Widjaja v. JPMorgan Chase Bank, N.A.

Decision Date20 December 2021
Docket NumberNo. 20-55862,20-55862
Parties Margaretha Natalia WIDJAJA, Plaintiff-Appellant, v. JPMORGAN CHASE BANK, N.A., a national banking association, Defendant-Appellee
CourtU.S. Court of Appeals — Ninth Circuit

Paro Astourian (argued), Astourian & Associates Inc., Pasadena, California, for Plaintiff-Appellant.

Karin L. Bohmholdt (argued) and Blakeley S. Oranburg, Greenburg Traurig LLP, Los Angeles, California, for Defendant-Appellee.

Before: D. Michael Fisher,* Paul J. Watford, and Patrick J. Bumatay, Circuit Judges.

WATFORD, Circuit Judge:

To address concerns raised by the increasing prevalence of electronic banking transactions, Congress enacted the Electronic Fund Transfer Act of 1978 (EFTA), 15 U.S.C. § 1693 et seq. Lawmakers viewed such transactions—processed through computer networks without human interaction—as "much more vulnerable to fraud, embezzlement, and unauthorized use than the traditional payment methods." Bank of America v. City and County of San Francisco , 309 F.3d 551, 564 (9th Cir. 2002) (quoting H.R. Rep. No. 95-1315, at 2 (1978)). Consumer groups urged Congress to provide protection from liability for unauthorized transfers, similar to the protection Congress had already afforded for unauthorized credit card charges. See 15 U.S.C. § 1643(a) (imposing a $50 cap on liability for unauthorized credit card use); Lewis M. Taffer, The Making of the Electronic Fund Transfer Act: A Look at Consumer Liability and Error Resolution , 13 U.S.F. L. Rev. 231, 238 (1979). Congress responded in the EFTA by imposing a similar, but not identical, cap on a consumer's liability for unauthorized electronic fund transfers.

The plaintiff in this case, Margaretha Widjaja, alleges that she was the victim of unauthorized electronic fund transfers from her checking account at JPMorgan Chase Bank (Chase). Identity thieves made a series of unauthorized withdrawals that ultimately totaled more than half a million dollars. Chase reimbursed Widjaja for some of those losses, but it has refused to repay $300,000 of the funds stolen from her account. Widjaja sued Chase for violating the EFTA, alleging that the bank has imposed liability on her in excess of what the EFTA allows. The district court dismissed Widjaja's complaint at the pleading stage on the ground that Widjaja's lengthy delay in reporting the unauthorized withdrawals to Chase barred her claims as a matter of law. We conclude that the district court misinterpreted the relevant provision of the EFTA and reverse the dismissal of Widjaja's EFTA claim.

I

According to the complaint, whose allegations we accept as true at this stage of the litigation, Widjaja is a foreign national who held several accounts at Chase, including the checking account at issue here. Although she maintains a residence in California, Widjaja resides primarily outside the United States and spends a significant portion of the year traveling overseas.

Widjaja alleges that, through unknown means, unidentified individuals gained access to her Chase checking account in October 2017 and began making unauthorized withdrawals without her knowledge. The first withdrawal involved a transfer on October 31 of less than two dollars to Union Bank, followed by a much larger transfer of $29,000 to Union Bank on November 2. This second transfer aroused Union Bank's suspicion, which led it to contact Chase's fraud department. The banks jointly determined that the transaction was fraudulent, as the Union Bank customer who received the $29,000 had no relationship with Widjaja. Union Bank accordingly refunded the money to Widjaja's Chase account.

Although Chase learned through this episode that Widjaja's account had been compromised, it did nothing to protect her account from further unauthorized withdrawals. It did not change Widjaja's account number and password or freeze her account. Nor did it inform her that an unauthorized transfer had taken place. Due to this inaction, Widjaja alleges, the same individuals were able to make more than 100 unauthorized withdrawals from her checking account between November 2017 and March 2019.

Widjaja did not report any of the unauthorized withdrawals to Chase until March 2019. She does not dispute that each of the withdrawals appeared on the monthly bank statements Chase sent her. Widjaja alleges that, between November 2017 and March 2019, she was traveling overseas and had "very limited or no" internet access to check her bank statements. When Widjaja returned to California in March 2019, she reviewed her statements and noticed the unauthorized withdrawals. She reported them to Chase and thereafter the withdrawals stopped.

Chase reimbursed Widjaja for some of the unauthorized withdrawals through its internal dispute resolution process. But it has refused to reimburse her for $300,000 of the losses she suffered, citing her failure to report the initial unauthorized withdrawals within 60 days of their appearance on her bank statements, as the EFTA ordinarily requires. See 15 U.S.C. §§ 1693f(a), 1693g(a) ; 12 C.F.R. § 1005.6(b)(3).1

In June 2019, Widjaja filed this action against Chase. After amending her complaint, she asserted four claims: (1) violation of the EFTA or, alternatively, California's EFTA counterpart, Cal. Comm. Code § 11101 et seq. ; (2) breach of contract; (3) breach of the implied covenant of good faith and fair dealing; and (4) negligence. The district court granted Chase's motion to dismiss under Federal Rule of Civil Procedure 12(b)(6). The court agreed with Chase that the EFTA generally requires consumers to report an unauthorized withdrawal within 60 days after the bank sends a monthly statement reflecting the withdrawal. Because it is undisputed that Widjaja failed to report the withdrawals at issue within that time frame, the court held that the EFTA bars her claim as a matter of law. The court therefore dismissed Widjaja's EFTA claim with prejudice, along with her remaining state law claims.

II

This appeal requires us to interpret the EFTA provision limiting a consumer's liability for unauthorized electronic fund transfers, 15 U.S.C. § 1693g. The provision states that in most instances a consumer's liability for an unauthorized transfer (or a series of related unauthorized transfers, see 12 C.F.R. § 1005.6(b) ) may not exceed $50. That baseline cap on liability is subject to two exceptions, however.

The first exception raises the cap to $500 when the unauthorized transfers occur due to the loss or theft of an access device (such as an ATM card) and the consumer fails to notify her bank within two business days of learning that the device has been lost or stolen. 15 U.S.C. § 1693g(a) ; see 12 C.F.R. § 1005.6(b)(2). The second exception—the one relevant here—provides that the cap on liability will be lifted if: (1) an unauthorized transfer appears on the monthly statement banks must send to consumers under 15 U.S.C. § 1693d(c) ; (2) the consumer fails to report the unauthorized transfer to her bank within 60 days after the statement is sent to her; and (3) the bank can establish that unauthorized transfers made after the 60-day period would not have occurred but for the consumer's failure to provide timely notice of the earlier unauthorized transfer. 15 U.S.C. § 1693g(a). In that scenario, the consumer's liability for unauthorized transfers that occur within the 60-day period cannot exceed $50 or $500 (depending on the circumstances), but the consumer faces unlimited liability for unauthorized transfers occurring outside the 60-day period. See 12 C.F.R. § 1005.6(b)(3) ; 12 C.F.R. pt. 1005, Supp. I, 6(b)(3) ¶ 1.

The statutory language creating this second exception reads as follows:

Notwithstanding the [default liability cap], reimbursement need not be made to the consumer for losses the financial institution establishes would not have occurred but for the failure of the consumer to report within sixty days of transmittal of the statement (or in extenuating circumstances such as extended travel or hospitalization, within a reasonable time under the circumstances) any unauthorized electronic fund transfer or account error which appears on the periodic statement provided to the consumer under section 1693d of this title.

15 U.S.C. § 1693g(a) ; see also 12 C.F.R. § 1005.6(b)(3). A neighboring subsection makes clear that the bank bears the burden of proving that "the conditions of liability set forth in subsection (a) have been met." 15 U.S.C. § 1693g(b).

Widjaja does not dispute that she failed to report any of the unauthorized withdrawals to Chase within the 60-day period set by the EFTA. She contends instead that her compliance with the 60-day reporting requirement was excused for two reasons, both of which, we conclude, the district court properly rejected.

First, Widjaja asserts that, during her time abroad, she had "very limited or no access to her banking records and/or to the internet," and that her extended international travel thus constituted "extenuating circumstances" under § 1693g(a). The district court held that this cursory allegation does not plausibly explain how someone with Widjaja's financial means lacked adequate internet access to view her banking records for more than a year. We agree with the district court that Widjaja has not plausibly alleged "extenuating circumstances" excusing her failure to timely report the unauthorized withdrawals.

Second, Widjaja contends that she did not need to report the unauthorized withdrawals to Chase because it was already aware of the initial $29,000 withdrawal in November 2017 by virtue of its communications with Union Bank. The district court properly rejected this argument as well. Section 1693g(a) plainly states that "the consumer" must report an unauthorized withdrawal to her bank within the prescribed 60-day period to avoid facing potentially unlimited liability for subsequent withdrawals occurring after that period. The statute says...

To continue reading

Request your trial

VLEX uses login cookies to provide you with a better browsing experience. If you click on 'Accept' or continue browsing this site we consider that you accept our cookie policy. ACCEPT