A phone call that sounds exactly like your bank or even your grandchild can feel real in every way. In many recent scams, callers use AI to clone voices and create urgency, pushing you to move money fast. What follows often looks like a voluntary transfer, but the law may treat it differently. As these scams spread, the question becomes whether those losses count as unauthorized under the Electronic Fund Transfer Act (EFTA).
When a fake voice feels real
Deepfake voice scams often rely on pressure and precision. A caller may mimic a bank security officer and claim your account faces a breach. Another version copies a family member’s voice and asks for emergency funds. In both cases, the goal involves getting you to approve a transfer that you would not have made with accurate information.
This matters because the EFTA focuses on whether you truly authorized the transfer. When consent results from deception, it may not count as valid authorization. For example, moving money after a fake fraud alert or sending funds based on a cloned voice can raise questions about whether the transaction fits the definition of “unauthorized.” As a result, banks may still have obligations to investigate and potentially reimburse those losses.
Key deadlines that shape your claim
EFTA protection depends heavily on timing, and missing deadlines can affect how much money you recover or whether the bank investigates at all. The rules may feel technical, but they directly impact your rights after a scam.
Understanding these time limits can help you see how your situation may be evaluated:
- Reporting an unauthorized transaction within 60 days of the statement date can preserve your right to a bank investigation.
- Missing the 60-day window can allow the bank to deny the claim without reviewing the transaction.
- Reporting a lost or stolen debit card within two days can limit your loss to $50.
- Waiting longer but still reporting within 60 days can increase your possible loss up to $500.
After 60 days, losses may become unlimited because the bank can refuse to reverse the transaction.
Once you report the issue, the bank generally has 10 business days to investigate. It must share the results within three days after finishing its review.
If the bank finds an error, it must fix it within one business day. In some situations, the review can take up to 45 days, but the bank may temporarily credit the disputed funds while it continues the investigation.
A “yes” shaped by deception
Deepfake scams blur the line between voluntary action and manipulation. While you may have approved the transaction, the approval often stems from false information crafted to mislead. That distinction can shape how financial institutions evaluate liability under the EFTA.
As AI-driven scams evolve, your response and documentation may carry more weight than ever. Acting quickly, keeping records and identifying how the deception occurred can influence whether those losses receive protection.