Even if you handed over login info under false pretenses, the transfer is still unauthorized under the EFTA. The law looks at whether you knowingly approved the actual transaction. Fraudsters trick you into thinking you’re protecting your account, so your “consent” isn’t real consent.
