The Electronic Fund Transfer Act (EFTA) is a United States federal law that establishes the basic rights, liabilities and responsibilities of consumers who initiate electronic fund transfers through an electronic terminal, telephone, computer or magnetic stripe card. It is implemented through Regulation E, issued by the Federal Reserve Board and now administered by the Consumer Financial Protection Bureau, which sets out the detailed compliance requirements financial institutions must follow.
The law's primary objective is to protect individual consumers who open a deposit account primarily for personal, family or household purposes, covering transactions such as ATM withdrawals, debit card purchases, direct deposits, and preauthorized recurring transfers.
EFTA in plain terms
EFTA is the legal foundation behind many of the protections consumers take for granted when using a debit card or online banking — limits on how much you can lose if your card is stolen and used fraudulently, a defined process for disputing an error, and required disclosure of fees and terms before you ever sign up for electronic transfer services.
Without EFTA, the rules around who bears the loss from an unauthorized electronic transaction would be left largely to each bank's own policies rather than a uniform, legally enforceable standard.
Key protections under EFTA and Regulation E
EFTA limits a consumer's liability for unauthorized transactions, with the exact cap depending on how quickly the loss or theft is reported; requires financial institutions to follow a defined error resolution process for disputed transactions; and mandates clear disclosure of terms, fees and the consumer's rights at account opening.
Scope of coverage
EFTA covers most electronic transfers to and from consumer deposit accounts but notably excludes wire transfers, checks, and other paper-based instruments, which are instead governed by separate bodies of law such as the Uniform Commercial Code.
EFTA and emerging payment methods
As new electronic payment methods such as mobile wallets and person-to-person payment apps have emerged, regulators have worked to clarify how EFTA's existing framework of error resolution and liability protection applies to these newer technologies, extending the law's core consumer protections to payment methods that did not exist when it was originally enacted.
EFTA's liability tiers based on reporting speed
EFTA sets graduated liability limits for unauthorized transactions depending on how quickly the loss is reported: a consumer who reports a lost or stolen card within two business days faces a maximum liability of $50, while delayed reporting can expose the consumer to considerably higher liability, up to the full amount lost in the most delayed cases, which is why prompt reporting is explicitly incentivized under the statute.
EFTA and preauthorized recurring transfers
EFTA specifically addresses preauthorized recurring electronic transfers, such as automatic bill payments, requiring that a consumer be notified in advance if the amount of a recurring transfer varies from the previous payment by more than a specified range, giving consumers advance warning before an unexpectedly larger automatic withdrawal hits their account.
EFTA's periodic statement requirements
EFTA requires financial institutions to send consumers a periodic statement for accounts accessed by electronic fund transfers, clearly itemizing transfers, fees and the account balance, giving consumers the documentation needed to actually spot and report an error or unauthorized transaction within the law's protective timeframes.
Consumers who switch to paperless statements still retain these same protections, provided the electronic statement remains genuinely accessible and the consumer has properly consented to receiving it in that format.