The letter arrives. You read it twice, then a third time.
“After reviewing your claim, we have determined that no error occurred.”
No error occurred. You know what happened. Someone took money from your account. You reported it. You waited weeks. And now the bank is telling you that nothing went wrong.
I spent 17 years inside bank fraud investigations. I have written denial letters and I have reviewed the ones my colleagues wrote. I can tell you this: a denial is not always final, and in many cases, the investigation that produced it was not as thorough as the law requires it to be.
You have options. But they only work if you understand what the bank was supposed to do, what it may have skipped, and how to escalate from a customer service problem to a regulatory one.
“A denial letter is not the last word. It is an invitation to look more carefully at whether the bank did its job.”
— Rebecca Harlow
Key Takeaways
A denial is not the end. Under Regulation E, the bank must conduct a reasonable investigation. If it skipped steps or relied on vague reasoning, its conclusion may not hold.
You have the right to see what the bank relied on. Regulation E requires the bank to provide copies of the documents it used to reach its decision.
“No error found” often means “we didn’t look hard enough.” Common problems include failing to review all relevant evidence, ignoring unusual transaction patterns, and using generic reasoning instead of case-specific analysis.
A CFPB complaint is your strongest escalation tool. When a bank receives a CFPB inquiry, the ticket goes to its executive escalations and compliance teams — not to the front-line call center.
Even if your 60-day window has passed, the bank must still evaluate your liability under Regulation E. A late notice does not automatically eliminate your protections.
What the Bank Was Required to Do
Before you can challenge a denial, you need to know what the bank was supposed to do in the first place.
Under Regulation E, §1005.11(c), when you give your bank notice of an error — oral or written — the bank must promptly investigate and determine whether an error occurred within 10 business days of receiving your notice. If it cannot complete the investigation in 10 business days, it may take up to 45 calendar days — but only if it provisionally credits your account within 10 business days and informs you of that credit within two business days.
The bank may not delay the investigation while waiting for written confirmation of an oral notice. That is a common violation.
And critically: the investigation must be reasonable. A financial institution cannot deny a consumer’s claim without conducting a reasonable investigation. That means it must consider all available information, review your evidence, and make a fair determination based on the facts — not on assumptions or automated tools alone.
If the bank determines that no error occurred, Regulation E requires it to provide you with:
A written explanation of the results of the investigation
Copies of the documents on which it relied in making its error determination
Did your denial letter include those? Most don’t. And that alone can be a basis for escalation.
Why Banks Deny Fraud Claims
Understanding the bank’s reasoning is the first step to challenging it. Here are the most common denial reasons — and what each one often fails to address.
“The transaction was authorized”
This is the most common reason, especially in scam cases where you initiated the payment yourself. Banks draw a legal distinction between a payment you were tricked into making and one made without your consent. If you pressed send, the bank may classify it as authorized.
But the real questions are more detailed: Who initiated the transfer? Did someone access your account without permission? Did someone impersonate the bank? Did the bank actually investigate these questions, or did it simply see that you initiated the payment and stop there?
The CFPB has clarified that if a third party fraudulently induces you into sharing your account access information — login credentials, a one-time code, your debit card number — and then uses that information to initiate a transfer, the transfer can still qualify as unauthorized under Regulation E. If your situation fits that pattern, the “authorized” label may be wrong.
“No error found”
This is the bank’s way of saying: “We believe the transaction was authorized.” But in many cases, the bank doesn’t actually prove that. It may rely on basic transaction data, automated fraud detection tools, or assumptions about your account history.
Signs that “no error found” is a conclusion rather than a finding:
The explanation is vague or generic
No specific evidence is cited
Your evidence was ignored or not addressed
The transactions clearly don’t match your behavior or location
“You were scammed, not hacked”
Banks sometimes distinguish between fraud (unauthorized access) and scams (you were deceived into authorizing). This distinction matters legally under Regulation E. But it can also be used to shut down claims without examining the specific facts.
If someone impersonated your bank, accessed your account through fraudulently obtained credentials, or used remote access to initiate a transfer, that may qualify as unauthorized — even if you were the one who initially engaged with the scammer.
“The transaction was consistent with your account history”
This is a weak justification. Fraudulent transactions are often designed to mimic your normal behavior. The scammer may have researched your spending patterns. Or the transaction amount may be similar to purchases you typically make. Consistency with your history does not prove authorization.
Your Appeal: Step by Step
A denial is not the end of the process. Here is how to challenge it effectively.
Step 1: Request the Documents the Bank Relied On
This is your first move, and it is a legal right.
Under Regulation E, §1005.33(d)(1) and (d)(2), when a bank determines that no error occurred, it must provide the consumer with an explanation of the results of the investigation and copies of the documents on which it relied.
Write to your bank and say: “I am requesting copies of all documents and information the bank relied upon in denying my fraud claim. This is required under Regulation E, 12 CFR §1005.33(d).”
If the bank refuses or provides only a vague response, that refusal becomes part of your escalation. The CFPB has taken enforcement action against institutions that failed to provide required error resolution documentation.
Step 2: Identify the Weakness in the Investigation
Once you have the bank’s findings, look for what’s missing.
Ask yourself:
Did the bank address the evidence I submitted?
Did it explain how it reached its conclusion?
Did it investigate whether my credentials were fraudulently obtained?
Did it consider whether the transaction fit a known fraud pattern?
Did it provide the documents it relied on?
A vague denial with no supporting evidence is a red flag. So is a denial that ignores facts you clearly presented. These are indicators that the investigation may have been incomplete — and that the denial may not be valid.
Step 3: Submit a Written Appeal
Your appeal should be factual, focused, and directly responsive to the bank’s stated reason for denial. Do not repeat the emotional narrative. Instead, point to the gaps.
A strong appeal includes:
A clear statement of what you are disputing: “I am appealing the denial of my Regulation E claim for the $4,800 transfer on June 3, 2026.”
A point-by-point response to the bank’s reasoning: If the bank said the transaction was authorized, explain why that classification is incorrect under the facts and the CFPB’s guidance. If the bank said “no error found,” explain what evidence it failed to consider.
New or additional information: This is crucial. If the denial was based on incomplete information, provide the missing context. Screenshots, phone records, device logs, a more detailed timeline — anything that addresses the gap.
A request for reinvestigation: Ask the bank to reopen the claim and conduct a full investigation.
Important: If the bank denied your claim because you didn’t provide enough evidence, the fix may be straightforward. One of the most common reasons for denial is simply that the bank asked for documentation and did not receive it — or received it but couldn’t match it to the transaction. Submitting the missing documentation can lead to the case being reopened and resolved.
Step 4: Know the 60-Day Rule — And What It Does Not Mean
Many consumers believe that if they report fraud more than 60 days after the statement, they lose all protection. That is not accurate.
The 60-day rule in Regulation E §1005.11 means the bank is not required to follow the error resolution procedures in that section — including provisional credit — for a late notice. But it does not mean the bank can simply deny the claim and impose unlimited liability.
Even for late notices, the bank must still comply with §1005.6, which limits consumer liability for unauthorized transactions. A bank that denies an error claim solely because it was submitted late — without evaluating liability under §1005.6 — may be violating Regulation E.
As one compliance analysis put it: sending a letter denying an error claim because the consumer submitted the claim late would violate the liability requirements within §1005.6. The institution must comply with §1005.6 before it may impose any liability on the consumer.
The CFPB Complaint: Your Federal Escalation
If your bank denies your appeal, stonewalls you, or gives you the runaround, the next step is a complaint with the Consumer Financial Protection Bureau.
Here is why this works: when a bank receives a CFPB complaint, the ticket does not go to the front-line call center. It goes to the executive escalations and corporate compliance teams — highly trained specialists and attorneys whose entire job is to keep the bank out of trouble with federal regulators.
Federal law generally requires the company to respond to a CFPB complaint within 15 days. If the bank’s internal decision was made by a rushed analyst who didn’t properly investigate, the compliance team may reverse it rather than risk a federal inquiry.
How to File a CFPB Complaint
Go to consumerfinance.gov/complaint. You will need to:
Describe the problem clearly and concisely. Include the most important dates, amounts, and communications you’ve had with the bank.
Attach supporting documents. Account statements, your written appeal, the denial letter, and any evidence you submitted to the bank.
Select the company you’re complaining about. The CFPB will forward your complaint directly to the bank and ask for a response.
The CFPB accepts complaints about checking and savings accounts, credit cards, money transfers, virtual currency, and other financial products. If your complaint involves a financial institution’s handling of a fraud dispute, this is the right channel.
One important note: For credit reporting issues, you must first dispute the information directly with the credit bureau and wait at least 45 days before the CFPB will accept your complaint. But for bank fraud disputes — checking accounts, debit cards, wire transfers, payment apps — you can file with the CFPB after exhausting the bank’s internal process.
What to Include in Your CFPB Complaint
A strong CFPB complaint includes:
The timeline: When the fraud occurred, when you reported it, when the bank responded, when it denied your claim.
The bank’s stated reason for denial: Quote the language from the denial letter.
Why the denial is wrong: Point to specific evidence the bank ignored or regulatory requirements it failed to meet.
The remedy you are seeking: Reimbursement of the disputed amount, a written explanation, or both.
The more specific and evidence-backed your complaint, the more likely the bank’s compliance team will take it seriously.
When to Consider Legal Action
Most fraud disputes do not require a lawyer. But some situations cross a line from customer service failure into potential legal violation.
You may want to consult an attorney if:
The bank denied your claim without conducting a reasonable investigation. Regulation E requires more than a rubber stamp.
The bank failed to provide the documents it relied on. That is a regulatory violation, not just bad service.
The bank imposed liability on you despite evidence that the transaction was unauthorized. If the facts support your claim and the bank still denied it, you may have a case.
The amount at stake is significant. Legal fees may be justified for larger losses.
The bank’s conduct suggests a pattern or practice of mishandling claims. The CFPB has brought enforcement actions against institutions for systemic failures in fraud dispute handling.
The key question a lawyer will ask: Did the bank handle your claim properly? That matters just as much as whether fraud occurred.
No comments yet.