If You Fell Victim to a Zelle Scam, Your Bank Might Be Able to Reimburse You

If you've ever used Zelle, you know it's a convenient way to send money from one party to another. Zelle -- the banking industry's equivalent of PayPal, Venmo and CashApp -- is baked into more than 2,000 banking apps. The transactions take place instantly and without fees. But that simplicity also makes Zelle vulnerable to criminal fraud.

Zelle scams in recent years have involved everything from phishing attempts on Facebook Marketplace to fake promises of puppies. Scammers count on the instantaneous nature of Zelle payments and the fact that fraudulent payments are often technically authorized by victims. Luckily for the victims, a new change in policy allows banks to claw money back from criminals in certain cases. 

Read on to learn how the peer-to-peer payment system Zelle works, how thieves use it to scam consumers, how to protect yourself from Zelle scams and what to do if you fall prey to Zelle fraud. For more about fraud prevention, check out our list of best identity theft protection and monitoring services.

What is Zelle and how does it work?

Launched in June 2017, Zelle is a peer-to-peer, or P2P, payment service owned by Early Warning Services -- a consortium of major US banks. Zelle is available to more than 100 million banking customers (whether they know it or not). 

Zelle charges no fees and works with about 1,700 banks and credit unions. In the first quarter of 2023, people and small businesses sent $180 billion through Zelle, or almost $2 billion a day.

Created to compete with other electronic payment services like PayPal, Venmo and Cash App, Zelle lets banks handle casual electronic transfers without paying any fees to third parties. Customers whose banks don't support Zelle can connect a debit card with the Zelle app.

Zelle allows users to send money electronically to anyone: All you need is a recipient's email address or US phone number to transfer funds. Transactions are instant and irreversible once complete, making Zelle very attractive to criminals.

How do scammers use Zelle for fraud?

Most of the reported Zelle scams consist of pure social engineering: manipulating people with fraudulent information and scare tactics. Scammers use false claims and representations to get people to unknowingly authorize money transfers.

A common scam involves an email or text message asking a user to confirm a large, fake Zelle payment. When the user replies that they didn't authorize the transfer, the scammer follows up with a phone call pretending to represent the bank and spoofing the financial institution's phone number. They walk the caller through bogus instructions on how to reverse the unauthorized claims that instead actually transfer money to the criminals.

Another popular scam starts with a message claiming that your bank account has been compromised and that you need to take action immediately to resolve the problem. If you respond, the fraudsters follow up with a phone call, pretending to be your bank and guiding you through the process of transferring money.

Along with masquerading as your bank, scammers might also pose as institutions such as utility companies. A woman in Lorain, Ohio, faced threats of service disconnection from someone posing as her electric company, who then asked her for Zelle payments to keep the power on.

How do I protect myself from Zelle scams?

Since most Zelle scams are socially engineered, there are concrete steps you can take to avoid them.

Don't respond to unsolicited text messages or emails

This advice holds true for all suspected scams, not just ones involving Zelle. If you receive a message that says it's from your bank, but you didn't contact them first, don't respond. Instead, call your financial institution directly to inquire about your account and any potential security issues.

Assuming there are no problems with your account, you can also inform your bank that you've been phished. If you've given some personal info out because of the phishing attempt, you can work with your bank to protect your account.

Watch for 'urgent' deadlines or requests from new recipients

If someone says you need to act immediately to resolve a financial problem, alarm bells should start clanging. Scammers use scare tactics and a sense of urgency to make you panic and less likely to think critically. With the utility scams in the section above, users were told they only had 30 minutes to act before their power was shut off.

If you notice any suspicious behavior from someone claiming to represent your bank, a utility or another organization asking for immediate payment, hang up immediately and call the business directly.

Also be warned of requests from any banks, businesses or utilities for new Zelle payments, especially if you've never paid them via Zelle before. If you receive any requests to pay with Zelle, contact the organization directly through their official website or phone number to get more information.

Never give anyone your 2-factor authentication passcode

Also known as multifactor authentication or two-factor authentication, 2FA adds an extra layer of security to your accounts. Each time you sign into your account, you'll receive an additional one-time password, usually delivered by email or text message, that lasts for 30 to 60 seconds.

Once you've set up 2FA for your banking accounts, never give out your one-time passcodes to anyone. Criminals pretending to be your bank or utility company may pressure you with lots of bogus reasons for telling them your passcode, but real institutions will never ask you for it.

Use Zelle only for transfers to people or businesses you know and trust

If you make a payment with Zelle, you may not be able to recover the money if you were scammed by mistakenly authorizing the payment. While Zelle provides a convenient and easy payment service, limiting its use to people you know personally will cut down your risk of getting scammed.

How do I get my money back if I'm a victim of a Zelle scam?

Immediately contact the financial institution that was part of the transaction. That allows the business to start investigating as soon as possible. Because of the instant nature of Zelle, you'll want to respond quickly.

Here are the links and phone numbers for reporting Zelle scams to some of the biggest banks in the US:

• JPMorgan Chase Bank: 800-935-9935
  
• Bank of America: 800-432-1000
• Citibank: 800-950-5114
• Wells Fargo: 866-867-5568
• U.S. Bank: 877-595-6256
• PNC Bank: 888-762-2265
• Truist Bank: 844-487-8478
• Capital One: 800-227-4825
• TD Bank: 800-893-8554

For years, according to many local reports, banks were reluctant to reimburse losses from Zelle phishing scams, since the transactions were actually approved by the account holders. Often, victims had money returned only after news reports of their scams put pressure on banks to do so.

On Aug. 30, 2023, Zelle announced new safety measures including a "new consumer reimbursement benefit for specific scam types." On Nov. 14, Reuters reported that banks participating in the Zelle payment system had begun reimbursing victims of imposter scams who had been "duped into sending money to scammers claiming to be from a government agency, bank or existing service provider."

Recent news reports indicate that Zelle's new safety policy is helping consumers. A Seattle public teacher who was defrauded of $2,000 by a person posing as a representative of his credit union was refunded by BECU thanks to the new law, according to KIRO 7 News.

If your bank refuses to reimburse you for a Zelle scam, your only recourse (other than pitching your story to local media) is to file a complaint with the Consumer Finance Protection Bureau.

For more on protecting yourself from fraud, see the best identity theft protection and monitoring services and learn about rising scams on social media.