Zelle, Venmo, Cash App: Your Rights When a Payment Goes Wrong (Errors vs Scams)
A payment app can move money in seconds and make it nearly impossible to get back. Whether you're protected depends on one question: who pressed send? Here is how the rules sort it out, and what to do fast.
📑 On this page ▼
📐 Figures verified Sep 28, 2026 against Regulation E's liability limits for unauthorized transfers (12 CFR 1005.6) and its error-resolution rules (12 CFR 1005.11), and the FTC's and FBI's guidance on reporting scams. App-specific refund and purchase-protection programs change; check your app's current terms. How we check numbers →
Your rights depend on who sent the money. If someone else sent it from your account without permission, federal rules cap your loss at $50 to $500 when you report quickly. If a scammer tricked you into sending it yourself, the law generally treats it as authorized, so refunds are up to the app or bank. Report fast either way, and never pay strangers by app.
Numbers That Matter
| Figure | Amount | Source | Verified |
|---|---|---|---|
| Your loss for an unauthorized transfer, reported within 2 business days of learning of a lost or stolen access device | Up to $50 | Regulation E, 12 CFR 1005.6 | Sep 28, 2026 |
| Reported later, within 60 days of the statement | Up to $500 | Regulation E, 12 CFR 1005.6 | Sep 28, 2026 |
| Reporting an error or unauthorized transfer | Within 60 days of the statement showing it | Regulation E, 12 CFR 1005.11 | Sep 28, 2026 |
| Bank investigation | 10 business days, or up to 45 days with provisional credit | Regulation E, 12 CFR 1005.11 | Sep 28, 2026 |
| Reporting a scam | File with the FTC at ReportFraud.ftc.gov | FTC | Sep 28, 2026 |
| Reporting internet fraud | File with the FBI's Internet Crime Complaint Center | FBI IC3 | Sep 28, 2026 |
Three Kinds of "Gone Wrong"
| What happened | Legal protection | Your best move |
|---|---|---|
| Unauthorized: someone else sent money from your account, such as a thief with your phone or login | Strong: Regulation E caps your loss and requires an investigation | Report to your bank and the app immediately, in writing |
| A scam: you sent the money yourself because someone lied to you | Weak: generally treated as authorized, so refunds are voluntary | Report to the bank and app, then the FTC and IC3; ask for a reversal anyway |
| Your own mistake: wrong phone number or amount | Weak: often no right to a refund | Ask the app to contact the recipient and ask the recipient to return it |
| A system error: the app sent the wrong amount or charged twice | Strong: an error the institution must investigate and correct | Report within 60 days of the statement |
How the Liability Limits Work
Regulation E covers electronic transfers from consumer accounts, including many payment-app transfers funded from a bank account or an app balance. For unauthorized transfers involving a lost or stolen phone, card or login, your loss is limited to $50 if you tell the institution within two business days of learning of it, and up to $500 if you wait longer. If you don't report an unauthorized transfer within 60 days of the statement showing it, you can be liable for later transfers you could have stopped. Speed is the whole game.
Why Scams Are Different
When a fake landlord, seller or "bank employee" talks you into sending money, you authorized the transfer, even though you were deceived. That generally puts it outside Regulation E's unauthorized-transfer protection. Some banks and payment networks have voluntarily reimbursed certain impostor scams, and some apps offer purchase protection only for payments marked as goods and services, but there's no general legal right to a refund. If a scammer got your login and sent the money themselves, though, that's unauthorized, so say exactly what happened.
What to Do Right Away
- Report to your bank and the app within hours, by phone and in writing, and ask them to stop or reverse the payment.
- Say which kind it was: unauthorized, scam, mistake or system error. The right label decides your rights.
- Secure your accounts: change passwords, turn on two-factor login and remove unknown devices.
- Report scams to the FTC and the FBI's IC3, and to local police if a lot of money is involved.
- Watch for recovery scams: anyone promising to get your money back for a fee is usually running a second scam.
Worked Example: Three Payments Gone Wrong
- Stolen phone: a thief sends $600 from Morgan's account. Reported within two business days, Morgan's loss is capped at $50, so $550 comes back; waiting weeks could raise the cap to $500.
- Rental scam: Jess sends a $1,200 deposit to a fake landlord. Because Jess sent it, the bank isn't required to refund it; Jess reports it anyway and files with the FTC and IC3.
- Typo: Sam sends $85 to a wrong phone number. The app can contact the recipient, but getting it back depends on their honesty.
Outcomes depend on the facts and on each app's and bank's policies. The people are illustrations.
Decision Rules
If this, then that
- If money left your account without your OK → report within two business days to keep your loss at $50 or less.
- If you were tricked into sending it → report anyway and ask for a reversal; also file with the FTC and IC3.
- If you're paying someone you don't know → use a credit card or a protected checkout, not a payment app.
- If the app made the error → report it within 60 days of the statement.
- If someone offers to recover your money for a fee → it's almost certainly another scam.
Mistakes to avoid
- Waiting to report because you're embarrassed.
- Calling a scam "unauthorized" when you sent it; be accurate, or your claim can fail.
- Paying strangers for tickets, rentals or puppies with a payment app.
- Skipping the written follow-up after a phone report.
- Trusting a caller who says they're from your bank's fraud team.
Related: credit freezes and fraud alerts stop new accounts in your name; government impostor scams covers a common setup; is your fintech app a bank? covers where app money sits; and the Scam-Readiness Checkup scores your defenses.