Consumer complaint received 2026-07-20 00:00:00
Product: Checking or savings account — Checking account
Issue: Problem with a lender or other company charging your account — Transaction was not authorized
Company: M&T BANK CORPORATION
State: CT

Complaint narrative:
We are trying to get the following issue resolved with M & T Bank. We have discussed this over the phone, But they say this has to be re-reviewed and could take up to 60 days. This was originally resolved, but then the money was taken out of our checking account by the bank after their review, Will be sending them this letter tomorrow after we file a Police Report : Dear Office of the President, This letter serves as a formal appeal to M & T Bank 's denial of my unauthorized transaction claim. M & T Bank is in direct violation of Federal Regulation E ( 12 CFR 1005.6 ) by holding me liable for these fraudulent transfers. I discovered the unauthorized digital wallet activity and notified M & T Bank within 24 hours of the occurrences, strictly fulfilling my consumer notification requirements. Under federal law, because notice was given within two business days and the physical card was never lost, my legal liability is exactly {$0.00}. The banks initial denial is based on a fundamentally flawed premise. The fraud department asserts that because I legitimately used my physical debit card at the XXXX XXXX XXXX XXXX, the subsequent transactions are authorized. This ignores the technical nature of modern digital wallet cloning. On XX/XX/year>, the following transactions occurred : {$86.00} XXXX XXXX XXXX XXXX ( XXXX ). I utilized my physical debit card via apple pay, at this location. The physical card never left my possession. {$180.00} XXXX XXXX XXXX XXXX ( UNAUTHORIZED / FRAUDULENT ) {$180.00} XXXX XXXX XXXX XXXX ( UNAUTHORIZED / FRAUDULENT ) {$480.00} XXXX XXXX XXXX XXXX ( UNAUTHORIZED / FRAUDULENT ) It is a geographical impossibility for me to checkout with a physical card in XXXX while making consecutive digital wallet purchases in XXXX, XXXX, and XXXX. A bad actor illegally obtained our card credentials through a data breach or skimmer and provisioned an unauthorized digital wallet token onto a separate, foreign mobile device. Under the Electronic Fund Transfer Act ( EFTA ), M & T Bank bears the burden of proof to demonstrate that a transaction was authorized by the consumer. Merely proving that the card number was entered into a digital wallet is not proof that I authorized that device provisioning. I have filed a formal police report with the XXXX Police Department ( Case Report # [ Insert Police Report Number ] ), which explicitly logs this geographic timeline and the unauthorized cloning of my account details. A copy is attached. I have also submitted a concurrent complaint to the Consumer Financial Protection Bureau ( CFPB ). I demand that M & T Bank immediately : Reopen this investigation and reverse the denial. Provide a full credit of {$850.00} to my checking account. Provide the full written investigative text file, including the Device Account Numbers ( Tokens ), device types, and IP addresses used to authorize the fraudulent digital wallet setups, as mandated by XXXX CFR XXXX. Please review this escalated matter immediately. I look forward to your prompt response and the resolution of this clear regulatory error within XXXX business days. Sincerely, XXXX XXXX ] Enclosures : Copy of XXXX ] Police Department Report XXXX of Bank Statement highlighting XX/XX/year> transactions

Company public response: Company has responded to the consumer and the CFPB and chooses not to provide a public response
Company response to consumer: Closed with monetary relief