Scammed on Zelle, Venmo, or Cash App? When the bank must refund you, and how to push for it
Payment app fraud is refundable in two situations the banks don't advertise: when the transfer was unauthorized (account taken over, phone stolen) and, since 2023, when you were tricked into a Zelle payment by an impostor. What Regulation E covers, the Zelle impostor scam policy, how to file, and how to escalate when they say "you authorized it."
- Unauthorized transfers (someone got into your account or phone and sent money) are covered by Regulation E: report within 60 days of the statement, the bank must investigate and refund, and your liability is capped.
- Authorized but induced by fraud (you sent money to a scammer pretending to be your bank, a seller, a relative): historically not covered. Since 2023, Zelle's network requires banks to refund qualifying impostor scams (someone pretending to be a bank, government agency, or business), and the CFPB has pushed banks to treat certain tricked payments as unauthorized.
- Report within hours, not days: the receiving bank may still be able to freeze the funds.
- Venmo, Cash App, PayPal: report in-app; the CFPB supervises them and complaints get action. Purchases made with Venmo/Cash App "goods and services" or with a linked credit card have buyer protection or chargeback rights.
- Always file a CFPB complaint when the bank denies; a large share of denials get reversed there.
Which case are you in?
1. You didn't send it (unauthorized)
Account takeover, SIM swap, stolen unlocked phone, a "bank fraud department" caller who got you to read them a one-time code and then made the transfers themselves. Under Regulation E these are unauthorized electronic fund transfers: the bank must refund, minus at most $50 if you reported within 2 business days ($500 within 60 days). The CFPB has stated that a transfer initiated by a fraudster who obtained your credentials through deception is unauthorized, even if you gave up the code.
2. You sent it, but you were tricked (authorized push payment fraud)
Fake seller, fake landlord, romance scam, "your account is compromised, move your money to this safe account," impersonated family member. Reg E doesn't require a refund for a transfer you initiated. But:
- Zelle impostor scam policy (since June 2023): banks on the Zelle network must reimburse customers who were tricked by someone impersonating a bank, government agency, or established business. Ask your bank specifically for a "Zelle impostor scam reimbursement" and reference the network rule.
- Many banks refund as a goodwill measure when the customer escalates.
- The CFPB's complaint database shows refunds granted in a meaningful share of contested cases.
3. You bought something and it never came
If you paid with Venmo or Cash App purchase protection turned on ("goods and services"), open a dispute in the app. If you funded the payment with a credit card, dispute with the card issuer. Plain "friends and family" Zelle payments have no buyer protection, so use the steps in case 2.
What to do, step by step
- Contact your bank or the app immediately (the fraud line, 24/7). Say whether it was unauthorized or induced by fraud, and name the scam type. Ask them to attempt a recall or freeze on the receiving account.
- Secure the account: change passwords, revoke devices, replace the SIM if swapped, enable app-based two-factor authentication.
- File the dispute in writing (secure message or form) with dates, amounts, recipient details, screenshots of messages, phone numbers used, and how you were contacted.
- Report to the FTC (reportfraud.ftc.gov) and the FBI IC3 (ic3.gov) for larger amounts; a police report helps with the bank and is required by some for impostor refunds.
- If denied: request the investigation documents and file a CFPB complaint citing Regulation E (unauthorized) or Zelle's impostor policy (induced). Also file with your state attorney general.
- Sue for unauthorized transfers the bank refuses: EFTA damages include actual loss, statutory damages up to $1,000, and attorney's fees. Consumer attorneys take these cases.
What the bank will say, and your answer
- "You authorized the transaction." → For code-sharing scams: "I did not initiate the transfer; a fraudster who obtained my credentials by deception did, which is unauthorized under 12 CFR 1005.2(m) and the CFPB's guidance."
- "Zelle payments are final." → "Zelle's network rules since June 2023 require reimbursement for impostor scams; I'm requesting that reimbursement."
- "You need a police report." → For Reg E claims, they can ask but can't condition the investigation on it. For impostor refunds, get one; it's quick.
Prevent the next one
- Your bank will never ask you to move money "to a safe account" or read back a code.
- Verify sellers on marketplaces with video calls and never pay "friends and family" for goods.
- Turn on purchase protection for purchases; use a credit card when a seller lets you.
FAQ
How long does the refund take?
Reg E: provisional credit within 10 business days if the investigation isn't done. Impostor scam reimbursements: typically 2–4 weeks.
I sent it from a credit union / small bank
Same rules. Small institutions sometimes know Reg E less well; cite the section.
I sent crypto or a wire, not an app transfer
Wires from consumer accounts are mostly outside Reg E; crypto is unprotected. Report to IC3; recovery is rare but faster reporting helps.