Consumer Protection & APP Fraud

Consumer protection sits with FSCA (SA), the CBN Consumer Protection Framework (NG) and the Consumer Protection Act 2012 (KE). APP/authorised-fraud liability is an emerging frontier: the CBN's draft APP-fraud rules introduce mandatory refunds, strict… Full module →

Consumer protection rests on the 2018 E-Commerce Law and the 2009/2018-amended Consumer Protection Law; no dedicated APP-fraud reimbursement scheme exists.

Financial consumer protection rests on the BCRA's user-protection rules plus Consumer Protection Law 24,240 and the Civil and Commercial Code, with disputes also overseen by consumer-protection bodies. There is no UK-style statutory APP-fraud mandatory… Full module →

APAC consumer-protection regimes increasingly assign scam liability across the ecosystem. Singapore's Shared Responsibility Framework (live 16 December 2024) allocates phishing-scam losses across banks, telcos and consumers using a waterfall/duty-breach… Full module →

SPF (Part IVF CCA, commenced 21 Feb 2025): principles-based whole-of-ecosystem regime (banks/ASIC, telcos/ACMA, digital platforms/ACCC); A$50m/contravention; redress via IDR/AFCA + court; May 2026 draft proposes A$3,000 reimbursement threshold + equal… Full module →

Consumer protection for Austrian payments is split between the FMA (financial-product complaints, collective protection only) and the BMASGPK/VKI (general consumer law, representative actions). Fraud-prevention has been strengthened structurally via mandatory… Full module →

Consumer protection runs through Bangladesh Bank's Customer Interest Protection Centre (CIPC) and the Guidelines for Customer Services and Complaint Management, requiring escalation from provider complaint cells to CIPC with defined resolution timelines… Full module →

Consumer protection for unauthorised/fraudulent payments runs on a 'reimburse-first, litigate-later' model under Articles VII.43-VII.44 CEL, with a EUR50 liability cap for lost/stolen instruments; a March 2026 Brussels Commercial Court ruling reinforced the… Full module →

The Pix Special Return Mechanism (MED), created Nov 2021, is the core consumer-redress tool for fraud/scams/operational failure: victims register within 80 days, receiving-institution funds are blocked, both institutions review within 7 days and refunds (full… Full module →

General consumer-protection enforcement runs through the CCP under the Consumer Protection Law. APP/IBAN-spoofing fraud is a recognised and growing risk (over EUR 16 million in losses in 2024), prompting a new EU-mandated Verification of Payee service rolled… Full module →

Consumer protection for payments sits at the intersection of the 2019 Law on Consumer Protection (National Committee for Consumer Protection), NBC's Prakas on Resolution of Consumer Complaints, the 2019 E-commerce Law's liability provisions for lost/stolen… Full module →

Consumer protection runs on the CEMAC Regulation on Protection of Consumers of Banking Products/Services (2020) and Cameroon's national Consumer Protection Law (2011), with a Central Payment Incident Unit (2021) providing incident-handling infrastructure… Full module →

Canada has NO nationwide statutory APP-fraud reimbursement regime equivalent to the UK PSR mandatory reimbursement; e-Transfer is explicitly not covered by 'zero liability'. Credit-card liability is capped at $50 under Bank Act s.627.33. The voluntary EFT… Full module →

Consumer protection combines federal Bank Act fraud-consent reforms (Bill C-15, in force July 2027), Interac's discretionary e-Transfer liability policy, and provincial Consumer Protection Act rules, with OBSI as sole external complaints body since Nov 2024.

BC consumers rely on a layered federal/provincial/voluntary consumer-protection stack: BPCPA and Consumer Protection BC provincially; the FCAC-monitored Canadian Code of Practice for Consumer Debit Card Services and new Bill C-15 Bank Act fraud-prevention… Full module →

NB consumer protection sits within a federal/provincial layering: federally, Bank Act amendments require banks (from July 1, 2027) to obtain explicit consumer consent before enabling EFT capabilities like e-Transfer/wire transfers, alongside a National… Full module →

Consumer payments-fraud protection runs through internal bank complaint processes escalating to OBSI (sole external complaints body since Nov 2024); fraud is the largest single driver of banking complaints; new Bank Act amendments impose fraud-detection… Full module →

Quebec's consumer protection regime for payments runs through the Consumer Protection Act (amended by Bill 72, 2024), layered atop federal Bank Act liability limits and the sole national external complaints body (OBSI); unlike the UK, Canada has no statutory… Full module →

Consumer protection rests on Ley 19.496 (CCPA) enforced by SERNAC, reinforced by the 'Sernac Te Protege' reform giving SERNAC sanctioning powers. Card/electronic-fraud reimbursement is governed by Ley 20.009 (fraud-liability limitation, with fast… Full module →

Consumer/APP-fraud protection anchored in the Anti-Telecom and Online Fraud Law (effective 1 Dec 2022); NFRA consolidates financial-consumer-protection functions post-2023 reform, though gaps remain for non-bank mobile payment users.

Financial-consumer protection is governed by Ley 1328 de 2009 and operationalised through the SFC's SAC, the per-entity Defensor del Consumidor Financiero, and the SFC's jurisdictional Acción de Protección al Consumidor Financiero (capped resolution time of… Full module →

SINPE Móvil-linked social-engineering fraud (SIM/phone-recycling scams and WhatsApp verification-code takeovers) is the dominant consumer-facing payments-fraud vector, with rapidly rising complaint volumes and losses but low criminal conviction rates. No… Full module →

Consumer protection for payment service users runs through HNB's complaints and ADR mechanism under the Payment System Act and Consumer Protection Act. APP fraud reimbursement is not yet separately mandated in Croatia beyond the general EU PSD3/PSR political… Full module →

Consumer protection runs through CBCS's 2017 complaints-handling Regulation (two-week response requirement) and the consumer association Fundashon pa Konsumidó, with CBCS itself limited to a supervisory-signal role rather than adjudication or mediation… Full module →

Consumer protection rests on PSD2-derived conduct rules, transparency/disclosure obligations, and EBA consumer-protection guidance adopted by the CBC. The Office of the Cyprus Financial Commissioner (Financial Ombudsman), established under Law 84(I)/2010… Full module →

Consumer protection in Czech payments rests on the Payment System Act (private-law user relationship provisions), the general Consumer Protection Act (Act No. 634/1992 Coll.), and free dispute resolution via the Office of the Financial Arbitrator. Dedicated… Full module →

The Payments Act entitles payers to immediate refund for unauthorised transactions absent indications of payer fraud. Consumer/marketing conduct sits with the Consumer Ombudsman and disputes route through the public Consumer Complaints Board (fees DKK… Full module →

General consumer protection runs through Law 358-05 (Pro Consumidor); sector-specific protection sits under the Junta Monetaria's Reglamento de Protección al Usuario; no dedicated APP-fraud mandatory-reimbursement scheme identified.

Consumer protection is anchored by COSEDE's tiered deposit-insurance mechanism, newly reformed in April 2026 to prioritise purchase-and-assumption transfers, alongside the Defensor del Cliente route; no APP-fraud reimbursement mandate identified.

Consumer protection rests on the CBE's February 2019 Consumer Protection Instructions and Articles 216-220 of Law 194/2020, with a dedicated CBE Consumer Protection (Customer Rights Protection and Competition) Sector. Banks must run an independent complaints… Full module →

Consumer protection runs through the Consumer Protection Act/Consumer Disputes Committee plus Eesti Pank fraud-prevention coordination; PSR/PSD3 APP-fraud reform pending domestic transposition.

EEA consumer protection rests on PSD2 (unauthorised/incorrectly executed transaction refunds) and is being expanded by the PSR. The November 2025 PSD3/PSR political agreement introduces mandatory reimbursement for impersonation ('spoofing') fraud, obliging… Full module →

Dispute resolution runs through FINE and Consumer Ombudsman; no UK-style APP-fraud reimbursement rule; FIN-FSA flags fraud as rising supervisory priority.

Consumer protection rests on the Code monétaire et financier (unauthorised-transaction reimbursement under Art. L.133-x), the PSD2 SCA framework, and ACPR conduct supervision (complaint-handling Recommendation 2024-R-02; complaints routed via Banque de… Full module →

Consumer protection in payments rests on PSD2 as transposed via ZAG and BGB §§675c ff., the BGB general civil-law regime, and the UWG. Unauthorised payments are refundable within one bank working day and payer card liability is capped at EUR 50… Full module →

Consumer protection runs through BoG's Investigation and Consumer Reporting Office (ICRO), complaints procedures, Consumer Recourse Mechanism Guideline (2017) and Disclosure/Transparency guidelines; PSPs are the first level of redress. There is no UK-style… Full module →

Consumer protection rests on the GFSC Consumer Duty (Core Principles and Consumer Duty Regulations 2024, in force 9 May 2024, UK-aligned, outcomes-based). Crucially, on APP fraud Gibraltar has NO equivalent of the UK's mandatory reimbursement regime: under… Full module →

Consumer/payments-dispute resolution is fragmented across BoG complaints, the Consumer Ombudsman and the Hellenic Financial Ombudsman (FIN-NET). No dedicated statutory APP-fraud reimbursement scheme identified; BNPL protections incoming via CCD2.

Hong Kong lacks a single statutory scam/APP-fraud reimbursement regime (unlike the UK PSR mandatory reimbursement or Singapore's SRF); instead it relies on HKMA-led, largely non-statutory measures. Core tools are the Suspicious Account Alert (FPS proxy +… Full module →

MNB financial consumer protection runs through a tiered complaint-then-regulator escalation model, backed by a mandatory Central Fraud Monitoring System and MNB conduct recommendations constraining gross-negligence attribution to fraud victims.

Consumer protection in Icelandic payments is split between the general Consumer Agency and the FME/CBI's financial-sector-specific oversight, with EEA-wide ECC-Net support for cross-border disputes; no dedicated mandatory APP-fraud reimbursement scheme… Full module →

Consumer protection rests on the RBI's customer-liability framework (zero/limited liability for unauthorised transactions if reported within 3-7 days), the RBI Integrated Ombudsman Scheme 2021 (escalation after 30 days), and 2026 Internal Ombudsman… Full module →

Singapore's consumer-protection framework for payments centres on the E-Payments User Protection Guidelines (EUPG) and the Shared Responsibility Framework (SRF) for phishing scams, which took effect on 16 December 2024 (jointly issued by MAS and IMDA). The… Full module →

Consumer protection is governed by the Consumer Protection Code 2025 (effective March 2026) and supervised by the CBI's Consumer Protection Directorate; the Financial Services and Pensions Ombudsman (FSPO) is the dispute-resolution route. Unlike the UK (PSR… Full module →

Consumer redress runs through the Isle of Man Financial Services Ombudsman Scheme (established 2002), which can award up to £150,000 for defined financial loss against Isle of Man-based suppliers; there is no PSR-style mandatory APP-fraud reimbursement regime… Full module →

Consumer protection in Italian payments runs through Banca d'Italia's transparency/fairness supervisory mandate and the ABF ombudsman scheme. PSD2 (as transposed by D.Lgs. 11/2010) caps consumer liability for unauthorised payments at EUR50 and requires bank… Full module →

Financial consumer protection is a BCEAO competence applied across banks, MFIs and e-money issuers, supplemented by Côte d'Ivoire's general consumer-protection, telecom and data-protection law. Instruction n°04/06/2014 mandates a list of free banking… Full module →

Japan has no single APP-fraud mandatory-reimbursement scheme equivalent to the UK PSR model; consumer redress for transfer scams runs primarily through the Act on Damage Recovery Benefit Distributed from Funds in Bank Accounts Used for Crimes (2008), under… Full module →

Consumer protection is consolidating around a forthcoming Unified Financial Ombudsman and a 2025 package of anti-fraud legislative amendments (biometric first-loan ID, loan opt-out, money-mule criminalisation, NBK Anti-Fraud Center) rather than a UK-style… Full module →

No UK-PSR-style mandatory APP-fraud reimbursement in force; CBK developing a formal e-money/digital-wallet fraud compensation framework under NFIS 2025-2028 targeted end-2026 (pending). DCP Regulations 2022 + Business Laws Amendment 2024/2025 (interest cap… Full module →

Consumer protection rests on the Law on Consumer Protection No. 02/NA (2010) and the financial-sector-specific Decree No. 225/GOV (2020), which requires complaint recording, 15-day update cycles, and escalation to BOL and then to the Economic Dispute… Full module →

Brazil's flagship consumer-protection instrument is the Pix Special Return Mechanism (MED), a BCB-mandated refund channel for fraud/scam/operational-failure cases (created 2021). On user trigger, funds are blocked at the receiving institution and both banks… Full module →

CRPC/Latvijas Banka split consumer protection oversight; VoP anchors APP-fraud mitigation with measurable impact.

Consumer protection for payments customers rests on general civil-law instruments (ABGB warranty rules, Consumer Protection Act/KSchG, Act against Unfair Competition/UWG) plus FMA supervision and the extrajudicial conciliation board/FIN-Net dispute-resolution… Full module →

The Bank of Lithuania acts as the out-of-court dispute resolution body for consumer disputes with financial market participants: consumers must first complain to the provider (15-working-day reply), then may apply to the Bank within one year; its decisions… Full module →

Consumer protection sits with the CSSF, the competent authority for compliance with financial-consumer-protection laws and the registered ADR entity for out-of-court complaint resolution under CSSF Regulation 16-07 and Circular 17/671 (transposing Directive… Full module →

Consumer protection in Macau's financial sector is handled through two separate channels -- the statutory Macau Consumer Council for general consumer matters, and AMCM's own written/real-name complaint process for authorised financial and insurance… Full module →

Consumer protection rests on BNM's conduct framework (Fair Treatment of Financial Consumers; Complaints Handling PD of March 2025, effective April 2026) with redress via the Financial Markets Ombudsman Service (FMOS) — created 1 January 2025 by merging the… Full module →

No EU-wide mandatory APP-reimbursement regime; OAFS (Cap. 555) ADR route and published PSP/PSU responsibility-allocation model govern scam reimbursement; MFSA launched anti-fraud public-private partnership 8 Apr 2026 (MFSA, Police, OAFS, FIAU, CBM).

Consumer protection for financial services is led by CONDUSEF (created 1999 under the Law to Protect and Defend Financial Services Users), which mediates/conciliates complaints, runs arbitration, registers standard-form contracts, controls abusive clauses… Full module →

Consumer protection for financial customers rests on Law 31-08 (consumer protection) and Law 103-12, enforced by BAM through transparency, complaint-handling and recommendation 1/G/2012. The dispute route is internal complaint first, then the Centre Marocain… Full module →

Consumer protection is delivered through BdM's own conduct-supervision and complaints-handling function (Notices 8/GBM/2021 and 9/GBM/2020), with no separate specialised financial-consumer agency. Complaint data show ATM-related issues (funds not dispensed… Full module →

Consumer protection is largely embedded in tiered KYC/transaction-limit rules and provider terms-of-service rather than a dedicated APP-fraud reimbursement regime. Myanmar simultaneously hosts one of the world's largest cyber-scam/pig-butchering industries… Full module →

Consumer protection rests on the general Consumer Protection Act, 2075 (2018) - enforced via a new Consumer Court (established March 2025) - layered with NRB's sector-specific Financial Consumer Protection and Grievance Management Procedure, 2020 and an NRB… Full module →

Consumer protection rests on PSD2/Wft conduct rules supervised by AFM, with Kifid (the Dutch Institute for Financial Disputes) as the recognised out-of-court complaints/ombudsman route for consumers and small businesses. There is no statutory APP-fraud… Full module →

NZ has NO statutory mandatory APP-fraud reimbursement regime (unlike the UK PSR model). Consumer redress runs through four approved dispute-resolution schemes, principally the Banking Ombudsman Scheme (compensation up to NZ$500,000 for direct loss). Scam… Full module →

Consumer protection sits with the CBN's Consumer Protection and Financial Inclusion Department (CPFD) under the Consumer Protection Regulation 2019 and Framework 2016, with the FCCPC and NCC as adjacent regulators; complaints route to the provider first then… Full module →

Consumer protection runs through the Financial Contracts Act and Finanstilsynet's general consumer-interest mandate, with actual dispute resolution channelled to the non-binding but cost-shifting Financial Services Complaints Board or the Consumer Council… Full module →

Tiered redress (CMU -> Sunwai -> Banking Mohtasib) with statutory backing; two-day cyber-fraud reimbursement mandate in force.

Consumer protection for payments splits between ACODECO (general commercial/advertising complaints under Law 45 of 2007, competence up to US$5,000, US$30,000 for vehicles) and the SBP (banking-specific consumer complaints); there is no dedicated APP-fraud… Full module →

Consumer protection runs on a dual track: INDECOPI (Ley 29571) handles individual complaints via mandatory Libro de Reclamaciones, with fines up to 450 UIT; SBS mandates bank liability for unrecognised card transactions absent proof of user fault, with the… Full module →

The Anti-Financial Account Scamming Act (RA 12010 / AFASA, 2024) and its implementing circulars (BSP 1213-1215, 2025) form the core scam/APP-fraud regime: it criminalises money muling, social engineering and economic sabotage, empowers BSP to investigate… Full module →

Consumer protection runs through UOKiK (collective interests, abusive clauses, fines, public compensation), the Financial Ombudsman (individual complaint redress and litigation), and a network of municipal/district consumer ombudsmen plus ADR (KNF Arbitration… Full module →

Consumer protection in payments runs through Banco de Portugal's complaints book (Livro de Reclamações) and Bank Customer Website channels, alternative dispute resolution bodies, and Law 24/2023's financial-services consumer protection package. Fraud-related… Full module →

Consumer protection is multi-layered: QCB's dedicated Customer Protection Department handles banking/payments complaints; the QFC runs an independent Customer Dispute Resolution Scheme (CDRS, max award QAR 400,000); and MOCI enforces Law No. 8 of 2008 on… Full module →

Consumer protection rests on EU-aligned rules enforced by the ANPC (Autoritatea Națională pentru Protecția Consumatorilor) under GO 21/1992 and sectoral orders, with the ASF supervising financial-services consumers and ECC Romania handling cross-border EU… Full module →

Under Article 8(3.13) of the NPS Law (161-FZ), banks are financially liable to individual clients for improperly implemented anti-fraud measures where payment details match the CBR's authorised-fraud database, though the law's direct reimbursement impact… Full module →

Financial consumer protection is anchored in Law N° 017/2021 of 03/03/2021 and BNR Regulation N° 55/2022 of 27/10/2022 (in force 7 November 2022), requiring FSPs to embed consumer-protection responsibilities at board level, run quarterly consumer-satisfaction… Full module →

Consumer protection is embedded in the Implementing Regulation (Part 5) and SAMA conduct rules, with a centralised Complaint Management System (replacing SAMACARES, effective 1/7/2025G) as the ombudsman-equivalent route. BNPL — large and consumer-facing… Full module →

BCEAO sole FCP authority; no mandatory APP-fraud reimbursement scheme; UNCS opposes 2025 mobile-money tax.

Consumer protection for financial-services users runs through a dedicated NBS Department for Financial Consumer Protection with a free complaint/mediation route and NBS decisions on complaint handling; APP-fraud-specific reimbursement rules are limited, with… Full module →

Singapore's flagship consumer-protection instrument for payment fraud is the Shared Responsibility Framework (SRF), implemented 16 December 2024 by MAS and IMDA via Guidelines. It allocates losses from defined phishing scams across FIs, telcos and consumers… Full module →

Slovak consumer protection is anchored in a renewed Consumer Protection Act transposing the EU New Deal for Consumers, actively enforced by NBS against unfair fee and commercial practices; dedicated APP-fraud reimbursement is not yet a distinct Slovak regime… Full module →

Consumer protection runs on the harmonised EU Consumer Protection Act (CPA-1, effective 26 January 2023, implementing the Sale of Goods, Digital Content and Omnibus Directives), enforced with turnover-based fines for widespread infringements. There is no… Full module →

Consumer dispute resolution for payments runs through the National Financial Ombud Scheme (NFO), formed by amalgamating the Ombudsman for Banking Services, Credit Ombud and the long- and short-term insurance ombuds, and recognised by the Ombud Council; the… Full module →

Korea's APP-fraud (voice phishing / vishing) regime currently rests on the Telecommunications Fraud Refund Act (Special Act on the Prevention of Loss Caused by Telecommunications-based Financial Fraud, 2011), enforced by the FSS via account-freeze and… Full module →

BdE Complaints Service (15-day SAC, 13-month claim window) plus Supreme Court 571/2025 burden-of-proof reversal and live VoP fraud-prevention mandate.

Consumer protection runs through the Financial Consumer Protection Regulations No. 01 of 2023 and the FCRD complaint-handling/CMS infrastructure; there is no statutory mandatory APP-fraud reimbursement scheme; CBSL instead relies on public-awareness warnings… Full module →

Sweden faces an acute APP/impersonation fraud problem centred on Swish and BankID, with a 2022 Supreme Court ruling capping consumer liability at SEK 12,000 in bank-impersonation cases and a May 2024 bank-industry fraud package (transaction monitoring… Full module →

Switzerland has no EU-style mandatory APP-fraud reimbursement regime equivalent to the UK PSR scheme. Consumer protection rests on FinSA conduct/disclosure duties, contract and banking law, and AMLA-driven onboarding controls. Card fraud is mitigated mainly… Full module →

Taiwan's anti-fraud regime centres on the 2024 Fraud Crime Hazard Prevention Act imposing source-based cooperation obligations on financial institutions, VASPs, telecoms and platforms, backed by a 2025-2026 next-generation anti-fraud strategy, active MODA… Full module →

Consumer protection is anchored in the BoT (Financial Consumer Protection) Regulations 2019 (G.N. 884), which apply to FSPs across Mainland Tanzania and Zanzibar and mandate complaint-handling, disclosure, fair treatment and information protection, with… Full module →

Emergency Decree on Technology Crimes (No.2) B.E. 2568, effective 13 Apr 2025, establishes negligence-based shared liability among banks, telcos, e-wallets and platforms with mandatory SMS screening, mule-account penalties and victim compensation.

Consumer protection for payment-institution customers rests on Circular 2018-16's dedicated 'dispositif de protection du consommateur' plus a pre-existing statutory banking-mediation regime (mediator per credit institution, escalating to the BCT Governor) and… Full module →

Consumer protection rests on Türkiye's Consumer Protection Law (consumer-favourable, broadly EU-aligned) plus the CBRT payment-services conduct rules and KVKK data protection. Card-dispute/chargeback handling is centralised through BKM, with merchants bearing… Full module →

The National Payment Systems (Consumer Protection) Regulations, 2022 anchor formal consumer protection, reinforced by an April 2024 BoU directive mandating national-ID verification for mobile-money transactions of UGX 1 million or more and a 24-hour… Full module →

Consumer-protection supervision runs through the NBU's Office for Financial Services Consumer Rights Protection with a formal complaints channel and statutory response deadlines; there is no UK/EU-style mandatory APP-fraud reimbursement scheme, and… Full module →

Consumer protection is anchored in the CBUAE Consumer Protection Regulation/Standards and the Establishment of an Ombudsman Unit Regulation, which created Sanadak — the first independent financial & insurance ombudsman in the MENA region (launched 2024) —… Full module →

The UK has a world-leading mandatory APP-fraud reimbursement regime. Effective 7 October 2024, the PSR requires in-scope PSPs to reimburse victims of authorised push payment scams over Faster Payments (and CHAPS via BoE/SD21), with cost shared 50:50 between… Full module →

US consumer protection for electronic payments rests on the Electronic Fund Transfer Act (EFTA, 1978) implemented by CFPB Regulation E (12 CFR Part 1005), covering disclosures, error resolution, unauthorised-EFT liability, prepaid accounts and remittance… Full module →

Consumer protection runs through the Attorney General's Consumer Interest Division (Deceptive Trade Practices Act enforcement, hotline, ongoing scam-alert campaigns) and the ASC's crypto-kiosk survey work underpinning HB303. Alabama has no APP-fraud… Full module →

Consumer protection runs through the general Unfair Trade Practices and Consumer Protection Act (UTPCPA, AS 45.50.471), enforced by the AG's Consumer Protection Unit, layered with a payments-specific 2026 wave of legislative and enforcement activity targeting… Full module →

Arizona's consumer protection and APP-fraud regime centers on the Attorney General's Office, which enforces the Consumer Fraud Act, administers a dedicated Elder Affairs Unit, and has introduced statutory refund rights for cryptocurrency-ATM fraud victims… Full module →

Consumer protection in Arkansas rests on the Personal Information Protection Act (breach notification), the newly effective Personal Data Protection Act (data-subject rights, effective July 1, 2025), the constitutional 17% usury cap that forecloses… Full module →

Unlike the UK, the US/California has no APP-fraud mandatory-reimbursement regime; consumer protection rests on federal Regulation E (EFTA) for unauthorised electronic fund transfers and, at state level, the CCFPL's UDAAP authority plus the DFPI Consumer… Full module →

Colorado consumer protection for payments harms rests on the Colorado Consumer Protection Act (AG enforcement), a data-breach notification statute (C.R.S. 6-1-716) with a 30-day notice duty and AG/credit-bureau notification thresholds, and dedicated… Full module →

Connecticut has no PSR-style mandatory APP-fraud reimbursement scheme; consumer protection for payments fraud runs through CUTPA enforcement, the Attorney General's Elder Justice Hotline/Consumer Assistance Unit, and PA 25-66's new minors' money-sharing-app… Full module →

Consumer protection rests on the Consumer Fraud Act and Deceptive Trade Practices Act, enforced by the DOJ's Division/Unit of Consumer Protection with treble-damages and injunctive remedies. SB18 (2026) adds money-transmission-specific refund/timeliness… Full module →

DC consumer protection rests on the CPPA (private right of action, treble damages) and the Security Breach Protection Amendment Act (AG notification, 18-month ID-theft-protection mandate); DISB's Consumer Services Division and OAG's Office of Consumer… Full module →

Florida consumer protection for payments rests on the general FDUTPA/FTSA private-enforcement framework plus newly enacted virtual-currency-kiosk-specific fraud protections (transaction limits, mandatory warnings, conditional refunds); Florida has not enacted… Full module →

Georgia lacked a comprehensive consumer privacy statute until Senate Bill 111 (Act 462) was signed May 11, 2026; consumer protection for payments previously rested on the sector-agnostic breach-notification statute (O.C.G.A. § 10-1-912, no fixed notice… Full module →

Consumer protection for Hawaii payments users runs through the general HRS Chapter 480 UDAP framework, enforced by the Office of Consumer Protection, with treble-damages and attorney-fee remedies available to injured consumers. There is no Hawaii-specific… Full module →

Idaho's most acute payments consumer-harm vector is APP-style fraud via crypto kiosks targeting seniors; a 2026 bill to address it passed both chambers but was vetoed.

Illinois consumer protection in payments/credit rests on the Predatory Loan Prevention Act's 36% APR cap (in force since March 2021) plus new DACPA/Digital Asset Kiosk Act consumer safeguards enacted in 2025 targeting crypto-fraud losses, which the Governor's… Full module →

Security-breach statute since 2006 plus new comprehensive ICDPA effective 2026-01-01 and EWA-specific safeguards; no APP fraud reimbursement regime.

Iowa lacks a UK/PSR-style mandatory APP-fraud reimbursement scheme; consumer protection against scams and fraud runs through the Attorney General's Consumer Fraud Act enforcement and a 2026 joint "Stop the Scammers" initiative between the AG's office, the… Full module →

Consumer protection in Kansas runs through the Kansas Consumer Protection Act enforced by the Attorney General and county District Attorneys, a state security-breach notification law tied to payment/financial account data, and a newly enacted (2026)… Full module →

Kentucky's consumer-protection backbone is the Kentucky Consumer Protection Act, enforced by the Attorney General's Office of Consumer Protection, supplemented by a dedicated Office of Senior Protection and a gift-card-scam awareness partnership. Kentucky has… Full module →

Louisiana has no PSR-style mandatory authorized-push-payment (APP) fraud reimbursement regime (a UK-specific construct not present in the US federal or Louisiana state frameworks); consumer protection instead relies on LUTPA's private right of action and AG… Full module →

Maine has built a comprehensive state-level consumer-protection stack anchored by the kiosk fraud-refund law, the Bitcoin Depot redress program, the breach-notification regime, and UTPA's private right of action.

Maryland's 2025-26 legislative program substantially expanded payments-adjacent consumer protection, closing regulatory loopholes for app-based earned-wage-access 'payday loans,' expanding the Access to Banking Act to reach underbanked consumers directly, and… Full module →

Consumer protection for Massachusetts payment-app users is anchored in the new c.169B licensing regime (explicitly framed by Governor Healey as protecting Venmo/PayPal/CashApp users), longstanding remittance-disclosure and 30-minute-cancellation rules, the… Full module →

Michigan consumer protection for payments harms runs through the AG's Consumer Protection Team and DIFS, with active AG alerts targeting P2P payment-app scams and AI voice-cloning fraud; there is no dedicated state APP-fraud reimbursement mandate.

Minnesota's consumer protection regime combines statutory virtual-currency-kiosk fraud safeguards (refund rights, transaction limits) with an active Attorney General consumer-scam-awareness campaign, a dedicated Commerce senior-fraud team producing large… Full module →

Consumer protection runs through the Mississippi Consumer Protection Act enforced by the AG's Consumer Protection Division; there is no MS-specific APP-fraud reimbursement mandate, but the 2026 virtual-currency-kiosk laws introduce the state's first… Full module →

Consumer protection runs through MMPA plus a dedicated elder-financial-exploitation regime; no standalone APP-fraud reimbursement rule found.

Fastest-growing consumer-protection concern is crypto/ATM-enabled fraud against elderly residents; MT has a restitution fund and is drafting crypto-ATM legislation for 2027.

Nebraska's most active current APP/consumer-fraud vector is cryptocurrency-kiosk scams: LB609 (the Controllable Electronic Record Fraud Prevention Act, effective Sept 2 2025) imposes licensing, disclosure, transaction-limit, receipt, and fee-cap obligations… Full module →

Consumer protection for payments-adjacent conduct runs through NRS 598 rather than a bespoke payments-conduct statute; no dedicated APP-fraud reimbursement mandate identified.

Consumer/APP-fraud protection runs through the AG's Consumer Protection & Antitrust Bureau (RSA 358-A) and its Elder Abuse and Financial Exploitation Unit; the Banking Department separately warns that non-bank payment apps lack FDIC insurance.

New Jersey's consumer-protection backbone is the CFA, reinforced by NJDPA, a gift-card anti-fraud mandate, and an aggressive new AG posture on junk fees; no APP-fraud-specific reimbursement regime exists.

Consumer protection runs through the Unfair Practices Act and Data Breach Notification Act; no dedicated APP fraud reimbursement regime, Reg E defaults apply.

NY consumer protection for payments blends DFS supervisory guidance and state/federal consumer law. NYDFS's May 2024 customer-service guidance requires VCEs to maintain monitored phone and electronic-text channels, resolve complaints timely and fairly, and… Full module →

NC's consumer-protection backbone for payments is UDTPA plus the ITPA breach regime and Debt Collection Act; no NC-specific APP fraud reimbursement mandate exists.

ND's most concrete recent consumer-protection payments action is HB 1447 (2025), a direct legislative response to substantial documented crypto-ATM fraud losses among ND residents, imposing transaction caps, warnings and disclosure duties. Broader… Full module →

Consumer payments protection in Ohio rests on the general UDAP statute (ORC 1345.02) enforced by the Attorney General's Consumer Protection Section, plus fee-disclosure rules for government financial-transaction-device payments (ORC 113.40). The AG's office… Full module →

Consumer protection in Oklahoma payments has been substantially strengthened across 2025-2026: the amended Security Breach Notification Act, the new Consumer Data Privacy Act, and fraud-specific consumer safeguards embedded in the digital-asset-kiosk law (a… Full module →

Consumer protection in Oregon payments runs through the general Unlawful Trade Practices Act (deceptive/unfair practices, AG enforcement) rather than a payments-specific APP-fraud reimbursement regime; OCIPA layers on breach-notification and data-safeguard… Full module →

Pennsylvania consumer protection for payments runs through the general-purpose UTPCPL (private right of action with treble damages/fee-shifting, plus AG enforcement) and a dedicated Consumer Financial Protection Unit acting as a state-level UDAAP analogue… Full module →

Consumer protection in Rhode Island payments runs through the Deceptive Trade Practices Act (RI Gen. Laws Ch. 6-13.1), enforced by the AG's Consumer Protection Unit, with a targeted 2026 extension addressing authorized-payment fraud specific to crypto kiosks… Full module →

Consumer payments protection runs through SCDCA under the SC Consumer Protection Code and SCUTPA, plus a 2021 elder-exploitation law. No SC-specific APP-fraud reimbursement mandate exists; reliance on federal Reg E and scheme zero-liability.

South Dakota consumer protection in payments rests on a voter-approved 36% APR cap on consumer/payday lending (2016), a 2018 security-breach notification statute (SDCL 22-40-19 to -26) with a 60-day disclosure deadline and AG-notification trigger at 250… Full module →

Tennessee's 2026 flagship consumer-protection payments action is its full statewide ban on virtual-currency kiosks (Public Chapter 766, effective July 1, 2026), driven explicitly by APP-fraud/elder-scam data, making Tennessee the second US state (after… Full module →

Texas consumer protection in payments relies on the general-purpose Deceptive Trade Practices Act (treble-damages private right of action) plus TDB consumer-alert practice, rather than a payments-specific APP-fraud reimbursement mandate; there is no Texas… Full module →

Consumer protection in Utah payments rests on the Utah Consumer Privacy Act, general Division of Consumer Protection UDAP enforcement, and the 2025 earned-wage-access conduct rules; Utah has no dedicated APP (authorised push payment) fraud reimbursement… Full module →

Vermont's consumer-protection layer runs through the VCPA, AG Consumer Assistance Program, and a new 2025 mandatory-refund obligation for virtual-currency kiosk fraud victims.

Consumer protection for Virginia payments consumers runs primarily through the Virginia Consumer Data Protection Act (VCDPA, effective January 1, 2023, with 2026 definitional amendments) and the Virginia Consumer Protection Act, both AG-enforced with no… Full module →

Consumer protection for Washington payments customers rests on the general Consumer Protection Act (RCW 19.86), the money-transmitter-specific refund right in RCW 19.230.330, and federal Regulation E remittance-transfer disclosure/error-resolution… Full module →

WV's consumer-protection backstop for payments-related harm is the general WV Consumer Credit and Protection Act (Ch. 46A), enforced by the Attorney General's Consumer Protection and Antitrust Division, which in 2026 launched a monthly scam-tracking… Full module →

Consumer protection is led by DATCP, complemented by the Wisconsin Consumer Act and new APP/virtual-currency-kiosk fraud protections enacted in 2026.

Wyoming's general consumer-protection regime — the Wyoming Consumer Protection Act (W.S. 40-12-101 to -114), enforced by the Attorney General's Consumer Protection and Antitrust Unit — covers deceptive trade practices in payments-adjacent consumer… Full module →

Consumer protection runs on a two-track complaint model: mandatory 15-day institution-level resolution, escalating to BCU's SSF (for supervised-entity infractions) or UDECO/MEF (for general consumer disputes) under an interinstitutional cooperation convenio… Full module →

Consumer protection rests on the 2004 Ley de Protección al Consumidor y al Usuario and SUNDDE's Ley Orgánica de Precios Justos, with a bank-specific redress layer via SUDEBAN's Defensoría del Cliente y Usuario Bancario. No statutory mandatory APP-fraud… Full module →

Consumer fraud protection is dominated by SBV Decision 2345/QD-NHNN (effective 1 July 2024), which mandates biometric (facial/fingerprint) authentication for transfers over VND 10m or daily totals over VND 20m, matched against chip-ID/VNeID/MPS biometric data… Full module →

Consumer protection runs through BoZ unwarranted-charges/complaints directives, backstopped by a weak voluntary code and underused CCPC/Small Claims routes; APP-style fraud risk politically salient but with no dedicated reimbursement regime.