Zelle Scam: Common Types, Legal Rights, and Recovery Options

In impersonation scams, a fraudster contacts the victim by phone, text, or email while posing as a bank fraud department, the IRS, the Social Security Administration, or another government agency. The fraudster claims the victim's account is at immediate risk and instructs them to transfer funds to a "safe" account through Zelle. Because the victim initiates the transfer believing it is a protective measure, the bank may classify the payment as authorized, which directly affects the victim's refund rights under federal law.

Romance scams involve a fraudster who develops a fictitious personal relationship with the victim over weeks or months before requesting Zelle transfers. Investment scams, sometimes called pig-butchering fraud, follow a similar pattern: the fraudster builds trust, proposes a high-return opportunity, collects multiple Zelle payments, and then vanishes. These scams typically involve repeated transfers and larger cumulative losses than single-transaction fraud.

Under EFTA, an "unauthorized electronic fund transfer" is one initiated by a person other than the consumer without actual authority, from which the consumer receives no benefit. When a fraudster accesses a consumer's account without permission and initiates a Zelle transfer, that payment is unauthorized. EFTA requires the bank to reimburse the consumer, subject to the reporting deadlines described below.

A more contested category involves fraud-induced transfers, where the consumer personally initiates the Zelle payment but does so because a scammer deceived them. Banks have historically argued that a consumer-initiated payment is "authorized" under EFTA regardless of the deception behind it.

The Consumer Financial Protection Bureau (CFPB) has challenged that interpretation in regulatory guidance and enforcement activity. The CFPB has taken the position that certain fraud-induced transfers may qualify as unauthorized under EFTA when the consumer was manipulated through impersonation or false pretenses. Whether that position succeeds in a given case turns on the specific facts of the transaction.

EFTA limits a consumer's liability for unauthorized transfers based on how quickly the consumer reports the loss to the bank:

These limits apply to transfers the bank classifies as unauthorized. Reporting beyond 60 days from the relevant statement may eliminate reimbursement rights entirely for transfers in that period. The same principle applies regardless of scam type: earlier reporting preserves more protection under federal law.

Major U.S. .anks operating through Zelle have faced sustained regulatory and congressional scrutiny over their reimbursement practices for scam victims. Some large banks now reimburse certain impersonation scam victims as a matter of internal policy, particularly in cases involving bank impersonator fraud. A bank's internal reimbursement policy is not legally binding in the same way that EFTA protections are. Victims whose banks deny a reimbursement request retain the right to escalate through regulatory complaints and, where the facts support it, civil litigation.

A consumer who believes the bank misclassified a fraud-induced transfer may pursue a civil claim under EFTA in federal district court or New York state court. EFTA provides for actual damages, statutory damages between $100 and $1,000 for individual actions, and attorney's fees.

New York General Business Law § 349 provides a separate ground for recovery when a bank's fraud policy or denial process was deceptive or materially misleading. A consumer who establishes a GBL § 349 claim may recover actual damages, a minimum of $50 in statutory damages, and attorney's fees. Compensation for losses in Zelle scam cases may include the transferred amounts and consequential damages where the legal standard is satisfied.

A victim may also pursue a civil claim directly against the fraudster for fraud, conversion, or unjust enrichment under New York common law. Unjust enrichment claims allow a plaintiff to recover funds the defendant received without legal justification, even absent a formal contract. Practical recovery depends on identifying and locating the scammer, which is often difficult when the fraudster operates under a false identity or from outside the United States. A victim can enforce a civil judgment through New York courts once the debtor's assets are located.

Some Zelle scams route funds through third-party accounts held by money mules, individuals who relay stolen funds, knowingly or unknowingly, on behalf of the primary fraudster. If a victim transferred money to a money mule account, that account holder may be identifiable through bank records and subject to civil liability even when the principal fraudster cannot be located.

Zelle fraud may constitute federal wire fraud under 18 U.S.C. § 1343, which carries a maximum sentence of 20 years in federal prison, as well as identity theft and computer fraud offenses. Under New York Penal Law, the same conduct may support prosecution as white collar crime.

Victims should file reports with local law enforcement, the NYDFS, the FTC, and the IC3. Federal or state prosecutors decide whether to bring criminal charges; individual victims do not control that process, but a formal complaint creates an evidentiary record and may support a broader law enforcement investigation.

New York imposes strict deadlines on civil claims. Under EFTA, a civil action must be filed within one year of the date of the violation. New York state fraud claims are subject to a six-year limitations period under CPLR § 213(8), measured from the date the fraud was committed.

When the fraud was concealed and could not have been discovered with reasonable diligence, New York courts apply a two-year discovery rule starting from the date the plaintiff discovered or could have discovered the fraud, whichever period is longer. The deadline that applies depends on the legal theory and the identity of the defendant. The statute of limitations analysis should be completed early in the recovery process to preserve all available options.

Zelle is operated by Early Warning Services, LLC, which is not a financial institution under EFTA. The legal obligation to investigate unauthorized transfers and reimburse consumers falls on the consumer's own bank, not on Early Warning Services.

Reimbursement claims must be directed to the bank that holds the account. If a bank refuses to engage with a valid dispute, a CFPB complaint or NYDFS complaint targets the bank directly and typically produces a written response.

Whether you can recover depends on how the bank classifies the transfer and whether it contests the dispute. When a bank denies reimbursement, New York victims have four main escalation options: a CFPB complaint (which requires a written bank response within 15 days), a NYDFS complaint for New York-supervised banks, a civil claim under EFTA in federal or state court, and a claim under New York GBL § 349 if the bank's denial process itself was deceptive.

Which path is most practical depends on the scam type, the dollar amount, and the specific basis for the bank's denial.

Report to your bank within 2 business days of discovering the loss to limit your liability to $50 for unauthorized transfers. Reporting between 3 and 60 days after the bank statement showing the transfer raises the cap to $500. Reporting after 60 days from the relevant statement may eliminate your right to reimbursement for transfers that occurred after that period. These limits apply only to transfers the bank classifies as unauthorized.

Yes. New York GBL § 349 prohibits deceptive acts and practices by businesses, including financial institutions, and gives individual consumers a private right of action for damages and attorney's fees. New York common law also permits fraud, conversion, and unjust enrichment claims against the scammer or, in appropriate circumstances, against a bank that wrongfully denied a valid claim. The NYDFS accepts consumer complaints against New York-supervised banks and may pursue regulatory action independently of any civil case.

Yes. Filing reports with local police, the FTC, the FBI's IC3, and the NYDFS creates an official record and may contribute to a broader enforcement investigation. Federal wire fraud under 18 U.S.C. § 1343 carries a maximum sentence of 20 years in federal prison, but prosecutors decide whether to bring charges. A formal complaint supports any subsequent civil action and may help law enforcement identify repeat offenders operating across multiple victims.

Under EFTA, a civil action must be filed within one year of the violation. New York state fraud claims are subject to a six-year limitations period under CPLR § 213(8), or two years from the date you discovered or could have discovered the fraud, whichever is longer. Because multiple deadlines may apply and the shortest one controls for some claims, consulting a lawyer promptly preserves the full range of available options.