You are responsible for keeping your online banking login credentials confidential and for all transactions made using your credentials. If someone else accesses your account using your username and password, you may be liable for those transactions.
This analysis describes what Bank of America's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
If your login credentials are compromised and someone makes unauthorized transactions, your ability to recover those funds depends on how quickly you report the problem and whether you can demonstrate you did not share your credentials.
Interpretive note: The precise credential security and liability language from the agreement could not be verified from the encrypted PDF; the analysis is based on standard Bank of America Online Banking Agreement terms and EFTA's applicable statutory framework.
The updated Deposit Agreement now explicitly discloses that disputes are subject to mandatory arbitration and class action waiver provisions, as stated prominently at the document's opening. The agreement establishes separate dispute resolution procedures for personal and business accounts and introduces new operational provisions governing account closure, jurisdiction and venue, cutoff times for legal orders, and responses to conflicting demands. The terms require that by using or maintaining your account after a change is effective, you agree to be bound by the updated provisions. You can review the complete updated agreement on bankofamerica.com or contact Bank of America directly if you wish to understand how the specific dispute resolution procedures apply to your account.
View change record →Consumers bear responsibility for safeguarding their own credentials, and delays in reporting unauthorized access can increase their financial liability for fraudulent transactions under the agreement and EFTA's statutory framework.
How other platforms handle this
You acknowledge and agree that your interactions with third parties providing Third Party Content are solely between you and such third parties, and that ActiveCampaign has no responsibility or liability for any Third Party Content.
Tinder expressly disclaims any responsibility for such Member Content.
To the maximum extent permitted by law, we will not be liable for, and you release us from liability for, any Liability caused or contributed to by, arising from or in connection with: (a) Your computing environment...
REGULATORY LANDSCAPE: Consumer liability for unauthorized electronic fund transfers is primarily governed by the Electronic Fund Transfer Act and Regulation E, which establish a statutory liability framework that limits consumer exposure to $50 for losses …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
If your login credentials are compromised and someone makes unauthorized transactions, your ability to recover those funds depends on how quickly you report the problem and whether you can demonstrate you did not share your credentials.
Consumers bear responsibility for safeguarding their own credentials, and delays in reporting unauthorized access can increase their financial liability for fraudulent transactions under the agreement and EFTA's statutory framework.
ConductAtlas has identified this type of provision across 286 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Bank of America.