Regulation E and Unauthorized Transactions on Elderly Accounts: Your Rights and Deadlines

What Regulation E Means for Your Parent's Stolen Funds

Regulation E (Electronic Fund Transfer Act) is the federal law that limits a consumer's liability for unauthorized electronic transactions — debit card purchases, ATM withdrawals, ACH transfers, and P2P payments. When a scammer or abusive caregiver makes unauthorized electronic transfers from your elderly parent's account, this regulation determines how much of that money the bank must return.

The critical takeaway: timing determines everything. The liability caps shift dramatically based on when you report the unauthorized activity.

The Liability Timeline

Reported within 2 business days of discovering the loss:

• Maximum liability: $50
• The bank must provisionally credit the full disputed amount within 10 business days while investigating

Reported after 2 business days but within 60 calendar days of the statement showing the unauthorized transfer:

• Maximum liability: $500
• The bank investigates and must resolve within 45 days (90 days for new accounts or foreign transactions)

Reported after 60 calendar days of the statement:

• Unlimited liability for any unauthorized transfers that occurred after the 60-day window closed
• You may still recover transfers that occurred before the 60-day period, but anything after is at risk

Why This Timeline Is Devastating for Elder Exploitation Cases

Here's the problem families face: elder financial abuse often goes undetected for months. A cognitively declining parent may not review statements. A caregiver with account access makes "small" unauthorized purchases that don't trigger alerts. By the time the family discovers the pattern, multiple statement cycles have passed.

That 60-day clock starts when the statement containing the unauthorized transfer is "made available" to the account holder — meaning sent by mail or posted online. If your parent receives a January statement showing a $3,000 unauthorized ACH transfer, and you don't discover it until April, you've blown the 60-day window for that transaction.

This is precisely why setting up real-time transaction alerts and regular account monitoring is not optional — it's the mechanism that starts the clock in your favor.

How to Report Under Regulation E

Step 1: Notify the bank immediately — verbally first, then in writing.

Call the bank's fraud department. State clearly: "I am reporting unauthorized electronic fund transfers on account [number] under Regulation E. The account holder did not authorize these transactions." Get a case number and the name of the person you spoke with.

Step 2: Follow up in writing within 10 business days.

The bank may require written confirmation of your verbal report. Send a letter (or submit through their online dispute form) that includes:

• Account holder name and account number
• The specific transactions you're disputing (dates, amounts, descriptions)
• A statement that these transfers were not authorized by the account holder
• How/when you discovered the unauthorized activity

Step 3: Request provisional credit.

Under Regulation E, if the bank cannot resolve the investigation within 10 business days, they must provisionally credit the disputed amount to the account (minus the applicable liability cap) while they continue investigating. You can and should explicitly request this.

When Regulation E Doesn't Apply

The regulation covers electronic fund transfers only. It does NOT cover:

• Checks — forged or unauthorized checks fall under UCC Article 3 and 4, which have different rules and timelines
• Wire transfers — governed by UCC Article 4A, which generally provides less consumer protection
• Authorized-but-coerced transactions — if your parent authorized the transfer under duress or manipulation, the legal theory shifts from "unauthorized" to exploitation/fraud, which requires different remedies
• Credit card charges — those are covered under Regulation Z (Fair Credit Billing Act), which actually provides stronger protections with a flat $50 cap regardless of timing

The "Authorized by Someone With Access" Problem

A common scenario in elder exploitation: the parent gave a caregiver, family member, or "friend" their debit card or PIN for legitimate purposes (grocery shopping, bill paying), and that person then made unauthorized purchases beyond the scope of what was permitted.

Banks sometimes argue this isn't covered by Regulation E because the account holder "voluntarily" gave access. However, CFPB guidance and federal court precedent establish that giving someone limited access (e.g., to buy groceries) does not authorize unlimited use. If a caregiver was given a debit card to buy household supplies and instead transferred $5,000 to their personal account, that transfer is unauthorized under Regulation E.

Document the scope of any access you or your parent granted. "We gave Maria the debit card for groceries up to $200/week" is very different from open-ended access.

Building Your Dispute File

To maximize your recovery under Regulation E:

1. Pull 12 months of statements and highlight every transaction the account holder did not authorize
2. Organize by date — the bank will assess liability based on when each transaction appeared on a statement relative to when you reported
3. Get a written statement from the account holder (if they have capacity) confirming they did not authorize the specific transfers
4. If the account holder lacks capacity, provide documentation (medical records, POA documents) establishing your authority to act on their behalf

The Elder Financial Abuse Protection Toolkit includes a forensic transaction ledger template designed specifically for Regulation E disputes — organized by statement cycle with automatic liability-tier classification, so you can hand your bank a clean, irrefutable dispute file instead of a stack of highlighted statements.

Beyond Regulation E: Additional Recovery Paths

Even if you've missed the Regulation E deadlines, you're not out of options:

• File a police report — this creates official documentation and may trigger the bank's separate obligation to investigate under the Senior Safe Act
• Report to Adult Protective Services — APS investigations can compel banks to cooperate
• Civil lawsuit — you can sue the perpetrator directly for conversion, fraud, or breach of fiduciary duty
• State elder abuse statutes — many states allow treble damages (3x the stolen amount) for elder financial exploitation