What Should Consumers Know about Banking and Financial Institutions?

Banks and credit unions must provide clear written disclosures before opening accounts or changing material terms. Error resolution procedures typically require the institution to acknowledge written complaints within a set timeframe and complete investigation within 45 to 60 days for most electronic transfers. Many state laws, including New York's consumer protection statutes, impose additional requirements for account statements, fee transparency, and dispute handling. Courts in New York often scrutinize whether institutions followed procedural steps—such as timely notice of rate changes or clear identification of fees—because procedural defects can support claims for violation of consumer protection laws or breach of contract.

Failure to disclose material terms or fees can expose an institution to liability for damages, restitution, and statutory penalties. If you discover that an account was opened without proper authorization, fees were charged without clear notice, or account statements contained errors, the institution's procedural failure strengthens your position in a dispute. Documenting your communications with the bank, preserving account statements, and noting the dates you first noticed the problem creates a record that supports your claim if the matter escalates to litigation or regulatory complaint.

After you send written notice of an unauthorized transaction or error, the financial institution must acknowledge receipt within one to five business days and complete its investigation within 45 days (or up to 90 days in certain circumstances). During this period, the bank may provisionally credit your account while investigating. If the investigation finds the transaction was indeed unauthorized or the error was the institution's fault, the credit becomes permanent. Conversely, if the bank concludes the transaction was authorized or the account was accurate, it must explain its findings in writing. Keeping copies of your dispute notice, the bank's response, and any supporting documentation protects your ability to challenge the outcome if you disagree.

If the financial institution's response is inadequate, you can file a complaint with the Consumer Financial Protection Bureau, your state's banking regulator, or the Federal Deposit Insurance Corporation (FDIC) if the institution is federally insured. Many state attorneys general also accept complaints about banking practices. Filing a regulatory complaint creates an official record and may prompt the regulator to investigate the institution's compliance practices. For serious breaches involving fraud, identity theft, or systematic violations, consulting with an attorney experienced in banking and financial institutions law can help you evaluate whether litigation or class action participation is appropriate.

Under the Electronic Funds Transfer Act, if you report unauthorized electronic transfers within two business days of discovering them, your liability is capped at $50. If you delay reporting beyond two business days but within 60 days, your liability may increase to $500. Reporting after 60 days can expose you to unlimited liability for losses that occurred after the 60-day window. Prompt written notification to the bank is essential; a phone call alone may not satisfy the statutory requirement. Documenting the date and method of your report (email, certified mail, or in-person with a dated receipt) protects you if the bank later claims it had no notice.

Banks are required to investigate fraud claims within a reasonable timeframe, and they must provide written findings to you. During the investigation, the institution may place a temporary hold on your account or require additional verification of your identity. Once the investigation concludes, the bank must either credit your account for confirmed unauthorized transactions or explain why it believes the transactions were authorized. If the bank's investigation is incomplete, unreasonable, or contradicted by your evidence (such as a police report or credit bureau documentation of identity theft), you may have grounds to dispute the finding and pursue further remedies through regulatory complaint or litigation. Practitioners in New York have seen cases where delayed or inadequate fraud investigation responses can support claims under the state's consumer protection statutes, particularly when the institution failed to follow its own procedures or ignored red flags of unauthorized activity.

The Consumer Financial Protection Bureau (CFPB) handles complaints about unfair, deceptive, or abusive practices by most financial institutions. The Office of the Comptroller of the Currency (OCC) oversees national banks, while the Federal Reserve supervises state member banks and bank holding companies. The FDIC handles complaints about state-chartered banks that are not members of the Federal Reserve. State banking departments, including New York's Department of Financial Services, regulate state-chartered banks and credit unions operating within their jurisdiction. Filing a complaint with the appropriate regulator creates an official record and may prompt an examination or enforcement action if the regulator finds a pattern of violations.

Regulators can require financial institutions to return funds to consumers, pay restitution for violations, and implement corrective measures to prevent future harm. However, regulatory remedies are typically slower than private litigation, and they do not provide the same monetary damages or attorney's fees that a lawsuit might yield. Regulatory complaints are most effective when combined with direct communication with the institution's compliance department and, if necessary, private legal action. Consulting with an attorney who understands banking and financial services law can help you decide whether to pursue regulatory complaint, litigation, or both. In many cases, regulatory complaints serve as leverage to encourage the institution to settle a dispute or correct an error.