Your phone rang and the caller ID showed your bank’s name. The person on the line already knew your account balance and your last transaction, and they walked you through a series of steps to “protect” your money. Now the Zelle transfer is gone, and when you called your bank’s real fraud line, someone read from a script: you authorized the transfer, so there’s nothing they can do.

If you personally sent a Zelle payment because a scammer deceived you, federal law generally doesn’t require your bank to refund it. But if the scammer got your login or a one-time code and used it to send the money themselves, that’s usually treated as an unauthorized transfer — and your bank is legally required to investigate it and reimburse you.

Which one happened to you?

• Protected by law Someone got into your account or phone and sent the money without you.
• Often protected — fight for it You gave a scammer a code or login, and they sent the money.
• Policy only You typed the amount and pressed send yourself, because you were fooled.

• It happened in the last 48 hours → go to the reporting clock
• My bank already denied my claim → go to appealing a denial
• I’m checking if a “Zelle settlement” site is real → go to the lawsuit facts

And the question that actually decides your case isn’t “were you scammed?” It’s “whose hand pressed send?”

Scam vs. Fraud: The Legal Line That Decides Everything

Banks and Zelle itself use two words that sound similar but trigger completely different legal outcomes: fraud and scam. Fraud, in this narrow sense, means someone else accessed your account and moved money without your knowledge — you were not involved at all. A scam means you were tricked into taking an action yourself, even though the reason you took it was a lie.

That distinction comes from the Electronic Fund Transfer Act and its implementing rule, Regulation E. Regulation E requires your bank to investigate and reimburse an unauthorized electronic fund transfer — one initiated by someone other than you, without your authority — as long as you report it on time. It does not create a right to reimbursement for a transfer you authorized, even if you were deceived about the reason for sending it. The error-resolution process banks must follow is spelled out in 12 CFR 1005.11.

So when your bank says “you authorized it,” that’s a legal conclusion, not just a brush-off — and whether it’s the correct conclusion depends entirely on one fact: who actually pressed send. That’s why most guidance online only offers a two-way split (unauthorized vs. authorized). It misses a third category that changes the answer for a lot of people — covered next.

The Middle Ground: You Gave Them the Code, They Sent the Money

This is the scenario most competing articles skip, and it’s the one banks most often get wrong when they deny a claim. Here’s the fact pattern: someone calls, texts, or emails pretending to be your bank, and talks you into reading off your online banking login, your debit card number, or a one-time verification code that was just texted to you. They then use that information themselves — without you touching the Zelle app again — to send the money out of your account.

The CFPB has directly addressed this. Under Regulation E’s official interpretation, and reaffirmed in the Bureau’s Electronic Fund Transfers FAQs and a January 2025 compliance aid, a transfer initiated by a third party who fraudulently obtained your account access information is generally treated as an unauthorized electronic fund transfer — even though you’re the one who provided the information. The Bureau specifically calls out two situations as meeting this standard: a caller who impersonates your bank and talks you into sharing your login, card number, or texted confirmation code, and a phisher or malware operator who watches you enter your login and then uses it themselves. In both cases, the deciding fact is that you didn’t send the transfer — the scammer did, using information they got through deception. Your negligence, even genuine carelessness, isn’t allowed to increase your liability beyond what Regulation E permits, and a bank can’t contract its way around that.

In practice, this is exactly where a lot of wrongful denials happen. A bank sees that you “gave out” a code and closes the case as an authorized scam, without asking the follow-up question that actually matters: who used that code to move the money? If that was the scammer, this is the fact pattern CFPB guidance says should be treated as unauthorized — and it’s worth formally disputing. Section 6 below has a copy-ready letter for exactly this situation.

This guidance is generally treated as governing, not an absolute guarantee in every fact pattern, and your bank still investigates the specific circumstances. But “I gave them the code” is not, on its own, a legally sufficient reason for a denial.

The One Scam Zelle Voluntarily Refunds

There’s a second, separate path to reimbursement that applies even when you genuinely did press send yourself: Zelle’s own network rules. Since June 30, 2023, Early Warning Services — the company that operates Zelle on behalf of its owner banks — has required participating banks and credit unions to reimburse consumers for qualifying impostor scams, most notably when a scammer poses as your bank, a government agency, or a company you already do business with and talks you into moving money, including “me-to-me” schemes where you’re told to transfer funds to a “safe” account that’s actually the scammer’s.

Two things matter about this policy. First, it goes beyond what federal law requires — EWS has said so itself — which is exactly why it’s a policy and not a legal entitlement. Second, “qualifying” is doing real work in that sentence: your bank decides, case by case, whether your situation meets its criteria, and advocacy groups have criticized EWS for being vague about where that line sits. It also does not extend to the scam categories covered next.

What’s Almost Never Covered

Most Zelle losses fall into categories that neither Regulation E nor the impostor-scam policy reaches, because you were the one who chose to send money to a real person or account you believed was legitimate — a fake seller on Facebook Marketplace or Craigslist, a landlord for an apartment that didn’t exist, a scalper for tickets that never arrived, a romantic interest you’d never met in person, or a “guaranteed return” investment or crypto pitch. In every one of these, you authorized the transfer to a specific recipient for a specific reason; the fact that the reason was a lie doesn’t change who pressed send.

The Reporting Clock (Why Hours Matter)

• $50Reported within 2 business days of learning of the loss
• $500Reported after 2 business days, within 60 days of your statement
• UnlimitedReported more than 60 days after your statement, for transfers after that point

These caps apply to unauthorized transfers — the “protected by law” and “often protected” tiers above. If your case turns out to be authorized (the “policy only” tier), these specific liability limits don’t apply, because there’s no unauthorized-transfer framework to invoke. But reporting fast still matters there too: the recipient’s bank may still be holding some of the money, and a same-day report is what your bank needs on record before it will even consider an impostor-scam exception.

Your first moves, in order:

1. Call your bank’s fraud line and state plainly whether you or someone else pressed send.
2. If you shared a code or login, say so clearly and ask that it be investigated as an unauthorized transfer, not reviewed as a scam.
3. Get a case or reference number before you hang up.
4. File reports with the FTC and the FBI’s Internet Crime Complaint Center the same day.
5. Change your online banking password and enable stronger login protection.

Your Bank Said No. Now What?

A denial isn’t necessarily the final word — especially in the middle-ground scenario from section 2. Under 12 CFR 1005.11, your bank generally has 10 business days to decide whether an error occurred, or it must provide provisional credit and finish its investigation within 45 days (up to 90 days in some circumstances). If it decides no error occurred, Regulation E entitles you to a written explanation and, on request, the documents it relied on.

If you believe the denial was wrong:

1. Put your dispute in writing, specifically citing Regulation E and describing how the scammer obtained your credentials.
2. Ask, in writing, for the specific reason for the denial and the documentation behind it.
3. File a complaint with the CFPB’s consumer complaint portal if the bank still won’t reconsider.
4. If the scammer impersonated your bank or a government agency, separately ask in writing whether your case qualifies under Zelle’s impostor-scam reimbursement policy.
5. For larger amounts, consider small claims court or a consumer-protection attorney.

The Zelle Lawsuits: What’s Real and What Isn’t

Two separate cases are often conflated online, and the confusion is exactly what “settlement claim form” scam sites exploit. Here’s each one, precisely.

The federal case is closed, with no relief. On December 20, 2024, the CFPB sued Early Warning Services along with JPMorgan Chase, Bank of America, and Wells Fargo, alleging the companies failed to adequately investigate and reimburse fraud on Zelle, with consumer losses estimated at more than $870 million since 2017. On March 4, 2025, the CFPB voluntarily dismissed the case with prejudice — meaning it cannot be refiled — and the court entered the dismissal the next day, part of a broader pullback in CFPB enforcement under the current administration. That dismissal produced no settlement fund and no consumer claim process of any kind.

A separate New York state case is active and in discovery. In August 2025, New York Attorney General Letitia James filed People of the State of New York v. Early Warning Services, LLC, Index No. 654753/2025, in New York Supreme Court, alleging that New Yorkers lost more than $1 billion to Zelle-related fraud between 2017 and 2023 because EWS prioritized growth and convenience over safety. This case was never part of the CFPB’s lawsuit and proceeds under New York state law, not the EFTA. On July 20, 2026, Justice Phaedra Perry-Bond denied nearly all of EWS’s motion to dismiss, allowing the Attorney General’s claims to move into discovery.

That ruling is a procedural decision about whether the complaint states a valid legal claim — it is not a finding that EWS did anything wrong, and it does not create any compensation for consumers. EWS disputes the allegations and has indicated it intends to appeal. If this case eventually produces a settlement or judgment with consumer payments, that would be reported by mainstream outlets and the Attorney General’s own office — not by a third-party site collecting your information today.

Don’t Get Scammed Twice

Scam victim lists get bought and sold, and people who’ve already lost money to a Zelle scam are frequently targeted a second time by “recovery” services. These callers or emailers often claim to be lawyers, government investigators, or consumer advocates, and they ask for a “retainer,” “processing fee,” or “release fee” before they can supposedly return your money. The FTC is explicit that this is always a scam: no legitimate recovery process, public or private, ever requires payment from you before returning funds. If you’ve already lost money, the only people who can actually help are your own bank, the FBI’s Internet Crime Complaint Center, and, for a formal dispute, the CFPB — none of whom will ever ask you to pay them first.

What This Isn’t

This article covers Zelle specifically. A few related situations work differently and are covered elsewhere:

• If your bank already issued, then reversed, a provisional credit on your account, the specific mechanics of that process are covered in Provisional Credit Reversed? Bank Fraud Refund Rules 2026.
• Credit cards carry much stronger, and different, consumer protections than Zelle or any peer-to-peer app — see Unauthorized Credit Card Charges: Your Liability & Next Steps.
• Zelle has no chargeback mechanism the way a credit card network does — for how that process works instead, see How to Dispute a Credit Card Charge and Get Your Money Back.

FAQ

Can my bank reverse a Zelle payment after it’s sent?

Not on its own initiative in most cases. Zelle transfers settle in minutes, and once the recipient’s account has the funds, your bank generally can’t simply pull them back. Your options are a Regulation E dispute (if it’s unauthorized), asking about the impostor-scam policy, or asking the recipient’s bank to attempt a recovery if funds remain.

Is there a Zelle settlement claim form I can file?

No. The CFPB’s federal case was dismissed with no settlement, and the active New York Attorney General case is still in discovery with no judgment or settlement. Any site offering a “Zelle settlement claim form” right now is not legitimate.

I gave the scammer my one-time code — is that still “unauthorized”?

Often, yes. CFPB guidance generally treats a transfer as unauthorized when a third party fraudulently obtained your access information and then initiated the transfer themselves — even though you provided the code. This depends on your specific facts, so it’s worth formally disputing rather than accepting a denial.

Will Chase, Bank of America, or Wells Fargo automatically refund a Zelle scam?

No bank automatically refunds a scam where you personally authorized the payment. Each bank applies Regulation E and the Zelle network’s impostor-scam policy to the specific facts of your case, and policies can change, so confirm current details directly with your bank rather than relying on a generic answer.

How long do I have to report a Zelle scam or fraud?

Report immediately regardless of category. For unauthorized transfers, reporting within 2 business days caps your liability at $50; within 60 days of your statement, at $500; after that, liability can become unlimited for later transfers.

Why did the CFPB drop its Zelle lawsuit?

The CFPB voluntarily dismissed its case against Early Warning Services and its three largest owner banks in March 2025, as part of a broader reduction in enforcement activity under the current administration. The dismissal was “with prejudice,” meaning the agency can’t refile that specific case.

What’s the difference between “fraud” and “scam” on Zelle?

In this context, “fraud” means someone else accessed your account and moved money without you; “scam” means you took the action yourself after being deceived. The label matters because only the first is automatically covered by federal law.

Does it matter that I was pressured or scared into sending the money?

It matters morally and it may matter for the voluntary impostor-scam policy, but it doesn’t change the Regulation E analysis if you personally pressed send. The legal question is who initiated the transfer, not how much pressure you were under.

What if I sent money to the wrong person by mistake, not because of a scam?

That’s a different problem from either category here — it’s an authorized payment sent in error, not fraud or a scam. Contact your bank immediately and ask the recipient’s bank to attempt a recovery; there’s no federal guarantee of return.

Can I get my money back if the recipient hasn’t spent it yet?

Possibly. Reporting quickly gives the recipient’s bank a chance to freeze or hold funds still in the account. This isn’t guaranteed and depends on how fast the scammer moves the money.

Does the Zelle impostor-scam policy cover romance or investment scams?

No. It’s aimed at scams where someone impersonates your bank, a government agency, or a company you already deal with — not fake sellers, romantic interests, or investment pitches.

What should I say to my bank’s fraud department?

State plainly and specifically who pressed send: you, or someone you gave a code or login to who then sent it themselves. That single fact is what determines which process applies.

What is Regulation E, and does it apply to Zelle?

Regulation E implements the Electronic Fund Transfer Act and governs unauthorized electronic transfers, including peer-to-peer payments like Zelle when they’re funded from a covered consumer account. It requires banks to investigate and reimburse qualifying unauthorized transfers reported on time.

My bank denied my claim — what’s my next step?

Request the specific written reason and supporting documentation, then file a written dispute citing Regulation E if you believe the transfer was unauthorized. If that doesn’t resolve it, file a complaint with the CFPB.

Should I pay someone who says they can recover my Zelle scam money?

No. No legitimate bank, law firm, or government agency asks for payment upfront to recover stolen funds. That request is itself a scam.

Primary sources:

• CFPB — Electronic Fund Transfers FAQs (Regulation E)
• 12 CFR 1005.6 — Liability of consumer for unauthorized transfers
• 12 CFR 1005.11 — Procedures for resolving errors
• CFPB enforcement action page — Early Warning Services, LLC, et al.
• Zelle — Report a Fraud or Scam
• FTC — Refund and recovery scam guidance
• FBI Internet Crime Complaint Center (IC3)

This article is for general education and isn’t legal advice. Whether any specific transfer is reimbursable depends on the exact facts of how it happened, your bank’s policies, and how quickly you reported it. The litigation described above is ongoing and unresolved. For advice about your own situation, contact your bank, the CFPB, or a consumer-protection attorney.

Last updated: September 24, 2026. The litigation section reflects the status of both cases as of the July 20, 2026 New York ruling; check for developments before relying on it.