10.1 Regulation E (12 CFR 1005): Consumer Protections, Disclosures & Error Resolution

10.1 Regulation E (12 CFR 1005): Consumer Protections, Disclosures & Error Resolution

Core Principle: The Electronic Fund Transfer Act (EFTA) (15 U.S.C. § 1693 et seq.), implemented by the Consumer Financial Protection Bureau (CFPB) through Regulation E (12 CFR Part 1005), establishes the foundational legal framework governing consumer rights, financial institution liabilities, and operational procedures for electronic fund transfers (EFTs). In the ACH Network, Regulation E provides non-waivable statutory protections to individual consumers that supersede conflicting private contract rules or clearinghouse arrangements.

---

1. Statutory Scope & Account Classifications

Regulation E applies strictly to any Electronic Fund Transfer (EFT) that authorizes a financial institution to debit or credit a consumer asset account established primarily for personal, family, or household purposes.

+---------------------------------------------------------------------------------------------------------+
|                                    REGULATION E APPLICABILITY SCOPE                                     |
+---------------------------------------------------------------------------------------------------------+
| COVERED CONSUMER ACCOUNTS                               | EXCLUDED COMMERCIAL & ENTITY ACCOUNTS         |
+---------------------------------------------------------+-----------------------------------------------+
| • Consumer Checking & Demand Deposit Accounts (DDA)     | • Corporate & Commercial Checking Accounts    |
| • Consumer Savings & Money Market Deposit Accounts      | • Sole Proprietorship Operating Accounts      |
| • Payroll Card Accounts (established through employers) | • Partnership, LLC, and Corporate Accounts    |
| • Government Benefit Accounts (e.g., Direct Express)    | • Trust, Escrow, and Fiduciary Accounts       |
| • Consumer Prepaid & Digital Wallet Stored-Value Accts  | • Municipal and Non-Profit Entity Accounts    |
+---------------------------------------------------------+-----------------------------------------------+

Critical Statutory Distinctions for the AAP Exam

• Consumer vs. Business Coverage: Regulation E applies only to consumer accounts. Commercial entities, corporations, partnerships, and sole proprietorships operating business accounts have no statutory protection under Regulation E. Commercial ACH transfers are governed instead by the Uniform Commercial Code (UCC) Article 4A and the Nacha Operating Rules.
• ACH Standard Entry Class (SEC) Codes: Regulation E governs consumer-facing SEC codes such as PPD (Prearranged Payment and Deposit), WEB (Internet-initiated Entries), TEL (Telephone-initiated Entries), POP (Point-of-Purchase), ARC (Accounts Receivable), and BOC (Back Office Conversion). Commercial SEC codes such as CCD (Corporate Credit or Debit) and CTX (Corporate Trade Exchange) are strictly excluded from Regulation E.

---

2. Compulsory Use Prohibition (12 CFR § 1005.10(e))

To prevent predatory commercial practices and protect consumer autonomy in the banking system, Regulation E explicitly prohibits two categories of compulsory electronic fund transfers:

A. Credit Conditioning Prohibition (§ 1005.10(e)(1))

No creditor may condition an extension of credit to a consumer on the consumer's repayment by preauthorized electronic fund transfers.

• The Rule: A lender cannot mandate that a borrower agree to automatic recurring ACH debits as a mandatory requirement for loan approval.
• Permissible Incentives: A creditor is permitted to offer voluntary incentives (e.g., a 0.25% interest rate discount) if the borrower chooses to enroll in automated recurring ACH payments, provided the borrower retains the right to opt out and pay via manual check or bill payment at standard rates.
• Statutory Exception: Overdraft credit plans linked to transaction accounts may require preauthorized transfers to cover overdrafts as an automatic feature of the account agreement.

B. Employment & Government Benefit Conditioning (§ 1005.10(e)(2))

No employer or government agency may require a consumer to establish an account for receipt of electronic fund transfers with a particular financial institution as a condition of employment or receipt of a government benefit.

• Employer Mandates: An employer can mandate Direct Deposit as a condition of employment, but the employer cannot dictate which bank or credit union the employee must use.
• Payroll Cards: If an employer offers payroll disbursement via payroll card accounts, the employer must provide employees with a choice (e.g., Direct Deposit to an institution of the employee's choice or a physical paper paycheck).

+---------------------------------------------------------------------------------------------------------+
|                                 COMPULSORY USE RESTRICTIONS (§ 1005.10(e))                              |
+---------------------------------------------------------------------------------------------------------+
| PROHIBITED ACTIVITY                                     | PERMISSIBLE COMPLIANT ALTERNATIVE             |
+---------------------------------------------------------+-----------------------------------------------+
| Requiring auto-ACH debits to obtain a mortgage or loan. | Offering an optional rate discount for auto-ACH.|
| Requiring employees to bank at Company Bank ABC.       | Mandating direct deposit to ANY bank chosen.  |
| Forcing payroll cards with no other deposit option.     | Offering payroll card OR paper check option.  |
+---------------------------------------------------------+-----------------------------------------------+

---

3. Preauthorized Electronic Fund Transfers (12 CFR § 1005.10(b)-(d))

A Preauthorized Electronic Fund Transfer is defined as an electronic fund transfer authorized in advance to recur at substantially regular intervals (e.g., monthly mortgage payments, recurring utility debits, monthly gym memberships).

A. Written Authorization & Authentication (§ 1005.10(b))

• Preauthorized EFTs from a consumer account must be authorized by the consumer in writing or electronically via a method compliant with the Electronic Signatures in Global and National Commerce Act (E-SIGN Act).
• The authorization must be readily identifiable as an EFT authorization and clearly state its terms (amount, recurrence schedule, payee identity).
• The party obtaining the authorization (the Originator) must provide a copy of the authorization to the consumer at the time it is executed.

B. Consumer Right to Stop Payment (§ 1005.10(c))

• Notice Window: A consumer has the statutory right to stop payment of a preauthorized EFT by notifying the RDFI orally or in writing at least three (3) business days before the scheduled transfer date.
• Written Confirmation Mandate: If the consumer provides oral stop payment notice, the RDFI may require the consumer to provide written confirmation within fourteen (14) calendar days of the oral notice, provided the RDFI informs the consumer of this requirement and gives the address where confirmation must be sent at the time of the oral notification.
• Effect of Failure to Confirm: If the RDFI requires written confirmation and the consumer fails to provide it within 14 calendar days, the oral stop payment order ceases to be binding, and the RDFI is not liable for posting subsequent transfers.
• Nacha Rule Alignment: Under Nacha Operating Rules, a stop payment order on a consumer account remains effective until the earliest of: (1) withdrawal by the Receiver, (2) return of the debit entry, or (3) for recurring entries, until all future entries are stopped or six months elapse (unless renewed in writing).

C. Notice of Varying Amounts (§ 1005.10(d))

• When a preauthorized EFT from a consumer account will vary in amount from the previous transfer under the same authorization or from the preauthorized amount, the Originator (or designated payee) must send written notice of the amount and scheduled transfer date at least ten (10) calendar days before the scheduled transfer.
• Alternative Range Option: The Originator may allow the consumer to establish an acceptable range of amounts (or specify minimum/maximum thresholds). In this case, 10-day advance notice is required only when a transfer falls outside the agreed-upon range.

---

4. Consumer Liability for Unauthorized Transfers (12 CFR § 1005.6)

An Unauthorized Electronic Fund Transfer is an EFT from a consumer's account initiated by a person other than the consumer without actual authority to initiate the transfer and from which the consumer receives no benefit. It does not include transfers initiated by a person who was furnished the access device by the consumer unless the consumer has notified the financial institution that transfers by that person are no longer authorized.

Regulation E establishes two distinct liability frameworks depending on whether an access device (such as a debit card or PIN) was involved or whether the unauthorized transfer occurred without an access device (such as an unauthorized ACH debit initiated using the consumer's routing and account number).

+---------------------------------------------------------------------------------------------------------+
|                           CONSUMER STATUTORY LIABILITY TIERS (12 CFR § 1005.6)                          |
+---------------------------------------------------------------------------------------------------------+
| SCENARIO / NOTICE TIMELINE                 | STATUTORY LIABILITY LIMITATION                             |
+--------------------------------------------+------------------------------------------------------------+
| TIER 1: Notice within 2 Business Days      | Lesser of $50 OR total unauthorized transfers occurring    |
| (Loss/theft of access device)              | before notice is provided to the financial institution.    |
+--------------------------------------------+------------------------------------------------------------+
| TIER 2: Notice between 2 Business Days &   | Lesser of $500 OR the sum of:                              |
| 60 Calendar Days from Statement            | • $50 (or actual unauthorized transfers within first 2 days)|
| (Loss/theft of access device)              | PLUS unauthorized transfers occurring after 2 business days|
|                                            | and before notice, up to the $500 statutory cap.           |
+--------------------------------------------+------------------------------------------------------------+
| TIER 3: Notice AFTER 60 Calendar Days      | UNLIMITED LIABILITY for unauthorized transfers occurring   |
| from transmittal of Periodic Statement    | AFTER the close of the 60-day statement period until notice|
| (Loss/theft of access device)              | is provided (plus Tier 1 or Tier 2 liability for transfers |
|                                            | occurring during the initial 60-day period).               |
+--------------------------------------------+------------------------------------------------------------+
| ACH DEBITS WITHOUT ACCESS DEVICE           | • ZERO LIABILITY for all unauthorized transfers occurring  |
| (Initiated via Routing / Account Number)   |   within 60 calendar days of statement transmittal.        |
|                                            | • UNLIMITED LIABILITY only for transfers occurring AFTER   |
|                                            |   the 60-day statement period if FI proves notice would     |
|                                            |   have prevented subsequent unauthorized transfers.        |
+--------------------------------------------+------------------------------------------------------------+

Extenuating Circumstances Exception

If the consumer's delay in notifying the financial institution within statutory timeframes was caused by extenuating circumstances (e.g., extended travel, hospitalization, severe medical emergency), the institution must extend the notification timelines to a reasonable period.

---

5. Error Resolution Procedures (12 CFR § 1005.11)

Regulation E Section 1005.11 establishes strict procedural timelines and obligations when a consumer asserts that an error has occurred on their asset account.

A. Definition of "Error" (§ 1005.11(a))

An error includes:

1. An unauthorized electronic fund transfer.
2. An incorrect electronic fund transfer to or from the consumer's account.
3. The omission of an EFT from a periodic account statement.
4. A computational or bookkeeping error made by the financial institution.
5. The consumer's receipt of an incorrect amount of money from an electronic terminal.
6. An electronic fund transfer not identified in accordance with § 1005.9 or § 1005.10(a).
7. A consumer's request for additional information or documentation concerning an EFT. (Note: Routine balance inquiries or pre-authorized transfer verification inquiries do not constitute errors.)

B. Consumer Notice of Error (§ 1005.11(b))

• Notice Window: The consumer must notify the financial institution within sixty (60) calendar days after the institution transmits the periodic statement showing the alleged error.
• Notice Content: The consumer must provide their name, account number, description of the error, and the type, date, and dollar amount of the error.
• Oral vs. Written Notice: An institution may require written confirmation of an oral notice of error within ten (10) business days, provided the consumer is informed of this requirement at the time of oral notification.

C. Investigation & Provisional Credit Timelines (§ 1005.11(c))

+---------------------------------------------------------------------------------------------------------+
|                                 ERROR RESOLUTION OPERATIONAL TIMELINES                                  |
+---------------------------------------------------------------------------------------------------------+
| Event / Action                                          | Regulatory Timeline (12 CFR § 1005.11)        |
+---------------------------------------------------------+-----------------------------------------------+
| Consumer notice of error to RDFI                        | Within 60 calendar days of statement date.    |
| Standard investigation completion                       | Within 10 business days (20 for new accounts).|
| Provisional credit posting (if investigation extended)  | Within 10 business days of notice receipt.    |
| Notice to consumer of provisional credit                | Within 2 business days of posting credit.     |
| Extended investigation completion                       | Within 45 calendar days (90 for POS/foreign). |
| Written explanation / findings to consumer              | Within 3 business days of concluding review.  |
| Honoring third-party drafts after provisional debit     | 5 business days without overdraft fees.       |
+---------------------------------------------------------+-----------------------------------------------+

D. Concluding the Investigation & Post-Resolution Actions

1. If an Error Occurred:

• The institution must correct the error within one (1) business day after determining that an error occurred (including crediting full interest and refunding all associated fees/overdraft charges).
• The institution must deliver written notice of the correction to the consumer within three (3) business days of concluding the investigation, making any provisional credit permanent.

2. If No Error (or a Different Error) Occurred:

• The institution must deliver or mail a written explanation of its findings to the consumer within three (3) business days of completing the investigation.
• The explanation must inform the consumer of their right to request copies of the documents the institution relied upon in making its determination.
• Debiting Provisional Credit: The institution may debit the provisional credit previously provided, but it must:
  1. Provide immediate written notice to the consumer stating the date and amount of the debit.
  2. Inform the consumer that the institution will honor checks, drafts, and preauthorized debits payable to third parties without assessing overdraft fees for five (5) business days after sending the notice, up to the amount of the debited provisional credit.

---

6. Comparison: Regulation E vs. Nacha Operating Rules

While Regulation E establishes statutory federal rights between the consumer and the RDFI, the Nacha Operating Rules govern the interbank clearing obligations between the RDFI, ODFI, and Originator.