Zelle, Venmo, Cash App and PayPal Scams: Can You Get Money Back?

Whether you can get money back from a Zelle, Venmo, Cash App or PayPal scam turns on one question: who sent the payment. If a scammer moved the money using your login, a code texted to you, or your debit card number, even if you were tricked into handing it over, federal Regulation E treats that as an unauthorized transfer, and your bank or app must investigate and limit your loss (12 C.F.R. § 1005.2(m) and the CFPB's EFT FAQs). If you sent the payment yourself, even because of a lie, the law as written does not promise a refund, and any money back depends on your bank's or the app's own policy.

If it happened in the last few hours: contact your bank or the app right now through its official app or the number on your card, say whether you sent the payment or someone else did, and ask them to reverse it. Then read on for your rights and deadlines.

Information last verified on October 2, 2026. This article has not been reviewed by a licensed lawyer.

Jurisdiction scope: This page covers United States federal law, chiefly the Electronic Fund Transfer Act (15 U.S.C. § 1693 and following) and the CFPB's Regulation E (12 C.F.R. Part 1005), plus the published policies of Zelle, Venmo, PayPal and Cash App as of the dates given. Company policies are contracts and statements, not law, and they change. We did not research state laws on payment-app scams, card-network chargeback rules, or the special Regulation E rules for prepaid accounts, so this page does not cover them. For payments by wire, gift card, crypto or credit card, see our guide on how to get money back after a scam.

Can I get my money back from Zelle, Venmo, Cash App or PayPal?

Sometimes, and the law gives you a firm right to it only in one situation: when someone else initiated the payment from your account. Everything else depends on policy, speed and persistence.

The Federal Trade Commission's first instruction is the same for every app: report it right away and ask for the payment to be reversed. For Zelle or a bank transfer, the FTC says to "Report it to your bank or credit union immediately" and "Ask them to reverse the payment and refund your money." For Venmo, Cash App or PayPal, it says to "Report it to the payment app immediately."

The FTC is also candid about the odds. In a 2023 alert on payment apps, it warned that sending money through a payment app "is like sending cash" and that "it's very hard to get it back." That warning is about payments you send. It is not the whole story when a scammer got into your account.

People filed 90,571 fraud reports naming a payment app or service as the payment method in 2024, with 391 million dollars in reported losses, according to the FTC's Consumer Sentinel Network Data Book 2024. Across all payment methods, consumers filed 3 million fraud reports in 2025 and reported 15.9 billion dollars in losses, the FTC told Congress's Joint Economic Committee in March 2026.

Did you send it, or did someone else? The question that decides your rights

Start by sorting your situation into one of three buckets. Each one has different rules.

When the law treats it as unauthorized

Regulation E defines the term this way:

"An unauthorized EFT is an EFT from a consumer's account initiated by a person other than the consumer without actual authority to initiate the transfer and from which the consumer receives no benefit." (CFPB, Electronic Fund Transfers FAQs, quoting 12 C.F.R. § 1005.2(m))

The definition excludes a transfer by someone you voluntarily gave your access device to, unless you told the institution that person was no longer authorized. But the official interpretation adds that "An unauthorized EFT includes a transfer initiated by a person who obtained the access device from the consumer through fraud or robbery" (Supplement I to Part 1005, comment 2(m)-3).

The CFPB has applied this directly to the most common payment-app con. Asked whether a transfer counts as unauthorized when a third party fraudulently induces a consumer to share account access information, the CFPB answered "Yes," and gave two examples:

"(1) a third-party calling the consumer and pretending to be a representative from the consumer's financial institution and then tricking the consumer into providing their account login information, texted account confirmation code, debit card number, or other information that could be used to initiate an EFT out of the consumer's account, and (2) a third party using phishing or other methods to gain access to a consumer's computer and observe the consumer entering account login information." (CFPB EFT FAQs, Error Resolution: Unauthorized EFTs, Question 5)

The CFPB also says a P2P transfer a fraudster initiates is unauthorized "even if the consumer does not have a relationship with, or does not recognize, the non-bank P2P payment provider" (Question 3).

Two more points from the same FAQs matter when a bank pushes back. First, your carelessness does not change the answer: the CFPB says "negligence by the consumer cannot be used as the basis for imposing greater liability than is permissible under Regulation E" (Question 7, citing comment 6(b)-2). Second, the bank cannot make you contact the merchant first; it "must begin its investigation promptly upon receipt of an oral or written notice of error" (Question 9).

When you sent it yourself

If you opened the app and pressed send, the transfer was initiated by you, not by "a person other than the consumer." On the face of the definition, that payment is not an unauthorized transfer, even though a lie caused it. The CFPB's EFT FAQs, which address scammer-initiated transfers in detail, do not address this situation.

Banks and apps commonly treat these payments as authorized. The Consumer Federation of America, an advocacy group, put it this way in a March 5, 2026 statement to a House Financial Services subcommittee: "To the extent scam victims receive relief, it is due to voluntary responses by providers, and not by the force of law." That is an advocate's view, not a ruling, but it matches how Zelle's own operator describes its policy (below).

This does not mean you should not ask. The FTC tells every scam victim to ask for a reversal, and some providers do reimburse certain authorized scams under their own rules.

Watch out: Be precise when you report. If the scammer used your code or login to send the money, say "I did not make this transfer; someone used information they tricked me into giving." If you sent it yourself, say so honestly and ask whether the bank's or app's scam-reimbursement policy applies. Mixing the two can get a valid unauthorized-transfer claim closed as an authorized payment.

How Zelle handles scams

Zelle moves money between bank accounts, so your bank or credit union, not Zelle, is the place to report. Zelle's support page says: "It is important that if you are enrolled in Zelle® through your bank or credit union to report the transaction directly to your bank or credit union." Zelle announced on October 31, 2024 that it was "phasing out the ability to enroll and transact within the standalone app," with users given "until March 2025 to re-enroll."

Zelle draws a similar line to the law, in its own words (these are company statements, not law, and the pages are undated):

• Fraud: "Fraud is when someone gained access to your bank account and made an unauthorized Zelle® payment... Because these transactions are unauthorized, they typically qualify for reimbursement."
• Scam: "A scam is when you knowingly send money but do not receive what you expected in return... Certain impostor scams qualify for reimbursement."

Zelle's security page is blunt about purchases: "Unlike a credit card, Zelle® does not offer a protection program for any authorized payments made with Zelle® – for example, if you do not receive the item or the item is not as described or as you expected." It also warns that once you authorize a payment, "you can't cancel it if the recipient is already enrolled in Zelle®."

A fact sheet published by Early Warning Services, the company that operates Zelle (the file is dated December 2025 in its web address), says the network requires participating banks to "Fully reimburse customers for any instance of confirmed fraud after a reasonable investigation." It adds that Zelle "requires reimbursement for customers for certain qualifying imposter scams where the customer authorized the transaction," which it calls going "above and beyond what is required by law." Zelle's pages that we reviewed do not define which impostor scams "qualify," so your bank decides that under rules we could not see.

One gap to know about: Zelle's example of fraud is a case where "you never authorized or were involved in the transaction." The CFPB's FAQ is broader. If you were tricked into reading out a code but the scammer pressed send, the CFPB treats that as unauthorized even though you were "involved." Point your bank to Question 5 of the CFPB's EFT FAQs if it says otherwise.

Zelle lists 1-844-428-8542 for questions about fraud or scams, but your report and dispute belong with your bank.

How Venmo and PayPal handle scams

PayPal and Venmo separate unauthorized activity from purchase disputes, and both limit purchase protection to payments for goods and services.

Venmo. Venmo's User Agreement (effective August 24, 2026) says: "We will protect you from unauthorized activity in your Venmo account." For purchases, "Certain Qualifying Payments made to a business profile or that are marked as for goods and services are eligible for the Venmo Purchase Protection Program." Venmo's eligibility page lists as ineligible "Payments that you make without swiping 'on' the 'Turn on for purchases' toggle" and payments reimbursing someone for a purchase, such as splitting a dinner bill. It also says marking a transaction as a purchase "does not mean that Purchase Protection automatically applies." On cancellations, the agreement warns that "since most Venmo payments are received within seconds, you may not be able to cancel your payment for a full refund once the payment is made."

PayPal. PayPal's Purchase Protection terms (last updated January 26, 2026) exclude "Personal Payments including payments sent using PayPal's friends and family functionality." Covered problems are "Item Not Received" and "Significantly Not as Described." The deadlines:

• Item Not Received: the dispute "must be opened within 180 days of the date you sent the payment to the seller."
• Significantly Not as Described: within 30 days of the date of delivery or within 180 days, "whichever is sooner."

Two limits catch marketplace buyers. An Item Not Received claim does not qualify "if the seller has provided proof of shipment or delivery." And for non-QR-code payments, a purchase is not eligible for Item Not Received claims if you pay in person or "order online, but collect the item in person."

PayPal says it "determines, in its sole discretion, whether your claim is eligible," and that a claim that a transaction "was not authorized by you" is "different from the Purchase Protection program." If you funded the payment with a debit or credit card, PayPal notes that "you may be entitled to dispute the transaction with your card issuer. Applicable card chargeback rights may be broader than those available to you under PayPal's Purchase Protection program." You must choose one route: PayPal says "You can't do both at the same time or seek a double recovery."

Pro tip: A seller who insists on friends-and-family, or on Zelle, for a purchase is asking you to give up the only buyer protection these apps offer. Zelle's own advice is to "only send money to people you personally know and trust," and the FTC says never to pay someone who insists you can only pay with a payment app.

How Cash App handles scams

Cash App's Terms of Service (last updated September 11, 2026) warn users that "scams may result in the loss of your funds with no recourse" and that Cash App is "not required to stop, cancel, or recover funds associated with a misdirected Payment Instruction." The same terms apply Regulation E error resolution to electronic fund transfers, including "unauthorized electronic funds transfers," and ask users to "provide notice to us within 60 Days of receiving the Statement reflecting the problem." The terms list 1-800-969-1940 as a contact number.

Payment apps that hold your balance can owe Regulation E duties themselves. Under 12 C.F.R. § 1005.2(i), as the CFPB quotes it, a financial institution includes "a bank, savings association, credit union, or any other person that directly or indirectly holds an account belonging to a consumer, or that issues an access device and agrees with a consumer to provide EFT services." In announcing its 2025 order against Block, the CFPB said the Electronic Fund Transfer Act "generally requires that peer-to-peer platforms, including Cash App, investigate disputes of unauthorized transactions, and a company cannot simply use fine print to escape these legal requirements."

Your bank still has duties when an app was used

If a scammer used an app to pull money from your bank account, your bank is not off the hook because the app sat in the middle. The CFPB's answer to that scenario: "the account-holding financial institution holds the consumer's account, and is thus considered a financial institution under Regulation E" with full error-resolution obligations (EFT FAQs, Question 11).

That matters because, according to the CFPB, Block did the opposite. The CFPB said Block directed users who had lost money to fraud "to ask their bank to attempt to reverse transactions, which Block would subsequently deny." If you are bounced between an app and a bank, file a written error notice with both.

Final and irrevocable does not cancel your rights

Payment networks often say transfers are final. The CFPB addressed this directly:

"Although private network rules and other commercial agreements may provide for interbank finality and irrevocability, they do not reduce consumer protections against liability for unauthorized EFTs afforded by the Electronic Fund Transfer Act. See 15 USC 1693g(e). Moreover, no agreement between a consumer and any other person may waive any right provided by the EFTA. See 15 USC 1693l." (CFPB EFT FAQs, Question 10)

So "final" describes the payment between banks. It does not decide who bears the loss on an unauthorized transfer. It also does not create a right where none exists: for a payment you authorized, "final" is usually the provider's starting position.

Deadlines and liability limits for unauthorized transfers

These rules apply to unauthorized transfers. Note the clock starts from different events.

The $50 and $500 tiers are tied to the loss or theft of an access device, such as a card or code. For unauthorized transfers made without an access device, the official interpretation says that if you report within 60 days of the statement, "the consumer has no liability," while late reporting can expose you to transfers made after the 60-day period (comment 6(b)(3)-2). If you were delayed by "extended travel or hospitalization," the regulation's commentary gives those as examples of circumstances that require the institution to extend the notice periods (comment 6(b)(4)-1).

In a lawsuit over your liability for an unauthorized transfer, the statute says "the burden of proof is upon the financial institution to show that the electronic fund transfer was authorized" (15 U.S.C. § 1693g(b)).

What the bank or app must do after you report

Once a timely notice of error arrives, 12 C.F.R. § 1005.11 sets the clock:

1. 10 business days to decide. The institution "shall determine whether an error occurred within 10 business days of receiving a notice of error," report the result within three business days after finishing, and correct an error within one business day of finding it (§ 1005.11(c)(1)).
2. Up to 45 days, but only with provisional credit. If it needs longer, it may take up to 45 days, provided it "Provisionally credits the consumer's account in the amount of the alleged error" within 10 business days, gives you full use of the funds, and tells you within two business days of crediting. It may withhold a maximum of $50 in some unauthorized-transfer cases (§ 1005.11(c)(2)).
3. Longer windows in some cases. The 10-business-day period becomes 20 business days if the transfer happened within 30 days after the account's first deposit, and 45 days becomes 90 days for a transfer that was not initiated within a state, resulted from a point-of-sale debit card transaction, or occurred within 30 days after the first deposit (§ 1005.11(c)(3)).
4. Written confirmation. You can report orally, but the institution "may require the consumer to give written confirmation of an error within 10 business days of an oral notice," and must tell you where to send it. If it requires confirmation and does not get it, it need not provisionally credit you (§ 1005.11(b)(2), (c)(2)(i)(A)).
5. If it finds no error. Its report must include "a written explanation of the institution's findings and shall note the consumer's right to request the documents that the institution relied on." Ask for those documents (§ 1005.11(d)(1)).

These deadlines apply to "errors," which include an unauthorized transfer. A provider that classifies your payment as authorized will usually deny the claim on that basis, which is why the description you give in step one of the next section matters.

Common Zelle, Venmo and Cash App scam scripts

Most P2P scams are variations on a few scripts. Recognizing the script also tells you which legal bucket you are in.

The fake fraud alert: send money to yourself

The FTC describes it: "scammers pose as your bank and tell you there's a problem with your account. To 'protect' your account, the scammer tells you step-by-step instructions to transfer money from your bank account into a new account in your name. But that new account really belongs to the scammer." The FTC's rule of thumb: "your bank will never contact you to tell you to transfer money or to ask for personal information or passcodes."

If the caller got your code and moved the money, the CFPB's Question 5 applies and the transfer is unauthorized. If you sent the money yourself on their instructions, you are in the authorized-payment bucket. Ask your bank directly whether the impostor-scam reimbursement Zelle describes applies to your case.

Fake customer support

The CFPB said that people searching the web for Cash App support "were targeted by fraudsters posing as Cash App representatives, who tricked them into giving up their passwords and other personal information." Reach any app's support from inside the app. The FTC's payment-app guide (May 2022) gives these routes: for Cash App, open your profile and choose Support; for Venmo, open your profile and choose Get Help; for PayPal, use its Resolution Center.

The marketplace seller who never ships

A stranger offers tickets or goods at a discount and insists on Zelle or a friends-and-family payment. Zelle's own security page uses this example ("is a stranger selling online concert tickets at a steep discount and insisting you pay with Zelle®? Think twice."). This is a purchase dispute. Zelle offers no purchase protection; PayPal and Venmo may, if the payment was an eligible goods-and-services payment.

Overpayment and fake checks

Venmo warns that "A scammer might send you a check and ask you to send them a payment on Venmo in return. The check will typically clear when you cash it with your bank, but will later bounce." The FTC's version of the rule: "never deposit a check and send money back to someone."

The stranger who paid you by mistake

If money arrives from someone you do not know, Venmo's guidance is to contact Venmo: "If you don't know the person who paid you, you should contact us as soon as possible so we can help reverse the payment." That routes any reversal through the app rather than through a new payment you send to a stranger.

Loved one in trouble, or a prize with fees

The FTC notes that scammers "might pretend to be a loved one who's in trouble and ask you for money to deal with an emergency. Others might say you won a prize or a sweepstakes but need to pay some fees to collect it." Its advice: "Don't send a payment to claim a prize or collect sweepstakes winnings."

For more on the messages that start these scams, see our guide to phishing, smishing and vishing. If the voice on the phone sounded exactly like a relative, read about AI voice-cloning scam calls.

What to do after a Zelle, Venmo, Cash App or PayPal scam

Speed matters most. Work through these steps in order.

1. Report to your bank or the app now. For Zelle, call your bank or credit union. For Venmo, Cash App or PayPal, use the in-app support route. Use the number on the back of your card or the official app, not a number from a search result or a text.
2. Say exactly what happened. State whether you sent the payment or someone else did. If someone else did, say it was an unauthorized transfer and ask the institution to open an error-resolution investigation under Regulation E.
3. Put it in writing. Follow up your call with a written notice that gives your name, account number, the date and amount, and why you believe it is an error, which are the contents 12 C.F.R. § 1005.11(b)(1) describes. Keep a copy and note the date you sent it.
4. Report to both the bank and the app if both were involved. Your bank has its own duties under the CFPB's Question 11, and the app may too.
5. Secure your accounts. If you gave out a password, the FTC says to create a new, strong password and turn on two-factor authentication. Tell the institution if the scammer still has access, since the Regulation E limits reward prompt reporting.
6. Report to the FTC. File at ReportFraud.ftc.gov, which offers the form in Español and other languages. The FTC says it "can't resolve your individual report," but shares reports with "over 2,000 law enforcers."
7. Report to the FBI's IC3. The FBI's 2025 IC3 report says: "Regardless of the amount lost, file a complaint at www.ic3.gov. Be sure to include the full transaction details in your report." Its Recovery Asset Team works with banks to try to freeze funds, and it says "time is of the essence."
8. Escalate to the CFPB if the bank or app stalls or denies. File at consumerfinance.gov/complaint or call (855) 411-2372. The CFPB says "Most companies respond within 15 days" and warns that "you generally can't submit a second complaint about the same problem," so include everything the first time.
9. Track the deadlines. Count 10 business days from your notice. If the institution has not decided and has not provisionally credited your account, say so in writing and in your CFPB complaint.

Our guide on where to report a scam explains what each agency does with a report. If the scammer also got your Social Security number, start with how to report identity theft.

Watch out: After a loss, expect a second scam. The FTC warns that recovery scammers "buy lists of people who've paid scammers" and claim they can get your money back for a fee. "Government agencies and legitimate organizations will never ask for money to help you get a refund." Never pay anyone upfront to recover a P2P loss.

Zelle and Cash App lawsuits and settlements

Since early 2025, the newest actions have come from state attorneys general. Allegations below are allegations, not findings of a court.

CFPB v. Early Warning Services and three banks (dismissed). On December 20, 2024, the CFPB sued Early Warning Services, Bank of America, JPMorgan Chase and Wells Fargo in the U.S. District Court for the District of Arizona (No. 2:24-cv-03652), alleging unfair practices and that the banks violated the Electronic Fund Transfer Act and Regulation E. Early Warning called the suit "legally and factually flawed." On March 4, 2025, the CFPB voluntarily dismissed the case against all defendants with prejudice, and the court dismissed it on March 5, 2025. No court ruled on the merits.

CFPB order against Block, Cash App's operator (January 16, 2025). The CFPB ordered Block to pay up to $120 million in refunds and other redress, with a minimum of $75 million, and a $55 million penalty. The order required Block to "set up 24-hour, live-person customer service" and to "fully investigate unauthorized transactions and to provide timely refunds, where appropriate." The CFPB said at the time that consumers "will not need to take action at this time to obtain redress." We have not confirmed the order's current status or any redress payments since then. The CFPB lists Block's contacts for redress questions as 1-888-488-1181 and CFPBinquiry@cash.app.

New York Attorney General v. Early Warning Services (pending). On August 13, 2025, New York Attorney General Letitia James sued Zelle's operator, alleging that "EWS designed Zelle without critical safety features, allowing scammers to easily target users and steal over $1 billion between 2017 and 2023." The suit seeks restitution and damages for affected New Yorkers and a court order requiring anti-fraud measures. We treat the case as pending; we have not confirmed any ruling in it at a primary source.

46 attorneys general settle with Block (July 8, 2026). New York's attorney general and "a bipartisan coalition of 45 other attorneys general" secured $45 million from Block, alleging it misled users and failed to protect them from scams and fraud. Among the required changes: live support 24 hours a day and "Fulfilling its legal obligations to investigate fraud claims and reimburse users for unauthorized transactions." The announcement does not say the settlement covers people who authorized a payment to a scammer.

CFPB proposal withdrawn. The CFPB withdrew a proposed interpretive rule on "emerging payment mechanisms" as of May 15, 2025, and said it "will not take any further action" on it (90 Fed. Reg. 20568).

When a lawyer or regulator can help

For an unauthorized transfer that a bank or app denied without the investigation or explanation Regulation E requires, a consumer lawyer licensed in your state can tell you what remedies the Electronic Fund Transfer Act gives you and how long you have to act. Your state attorney general's consumer-protection office takes complaints too; New York's actions above began with that office.

For a payment you sent yourself, the realistic routes are the provider's own reimbursement policy, a CFPB complaint, and reports that help law enforcement. Be wary of anyone who promises recovery for a fee. For a broader view of your options by payment method, see the scams and fraud hub.

Related guides

• How to get money back after a scam
• Where to report a scam
• Phishing, smishing and vishing
• Tech support and fake invoice scams
• Phone scams targeting Spanish speakers
• Identity theft laws

Last updated: October 2, 2026.

This article provides general legal information about United States federal law and the published policies of Zelle, Venmo, PayPal and Cash App, verified as of October 2, 2026. It is not legal advice. Company policies change without notice. For your specific situation, contact your bank or payment app, the CFPB, or a lawyer licensed in your state.

Frequently Asked Questions

Can I get my money back from Zelle if I was scammed?

If a scammer sent the money using your login or a code you were tricked into sharing, it is an unauthorized transfer under Regulation E and your bank must investigate (12 C.F.R. § 1005.2(m); CFPB EFT FAQ Question 5). If you sent it yourself, Zelle says certain impostor scams qualify for reimbursement, but there is no legal guarantee. Report it to your bank or credit union, not Zelle.

Does Zelle refund scams?

Zelle says fraud, meaning an unauthorized payment, typically qualifies for reimbursement, and that certain impostor scams qualify. It offers no protection program for authorized payments, such as an item that never arrives.

Can I cancel a Zelle payment?

Not if the recipient is already enrolled. Zelle says money then goes directly into the recipient's bank account and cannot be canceled.

Is a Venmo or PayPal friends-and-family payment protected?

No. PayPal's Purchase Protection excludes friends-and-family payments, and Venmo's Purchase Protection applies only to eligible payments to business profiles or marked for goods and services. Unauthorized activity is handled separately.

How long does a bank have to investigate a Zelle or app fraud claim?

Generally 10 business days after your notice, or up to 45 days if it provisionally credits your account within 10 business days (12 C.F.R. § 1005.11(c)). Some cases get 20 business days or 90 days.

How long do I have to report an unauthorized Cash App or Venmo transfer?

Report within two business days of learning your card or code was lost or stolen to cap liability at 50 dollars, and within 60 days after the statement showing the transfer to avoid liability for later transfers (12 C.F.R. § 1005.6(b)). Cash App's terms also ask for notice within 60 days of the statement.

Does a transfer being final and irrevocable mean I cannot get it back?

Not for an unauthorized transfer. The CFPB says network finality rules do not reduce Electronic Fund Transfer Act protections for unauthorized transfers.

Is the CFPB lawsuit against Zelle still going?

No. The CFPB voluntarily dismissed its suit against Early Warning Services and three banks with prejudice, and the court dismissed it on March 5, 2025. New York's attorney general filed its own suit against Early Warning Services in August 2025.