Before you press send, take a beat.

Peer-to-peer (P2P) payment apps made sending money as easy as texting — and scammers noticed. When someone hacks your account and sends your money away, U.S. law usually gives you a path to get it back. But when a scammer talks you into hitting "send" yourself, that protection often disappears. Here's why, how the most common scams work, and what you can do.

Last updated September 17, 2026.

Key takeaways

• U.S. federal rules (Regulation E) protect consumers from unauthorized electronic transfers, but generally not from payments they authorized after being deceived [1][2].
• Instant P2P payments typically can't be recalled once sent, which is why scammers push for speed and secrecy.
• Zelle says qualifying impostor scams may be eligible for reimbursement through your bank or credit union, but coverage is policy-based, not a legal guarantee [3].
• The UK has taken a different approach: mandatory reimbursement for most authorized push payment scam victims since October 7, 2024. Regulator data show 88% of money lost to in-scope scams was returned in the first 18 months [4][10].
• Treat any unexpected request to move money "to protect it" or to "fix a mistake" as a red flag — hang up and contact your bank using a number you find yourself.

Unauthorized vs. authorized: the distinction that decides refunds

Regulation E, which implements the Electronic Fund Transfer Act, covers electronic transfers from consumer accounts, including many P2P payments [1]. It defines an unauthorized electronic fund transfer as one initiated by someone other than the consumer without actual authority, from which the consumer receives no benefit [2].

• Unauthorized example: A criminal steals your login and sends $800 from your account through Zelle. You report it promptly. Your bank must investigate and, if the transfer was unauthorized, your liability is limited under Reg E timelines [2].
• Authorized (induced) example: Someone posing as a landlord convinces you to send a $800 deposit for an apartment that doesn't exist. Regulation E defines an unauthorized transfer as one initiated by someone other than you without actual authority [2]. Because you initiated the payment, it generally isn't "unauthorized," and the bank generally isn't legally required to reimburse you.

A gray area: if a scammer tricks you into sharing a one-time passcode and then they initiate the transfer, that can fall under "unauthorized." The CFPB has taken the position in its Electronic Fund Transfers FAQs that a transfer initiated by a fraudster using credentials obtained through deception is unauthorized, citing phishing as an example [5]. Although the CFPB withdrew numerous guidance documents in 2025, those FAQs were still posted as of September 17, 2026.

This is authorized push payment (APP) fraud: the victim "pushes" money to the scammer. Contrast that with card payments, where the merchant "pulls" money and chargeback rights exist.

Related field note

Why P2P payments are so hard to claw back

1. Speed. Zelle transfers between enrolled users typically arrive within minutes. Once money lands in a scammer's account, it is often moved again quickly.
2. Irrevocability. P2P apps are designed for people who know each other. Zelle, Venmo, and Cash App all warn users to send money only to people they trust.
3. No purchase protection by default. Unlike credit cards, personal P2P payments generally have no built-in buyer protection. Some apps offer limited purchase protection for payments marked as purchases of goods and services; check your app's current terms.
4. The recipient account looks legitimate. Scammers use accounts opened with stolen or synthetic identities, or recruit "money mules."

How common P2P scams work (so you can recognize them)

Scammers win by creating urgency and isolation: "Don't tell the bank employee, they may be involved."

Related field note

Zelle: scrutiny, policies, and lawsuits

Zelle is operated by Early Warning Services, LLC, which is owned by several large U.S. banks [3]. Because Zelle is built into many banking apps, it has drawn most of the policy attention.

• Impostor-scam refunds. Zelle's help center says qualifying impostor scams may be eligible for reimbursement and directs victims to their bank or credit union [3]. This is a network policy rather than a legal mandate, and it doesn't cover every scam type.
• CFPB lawsuit and dismissal. In December 2024, the CFPB sued Early Warning Services, Bank of America, JPMorgan Chase, and Wells Fargo, alleging failures to protect consumers from Zelle fraud [6]. The CFPB voluntarily dismissed that case with prejudice on March 5, 2025 [6][7].
• New York lawsuit. On August 13, 2025, the New York Attorney General sued Early Warning Services, alleging Zelle was designed without adequate fraud protections and that users lost more than $1 billion to fraud from 2017 to 2023 [7]. On July 20, 2026, a New York state court largely denied the company's motion to dismiss, allowing the case to proceed [15]. These are allegations; the case was ongoing as of September 17, 2026.
• Standalone app. In October 2024, Zelle announced it would phase out sending and receiving money in its standalone app, giving users until March 2025 to enroll through a participating bank or credit union [12].

Venmo and Cash App

Venmo (owned by PayPal) and Cash App (owned by Block) hold customer balances and let users send to "handles" and QR codes, which scammers exploit through look-alike accounts.

• Cash App enforcement. In January 2025, the CFPB ordered Block to pay $175 million over alleged failures in how it handled fraud and disputes on Cash App, and state financial regulators separately imposed an $80 million penalty on Block over anti-money-laundering compliance [8][16]. The CFPB's enforcement page listed no modification or termination of its order as of September 17, 2026 [8].
• Federal P2P supervision rule overturned. A CFPB rule that would have brought large payment apps under federal supervision was nullified by Congress under the Congressional Review Act; the joint resolution (S.J.Res. 28) was signed into law on May 9, 2025 [9].

A different model: the UK's mandatory reimbursement

Since October 7, 2024, the UK's Payment Systems Regulator (PSR) has required payment firms to reimburse most victims of APP scams made via Faster Payments, up to a maximum of £85,000 per claim, with costs generally split 50/50 between the sending and receiving firms [4]. Firms may apply an excess of up to £100, and claims can be refused where the victim failed to meet a "consumer standard of caution" (for example, gross negligence) or was complicit [4][10]. The UK government plans to consolidate the PSR into the Financial Conduct Authority (FCA); the transition was under way as of September 2026 [11].

According to the PSR's dashboard published July 30, 2026, 88% of money lost to in-scope APP scams (£316 million) was returned to victims between October 7, 2024, and March 31, 2026, and just 2% of claims in Q1 2026 were rejected for insufficient consumer caution [10].

Other jurisdictions, including the EU and Australia, have also been developing rules on scam prevention and fraud liability; check official sources for current status and effective dates.

What to do if you've been scammed

1. Contact your bank or app immediately, using the number on your card or the official app. Ask whether the payment can be stopped or recovered, and ask them to file a fraud or scam claim in writing.
2. If a scammer got your login or codes, say so — it may be treated as unauthorized under Reg E [2]. Change passwords, turn on stronger sign-in methods, and review linked devices. Related field note
3. Report to the FTC at ReportFraud.ftc.gov and, for internet-enabled crimes, the FBI's IC3.gov [13][14].
4. Escalate if needed: submit a complaint to the CFPB or your state attorney general or banking regulator.
5. Beware "recovery" scams. People who contact you promising to get your money back for a fee are frequently scammers too.

How to protect yourself

• Use P2P apps only with people you know and trust.
• For purchases from strangers, use payment methods with dispute rights, such as a credit card.
• Verify recipients with a second channel before sending.
• Never send money to "yourself" at another account because someone on the phone told you to.
• Turn on transaction alerts and stronger authentication.

Related field note

FAQ

Will my bank refund a Zelle scam? If the transfer was unauthorized (someone else accessed your account), Regulation E generally requires an investigation and limits your liability. If you were tricked into sending it, federal law generally doesn't require a refund, though Zelle says qualifying impostor scams may be eligible for reimbursement [3].

Can I cancel a Zelle, Venmo, or Cash App payment? Usually not once it's sent to an enrolled recipient. Some apps allow canceling payments to unenrolled recipients before they claim the money. Check the app immediately.

Does Venmo purchase protection cover scams? Only certain goods-and-services payments to eligible sellers may be covered, subject to terms. Personal payments to friends generally aren't. Check current Venmo terms.

Is it unauthorized if I gave a scammer my code? Possibly. If the scammer, not you, initiated the transfer using credentials obtained by deception, it may be treated as unauthorized. Explain exactly what happened when you file.

What's authorized push payment fraud? A scam where the victim is deceived into initiating a payment to the fraudster.

Sources

1. Consumer Financial Protection Bureau, "12 CFR Part 1005 (Regulation E)," https://www.consumerfinance.gov/rules-policy/regulations/1005/, accessed 2026-09-17.
2. Consumer Financial Protection Bureau, "§ 1005.2 Definitions" and "§ 1005.6 Liability of consumer for unauthorized transfers," https://www.consumerfinance.gov/rules-policy/regulations/1005/6/, accessed 2026-09-17.
3. Zelle, Help Center FAQ, https://www.zelle.com/faq, accessed 2026-09-17.
4. Payment Systems Regulator, "PS25/5 Consolidated policy statement: APP scams reimbursement requirement," May 2025, https://www.psr.org.uk/media/rhelv4op/ps25-5-app-scams-reimbursement-consolidated-policy-statement-may-2025.pdf, accessed 2026-09-17.
5. Consumer Financial Protection Bureau, "Electronic Fund Transfers FAQs," https://www.consumerfinance.gov/compliance/compliance-resources/deposit-accounts-resources/electronic-fund-transfers/electronic-fund-transfers-faqs/, accessed 2026-09-17.
6. Consumer Financial Protection Bureau, "CFPB Sues JPMorgan Chase, Bank of America, and Wells Fargo for Allowing Fraud to Fester on Zelle," December 20, 2024 (updated with March 5, 2025 dismissal), https://www.consumerfinance.gov/about-us/newsroom/cfpb-sues-jpmorgan-chase-bank-of-america-and-wells-fargo-for-allowing-fraud-to-fester-on-zelle/, accessed 2026-09-17.
7. New York State Attorney General, "Attorney General James Sues Company Behind Zelle for Enabling Widespread Fraud," August 13, 2025, https://ag.ny.gov/press-release/2025/attorney-general-james-sues-company-behind-zelle-enabling-widespread-fraud, accessed 2026-09-17.
8. Consumer Financial Protection Bureau, "CFPB Orders Operator of Cash App to Pay $175 Million and Fix Its Failures on Fraud," January 2025, https://www.consumerfinance.gov/archive/newsroom/cfpb-orders-operator-of-cash-app-to-pay-175-million-and-fix-its-failures-on-fraud/, accessed 2026-09-17.
9. GovInfo, Public Law 119-11 (S.J.Res. 28), joint resolution disapproving the CFPB rule "Defining Larger Participants of a Market for General-Use Digital Consumer Payment Applications," May 9, 2025, https://www.govinfo.gov/app/details/PLAW-119publ11, accessed 2026-09-17.
10. Payment Systems Regulator, "APP scams reimbursement dashboard for Q1 2026," July 30, 2026, https://www.psr.org.uk/information-for-consumers/app-scams-reimbursement-dashboard/, accessed 2026-09-17.
11. Payment Systems Regulator, homepage (consolidation with the FCA), https://www.psr.org.uk/, accessed 2026-09-17.
12. Zelle, "We're Evolving How Consumers Send Money With Zelle," October 31, 2024, https://www.zelle.com/blog/were-evolving-how-consumers-send-money-zelle, accessed 2026-09-17.
13. Federal Trade Commission, ReportFraud.ftc.gov, https://reportfraud.ftc.gov/, accessed 2026-09-17.
14. FBI Internet Crime Complaint Center, https://www.ic3.gov/, accessed 2026-09-17.
15. Ballard Spahr, Consumer Finance Monitor, "New York Court Refuses To Dismiss Attorney General's Sweeping Fraud Case Against Zelle Operator Early Warning Services," July 31, 2026, https://www.consumerfinancemonitor.com/2026/07/31/new-york-court-refuses-to-dismiss-attorney-generals-sweeping-fraud-case-against-zelle-operator-early-warning-services/, accessed 2026-09-17.
16. Conference of State Bank Supervisors, "State Regulators Issue $80 Million Penalty to Block, Inc., Cash App for BSA/AML Violations," January 2025, https://www.csbs.org/newsroom/state-regulators-issue-80-million-penalty-block-inc-cash-app-bsaaml-violations, accessed 2026-09-17.

This article is for educational purposes only and is not financial or legal advice. App terms, bank policies, and regulations change; verify current terms with your bank or payment app and consult official sources or a qualified professional about your situation.