Act todayWhat happenedFederal rules protect Zelle users from transfers they never made, but generally not from payments they were tricked into sending themselves.
Who is affectedAnyone with a checking, savings or prepaid account that has Zelle built in, especially people targeted by fake bank or government callers.
What to do- 1Call your bank right away and report the transfer, whether it was hacked or you were tricked.
- 2Hang up on any caller who says your account is in danger, then call the number on your card.
- 3Never send money to yourself or to a new account because someone told you to.
- 4If the bank calls the payment authorized and denies your claim, file a complaint with the CFPB.
Two people can fall for the same Zelle scam and end up in very different places. If a hacker sends money out of your account, federal rules generally make your bank pay it back. If a caller scares you into sending the money yourself, the bank generally treats it as your own payment, and you may get nothing.
What changed
The rules come from Regulation E, which carries out a federal law on electronic transfers. It defines an unauthorized transfer as one that someone else starts without real authority and that you get no benefit from. A hacker using your stolen password fits that. The protection generally applies even if you were tricked into sharing your login details.
A payment you send yourself is different. Even if a fake fraud alert pushed you to do it, the bank generally calls it authorized. Then a refund depends on the bank's own policy, not on federal law.
Who it affects
Anyone with a personal checking, savings or prepaid account that has Zelle built in. Fake bank and government callers are a common way in. The FTC says people reported losing $3.5 billion to impostor scams in 2025, and nearly one in three fraud reports involved impostors.
Some help exists outside the law. By November 2023, banks in the Zelle network had begun refunding some impostor scam victims, including people who paid scammers posing as government officials, a bank or an existing service provider. Banks offer this voluntarily, so they can change it. CFPB complaint data for 2025 shows companies often denied liability for scam losses.
Why speed matters
Waiting hurts either way. For an unauthorized transfer, Regulation E ties how much of the loss you carry to how fast you report it, and each missed deadline can raise what you owe. Banks must extend those deadlines when extenuating circumstances caused the delay. For a payment you were tricked into sending, every hour gives the scammer more time to move the money. Critics also point out that Zelle moves money almost instantly and its payments can't be reversed.
Credit cards work differently. Under Regulation Z, you owe the lesser of $50 or the amount charged for unauthorized charges.
What to do
The alert box above lists the steps. The short version is to report any suspect transfer to your bank right away and never move money because a caller said to. Your bank will never ask you to send money to yourself. If anyone does, hang up and call your bank. If you also have a brokerage account, you can name a trusted contact so the firm has someone to call if a withdrawal looks suspicious.
What happens next
Regulators and courts are still arguing over this gap. The CFPB sued Zelle's operator, Early Warning Services, and three of its owner banks on December 20, 2024, then dropped the case in March 2025. New York's attorney general filed a separate lawsuit, and on July 20, 2026, a state judge let most of it move forward. What remains to be seen is how that case plays out and whether banks change their voluntary refund policies for impostor scams.
The takeawayReport any odd Zelle transfer to your bank at once, and never send money to yourself or a new account because a caller told you to.