Federal Rules Governing Prepaid Accounts: What Changed in 2019

On April 1, 2019, the Consumer Financial Protection Bureau's Prepaid Accounts Rule took full effect, fundamentally reshaping the regulatory landscape for prepaid financial instruments in the United States. Codified as amendments to Regulation E (Electronic Fund Transfers) and Regulation Z (Truth in Lending), the rule brought prepaid accounts under a comprehensive federal framework for the first time. Before this date, prepaid products existed in a regulatory gray zone — partially covered by some provisions of Regulation E but largely exempt from the disclosure and dispute resolution requirements that governed traditional checking and debit accounts. What followed was a regulatory transformation that affected every issuer, every retailer that sells prepaid products, and every consumer who uses one.

The Pre-2019 Regulatory Gap

To understand the significance of the 2019 changes, it is essential to understand what came before. Prior to the Prepaid Accounts Rule, Regulation E applied to prepaid accounts only in limited ways. Payroll cards received specific regulatory attention through a 2006 amendment, and government benefit cards were addressed separately. But the vast universe of general-purpose reloadable prepaid cards — the products sold at retail checkout counters, loaded at convenience stores, and used for everyday transactions by tens of millions of Americans — occupied an ambiguous legal position.

Issuers were not required to provide standardized fee disclosures before consumers acquired a prepaid product. Error resolution rights, which allow consumers to dispute unauthorized transactions, were not uniformly extended to prepaid account holders. Limited liability protections — the rules that cap consumer losses from unauthorized transfers — applied inconsistently. And there was no federal requirement to provide periodic statements or equivalent account history access. In practical terms, a consumer could spend $5 to $10 acquiring a prepaid card at a retail location and have virtually no way to compare its fee structure to competing products until after the money was already spent.

Short-Form and Long-Form Disclosures

The most immediately visible change introduced by the Prepaid Accounts Rule was the mandatory disclosure framework. Every prepaid product must now include two standardized disclosure documents: the short-form disclosure and the long-form disclosure.

The short-form disclosure was deliberately modeled after the Nutrition Facts label on food products — a standardized, easy-to-scan format that presents the most commonly incurred fees in a consistent layout. This format includes the periodic fee (monthly or annual), per-transaction fees for different payment methods, the cash replenishment fee, domestic and international cash withdrawal fees, customer service call fees, and the inactivity fee. Each fee must be presented using a specific label and in a prescribed sequence, ensuring that consumers can make direct comparisons across products without deciphering issuer-specific terminology.

The long-form disclosure provides a comprehensive listing of every fee the issuer may charge under any circumstance. This includes fees that may be triggered only in unusual situations — expedited card replacement, paper statement requests, declined transaction fees, account closure fees, and others. The long-form also includes conditions under which fees may be waived, such as recurring payroll transfer thresholds that eliminate monthly maintenance charges.

Error Resolution Rights

Perhaps the most consequential change for everyday consumers was the extension of full Regulation E error resolution rights to prepaid account holders. Under these provisions, consumers have the right to dispute unauthorized transactions, incorrect transfers, and computational errors — and issuers have defined timeframes within which they must investigate and resolve those disputes.

When a consumer notifies the issuer of a potential error, the issuer must investigate and resolve the matter within 10 business days. During the investigation period for claims involving transactions that occurred more than 30 days before the consumer's notification, the issuer may extend the investigation period to 45 calendar days, but must provisionally credit the disputed amount to the consumer's account within 10 business days. This provisional credit requirement is critical — it means the consumer regains access to the disputed funds while the investigation proceeds, rather than being forced to wait weeks or months for resolution.

Before the rule, many prepaid issuers had no formal error resolution process, or offered one that was entirely voluntary and could be modified or withdrawn at any time. Consumers who discovered unauthorized charges on their prepaid accounts frequently had no recourse beyond calling customer service and hoping for a favorable response. The 2019 rule ended this asymmetry by extending the same structured dispute rights that traditional checking account holders had long enjoyed.

Limited Liability for Unauthorized Transactions

Closely linked to error resolution is the limited liability framework. Under Regulation E, a consumer's liability for unauthorized electronic fund transfers depends on how quickly they report the unauthorized activity. If the consumer notifies the issuer within two business days of learning of the loss, liability is capped at $50. If notification occurs after two business days but within 60 calendar days of the issuer transmitting an account statement or making account history available, liability is capped at $500. After 60 days, the consumer may be liable for the full amount of unauthorized transfers that occurred after the 60-day window.

The Prepaid Accounts Rule extended these same tiered liability caps to prepaid account holders. However, the rule also introduced an important transitional provision: for unverified prepaid accounts — those for which the issuer has not completed identity confirmation — the issuer is not required to apply the limited liability protections until the consumer's identity has been verified. This creates a practical incentive for consumers to complete the identity verification process, as doing so unlocks the full suite of federal protections.

Why Identity Verification Matters

The verification distinction is one of the rule's most important practical implications. An unverified prepaid account — one used anonymously without providing identifying information to the issuer — may not receive the benefit of limited liability protections or the full error resolution process. For consumers who value privacy, this creates a genuine tension between anonymity and legal protection. The CFPB's approach effectively acknowledges that issuers cannot investigate unauthorized transactions on accounts when they cannot verify who the authorized account holder is.

The 21-Day Waiting Period for Credit Features

A significant number of prepaid products include or offer an optional credit feature — sometimes called an overdraft program, a credit line, or a "negative balance" feature. Before the Prepaid Accounts Rule, these credit features were essentially unregulated in the prepaid context. Issuers could extend credit to prepaid cardholders without providing the disclosures or protections required under the Truth in Lending Act.

The 2019 rule changed this by subjecting prepaid-linked credit features to Regulation Z requirements, including the obligation to provide cost-of-credit disclosures, the right to dispute billing errors, and protections against unreasonable penalty fees. Additionally, the rule introduced a 21-day mandatory waiting period: an issuer that offers a prepaid account with an optional credit feature cannot allow the consumer to access that credit feature until at least 21 days after the consumer has completed identity verification on the prepaid account.

The purpose of this waiting period is explicitly consumer-protective. It prevents issuers from marketing prepaid products primarily as vehicles for high-cost credit — a concern that had emerged as some issuers began offering prepaid cards with attached credit lines carrying annual percentage rates exceeding 30%. The waiting period ensures that consumers acquire the product for its prepaid functionality and then make a separate, deliberate decision about whether to opt into the credit feature after having time to evaluate the terms.

Periodic Statement Alternatives

Traditional checking accounts are governed by a requirement to provide periodic statements — typically monthly documents that detail all account activity during the statement period. The CFPB recognized that applying this requirement directly to prepaid accounts would be impractical for many issuers and unnecessary for many consumers who access account information digitally.

The Prepaid Accounts Rule therefore offers issuers two alternative compliance pathways. The first option is to provide traditional periodic statements, meeting all the requirements applicable to standard checking accounts. The second option — and the one most issuers have adopted — is to make electronic account transaction history available for at least 18 months through an online portal or mobile application, and to make paper copies of that transaction history available upon the consumer's request.

This flexibility acknowledges the digital-native nature of most prepaid products while still ensuring that consumers have access to their account records for budgeting, tax preparation, and dispute purposes. The 18-month minimum history requirement is notably longer than many issuers had previously offered voluntarily, representing a meaningful expansion of consumer access to account data.

Ongoing Impact and Enforcement

Since the rule's effective date, the CFPB has taken enforcement actions against multiple prepaid issuers for violations, including failures to provide proper disclosures, delays in error resolution processing, and inadequate provisional crediting. The agency has also maintained its public prepaid product agreements database, which enables consumers, researchers, and journalists to compare fee structures and account terms across hundreds of prepaid products.

The Prepaid Accounts Rule represented the most significant expansion of federal consumer financial protection in the prepaid market since Regulation E was first enacted in 1978. It closed a regulatory gap that had left millions of consumers without the basic protections their traditional checking account counterparts had long taken for granted.

For consumers, the practical takeaway is clear: prepaid account holders now possess specific, enforceable federal rights. They have the right to know what they will pay before they commit to a product. They have the right to dispute errors and receive provisional credits during investigations. They have the right to limited liability for unauthorized transactions, provided they verify their identity on their accounts and report promptly. And they have the right to access at least 18 months of transaction history. These are not suggestions or industry best practices — they are legal requirements backed by federal enforcement authority.