McMillan Law's office is in Tampa. I represent people in Orlando and everywhere else in Florida, and the free case review happens by phone or online, so you don't have to drive anywhere to get started.
Last reviewed October 8, 2026 by Jackson McMillan, Florida attorney
How payment app accounts get hacked
An app takeover means someone else got into your account, often with your login or the code that protects it. It can happen several ways:
- A fake "support" account on social media asks for your sign-in code so it can "fix" a problem.
- A thief gets your phone carrier to move your number to their SIM card, then receives your login codes.
- Someone grabs your unlocked phone at a party, a game, or work.
- A password you reused on another site leaks, and someone tries it on your app.
In each case, someone other than you sent the money. That one fact matters more than anything else in your claim.
Why your app balance has federal protection
Your app balance can fall under the Electronic Fund Transfer Act, a federal consumer protection law for electronic money movement, and Regulation E, the detailed rule written under it. Federal rules generally treat a balance you can load and use mainly to pay other people, like a Cash App or Venmo balance, as a "prepaid account" under Regulation E. That gives the company running the app duties much like a bank's: limiting your share of an unauthorized loss and investigating errors you report.
A transfer is unauthorized when someone else starts it without your permission and you get no benefit. A thief who tricked a code out of you, hijacked your phone number, or stole your phone made unauthorized transfers, and being careless with a code doesn't increase what you owe.
If you never completed the app's identity verification, the liability limits and error-resolution rules may not cover your balance until you do, and then they cover errors that happen afterward (12 C.F.R. § 1005.18(e)(3)). Verify now. Money pulled from a linked bank account or debit card can still be protected through your bank, so don't write off the claim.
Hacked or scammed? The line that decides your claim
I'll be direct about the hard part. Fake deals come in many forms: concert or theme park tickets, a sublease near campus, a used car, a job that asks you to pay for equipment first. Money you sent to one of those sellers yourself generally isn't an unauthorized transfer under federal law, and no federal rule makes the app give it back. Report it to the app anyway and ask whether it has a voluntary policy that might help.
Don't decide on your own which side you're on, though. Some situations mix both: a "buyer" who sends a fake payment link that captures your login, or a scammer who gets your code and moves money while pushing you to send more. Who pressed send on each payment is what decides it, and sorting that out is the point of a case review.
Take screenshots of every payment, message, and app response now, then send them to me so I can tell you which transfers federal law covers.
UCF students and Orlando workers across Central Florida
The University of Central Florida is one of the largest universities in the country by enrollment, and if you're one of its students, a payment app may be how you split rent, pay back roommates, and get paid for side work. A hacked balance can mean a missed rent payment at the end of the month.
Orlando also has a large tourism and hospitality workforce. If you work at a hotel, restaurant, or attraction in Orange County or Osceola County and your pay goes onto a payroll card, that card is covered by the same federal law, and payroll accounts aren't subject to the verification catch that applies to app balances.
I take cases from Orlando and throughout Central Florida, from Lake Nona and College Park to Winter Park and Kissimmee, and you can send everything from your phone. The state courts for Orange and Osceola counties make up the Ninth Judicial Circuit. If a hacked account led to fraud in your name, read my guide to credit report errors in Orlando. And if you're moving out of one of Orange County's many large apartment communities and the landlord kept your money, see getting your security deposit back in Orlando.
What the app or bank may owe you
If an app company or bank violates the Electronic Fund Transfer Act, you can recover your actual losses, plus statutory damages in the $100 to $1,000 range, plus reasonable attorney's fees and costs. When the company skipped the provisional credit within 10 days and also lacked good faith in its investigation or a reasonable basis for saying no, actual damages can be tripled. The same is true of a knowing and willful denial that the evidence couldn't reasonably support.
For a student, a few hundred dollars may be a month's groceries. The law's fee-shifting rule, under which a bank or app that loses pays the consumer's reasonable attorney's fees and costs, is what makes a claim that size practical. You don't pay me unless you win. I take these cases on contingency: no attorney's fees and no case costs owed to me unless you recover money. If a case is lost, a court can sometimes order the losing side to pay the other side's court costs, and some Florida laws, including the security deposit and deceptive practices statutes, also let the winner recover attorney's fees from the loser. I explain that risk before anything is filed, and every term is in a written agreement before you sign.
Deadlines for app claims
- If your phone was stolen: report within 2 business days of finding out, which keeps your share of the loss at $50 or less. Wait longer, and the cap climbs to $500.
- 60 days: if your app account doesn't come with periodic statements, the window can be measured from when you looked at your transaction history and the transfer was there. For money pulled from a linked bank account or debit card, your bank's statement clock applies too.
- 1 year: generally, the time you have to file a lawsuit, counted from the violation.
For a full walkthrough of reporting and a sample letter, see my guide to disputing an unauthorized transaction, and for more on each app, my page on Cash App, Venmo, and Zelle fraud refunds.
What to do right now in Orlando
- Report each unauthorized payment inside the app and screenshot the confirmation.
- If the payments drew on a linked bank account or debit card, report them to your bank as well, and follow up in writing.
- Change your app and email passwords, and ask your phone carrier to add a PIN or lock to your number.
- Finish the app's identity verification if you never did.
- Ignore any "support" account that messages you first, and anyone who wants a fee to recover your money.
- Send it to me. Start a free case review and share your screenshots, the app's replies, and any bank statements. I'll tell you whether the law covers your loss and what I'd do next.