12 C.F.R. § 205.6

Liability of consumer for unauthorized transfers

Read at: eCFRecfr.gov CornellLII GovInfogovinfo.gov CasesGoogle Scholar

(a) Conditions for liability. A consumer may be held liable, within the limitations described in paragraph (b) of this section, for an unauthorized electronic fund transfer involving the consumer's account only if the financial institution has provided the disclosures required by § 205.7(b)(1), (2), and (3). If the unauthorized transfer involved an access device, it must be an accepted access device and the financial institution must have provided a means to identify the consumer to whom it was issued.

(b) Limitations on amount of liability. A consumer's liability for an unauthorized electronic fund transfer or a series of related unauthorized transfers shall be determined as follows:

(1) Timely notice given. If the consumer notifies the financial institution within two business days after learning of the loss or theft of the access device, the consumer's liability shall not exceed the lesser of $50 or the amount of unauthorized transfers that occur before notice to the financial institution.

(2) Timely notice not given. If the consumer fails to notify the financial institution within two business days after learning of the loss or theft of the access device, the consumer's liability shall not exceed the lesser of $500 or the sum of:

(i) $50 or the amount of unauthorized transfers that occur within the two business days, whichever is less; and

(ii) The amount of unauthorized transfers that occur after the close of two business days and before notice to the institution, provided the institution establishes that these transfers would not have occurred had the consumer notified the institution within that two-day period.

(3) Periodic statement; timely notice not given. A consumer must report an unauthorized electronic fund transfer that appears on a periodic statement within 60 days of the financial institution's transmittal of the statement to avoid liability for subsequent transfers. If the consumer fails to do so, the consumer's liability shall not exceed the amount of the unauthorized transfers that occur after the close of the 60 days and before notice to the institution, and that the institution establishes would not have occurred had the consumer notified the institution within the 60-day period. When an access device is involved in the unauthorized transfer, the consumer may be liable for other amounts set forth in paragraphs (b)(1) or (b)(2) of this section, as applicable.

(4) Extension of time limits. If the consumer's delay in notifying the financial institution was due to extenuating circumstances, the institution shall extend the times specified above to a reasonable period.

(5) Notice to financial institution. (i) Notice to a financial institution is given when a consumer takes steps reasonably necessary to provide the institution with the pertinent information, whether or not a particular employee or agent of the institution actually receives the information.

(ii) The consumer may notify the institution in person, by telephone, or in writing.

(iii) Written notice is considered given at the time the consumer mails the notice or delivers it for transmission to the institution by any other usual means. Notice may be considered constructively given when the institution becomes aware of circumstances leading to the reasonable belief that an unauthorized transfer to or from the consumer's account has been or may be made.

(6) Liability under state law or agreement. If state law or an agreement between the consumer and the financial institution imposes less liability than is provided by this section, the consumer's liability shall not exceed the amount imposed under the state law or agreement.

Notes of Decisions
Cited in 15 cases (8 in the last 5 years), 1991–2025 · leading case: Cmty. Bank of Trenton v. Schnuck Markets, Inc., 887 F.3d 803 (7th Cir. 2018).
Cmty. Bank of Trenton v. Schnuck Markets, Inc., 887 F.3d 803 (7th Cir. 2018). · cites it 2× “§ 1643 (a) (limiting credit-card-holder liability for unauthorized use); 12 C.F.R. § 205.6 (limiting debit-card-holder liability for unauthorized use).”
People v. Roberts, 31 N.Y.3d 406 (2018). “Because unauthorized charges are credited to an account that victims are aware of and over which they retain control, those victims face little difficulty refusing the charges ( see 12 CFR 205.6 [limiting consumer liability for unauthorized transfers]; People v Barden , 117 AD3d…”
Margaretha Widjaja v. Jpmorgan Chase Bank, N.A., 21 F.4th 579 (9th Cir. 2021). “6 , are identical to the provisions in 12 C.F.R. § 205.6 . WIDJAJA V. JPMORGAN CHASE BANK 7 II This appeal requires us to interpret the EFTA provision limiting a consumer’s liability for unauthorized electronic fund transfers, 15 U.”
Binns v. BB & T Bank, 377 F. Supp. 3d 487 (E.D. Pa. 2019). “12 C.F.R. § 205.6 (b)(3). If the consumer fails to report within 60 days, there is no requirement that they be reimbursed for losses that could have been prevented if they had reported the unauthorized transaction.”
Kruser v. Bank of Am. NT&SA, 230 Cal. App. 3d 741 (Cal. Ct. App. 1991). · cites it 3× “§ 1693 -1693r; 12 C.F.R. § 205.6 (b)(2).) The Facts The facts are undisputed: The Krusers maintained a joint checking account with the Bank, and the Bank issued each of them a “Versatel” card and separate personal identification numbers which would allow access to funds in their…”
Exarhos v. JPMorgan Chase Bank, No. 1:20-cv-07754 (N.D. Ill. July 20, 2021). · cites it 7× “” 12 C.F.R. § 205.6 (b)(3). However, the EFTA places the burden of proof on the financial institution to show that the consumer is liable for unauthorized transfers, 15 U.”
Beaman v. Bank of Am., N.A., No. 2:21-cv-20561, 2023 WL 4784254 (D.N.J. July 27, 2023). · cites it 6× “; 12 C.F.R. § 205.6 , et seq.). The EFTA was enacted “to provide a basic framework establishing the rights, liabilities, and responsibilities of participants in electronic fund and remittance transfer systems,” especially regarding individual consumer rights.”
Marquess v. Pennsylvania State Employees Credit Union, 427 F. App'x 188 (3d Cir. 2011). “After a bench trial, the District Court made factual findings that neither party challenges. William Marquess, now deceased, opened a bank account at Pennsylvania State Employees Credit Union (PSECU) in the name of his adult son, Jason, by forging Jason’s signature.”
Perry v. Nat'l Credit Union Admin., No. 1:19-cv-00167 (D.N.J. Oct. 28, 2019). · cites it 3× “” 12 C.F.R. § 205.6 (b)(3). Notice to a financial institution is given when “a consumer takes steps reasonably necessary to provide the institution with the pertinent information, whether or not a particular employee or agent of the institution actually receives the information.”
Prignoli v. Bruczynski, No. 1:20-cv-00907, 2021 WL 4443895 (E.D.N.Y. Sept. 28, 2021). · cites it 3× “) In addition, Defendants argue that the Court should dismiss these claims (1) as against Amazon because Amazon is not a “financial institution,” (2) under Rule 8 because the SAC does not identify a provision of the EFTA that Defendants violated and instead merely cites 12…”
Beaman v. Bank of Am., N.A., No. 2:21-cv-20561, 2024 WL 3219224 (D.N.J. June 28, 2024). · cites it 3× “; 12 C.F.R. § 205.6 , et seq.). The EFTA was enacted “to provide a basic framework establishing the rights, liabilities, and responsibilities of participants in electronic fund and remittance transfer systems,” especially regarding individual consumer rights.”
Wingard v. Triumph Bancorp, Inc., No. 1:23-cv-02116 (D. Colo. Feb. 25, 2025). · cites it 2× “Plaintiffs allege that TBK violated the EFTA’s error resolution provisions, § 1693f, and its implementing regulation’s (“Regulation E”) limitations on consumer liability, 12 C.F.R. § 205.6 (b)(3); see [Doc. 28 at ¶¶ 25–32].”
Annotations are extracted automatically from the opinions in the Syfert caselaw corpus and ranked by authority, recency, and treatment. Dots show Syfertize treatment of the citing case itself.