2.1 Regulation E: Coverage and Consumer Disclosures

Key Takeaways

  • Regulation E principally protects electronic transfers involving consumer asset accounts.

  • Initial disclosures explain liability, transfer limits, fees and error-resolution rights.

  • Compulsory recurring electronic repayment is restricted even when a lender prefers automated collection.

Last updated: October 2026

Statutory Authority and Regulatory Scope

The fundamental mandate of Regulation E is the protection of individual consumers who initiate electronic transfers of funds. An electronic fund transfer (EFT) is defined under 12 CFR § 1005.3(b) as any transfer of funds that is initiated through an electronic terminal, telephone, computer, or magnetic tape/chip for the purpose of ordering, instructing, or authorizing a financial institution to debit or credit a consumer's asset account.

Covered Accounts and Inclusions

Regulation E protections apply exclusively to consumer asset accounts held directly or indirectly by a financial institution and established primarily for personal, family, or household purposes. Covered accounts include:

  • Consumer Demand Deposit (Checking) Accounts: Standard transaction accounts used for everyday consumer debit and electronic disbursements.
  • Savings and Money Market Deposit Accounts: Consumer interest-bearing savings accounts subject to electronic deposits or withdrawals.
  • Payroll Card Accounts: Accounts established directly or indirectly through an employer to which electronic fund transfers of consumer wages, salary, or compensation are made on a recurring basis.
  • Prepaid Accounts: General-purpose reloadable cards, digital mobile wallets holding consumer stored-value funds, and government benefit disbursement accounts.
  • Electronic Check Conversion (ECK): Transactions where a merchant or billing party captures routing, account, and serial numbers from a consumer's paper check to initiate a one-time electronic debit. This includes accounts receivable conversion (ARC), point-of-purchase conversion (POP), and back-office conversion (BOC).

Statutory and Regulatory Exclusions

Compliance officers must distinguish covered EFT activity from transactions expressly excluded under 12 CFR § 1005.3(c):

  • Commercial and Business Accounts: Accounts maintained by corporations, partnerships, limited liability companies, sole proprietorships, or associations for business or agricultural purposes are completely exempt from Regulation E.
  • Wire Transfers: Wholesale electronic fund transfers executed through Fedwire or similar interbank communication networks (such as CHIPS) are excluded under § 1005.3(c)(3) and are instead governed by Uniform Commercial Code (UCC) Article 4A and Federal Reserve Regulation J.
  • Internal Intra-Bank Transfers: Automatic transfers between a consumer's own accounts within the same depository institution, or transfers between a consumer and immediate family members within the same bank.
  • Securities and Commodities Transfers: Transfers conducted primarily for the purchase or sale of securities or commodities through a broker-dealer registered with the Securities and Exchange Commission (SEC) or the Commodity Futures Trading Commission (CFTC).
  • Fiduciary Trust Accounts: Deposit accounts administered by a financial institution's trust department under formal fiduciary agreements.

Initial Disclosures (12 CFR § 1005.7)

Depository institutions must provide clear, written initial disclosures at the time a consumer contracts for an EFT service or before the first electronic transfer is executed. The disclosures must be delivered in a retainable format.

Ten Mandatory Initial Disclosure Items

Under 12 CFR § 1005.7(b), the initial disclosure statement must incorporate the following ten disclosures:

  1. Consumer Liability Summary: A comprehensive explanation of the consumer's liability for unauthorized transfers under 12 CFR § 1005.6, including notification procedures and potential loss thresholds.
  2. Contact Information for Notice: The specific telephone number and postal address of the bank office to be notified when the consumer believes an access device has been lost or stolen, or that an unauthorized EFT has occurred.
  3. Business Days: The financial institution's official business days (days when the institution is open to the public for substantially all business functions, including relevant back-office operations).
  4. Permitted Transfer Types and Limits: The types of EFTs the consumer is authorized to initiate and any restrictions on transfer frequency or dollar amounts (e.g., daily ATM withdrawal caps or point-of-sale limits).
  5. Fee Schedule: An itemization of all fees charged by the financial institution for initiating EFTs or maintaining the right to execute EFTs, accompanied by an explicit notice that third-party ATM operators may assess an independent surcharge.
  6. Documentation Rights: A summary of the consumer's right to obtain terminal receipts and periodic account statements under § 1005.9, as well as confirmation notices for preauthorized transfers.
  7. Stop-Payment Rights and Procedures: The consumer's right to stop payment of preauthorized electronic fund transfers, the procedural requirements, deadlines, and any associated fees.
  8. Financial Institution Liability: A summary of the institution's statutory liability to the consumer under EFTA Section 910 for damages caused by the bank's failure to initiate or stop transfers in accordance with terms.
  9. Confidentiality and Third-Party Sharing: The specific circumstances under which the institution will disclose information regarding the consumer's account to third parties in the ordinary course of business.
  10. Error Resolution Notice: An explanatory notice substantially identical to Model Form A-3 detailing the consumer's error reporting rights and the institution's investigatory obligations under § 1005.11.

Change in Terms Notices (12 CFR § 1005.8)

Institutions must implement strict change-management protocols to identify changes in account terms that trigger advance disclosure requirements.

21-Day Advance Notice Trigger

A depository institution must mail or deliver a written or electronic notice to consumers at least 21 calendar days prior to the effective date of any change in term that:

  • Increases fees or charges for EFTs;
  • Increases consumer liability for unauthorized EFTs;
  • Reduces the available types of electronic fund transfer services; or
  • Imposes stricter limitations on the frequency or dollar amount of transfers.

Immediate Security Exception

Advance 21-day notice is not required when an immediate change in terms or conditions is necessary to maintain or restore the security of an electronic fund transfer system or a consumer account. However, if the institution makes the security-related change permanent, written notice must be furnished on or with the next regularly scheduled periodic statement or within 30 calendar days after making the change permanent, unless disclosure would compromise the security of the system.

Test Your Knowledge

Under 12 CFR § 1005.8, a depository institution must provide a written change-in-terms notice at least 21 calendar days prior to the effective date of which of the following account modifications?

A

A temporary reduction in the daily ATM cash withdrawal limit implemented to protect customer accounts during hurricane-related communications outages.

B

A routine administrative change in the physical address of the financial institution's main administrative headquarters.

C

An increase in the per-transaction fee assessed to consumers for out-of-network automated teller machine cash withdrawals.

D

An immediate system shutdown executed to contain a cybersecurity breach on the automated teller machine network.

Test Your Knowledge

Which of the following electronic transactions is completely exempt from the coverage and disclosure requirements of Regulation E (12 CFR Part 1005)?

A

A point-of-sale debit card transaction initiated by a consumer at a grocery store checkout terminal using a PIN.

B

An electronic check conversion (POP) transaction where a merchant captures check data to initiate an electronic debit against a consumer checking account.

C

A consumer preauthorized recurring ACH monthly utility bill payment debited from a personal checking account.

D

A wholesale funds transfer initiated by a corporate business customer executed through the Federal Reserve's Fedwire funds service.

Sections you finish are checked off in the contents.