You could certainly decline their claim based on it being made after the time allowed for disputes under Reg E, but there might be a couple of other considerations, such as customer/community relations. Not knowing the size of your institution or your community, that is something that you would have to take into account.
_________________________
My comments are absolutely no reflection of, nor influenced by, my employer - take them at your own risk.