If an unauthorized bank transfer has appeared in your account, call the sending bank's fraud department immediately. Then send written notice through the bank's secure message center or upload tool the same day. Ask the bank to stop any pending payment, secure your account, and attempt a recall if the payment can still be recovered.
The payment rail matters. Regulation E may protect an unauthorized electronic fund transfer from a U.S. consumer account, but it doesn't automatically require a refund for every wire scam that a customer personally approved.
This information is for U.S. consumers and isn't legal advice.
What to do in the first hour
- Call the bank using a trusted number. Use the number on your debit card, statement, or official banking app. Don't use a number from a suspicious email or text.
- Report the transaction as fraud or an error. Give the exact amount, date, account, and transaction reference. If you approved the payment after being deceived, say that instead of claiming someone else initiated it.
- Ask for urgent action. Depending on the payment's status, the bank may be able to place a hold, stop a pending ACH debit, block future debits, or send a wire-recall request to the receiving institution.
- Secure access to the account. Ask the bank to lock online banking, remove unfamiliar devices or payees, and review recent account changes. From a trusted device, change your banking and email passwords and enable multifactor authentication.
- Preserve evidence. Save statements, payment confirmations, emails, text messages, phone numbers, screenshots, and a timeline of what happened.
- Send written notice. A phone call starts the emergency response. A secure message or letter creates a clear record of your dispute.
- Report the scam separately. You can report fraud through the FTC's ReportFraud portal. For internet-enabled crime, file with the FBI's Internet Crime Complaint Center. These reports support your records but don't replace notice to the bank.
Don't wait for a police report before making the bank claim. Ask for a case number, and record the representative's name, the call time, and any promised follow-up.
First decide whether the transfer was unauthorized
Under Regulation E, an unauthorized electronic fund transfer generally means that someone other than the consumer initiated the transfer without actual authority and that the consumer received no benefit from it. Use that description only if it accurately describes the event.
| What happened | Likely process | Main caution |
|---|---|---|
| Someone else initiated an ACH debit or covered electronic transfer from your personal account | Regulation E error-resolution procedures may apply | Report it promptly and keep proof of notice |
| A scammer used stolen credentials to initiate a transfer | The bank may investigate it as an unauthorized transfer | Explain how access was obtained and that you didn't initiate the payment |
| You personally approved a payment after an impersonation, investment, romance, or invoice scam | The bank may treat it as a scam-induced authorized payment | Request a recall and a review under the bank's fraud policy, but don't falsely call it unauthorized |
| A conventional domestic wire was sent | The wire agreement and other applicable law may control | A recall is urgent but isn't guaranteed |
| A consumer remittance transfer was sent abroad | Regulation E remittance rules may apply if the transfer is covered | A SWIFT code alone doesn't determine coverage |
| The account is primarily for business use | Commercial account terms and other law may apply | Consumer Regulation E protections generally don't apply in the same way |
Sharing a password, one-time code, or payment instruction can complicate the analysis. Tell the bank exactly what you did and what the scammer did. Accurate facts are more useful than the strongest-sounding label.
General email template for an unauthorized electronic transfer
Use the bank's secure message center or upload tool if available. Include only the account details the bank needs; the last four digits are usually enough for an initial message.
Subject: Notice of error: unauthorized electronic transfer on [DATE], account ending [LAST FOUR]
Dear [BANK FRAUD OR DISPUTES TEAM],
I am reporting an error and disputing an unauthorized [ACH debit or electronic transfer] from my personal account ending in [LAST FOUR DIGITS].
Transaction details:
- Amount: [$AMOUNT]
- Date posted: [DATE]
- Date initiated, if different: [DATE]
- Transaction or trace number: [REFERENCE NUMBER]
- Recipient or originator: [NAME]
- Account or routing details shown by the bank: [DETAILS]
- Statement sent date: [DATE]
I did not initiate or authorize this transaction, and I received no benefit from it. [Keep this sentence only if it is accurate.] [Briefly explain whether someone obtained access to my account, credentials, email, or device.]
I first noticed the transaction on [DATE]. Please treat this message as written notice of an error and investigate it under Regulation E if that law applies, as well as under your fraud and error-resolution procedures. Please credit or refund the disputed amount as required by applicable law or your account agreement.
If you need a signed form, written confirmation, or additional documents, please tell me immediately. If the investigation will be extended, please explain whether provisional credit applies and when I will receive the written result.
Please confirm receipt, provide my case number, and tell me how to submit supporting evidence securely. I can be reached at [PHONE NUMBER] or through the secure banking portal.
Sincerely,
[FULL NAME]
[MAILING ADDRESS]
[PHONE NUMBER]
[EMAIL OR SECURE-MESSAGE CONTACT]
Account ending in [LAST FOUR DIGITS]
Delete any sentence that isn't true. Don't include your password, full online-banking login, or a one-time authentication code.
Email template for a fraudulent wire transfer
A wire recall is different from a card chargeback. Call the sending bank before sending this message, then use the template to document the request. If you personally approved the wire after a scam, don't use the unauthorized-transfer statement.
Subject: URGENT: fraudulent wire transfer of [$AMOUNT] on [DATE] - recall request
Dear [BANK FRAUD OR WIRE OPERATIONS TEAM],
I am reporting a fraudulent wire transfer from my account ending in [LAST FOUR DIGITS]. Please treat this as an urgent request to stop, hold, and recall the funds if they have not been withdrawn or settled.
Transaction details:
- Amount and currency: [$AMOUNT]
- Date and time sent: [DATE AND TIME]
- Sending account: ending in [LAST FOUR DIGITS]
- Bank reference or wire number: [REFERENCE]
- Recipient: [NAME]
- Recipient bank: [BANK NAME AND COUNTRY]
- Account, IBAN, or other recipient details: [DETAILS]
- SWIFT or BIC code, if applicable: [CODE]
- UETR or SWIFT reference, if available: [REFERENCE]
Select the statement that accurately describes the event:
- I did not initiate or authorize this wire. Another person appears to have initiated it without my authority.
- I personally approved this wire after being deceived by [brief description of the scam]. I now understand that the recipient or instructions were fraudulent.
Please immediately attempt a wire recall, notify the receiving institution, and tell me whether the funds are pending, returned, frozen, or already withdrawn. Please provide the recall reference, trace information, and any additional form or evidence you need.
I have also reported this matter to [POLICE, FTC, FBI IC3, OR OTHER AGENCY], case number [NUMBER], if applicable.
Please confirm receipt and provide a fraud case number. I can be reached at [PHONE] or through the secure banking portal.
Sincerely,
[FULL NAME]
[ADDRESS]
[PHONE NUMBER]
Account ending in [LAST FOUR DIGITS]
The FTC's wire-transfer guidance warns that wiring money is similar to sending cash and that recovery is usually difficult. A recall is a request to try to recover the funds, not a guaranteed refund. That's why the first call matters more than a polished email.
Email template for an unauthorized ACH debit
Use this version for an ACH debit you didn't authorize, including a recurring debit that continued after you properly revoked authorization. If you willingly paid for a purchase or service, the problem is usually a merchant or contract dispute rather than an unauthorized-ACH claim. Explain the specific billing problem instead.
Subject: ACH error notice: unauthorized debit of [$AMOUNT] on [DATE]
Dear [BANK FRAUD OR DISPUTES TEAM],
I am disputing an unauthorized ACH debit from my personal account ending in [LAST FOUR DIGITS].
Transaction details:
- Amount: [$AMOUNT]
- Date posted or settled: [DATE]
- ACH trace number: [NUMBER, IF AVAILABLE]
- Originator or company name: [NAME]
- Company ID or description shown on my statement: [DETAILS]
I did not authorize this ACH debit, and I received no benefit from it. [Explain briefly if a former authorization was revoked, if the debit was duplicated, or if someone obtained your account information.]
Please investigate this transaction under Regulation E if applicable and under your ACH error procedures. Please credit or return the disputed amount as required by applicable law or your account agreement.
This debit is [one-time or recurring]. I have [contacted or will contact] the originator to revoke any authorization. Please tell me how to block or stop future debits from this originator and whether you need a separate stop-payment request.
Please confirm receipt, provide a case number, and identify any additional information or signed form you require.
Sincerely,
[FULL NAME]
[PHONE NUMBER]
Account ending in [LAST FOUR DIGITS]
A stop-payment request may prevent a future debit, but it doesn't necessarily resolve one that has already posted. Ask the bank about both actions.
Email template for an international remittance error
Use this template for a consumer remittance provider or a bank transfer to a designated recipient abroad. A normal international wire may not qualify as a covered remittance transfer, so ask the provider which error process applies.
Subject: Remittance transfer error notice: [REFERENCE NUMBER]
Dear [BANK OR REMITTANCE PROVIDER],
I am reporting a possible error involving my transfer to a recipient in [COUNTRY].
Transfer details:
- Sender: [FULL NAME]
- Recipient: [FULL NAME]
- Amount sent and currency: [$AMOUNT]
- Date paid: [DATE]
- Provider reference or receipt number: [NUMBER]
- Recipient bank or pickup location: [DETAILS]
- Date the funds were supposed to be available: [DATE]
The problem is: [recipient did not receive the funds / the amount delivered was incorrect / the transfer was delivered late / the fees, exchange rate, or other disclosed amount appears incorrect / other specific error].
Please investigate this notice under the applicable remittance-transfer error process and tell me whether you will correct the transfer, refund the applicable amount, or need more information. Please confirm receipt and provide a case number.
I have attached a copy of the receipt and relevant supporting records. Please tell me how to provide any additional documents securely.
Sincerely,
[FULL NAME]
[ADDRESS]
[PHONE NUMBER]
Keep the transfer receipt and prepayment disclosures. For a covered remittance transfer, the provider's receipt often contains the promised availability date and the information needed to identify an error.
U.S. deadlines and bank investigation times
The NCUA's overview of the Electronic Fund Transfer Act and Regulation E is a useful starting point for consumer EFT protections. The main timing points are:
- Covered EFT notice: Generally notify the bank within 60 days after the statement showing the error was sent. The clock is tied to the statement, not simply the day you opened your banking app.
- Lost or stolen access device: If a lost or stolen card, PIN, or other access device is involved, reporting quickly can affect your liability. Notice within two business days may provide stronger protection than later notice.
- Initial investigation: For many Regulation E error claims, the bank generally has 10 business days to determine whether an error occurred. Some new-account situations use a longer initial period.
- Extended investigation: If the bank needs more time, it may generally extend the investigation to 45 calendar days if it provides provisional credit within the required period. Some point-of-sale debit-card, foreign-initiated, and new-account situations can allow up to 90 calendar days, with different provisional-credit timing.
- Covered remittance transfers: A consumer generally has 180 days from the date the funds were supposed to be available to report a qualifying error. The provider generally has up to 90 days to investigate and must report the result within three business days after completing the investigation.
- Wire recalls: There is no universal rule promising that a domestic or international wire will be refunded within a set number of days. The bank's wire agreement, the payment's status, and the receiving institution's response matter.
These are process deadlines, not guaranteed refund dates. A provisional credit may be reversed if the bank later determines that no error occurred, so read the bank's written decision carefully.
Regulation E generally permits an error notice to be given orally or in writing. The bank may ask for written confirmation or a particular form, so send written notice anyway and keep a copy. Late notice doesn't automatically make every claim impossible, but it can reduce the protections available for later transfers.
Evidence to attach or keep
A clear timeline can help the bank determine whether another person initiated the transfer or whether you were deceived into approving it. Gather:
- The statement showing the transaction and its statement-sent date
- Transaction, ACH trace, wire, SWIFT, UETR, or remittance reference numbers
- Screenshots of the payment confirmation and recipient details
- The original email, including full headers if an email account was compromised
- Text messages, chat records, caller numbers, and social-media messages
- A short timeline showing when you received instructions, approved or rejected them, and contacted the bank
- Evidence of account takeover, such as password-reset alerts, unfamiliar devices, or changed payees
- Police, FTC, or FBI report numbers, if you filed reports
- Copies of any notice sent to the merchant, originator, or remittance provider
Don't send more sensitive information than necessary. Upload documents through the bank's secure portal when possible, and keep the original files in case the bank requests them later.
If the bank denies the dispute
Ask for the denial in writing. Request the transaction records and other documents the bank relied on, along with the specific reason it classified the payment as authorized or outside its error process.
Respond to that factual issue rather than simply repeating "fraud." Explain whether you never accessed the account, whether a third party initiated the transfer using stolen access, or whether you personally clicked a confirmation after being deceived. Attach evidence that addresses the bank's stated reason.
If the bank doesn't resolve the matter, submit a complaint through the CFPB complaint portal and include your case number, dates, correspondence, and requested outcome. A complaint sends the matter to the company for a response, but it doesn't guarantee a refund or replace a court's decision.
For a large loss, an account-takeover claim, or a disputed business wire, consider getting prompt advice from a qualified attorney. Contract and commercial-law deadlines can differ from consumer Regulation E deadlines.
What does not automatically get your money back
- A police report: It documents the crime but doesn't order the bank to refund the transfer.
- An FTC or FBI report: Reporting helps authorities identify scams, but the bank still needs its own claim and evidence.
- The word "chargeback": Card chargeback procedures don't automatically apply to ACH payments or bank wires. Ask for an EFT error investigation, ACH return, or wire recall as appropriate.
- The 60-day rule: It generally relates to covered consumer EFTs and statement notice. It isn't a universal deadline or refund promise for every wire.
- A convincing explanation: The bank must assess the transaction records and facts. A scam claim isn't stronger because it uses legal terms inaccurately.
Frequently asked questions
Can a wire transfer be reversed after a scam?
Sometimes a bank can send a recall or ask the receiving institution to freeze the funds, but there is no guarantee. Call the sending bank immediately and don't wait for email responses.
Does the 60-day Regulation E deadline apply to every wire?
No. It generally applies to certain electronic fund transfers from consumer accounts. A conventional wire may be governed by the bank's wire agreement and other law, while a covered international remittance may follow separate Regulation E rules.
What if I personally sent the money because of a scam?
Tell the bank that you approved the transfer after being deceived. Request an urgent recall and a review under the bank's scam-fraud policy. Don't claim that another person initiated the payment if that isn't true.
Do I need a police report to dispute an ACH debit?
Not to start the bank notification. Report the debit promptly, then file a police or agency report if appropriate and provide the case number when available.
Should I email the bank or send a letter?
Call first for urgent action, then use the bank's secure message system or required fraud form. A letter can add a paper trail, but don't delay the initial report while waiting for certified-mail delivery.
If the transfer is recent, call the sending bank now, ask for a case number and a stop or recall request, and send the matching template through a secure channel.