8 Total
3 High severity
4 Medium severity
1 Low severity
Summary

This is Bank of America's Online Banking Service Agreement, which sets the rules for using their website, mobile app, bill pay, Zelle transfers, and other digital banking tools. The single most important thing for most customers is that the agreement includes a mandatory arbitration clause and class action waiver, meaning if Bank of America wrongs you, you generally cannot sue them in court as part of a group and must instead use a private arbitration process. You should review your notification obligations carefully — if you spot an unauthorized transaction on your Bank of America account, you typically have 60 days from your statement date to report it or you may lose your right to recover those funds.

Technical Summary

This document constitutes Bank of America's Online Banking Service Agreement, governing customer access to and use of its digital banking platforms, including online banking, mobile banking, and related electronic services, and is legally grounded in contract law with consumer financial services regulatory overlay. The agreement creates significant obligations for users, including mandatory notification of unauthorized transactions within specific timeframes (generally within 60 days of statement delivery) to preserve liability protections under the Electronic Fund Transfer Act, and imposes on Bank of America duties of reasonable security and error resolution. Notably, the document contains a mandatory arbitration clause with class action waiver that substantially limits consumers' ability to pursue collective legal remedies, and a broad license grant over user-submitted content that is atypical for a pure banking services agreement. The document engages Regulation E (12 CFR Part 1005), the Electronic Signatures in Global and National Commerce Act (E-SIGN), the Gramm-Leach-Bliley Act, the Electronic Communications Privacy Act, and the CFPB's supervisory framework for large depository institutions; compliance teams should note that the arbitration provision must be evaluated against CFPB rulemaking activity and that California residents retain additional rights under CCPA and the California Consumer Privacy Act that may supersede certain data-sharing provisions.

Evidence Provenance
Captured March 6, 2026 18:37 UTC
Document ID CA-D-000053
Version ID CA-V-000050
Wayback Machine View archived versions →
SHA-256 d9529273317c7c7a30de6c91e2bfb320384de601c6293297a1262157065b4aca
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Institutional Analysis

🔒 Institutional analysis locked

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Upgrade to Professional — $149/mo
Change Timeline
View full version history (0 captures) →
High Severity — 3 provisions
Medium Severity — 4 provisions
Low Severity — 1 provision

Cross-platform context

See how other platforms handle Account Setoff Rights and similar clauses.

Compare across platforms →

Applicable Regulations

CCPA/CPRA
California, USA
CFAA
United States Federal
CAN-SPAM
United States Federal
FCRA
United States Federal
GLBA
United States Federal
TCPA
United States Federal

Related Analysis

Consumer Rights · April 9, 2026
Bank of America Arbitration Provision 2026: How to Opt Out

Bank of America added a mandatory arbitration clause to its Deposit Agreement. Here's what it means, how to opt out, and the deadline.