A California physical therapist has lost nearly $2,000 to unauthorized Zelle transfers. Her bank, Bank of America, closed the case without refunding a single cent. The incident is yet another stark illustration of the glaring vulnerabilities embedded in traditional banking payment systems.

Suspicious Transfers the Bank Had Already Flagged

Karleen Cox, a Bank of America customer for over 20 years, discovered two Zelle transfers totaling $1,980 sent to a recipient she had never heard of. It was her accountant who spotted the suspicious transactions in June, on a business account tied to her small physical therapy practice.

What makes the case particularly troubling is this: bank records show that Bank of America had blocked several attempted transfers to that same recipient the day before the successful ones went through. A phone number linked to that beneficiary had also been added as an authorized user on the account — a red flag the bank apparently did not treat with sufficient seriousness.

Cox summed up the situation plainly: “It was so obvious that something was wrong. The account had been hacked.” Despite this body of consistent evidence, Bank of America rejected her claim multiple times, arguing that the transfers had been made from a device consistent with the account’s normal activity.

Bank of America Closes the Case: A Decision That Raises Serious Questions About Customer Protection

On September 22, Bank of America confirmed to NBC Los Angeles that Karleen Cox‘s case is permanently closed. Cox, meanwhile, was forced to take out a loan to cover her employees’ payroll. She is now considering taking the matter to small claims court.

Her statement captures the very real impact of this loss on a small business: “I know that for Bank of America, $2,000 might not be a big deal. But for me, that’s my employees’ paychecks. That’s huge.” A reality that large financial institutions all too often fail to factor into their fraud management processes.

This case is far from isolated. Zelle, owned by a consortium of major US banks including Bank of America, JPMorgan Chase, and Wells Fargo, has faced growing criticism for its lack of fraud protection. Back in 2023, the US Senate had already called out the network, revealing that hundreds of millions of dollars had been lost by consumers with no effective recourse.

Why This Case Also Resonates With Crypto Users

Within the crypto ecosystem, asset custody and liability in the event of a hack are central concerns. Advocates of decentralized finance regularly point to the weaknesses of traditional banking systems: no on-chain transparency, opaque claims processes, and unilateral decisions made by institutions. The Cox case is a concrete example of exactly that.

Paradoxically, a user of a non-custodial crypto wallet has full traceability of every transaction on the blockchain. The trade-off is absolute individual responsibility — but at least the rules are clear from the outset. In the case of Zelle, the customer has neither the transparency of a public ledger nor the effective protection of a bank.

This case reignites the debate around the accountability of financial intermediaries when it comes to digital fraud — a debate that, as payments become increasingly digitized, is growing ever more central, both in traditional finance and across the crypto space.