NewSecurity Audit Kit — audit your business in 15 minutes.Launch $49· limited time offer
Zelle scamZelle refundbank impersonationpayment app scamsRegulation E

Zelle Scam Refunds in 2026: What's Actually Covered (and How to Ask)

Courtney
10 min read
Share
Free Interactive Guide

Free: How to Keep Yourself Safe From Scammers

9 chapters. Reporting checklist. 30-second protection checklist. Read on the site.

Zelle Scam Refunds in 2026: What's Actually Covered (and How to Ask)

Two people send $600 on Zelle the same week. One gets a call from "her bank's fraud department" telling her to move the money to a safe account before scammers drain it — she does, and three weeks later her bank puts the $600 back. The other buys a couch off Facebook Marketplace that never shows up. Same app, same amount, same sinking feeling. He's out the money for good.

Same platform. Same button. Completely different outcome. The difference comes down to one word banks are very precise about: authorized.

I keep seeing people assume Zelle works like a credit card — that if you get scammed, somebody eventually makes it right. It doesn't, and mostly they won't. But there's a real, narrow lane where refunds do happen now, and almost nobody explains it in plain English. So here's the actual policy, the fight happening over it in court right now, and exactly what to say to your bank if you're in the lane that qualifies.

The Rule That Decides Everything: Did You Send It, or Did Someone Else?

Federal law — specifically the Electronic Fund Transfer Act and its implementing rule, Regulation E — requires banks to reimburse you for unauthorized transfers: someone got into your account and moved money without your knowledge. That part is non-negotiable. Report it in time and the bank has to make you whole.

Scams don't work that way. When you send $600 because a caller convinced you it was necessary, you authorized that transfer. You picked the app, entered the amount, and hit send. Legally, that's you using the product as designed — even though a scammer talked you into it. Reg E's mandatory reimbursement doesn't apply, because the transfer wasn't "unauthorized" in the legal sense. It was manipulated.

That gap — real fraud, zero required refund — is exactly why banks were free to just shrug for years. Since around June 2023, Zelle's operator and its bank network have voluntarily closed part of that gap for one specific category: imposter scams, where someone impersonates your bank, the government, or a company you already do business with. If a scammer convinced you they were your bank's fraud department and told you to "protect" your money by moving it, that's now potentially eligible for reimbursement under the banks' own policy — not because the law requires it, but because the banks agreed to cover it after years of pressure (NBC News).

What's still not covered: purchase scams, marketplace fraud, romance scams, and anything else where you sent money for something you believed you were getting — a couch, a concert ticket, a relationship. If you voluntarily paid for a thing that turned out to be fake, the imposter-scam carve-out doesn't apply, and your bank has no obligation to refund you.

Not sure if your message is real? Paste it into Cautellus and get a risk score before you reply.

Scan it free →

The Legal Fight Over Who Should Actually Pay for This

This isn't settled policy — it's a live legal battle, and it's worth knowing why, because it explains why coverage still feels inconsistent from one bank to the next.

In December 2024, the Consumer Financial Protection Bureau sued Zelle's operator, Early Warning Services, along with JPMorgan Chase, Bank of America, and Wells Fargo — the three banks representing the majority of Zelle's network traffic. The CFPB alleged the companies had failed to protect consumers and pointed to more than $870 million in cumulative fraud losses across the three banks since Zelle launched in 2017 (OPB). The suit wanted banks required — not just encouraged — to reimburse victims of "induced fraud," meaning scams like the imposter-bank call, not just account takeovers.

In March 2025, the new CFPB leadership dismissed that case entirely, with prejudice, meaning it can't be refiled (Banking Dive). Five months later, on August 13, 2025, New York Attorney General Letitia James filed her own suit under state law, alleging Early Warning Services' weak identity verification let scammers steal more than $1 billion from Zelle users between 2017 and 2023 (NY Attorney General). That case is still active — in July 2026, a Manhattan judge rejected Zelle's motion to dismiss it, so it's headed toward discovery rather than going away (ISMG/Information Security Media Group).

Translation: there is no federal mandate forcing banks to refund scam victims, and the one attempt to create one got dropped. What you have instead is a patchwork of voluntary bank policies, under active legal pressure from a state case that could eventually force stricter rules — but hasn't yet. That's why your specific bank's answer to "will you refund this" can vary, and why it's worth pushing rather than accepting the first "no."

The Kind of Scam That Actually Has a Shot

The imposter-scam carve-out was built around a specific pattern, and it's the one I keep hearing about: someone calls or texts pretending to be your bank, warns you about "suspicious activity," and walks you through moving your own money to a "secure" account to protect it. I've written up exactly how that call works step by step in the bank spoof call breakdown — spoofed caller ID, manufactured urgency, staying on the line through the transfer. The text-message version, which usually links to a fake login page instead of a live call, is covered in the fake bank text scam post.

The common thread in both: you believed you were dealing with your actual bank or a government agency, and you moved money specifically because you thought it was necessary to protect yourself — not to buy something. That's the fact pattern that fits the reimbursement policy. A stranger on Facebook Marketplace claiming they overpaid you doesn't fit it, no matter how convincing the fake payment screenshot looked.

If You Already Sent the Money

Call your bank immediately — not the number the scammer gave you, the one on the back of your card or on the bank's official site. Tell them specifically that you believe you're a victim of an imposter scam, using that phrase. Zelle's own support page has a dedicated path for reporting fraud and scams, and if you used the standalone Zelle app rather than your bank's app, you can also report it directly to Zelle at 844-428-8542 (Zelle official support).

Move fast on the paperwork too. Under the Electronic Fund Transfer Act, you generally have 60 days from the statement showing the transfer to file a formal written dispute — don't let that window quietly close while you're going back and forth on the phone (Cybernews).

If the first answer is no, ask why — specifically. Ask whether they evaluated it as an imposter scam under their reimbursement policy, not just as a standard "authorized transfer, not covered" denial. If you get denied and think the scam genuinely fits the imposter pattern, you can escalate to the CFPB at consumerfinance.gov/complaint and file with the FTC at ReportFraud.ftc.gov. Neither guarantees a refund, but complaint volume is part of what's driving banks — and now courts — to tighten these policies.

Report it regardless of whether you expect money back. The FTC has been tracking payment-app scams closely: consumers reported more than $390 million in losses tied to payment apps in 2024, over $100 million more than the year before (FTC via Payments Dive). Every report adds to the pressure that's already produced one lawsuit and one voluntary policy — it's not nothing.

How to Not Need Any of This

The reimbursement policy only exists because the underlying scam is so effective. The actual prevention is simple, even if it's hard to do in the moment: no real bank will ever ask you to move your own money to "protect" it. Not to a secure account, not to a government-linked account, not anywhere. That instruction, on its own, is the scam — full stop.

If a call or text raises that flag, hang up or stop responding, and contact your bank directly using the number on your card. If you're not sure whether a message asking you to send money is real, run it through Cautellus's text scam checker before you act on it — it's the same category covered in our text message scam guide — and see our Zelle overview page for the other payment-app scam patterns making the rounds.

Zelle isn't going to build a chargeback system — the entire product is designed around instant, hard-to-reverse transfers between people who trust each other. That won't change. What's changing, slowly and under legal pressure, is which scams the banks are willing to eat the cost of. Know which lane you're in before you call.

Got something like this in your inbox? Drop it into the scanner — it takes 5 seconds and could save you thousands.

Check it now →

FAQs

Will Zelle refund me if I got scammed buying something online?

No. Purchase and marketplace scams — paying for goods or services that turn out to be fake — fall outside the imposter-scam reimbursement policy. Banks generally treat these as authorized transactions you chose to make, even though you were deceived about what you'd receive.

What's the difference between an "unauthorized" and an "authorized" transaction?

Unauthorized means someone else accessed your account and moved money without your knowledge — that's covered by federal law (Regulation E). Authorized means you personally initiated the transfer, even if a scammer manipulated you into doing it. Most scams fall into the authorized category, which is why refunds aren't automatic.

How long do I have to report a Zelle scam to my bank?

Report it immediately — speed matters for any chance of reversal or intervention. For formal disputes, the Electronic Fund Transfer Act generally gives you 60 days from the statement showing the transfer, but don't wait anywhere close to that window if you want a real shot at recovery.

Is there an actual law that requires banks to refund Zelle scams?

No federal law currently requires it for authorized-but-deceived transfers. The CFPB tried to force stricter rules in a December 2024 lawsuit, but that case was dropped in March 2025. New York's Attorney General is now pursuing a separate $1 billion state lawsuit that's still working through the courts as of mid-2026.

What should I say when I call my bank about a Zelle scam?

Use the words "imposter scam" specifically, and describe exactly how the scammer represented themselves — as your bank, a government agency, or a company you do business with. If the first representative says no, ask whether your case was evaluated against the bank's imposter-scam reimbursement policy specifically, not just as a standard authorized-transfer denial.

Does this reimbursement policy apply to Venmo and Cash App too?

Not the same way. This specific voluntary framework was built by Zelle's bank-owned network. Venmo and Cash App are run by PayPal and Block, respectively, and have their own separate, generally more limited buyer- and seller-protection terms — check each app's own policy rather than assuming Zelle's rules carry over.


Sources: NBC News on Zelle's 2023 imposter-scam reimbursement policy; OPB reporting on the CFPB's December 2024 lawsuit ($870M+ alleged losses); Banking Dive on the CFPB's March 2025 dismissal; New York Attorney General's August 2025 press release on the $1 billion state lawsuit; Information Security Media Group (cuinfosecurity.com) on the July 2026 ruling allowing that suit to proceed; Payments Dive citing FTC data on 2024 payment-app scam losses ($390M+); Cybernews on Electronic Fund Transfer Act dispute timelines; Zelle's official support and report-a-scam pages.

Think you've been targeted? Paste any text, link, email, or screenshot into Cautellus for instant AI analysis.

Scan something free →
C

Courtney

Founder, Cautellus · 20+ years in financial services

Two decades in financial compliance, digital security, and fraud prevention. Built Cautellus because the scam detection tools that exist were made for IT departments, not for real people getting weird texts.

Learn more

Keep reading

Support Our Mission

Cautellus is built to protect people from online fraud. Your contribution helps us keep building security tools and resources.

Found This Helpful?

Try Cautellus to analyze suspicious messages, links, and images and protect yourself from fraud.

Try the Scam Scanner