessions, turn on two-factor authentication, and tell the bank if a scammer had access to your phone number or one-time codes.

Ask whether the bank should:

• Freeze online banking or outgoing transfers temporarily
• Replace your account number or online-banking credentials
• Block future ACH debits from the same company
• Replace a compromised debit card
• Review recent logins, new payees, and pending transactions

Keep texts, emails, call records, and scam pages. They may help prove what happened.

2. Call through an official channel

Use the number on your statement, bank card, or the institution's official website. Don't use a number sent by the suspected scammer.

Tell the representative:

• The date and amount of the transfer
• The transaction or confirmation number
• The recipient name and account details shown in your records
• When you noticed the problem
• Whether you initiated the payment yourself
• Whether someone else had access to your account, password, card, or device

If someone else initiated the transfer, say: "I am reporting an unauthorized electronic transfer from my account."

If you pressed send after being deceived, say: "I was deceived into authorizing this payment and am requesting a fraud review and recovery attempt." Exact facts matter more than choosing the perfect label.

Before ending the call, get the case number, representative name or ID, and any deadline for documents.

3. Ask for the fastest available remedy

The bank may be able to act even if a refund is not legally guaranteed.

• Wire: Ask the sending bank to issue a recall and notify the receiving bank of suspected fraud. A recall is a request, not a promise. It has the best chance before the recipient moves the money. If the wire was recent and large, ask whether any rapid recovery process is available.
• ACH: Ask whether the debit is still pending, whether it can be stopped or returned, and how to block future debits.
• Zelle: Report the payment in the Zelle or banking app and call the linked bank. A completed payment may be hard to recover, but delay makes it harder.
• PayPal: Open the correct PayPal report or dispute and notify the bank or card issuer if the funding account was also used without authority.
• International remittance: Ask whether cancellation remains available under the transfer's terms.

For wire fraud or online scams, file a report with the FBI's Internet Crime Complaint Center and the Federal Trade Commission's ReportFraud portal. Do that promptly, but don't let it delay the call to the bank.

4. Send written notice

An oral report may be enough to start the clock in some Regulation E cases, but written notice creates a stronger record. Use the bank's secure message center, upload form, designated email address, or the error-notice address on your statement. Keep a copy and proof of delivery.

Include:

• Your name and the last four digits of the affected account
• The transaction date, amount, and reference number
• A clear description of what happened
• The date you discovered the problem
• Why you believe the transfer was unauthorized or erroneous
• The remedy you want, such as an investigation, provisional credit, stop request, or recall
• A list of attached evidence

If the bank asks for a signed statement after an oral report, send it promptly. Some Regulation E investigations allow the institution to require written confirmation within 10 business days.

5. Preserve evidence and build a timeline

Write a short chronology while the facts are fresh. Save originals and submit copies through a secure channel.

Helpful items include:

• The statement showing the transfer
• Transaction confirmations, trace numbers, and recipient details
• Login alerts, password-reset notices, and two-factor messages
• Emails, texts, invoices, social-media messages, and phone records
• Screenshots of fake websites, caller IDs, or payment instructions
• When you contacted the bank, app, provider, police, or regulator
• A police report, IC3 confirmation, or FTC report number
• Evidence that you did not control the account or device when the transfer occurred

A police report can help, but don't wait for one before notifying the bank. Avoid sending originals or giving more personal information than the institution needs.

6. Track the case

Keep dates, names, case numbers, promised actions, and submitted documents in one place. Watch for provisional credit, new unauthorized activity, or a reversal of temporary credit.

Provisional credit is not always final. If the bank later decides there was no error, it may be able to take the credit back after following the required notice process. Don't spend money that is still contingent.

If the recipient never received the payment, ask for a trace and written status. A delayed or misdirected transfer may be an operational error rather than fraud.

7. Challenge a denial or delay

If the claim is denied, ask for:

1. A written explanation of the decision
2. The documents and information the bank relied on
3. The date the investigation ended
4. How to request reconsideration or appeal
5. The rule or policy it applied if it says Regulation E does not cover the transfer

Send a short appeal with new evidence and a clear timeline. If the company still won't resolve the issue, submit a complaint through the CFPB complaint portal when the institution or product is within the CFPB's scope. Credit union members may also need to involve the credit union's regulator or the National Credit Union Administration.

A regulator complaint can prompt a response, but it does not guarantee a refund or replace the original dispute deadline. For a large loss, account takeover, or disputed business wire, talk to a qualified attorney.

Regulation E deadlines and investigation rules

The National Credit Union Administration's Regulation E overview explains how the Electronic Fund Transfer Act protects consumers using covered electronic fund transfers and remittance transfers.

For an unauthorized electronic fund transfer from a covered consumer account, the main federal time limits are:

• Two business days: If you learn that an access device was lost or stolen and notify the institution within two business days, potential liability is generally limited to $50.
• 60 days after the statement: Notify the institution within 60 days after the statement containing the unauthorized transfer was sent. A longer delay can increase liability for later transfers and weaken the claim.
• 10 business days: The institution generally must investigate and decide whether an error occurred within 10 business days.
• Up to 45 days in many cases: If more time is needed, the institution may extend the investigation if it provides provisional credit under the required conditions. Some new-account, point-of-sale, or foreign-initiated transactions can have longer periods.
• After the investigation: If no error is found, the institution generally must provide a written explanation and tell you how to request the documents supporting its decision.

The 60-day period is not a universal deadline for every bank transfer. It generally applies to covered electronic fund transfers and the consumer's notice of error. Wires, P2P terms, and remittance transfers may follow different procedures.

International remittance transfers

A U.S. consumer sending money to a recipient abroad may be covered by the Regulation E remittance-transfer rule, subject to definitions and exemptions. For a covered remittance-transfer error, the notice period generally runs until the later of:

• 180 days after the date the funds were made available to the recipient or should have been available; or
• 60 days after the provider gives the sender additional information the sender requested.

The provider generally has up to 90 days to investigate and must report the result within three business days after finishing. These rules do not automatically cover every international wire or transfer between a consumer's own accounts.

Is there a 24-hour wire-transfer deadline?

No single federal rule makes every wire final after 24 hours or gives every consumer 24 hours to cancel. The practical rule is to act immediately.

A recall may work if the receiving bank can freeze the funds before the recipient moves them. Once the wire has been accepted or settled, the sending bank may have less control, and the receiving bank or recipient may need to return the money. The account agreement and the facts of the transfer matter.

Don't wait for the next statement. Request a recall as soon as you discover the fraud, send written details, and file an IC3 report.

Zelle and PayPal payments

You can report both, but the outcome depends on how the payment was made.

If someone accessed your account and sent the payment without authority, describe the takeover and report it as unauthorized. Regulation E may apply if the transaction meets the definition of a covered electronic fund transfer.

If you approved the payment after being tricked by an impersonator, fake employer, romance scammer, or fraudulent seller, the bank or provider may treat it as authorized. Reporting can still help, but the legal path to reimbursement may be narrower. Recovery may depend on the provider's fraud policy, the transaction details, and whether the funds can still be reached.

PayPal's platform disputes are separate from a bank's error-resolution obligations. A purchase dispute, an unauthorized PayPal account transaction, and a debit from a linked bank account may each follow a different route and deadline. Open the relevant PayPal case promptly and notify the funding institution if its account was involved.

A bank-transfer dispute is not a chargeback

A chargeback is a card-network process. It does not turn an ACH payment or wire into a card dispute.

• Debit-card transaction: use the card issuer's card-dispute process.
• Credit-card purchase: use the issuer's billing-dispute process when appropriate.
• ACH or wire payment: contact the bank or payment provider that handled the transfer.
• PayPal purchase: review PayPal's purchase-dispute terms and any rights tied to the funding source.

Don't file a false card claim just because a bank transfer is difficult to reverse.

Bank transfer dispute letter template

Use this template as a starting point. Replace the bracketed text and attach copies of your records.

[Your name] [Your address] [Phone number and email] [Date]

[Bank or payment provider] [Dispute or error-notice address]

Subject: Notice of error concerning electronic transfer

I am reporting an error involving my [account type] ending in [last four digits].

On [date], a transfer of $[amount] with reference number [number] was posted to or from my account. [I did not authorize this transfer, and I received no benefit from it.] OR [I was deceived into authorizing this payment and am requesting a fraud and recovery review.]

I discovered the issue on [date]. Please investigate, secure my account, and attempt to stop, recall, or return the payment if possible. Please provide provisional credit if required by applicable law. If you determine that no error occurred, please send the written findings and the documents supporting that decision.

Attached are copies of [statement, transaction confirmation, messages, login alerts, report numbers, and other evidence].

Please confirm receipt and provide my case number.

Sincerely,

[Your name]

If you initiated the transfer, don't use the unauthorized-payment wording. Describe the deception and request a fraud review.

Why claims get denied

A denial does not always mean the bank ignored the evidence. Common reasons include:

• The transfer was authenticated from a device or login the bank associates with you.
• The bank treats the payment as authorized because you pressed send.
• Notice arrived after a relevant deadline.
• The dispute is really a merchant disagreement, not an unauthorized transfer.
• The payment was a wire or another rail outside the standard Regulation E process.
• The evidence does not explain who initiated the payment or when you found out.
• The bank is waiting for a signed statement or additional documents.

Ask for the written basis. If the bank's version is wrong, respond with a dated timeline and records showing what happened.

Common questions

Can a completed bank transfer be reversed?

Sometimes. A pending payment may be stopped. A completed ACH payment, wire, Zelle payment, or PayPal transaction may require a return request, fraud review, or platform dispute. Recovery gets harder once the recipient moves the money, so act quickly.

Will my bank refund money from a scam?

Not automatically. A qualifying unauthorized electronic fund transfer may receive Regulation E protection, but a payment you authorized after being tricked may be handled differently. Bank policy, payment type, evidence, and timing all matter.

What if I missed the 60-day deadline?

Report it anyway. The 60-day rule can affect liability and the bank's obligations, but missing it does not mean you should give up. Explain the delay and ask the bank to review the transfer under its fraud and recovery procedures.

Do I need a police report?

Usually, the bank needs your report first. A police report, IC3 filing, or FTC report can support the claim, but it does not replace timely notice to the bank or payment provider.

What should I do today?

Call the sending institution using an official number, request a stop or recall, get a case number, and send written notice before the end of the day. Keep monitoring the account, and don't pay anyone who promises a guaranteed recovery.