Zelle scam refund: can you get your money back?

Short answer

If someone else sent the Zelle payment from your account, including someone who tricked you into handing over a login or a texted code, it is an unauthorized transfer and your bank must investigate it under Regulation E. Report it at once, and no later than 60 days after the statement that shows it. If you pressed send yourself after being deceived, Zelle says you may not get the money back.

Everything turns on who pressed send. One case has federal deadlines and liability caps behind it. The other has a network rule.

Unauthorized transfer or a payment you authorized

Zelle uses two words for this. Fraud is when “someone gained access to your bank account” and made a payment, which Zelle says typically qualifies for reimbursement. A scam, in the same wording, is money you knowingly sent without getting what you expected in return.

The line between them sits further over than most people assume. A Zelle payment started by a third party who got into the account through fraudulent inducement, such as a caller posing as your bank who talks you into reading out a texted confirmation code, is still unauthorized: “the transfer is an unauthorized EFT under Regulation E”, says the CFPB in guidance updated June 4, 2021. A consumer fooled into giving up account information has not furnished an access device.

A payment you made yourself falls outside those rules, because an unauthorized transfer has to be initiated by a person other than the consumer (12 CFR 1005.2(m), quoted in the same CFPB FAQ). Zelle puts it bluntly: you “may not be able to get your money back because you technically authorized it”.

One named route remains. Zelle requires participating banks to reimburse “certain qualifying imposter scams where the customer authorized the transaction”, above what the law demands (Zelle). Whether a scam qualifies is a question for your bank, which is also where Zelle sends every report.

There is no undo button behind either case: a payment to an enrolled recipient “cannot be reversed” (Zelle). If the recipient never enrolled, the payment can still be cancelled, which is covered in cancel a Zelle payment and Zelle payment pending.

Regulation E deadlines and liability

At a glance

• Deadline to report an unauthorized transferNo later than 60 days after the bank sends the statement it first appears on
• Form of noticeOral or written; the bank may require written confirmation within 10 business days of an oral notice
• Investigation10 business days, or up to 45 days if the bank provisionally credits the account within 10 business days
• New accounts20 business days and 90 days instead, for transfers within 30 days after the first deposit
• Results and correctionReported within 3 business days of finishing; an error corrected within 1 business day
• Liability, access device lost or stolen$50 if reported within two business days of learning of it, up to $500 after that
• Liability, no access device involvedNone, if you report within 60 days of the statement

Sources: 12 CFR 1005.11 · 12 CFR 1005.6 · CFPB comment for 1005.6 · Checked on September 27, 2026

Three points sit around that table. Your bank cannot make you file a police report before it opens an investigation, and network rules that are less protective than Regulation E do not replace it (CFPB, updated June 4, 2021). If it concludes no error occurred, it owes you a written explanation and must note your right to request the documents it relied on (12 CFR 1005.11, paragraph d-1). And a late report is not automatically lost: the deadlines extend to a reasonable period for extenuating circumstances, which the CFPB illustrates with lengthy travel or hospitalization. Where a bank gives provisional credit while it investigates, it may withhold a maximum of $50 (12 CFR 1005.11, paragraph c-2).

What to do in the first hours and days

Timeline

1. Right awaycease contact with the scammer and call your bank or credit union on the number on your card or in its app
2. In that callask them to reverse the payment and refund the money, and say which case it is, an unauthorized transfer under Regulation E or an imposter scam
3. Same dayif you gave anyone your login, create a new strong password and turn on two-factor authentication
4. Within two business daysof learning a card, PIN, code or login was taken: report it, which is what holds liability to $50
5. Within 10 business dayssend written confirmation of a phoned report if the bank asks for one
6. Within 60 daysof the statement showing the transfer: the outer deadline for an unauthorized transfer
7. After 10 business daysthe bank has a decision, or provisional credit and up to 45 days to finish

Sources: FTC: What To Do if You Were Scammed · 12 CFR 1005.11 · 12 CFR 1005.6 · Checked on September 27, 2026

Keep the paperwork while you do it. The FBI’s IC3 asks victims to retain financial records and communications, and to hand over the scammers’ contact information, the payment details and the texts or emails when they file.

Where to report a Zelle scam

Your bank comes first, because that is where a Zelle report has to go (Zelle). The same page gives Zelle’s own line, 1-844-428-8542, open 8:00 AM to 10:00 PM ET seven days a week apart from Independence Day, Thanksgiving, Christmas and New Year’s Day.

After that, report the scam itself to the FTC at ReportFraud.ftc.gov or to the FBI’s IC3 at ic3.gov (FTC; CFPB, last reviewed July 30, 2026). The CFPB also points to your state attorney general and your local police or sheriff’s office on their non-emergency number. If the complaint is about how your bank handled the claim rather than about the scammer, the CFPB takes complaints on checking and savings accounts and on money transfers, says most companies respond within 15 days, and generally will not take a second complaint about the same problem.

Recovery scams

Warning

Anyone who offers to get your money back for a fee is the second scam. The FTC said on August 3, 2026 that recovery scammers buy lists of people who have already been scammed, pose as a government agency, a consumer group or a law firm, and ask for a retainer, processing or administrative fee: “Never pay up front for a refund”. The FBI says IC3 keeps no social media presence and “will never ask for payment to recover lost funds”. Between January 2025 and July 2026 IC3 logged nearly 61,000 complaints about law enforcement and government impersonation, with losses above $1.6 billion (IC3, September 17, 2026).