Skip to main content

Lesson 03 of 25

Reg E and the Electronic Fund Transfer Act

4 min read · CRCM

Master the error-resolution timeline, unauthorized-transfer liability tiers, and overdraft opt-in that the exam tests relentlessly. We anchor every rule in Regulation E (12 CFR 1005), including prepaid and remittance protections.

What Reg E covers

  • Electronic Fund Transfer Act, 15 USC 1693
  • Regulation E, 12 CFR 1005 (CFPB)
  • Debit cards, ATMs, ACH, online transfers
  • Consumer accounts only

Welcome to our first core regulation. The Electronic Fund Transfer Act, found at fifteen U-S-C sixteen ninety-three, and its implementing rule, Regulation E at twelve C-F-R part ten-oh-five, govern electronic movements of money out of consumer accounts. Think debit card purchases, A-T-M withdrawals, A-C-H debits, and online bill payments.

The key word is consumer. Reg E protects individuals using accounts for personal, family, or household purposes, not businesses. On the exam, if a fact pattern involves a commercial account, Reg E usually doesn't apply, and that distinction alone resolves some questions.

The Bureau frames Reg E as a consumer-protection rule, so when in doubt, ask whose money it is and what they're using it for.

Error resolution: the timeline

  • Consumer notifies within 60 days of statement
  • Bank investigates: 10 business days (or 45 with provisional credit)
  • Provisional credit while investigating
  • Resolve and notify; correct within 1 business day

The heart of Reg E, and a favorite of the exam, is error resolution. When a consumer reports an error, an unauthorized transfer, a wrong amount, a missing transaction, they generally must notify the bank within sixty days of the statement showing the problem. Once notified, the bank has ten business days to investigate.

But here's the relief valve: if the bank needs more time, it can take up to forty-five days, provided it gives the consumer provisional credit while it investigates. When the bank finishes and finds an error, it must correct it within one business day. Memorize this rhythm: sixty days to report, ten to investigate, forty-five with provisional credit.

The exam will hand you a date and ask whether the bank acted in time. A couple of refinements worth knowing: for new accounts and certain point-of-sale or foreign-initiated transactions, the investigation window can extend further, and if the bank fails to provide provisional credit when required, it loses the benefit of the longer investigation period. So the timeline isn't just trivia; it's a sequence of obligations where missing one step changes what the bank may do next.

Liability for unauthorized transfers

  • $50 if reported within 2 business days
  • $500 if reported within 60 days
  • Unlimited beyond 60 days (for new transfers)
  • Prompt reporting limits the loss

Reg E also caps how much a consumer can lose to an unauthorized transfer, and the cap depends on how fast they report. If the consumer notifies the bank within two business days of learning of a lost or stolen access device, liability is capped at fifty dollars. Wait longer than two business days but report within sixty days of the statement, and the cap rises to five hundred dollars.

Fail to report within sixty days of the statement, and the consumer can bear unlimited liability for transfers that occur after that window. The lesson the exam wants you to internalize: prompt reporting protects the consumer, and the bank's obligations turn on those exact tripwires, two days, sixty days.

Disclosures and overdraft opt-in

  • Initial disclosures at account opening
  • Periodic statements; change-in-terms notices
  • Reg E overdraft opt-in for ATM and one-time debit
  • No opt-in, no overdraft fee on those transactions

Reg E requires clear disclosures: an initial disclosure of terms when the account opens, periodic statements, and advance notice before terms change. One disclosure rule the exam returns to again and again is the overdraft opt-in. A bank may not charge an overdraft fee on an A-T-M withdrawal or a one-time debit-card purchase unless the consumer has affirmatively opted in to that overdraft service.

No opt-in means no fee on those particular transactions. Recurring debits and checks are treated differently, but for the one-time debit and the A-T-M, remember: the consumer must say yes first. This is a place where a UDAAP problem and a Reg E violation can overlap, so flag it.

Prepaid accounts and remittances

  • Prepaid Account Rule extended Reg E to prepaid
  • Short-form and long-form fee disclosures
  • Remittance Transfer Rule: int'l consumer transfers
  • Disclosures, error resolution, cancellation window

Two newer pieces of Reg E often surprise candidates. First, the Prepaid Account Rule extended Reg E protections to prepaid cards and similar accounts, requiring short-form and long-form fee disclosures before a consumer acquires the product, plus error-resolution rights. Second, the Remittance Transfer Rule governs consumer international money transfers above a small threshold.

It requires disclosures of the exchange rate, fees, and the amount to be received, gives the sender error-resolution rights, and provides a thirty-minute cancellation window after payment. If a question involves sending money abroad for a consumer, think remittance rule; if it involves a reloadable card, think prepaid rule. Both live inside Reg E.

Recap

  • Reg E = consumer electronic transfers, 12 CFR 1005
  • Timeline: 60 / 10 / 45 with provisional credit
  • Liability: $50 / $500 / unlimited
  • Opt-in for ATM and one-time debit overdrafts

Let's lock it in. Reg E, under the Electronic Fund Transfer Act at twelve C-F-R ten-oh-five, protects consumers on electronic transfers. The error-resolution clock runs sixty days to report, ten business days to investigate, or forty-five with provisional credit.

Unauthorized-transfer liability climbs from fifty to five hundred to unlimited as reporting slows. And no overdraft fee on A-T-M or one-time debit transactions without an affirmative opt-in. Add prepaid and remittance rules to the picture and you've got Reg E.

Now go test yourself, then we'll move to deposits and Reg DD.

Sources

  • Electronic Fund Transfer Act (15 USC 1693 et seq.)
  • Regulation E (12 CFR 1005)
  • CFPB
  • Prepaid Account Rule
  • Remittance Transfer Rule

Test your knowledge

A few CRCM questions on this material — pick an answer to see the explanation.

  1. Q1. An applicant's request for credit is denied. Under the Equal Credit Opportunity Act and Regulation B, within how many days must the creditor generally provide notice of the adverse action?

  2. Q2. A mortgage applicant alleges discrimination because she has children and the loan officer steered her away from a neighborhood. Which protected basis applies, and from which statute does it primarily derive?

  3. Q3. A lender is originating new consumer credit to an active-duty servicemember. Which protection applies automatically and what is the key limit?

  4. Q4. A U.S. bank processes a wire for a customer who is not on any sanctions list, but the beneficiary is an unlisted company owned 30% by one blocked person and 30% by a different blocked person. What does OFAC's 50 Percent Rule require?

Ready to practice?

Put this lesson to work on real CRCM questions.

Drill the full CRCM bank →