they always had zero liability under Reg E
This is simply not true. Reg E 1005.6 allows you to hold cardholders liable for at least $50.00 for unauthorized charges due to a lost/stolen access device and possibly more if the cardholder did not notify you within two business days of learning of the loss or theft of the access device.
Prior to October 17, 2014 VISA's Zero Liability superseded Reg E for signature based purchases and PIN based purchases processed on the VISA network. All ATM withdrawals were excluded. This meant that if I lost my VISA card and there were unauthorized ATM withdrawals, you could ignore Zero Liability and follow 1005.6.
VISA has updated its Zero Liability policy to include ATM withdrawals on the PLUS network so if your current disclosures include the language excluding ATM withdrawals from Zero Liability, they should be updated to reflect the current language.
_________________________
Sola Gratia, Sola Fides, Sola Scriptura, Solus Christus, Soli Deo Gloria!
www.tcaregs.com