Crypto Law/Level IV · Holders' traps/4.3 When the state comes/Lesson 5
No chargebacks: irreversibility in court
Which payment-protection laws reach crypto, why a transfer you sent yourself usually falls outside them, and how courts act on the coins instead.
Education, not legal, tax or investment advice. Crypto law differs between countries and states and changes often. Check the current rules where you live with a qualified lawyer or tax adviser before you act.
The lean path
The cheapest, lowest-tax, simplest and most private route the law allows, best first. Each step names the rule it rests on and the condition that keeps it lawful.
- Report unauthorized platform transfers within two business days to cap liability at $50 under Regulation E (12 C.F.R. §1005.6), which a federal court applied to crypto (Rider v. Uphold, 2023); transfers you sent yourself are usually not covered.
- Free protection: enable strong authentication and withdrawal allowlists, and verify addresses before sending; a confirmed transfer cannot be charged back, so prevention is the only zero-cost remedy.
- After a loss, report at once to the platform and ic3.gov, recording hashes and times, and file a free CFPB complaint if the platform refuses a Regulation E claim on an unauthorized transfer.
- A court freezing or proprietary injunction (AA v Persons Unknown, 2019) is worth paying a lawyer for only when traced coins sit at a reachable exchange and the amount justifies the cost.
Materials12 CFR §1005.2(m) and §1005.6 (Regulation E: unauthorized transfers and consumer liability)Rider v. Uphold HQ Inc., 657 F. Supp. 3d 491 (S.D.N.Y. 2023)The UK Payment Systems Regulator’s page on APP fraud reimbursement protectionsThe transaction ID and timestamps of any transfer you would want to dispute
Wonder
- If someone empties my exchange account without my permission, does US consumer law protect me?
- Why does tricking me into sending crypto myself leave me with fewer rights than a stolen card?
- Can a court make an exchange hold coins that were taken from me?
Explore
- A chargeback is a reversal pushed through the card or bank system, which works because an intermediary can debit one account and credit another. A confirmed blockchain transfer has no such intermediary (lesson 1.1.6). So when crypto goes wrong, the legal fight moves elsewhere: to statutes that make a platform reimburse certain losses, and to courts that can order whoever now holds the coins, often an exchange, to freeze or return them. This lesson looks at both, and at the line that decides most cases: whether you authorised the transfer.
- In the United States the Electronic Fund Transfer Act and Regulation E protect consumers against unauthorized transfers from their accounts. If a consumer reports a lost or stolen access device within two business days of learning of it, liability is capped at the lesser of $50 or the amount taken; later notice raises the cap, generally to $500, with further rules for transfers reported more than 60 days after a statement (12 CFR §1005.6). Courts have begun applying this to crypto platforms: in Rider v. Uphold HQ Inc. (S.D.N.Y. 2023), a federal court held that cryptocurrency counts as ‘funds’ under the Act.
- The protection has a sharp edge. Regulation E defines an unauthorized transfer as one initiated by a person other than the consumer, without actual authority, from which the consumer receives no benefit (12 CFR §1005.2(m)). If a scammer persuades you to press ‘send’ yourself, the transfer is usually treated as authorised, even though you were deceived. In January 2025 the US Consumer Financial Protection Bureau proposed an interpretation that stablecoins and similar assets are ‘funds’ under the Act, but it withdrew the proposal on May 15, 2025. Coverage of a given crypto account is therefore decided case by case.
- The United Kingdom shows the same line. In Philipp v Barclays Bank UK plc, decided on 12 July 2023, the UK Supreme Court rejected a claim by a customer tricked into transferring £700,000 that her bank owed her a duty to refuse her own authorised instructions. Regulation then filled part of the gap: from 7 October 2024, the Payment Systems Regulator’s scheme requires payment firms to reimburse most victims of authorised push payment fraud up to £85,000, but only for UK bank transfers over Faster Payments or CHAPS. A transfer of crypto from a wallet is not a Faster Payments transfer.
- Courts can still act on the coins themselves. In AA v Persons Unknown (2019), an English insurer had paid 109.25 bitcoin as a ransom; the High Court treated bitcoin as property and granted a proprietary injunction over 96 bitcoin traced to an address at the Bitfinex exchange. The UK’s Property (Digital Assets etc) Act 2025, which received Royal Assent on 2 December 2025, confirms that a thing is not prevented from being property merely because it is neither a ‘thing in possession’, such as a physical object, nor a ‘thing in action’, such as a debt. Similar freezing orders exist in other countries (lesson 9.3.5).
- What decides outcomes in practice is speed and a reachable intermediary. Coins that land at a regulated exchange can be frozen by court order; coins that move through wallets the court cannot reach are much harder to recover. A practical check after any loss: record the transaction IDs, the receiving addresses and the exact times, report promptly to the platform and to the authorities (lesson 4.2.7), and say clearly whether you sent the transfer yourself or someone else did, because that distinction shapes every remedy above. Anyone promising guaranteed recovery for a fee is a known scam pattern (lesson 4.2.5).
Key facts
- Under 12 CFR §1005.6, a consumer who reports a lost or stolen access device within two business days is liable for no more than the lesser of $50 or the amount of unauthorized transfers.
- Regulation E defines an unauthorized transfer as one initiated by someone other than the consumer without actual authority, so a deceived consumer’s own transfer usually falls outside it.
- In Rider v. Uphold HQ Inc. (S.D.N.Y. 2023) a federal court held that cryptocurrency is ‘funds’ under the Electronic Fund Transfer Act.
- The CFPB withdrew its January 2025 proposed interpretive rule on electronic fund transfers using emerging payment mechanisms on May 15, 2025.
- The UK’s mandatory reimbursement for authorised push payment fraud started on 7 October 2024, covers Faster Payments and CHAPS transfers, and has a £85,000 maximum claim.
- In AA v Persons Unknown (2019) the English High Court granted a proprietary injunction over 96 bitcoin traced to a Bitfinex address.
Exercise nine, six, three, one
Fact check
Dates, figures and claims checked against the published sources listed below.
- 12 CFR §1005.6 (Liability of consumer for unauthorized transfers)
- 12 CFR §1005.2 (Definitions, including unauthorized electronic fund transfer)
- Federal Register: CFPB proposed interpretive rule on electronic fund transfers using emerging payment mechanisms (January 15, 2025)
- Federal Register: CFPB withdrawal of the proposed interpretive rule (May 15, 2025)
- UK Supreme Court: Philipp v Barclays Bank UK plc (UKSC 2022/0075)
- Payment Systems Regulator: Our new APP fraud reimbursement protections
- BAILII: AA v Persons Unknown & Ors, Re Bitcoin, 2019 EWHC 3556 (Comm)
- legislation.gov.uk: Property (Digital Assets etc) Act 2025