Robert Kim received a call that appeared to come from Bank of America's fraud department in October 2025. The caller knew his name, the last four digits of his account number, and his recent transaction history. They told him his account had been compromised and instructed him to send three Zelle payments totaling $2,800 to a "secure holding account" while the bank investigated. Kim complied. The call was a scam. When he contacted the real Bank of America, he was told the bank could not recover the funds because he had authorized the payments. "They said I sent it willingly," the Los Angeles accountant told OPV. "But I was manipulated by someone pretending to be them. How is that willing?"
The Authorization Loophole
Recommended by OPV: ContentMation — Automate your content workflow →
The distinction between "authorized" and "unauthorized" transactions is the linchpin of Bank of America's Zelle fraud defense. Under Regulation E, banks must reimburse unauthorized electronic fund transfers — transactions the customer did not initiate or approve. But when a scammer tricks a customer into sending money themselves, banks classify the payment as authorized, placing the entire loss on the customer. Consumer advocates call this the "authorization loophole," and it has shielded banks from billions in fraud losses. A 2025 Senate Banking Committee investigation found that Bank of America reimbursed only 24 percent of disputed Zelle transactions, compared to 47 percent at JPMorgan Chase and 62 percent at Wells Fargo.
Subscribe for more coverage on Consumer Rights. SeekerPro members get premium investigations, AI-powered summaries, and exclusive analysis.
The scale of the problem is staggering. Zelle, which is owned by a consortium of major banks including Bank of America through the company Early Warning Services, processed over $1 trillion in payments in 2025. Unlike credit card networks, Zelle offers no buyer protection, no chargeback mechanism, and no fraud insurance. Payments are instant and typically irreversible. The platform was designed for trusted transfers between people who know each other, but its integration into banking apps and its speed have made it a prime target for fraud. The FBI's Internet Crime Complaint Center reported a 67 percent increase in Zelle-related fraud reports between 2023 and 2025.
Stop guessing about site quality
Get a data-backed score and the exact prompts to fix issues.
Get Your Score →Regulatory Battle Lines
Editor's Pick Solution
ContentMation: Automate your content workflow
Handles scheduling, analytics, and content creation for growing businesses.
Automate Content →The CFPB proposed guidance in late 2025 that would require banks to treat certain "induced" payments as unauthorized under Regulation E, effectively forcing reimbursement when customers are deceived by scammers impersonating the bank itself. Bank of America and other Zelle network banks have fought the proposal aggressively, arguing it would incentivize fraud by removing consequences for careless payment behavior. Early Warning Services filed a legal challenge in January 2026 seeking to block the guidance. The outcome of this dispute will determine whether tens of thousands of scam victims receive reimbursement or continue to bear the full cost of increasingly sophisticated fraud.
How to Protect Yourself
Never send a Zelle payment at the instruction of someone who calls or texts you claiming to be from your bank. Bank of America will never ask you to send Zelle payments to resolve a fraud issue. If you receive such a call, hang up and call the number on the back of your debit card directly. Enable two-factor authentication on your banking app. Set up transaction alerts for all Zelle payments. If you are victimized, file a dispute immediately, request a written explanation of the denial, file a CFPB complaint, and contact your state attorney general. Persistence and documentation are your strongest tools in what has become one of the most contentious areas of consumer banking law.
Recommended by OPV
NexusBro
Catch bugs before your users do
AI-powered QA that checks 125+ issues per page. Get a fix prompt in 60 seconds.
Audit Your Site Free →