In late July 2026, Justice Phaedra Perry-Bond of the New York Supreme Court in Manhattan refused to throw out Attorney General Letitia James’s lawsuit against Early Warning Services (EWS), the bank-owned company that runs Zelle. The case — which alleges that weak safeguards let scammers steal more than $1 billion from consumers — now moves toward discovery and, potentially, trial. Zelle says it will appeal.
That headline naturally raises two questions for anyone who uses Zelle to split rent or pay a contractor: is the app still safe? And more usefully: if something goes wrong, what protection do you actually have? The honest answer to the second question is the one most people get wrong — and it has almost nothing to do with this lawsuit.
What the judge actually decided (and what she didn’t)
This was a ruling on a motion to dismiss, not a verdict. The judge did not find that Zelle broke the law. She found that the AG’s allegations, taken as true for now, are serious enough to be tested with evidence.
The allegations that survived are worth understanding, because they describe the exact gap consumers keep falling into:
- That EWS “prioritized accessibility, convenience, consumer adoption, and market dominance at the expense of consumer safety” when it rushed Zelle to market — over objections from some of its own bank partners.
- That Zelle marketed itself with lines like “backed by the banks, so you know it’s secure” while known fraud vulnerabilities went unaddressed.
- That EWS didn’t require rigorous email and phone verification at enrollment, didn’t mandate real-time fraud reporting by banks, and didn’t remove confirmed fraudster accounts quickly.
- That Zelle conceded it still collects and keeps fees on fraudulent transactions — which the judge flagged as raising a question of tacit approval.
EWS argued the claims amounted to “passive nonfeasance” — a failure to stop outsiders, not fraud by the company. The court rejected that framing at this stage. A Zelle spokesperson said fraud reports remain “exceptionally low” and accused the AG of acting “for political gain.”
Context matters here: the CFPB filed a parallel suit in December 2024 against EWS, JPMorgan Chase, Bank of America, and Wells Fargo over roughly $870 million in losses — then voluntarily dismissed it with prejudice in March 2025, meaning it can never be refiled. New York’s case is now the main live action.
So is Zelle still safe to use?
Zelle is not “unsafe” in the sense of being hacked or unreliable. It moved more than $1 trillion in 2024 and nearly $600 billion in the first half of 2025 alone, and EWS says about 0.02% of transactions come with a report of fraud or scam. The rails work.
The risk isn’t the plumbing — it’s the design. Zelle payments are near-instant, pull straight from your checking account, and are effectively irreversible. There is no holding period, no buyer-protection layer, and no chargeback. That’s fine when you’re paying your sister. It’s catastrophic when the “bank fraud department” on the phone is a scammer.
The line that decides your refund: authorized vs. unauthorized
Every Zelle dispute lives or dies on one classification. Under the Electronic Fund Transfer Act and Regulation E, banks owe you a refund for unauthorized electronic transfers. Federal law does not require reimbursement when you pressed send — even if you were lied into it.
| Situation | Who pressed send | Classification | Your realistic protection |
|---|---|---|---|
| Someone took over your online banking and sent Zelle payments | The criminal | Unauthorized | Strong — Reg E requires reimbursement; the bank carries the burden of proof |
| SIM swap or stolen credentials used to enroll and drain funds | The criminal | Unauthorized | Strong — same Reg E rights, though banks often push back |
| Fake “bank fraud team” told you to send money to a “safe account” | You | Authorized | Possible — may qualify under the banks’ 2023 voluntary imposter-scam reimbursement policy |
| Fake utility, IRS, or government agency demanded payment | You | Authorized | Possible — same voluntary imposter-scam policy |
| Marketplace seller took payment and never shipped | You | Authorized | Weak — no legal right to a refund; recovery depends on the receiving bank |
| Romance, crypto “investment,” or job-offer scam | You | Authorized | Weak — rarely reimbursed |
One real improvement since 2023: participating banks agreed to reimburse victims of certain qualifying imposter scams — where a fraudster posed as your bank, a government agency, or a utility. That’s voluntary, not statutory, and coverage varies by institution. It does not cover “I bought a puppy that didn’t exist.”
Two worked examples
Example 1 — unauthorized, and you should win. Maya notices three Zelle payments totaling $2,400 to a name she doesn’t recognize. She never approved them; a scammer had her online-banking password. She calls her bank the same day. Because this is an unauthorized EFT, Reg E caps her liability at $50 when she reports within two business days of learning about it — and in practice most banks refund the full amount. The bank has 10 business days to investigate; if it needs more time, it must issue provisional credit and can take up to 45 days.
Example 2 — authorized, and it’s a fight. Darius gets a call from “Chase fraud prevention,” complete with a spoofed number. He’s told to Zelle $1,800 to himself at a “protected account.” He does. The money is gone in seconds. Legally this is an authorized transfer, so Reg E doesn’t force a refund. His actual path: file the claim anyway, and specifically ask the bank to review it under the imposter-scam reimbursement policy — bank impersonation is the category that policy was built for.
What to do in the first 48 hours
- Call your bank first, not Zelle. If you enrolled through your bank (and since the standalone Zelle app stopped sending money on April 1, 2025, virtually everyone does), your bank owns the dispute.
- Use precise words. If you never approved it, say “this was an unauthorized electronic fund transfer” — that phrase triggers Reg E error-resolution duties. If you were tricked by someone posing as a bank, government agency, or utility, say “imposter scam” and ask for review under the Zelle imposter-scam reimbursement policy.
- Get it in writing. Follow up any phone report with written notice and keep the claim number. Banks may require written confirmation within 10 business days to keep provisional credit.
- Report it to Zelle too — at zelle.com/support/report-scam or 1-844-428-8542. This helps flag the receiving account.
- File externally. ReportFraud.ftc.gov, IC3.gov, and a CFPB complaint at consumerfinance.gov. A CFPB complaint creates a paper trail your bank must respond to.
- Watch the 60-day clock. Reg E error-resolution rights generally require notice within 60 days of the statement that first showed the transaction. Miss it and your leverage collapses.
Practical habits that prevent the loss entirely
- Treat Zelle like handing over cash. Use it only for people you know and could physically find again.
- Never move money because an inbound caller told you to. Real banks never ask you to Zelle yourself.
- Send $1 first on any larger transfer and confirm the recipient name that appears before sending the rest.
- Lower your daily Zelle limit in your banking app. Limits are set by your bank, not Zelle, and a $500 cap turns a catastrophe into an annoyance.
- Use a credit card for marketplace purchases — chargeback rights exist there and don’t on Zelle.
Frequently Asked Questions
Does this ruling mean I’ll get money back from Zelle?
No. Denying a motion to dismiss simply lets the case proceed. Any restitution for New York consumers would come years down the road, and only if the AG wins or settles. Don’t wait on it — file your claim with your bank now.
Can a Zelle payment be reversed?
Not by you. Once sent to an enrolled recipient, the transfer is final. Your bank can request a recall from the receiving bank, but that only works if the funds haven’t been withdrawn — often a matter of minutes.
My bank denied my claim. Is that the end?
No. Ask in writing for the documents the bank relied on — Reg E entitles you to them after an unfavorable determination. Then escalate: file a CFPB complaint, contact your state attorney general or banking regulator, and consider a consumer-finance attorney. Senate investigators found the three largest Zelle owner banks reimbursed only about 38% of unauthorized fraud disputes in 2023, down from 62% in 2019 — denials are frequently reversed on escalation.
Is Cash App or Venmo safer?
For person-to-person sends, no meaningfully so — all three are fast and hard to reverse. The difference is that Venmo and Cash App offer purchase-protection paths for eligible business or “goods and services” transactions. Zelle has no equivalent, which is precisely why it should never be used to pay strangers.
The bottom line
Zelle is safe for what it was designed to do: moving money between people who already trust each other. The New York case will spend the next stretch arguing over whether EWS should have built more friction into a product engineered for speed. Meanwhile, your protection is unchanged and entirely practical — Reg E covers thefts you didn’t authorize, a voluntary bank policy may cover impersonation scams, and nothing covers a payment you were talked into sending to a stranger. Know which bucket you’re in before you hit send, and if you’re already in one, report it today and use the exact language above.
WalletWisp is informational and not financial, legal, or tax advice. Verify current terms with your bank or credit union.
