The “Zelle Loophole”: When “Authorized” Transfers Are Actually Theft

You receive a call from “Bank of America Fraud Department.” The caller ID looks real. They say your account is compromised and you need to move your funds to a “safe locker” immediately using Zelle.

You follow their instructions. The money vanishes. When you call the real bank, they say: “Sorry, you authorized the transfer. We can’t help you.”

The “Authorization” Debate

For years, banks have argued that if you pushed the button, it’s an “authorized” transfer, even if you were tricked.

The Tide Is Turning

New guidance from the CFPB and emerging case law suggests that transfers induced by fraud or scam may still be considered “unauthorized electronic fund transfers” under the EFTA. If the bank’s security systems failed to flag highly suspicious activity (like draining a 10-year customer’s life savings to a brand new crypto wallet in 5 minutes), the bank may be liable for failing to stop the theft.

These are difficult cases, but we are fighting to close the Zelle loophole and hold banks accountable for facilitating scams.