Home - Article

Featured Article

August 14, 2025

New York AG Sues Zelle Operator Over Alleged Security Failures Enabling $1 Billion in Fraud


Key Takeaways

  • New York Attorney General Letitia James has filed a lawsuit against Early Warning Services (EWS), the operator of Zelle, claiming that the platform’s design allowed scammers to defraud users of more than $1 billion between 2017 and 2023.
  • The complaint alleges insufficient verification processes, the ability to link multiple “tokens” to one account, slow responses to fraud reports, and misleading safety assurances.
  • The case mirrors a federal Consumer Financial Protection Bureau (CFPB) lawsuit filed in late 2024, which was dropped in early 2025; the New York action revives many of the same allegations.
  • EWS disputes the claims, calling the suit politically motivated and pointing to Zelle’s reported fraud-free transaction rate of over 99.95%.

New York Attorney General Letitia James has filed suit against Early Warning Services, the bank-owned company behind the Zelle peer-to-peer payment platform, alleging that its design and oversight left consumers vulnerable to widespread fraud. The lawsuit claims that from 2017 through 2023, Zelle’s system facilitated more than $1 billion in fraudulent transfers.

The filing asserts that in the rush to compete with services such as Venmo and Cash App, Zelle’s bank owners — which include JPMorgan Chase, Bank of America, Wells Fargo, Capital One, PNC Bank, Truist, and U.S. Bank — pushed the platform to market without building in adequate safeguards. According to the complaint, this haste allowed scammers to exploit weaknesses in account verification, token management, and fraud monitoring.

One key allegation centers on how Zelle allowed users to register accounts with misleading email addresses or phone numbers, sometimes impersonating trusted institutions. These identifiers, known as “tokens,” could be linked in large numbers to a single bank account — at one point up to 20, later reduced to five — making it easier for fraudsters to rotate identifiers and avoid detection. The lawsuit also contends that EWS failed to ensure participating banks followed consistent fraud prevention rules, which left scammers active on the network even after complaints.

The attorney general’s office highlighted specific examples, including a case where a New Yorker lost nearly $1,500 after receiving a fake utility shutoff notice and sending funds to a Zelle account labeled “Coned Billing.” Because Zelle transfers settle almost instantly, the victim had no recourse to reverse the payment once it was made.

According to the lawsuit, these vulnerabilities were not unknown to EWS. Internal discussions and prior complaints had reportedly flagged the problems, but changes to the platform’s verification and monitoring systems came only in 2023 — too late to prevent the scale of fraud alleged. Even then, the complaint argues, the measures fell short of adequately protecting consumers.

This state-level action follows a similar case filed by the Consumer Financial Protection Bureau in December 2024. That federal lawsuit accused EWS and some of its bank owners of enabling rampant fraud, but it was withdrawn in March 2025 after leadership changes at the CFPB and a shift in enforcement priorities. Attorney General James has positioned the New York suit as a necessary intervention to fill the enforcement gap left by that withdrawal.

“No one should be left to fend for themselves after falling victim to a scam,” James said in a statement announcing the lawsuit. “We are taking action to ensure that companies behind financial platforms prioritize the safety and security of their users over profits and speed to market.”

The lawsuit seeks restitution for victims, civil penalties, and a court order requiring EWS to implement stronger anti-fraud protections. These could include stricter verification standards, limits on token use, faster fraud response times, and clearer disclosures to consumers about the risks of using Zelle.

EWS has rejected the allegations, framing the lawsuit as politically motivated and largely duplicative of the CFPB’s abandoned case. A company spokesperson stated that over 99.95% of Zelle transactions are free from fraud and warned that requiring automatic reimbursement for all disputed transactions could encourage abuse by fraudsters.

The outcome of the case could have wider implications for the peer-to-peer payments industry. Regulators and lawmakers have increasingly scrutinized how fast-transfer systems handle fraud claims, especially given that transfers often cannot be reversed once initiated. If the New York attorney general prevails, the ruling could set a precedent for how much responsibility payment networks bear when fraud occurs on their platforms.

For now, Zelle remains one of the most widely used digital payment services in the U.S., integrated into the mobile banking apps of more than 1,600 financial institutions. Whether this lawsuit changes how the service operates — or prompts other states to pursue similar actions — will depend on how the case unfolds in court.






SHARE THIS ARTICLE
Apex Technology Services
Choose from comprehensive, affordable solutions for IT consulting, network services and computer help desk support in Fairfield county including Norwalk, Darien, Stamford, Greenwich, Ridgefield and Bridgeport. Also Westchester county including Rye, New Rochelle, White Plains, Yonkers and New York including Manhattan and the five boroughs.
IT SERVICES

IT SERVICES

Apex Technology Services is a cutting edge MSP offering quality IT support to financial, medical, legal, Fortune 500 and government agencies while adhering to the highest of quality...

LEARN MORE
CYBERSECURITY Services

CYBERSECURITY

Apex Technology Services has the cybersecurity expertise to help your business in a world filled with attackers looking to shut down your business hold it ransom or steal your valuable...

LEARN MORE
CLOUD SERVICES

CLOUD SERVICES

Apex Technology Services delivers a combination of traditional IT functions such as infrastructure as a service (IaaS), applications, software, security, monitoring, storage...

LEARN MORE

Ranked Top 10 Network security Solution Provider

One Stop Shop For All Your Technology Needs


Contact us Now!