Reg E has no timeframe to file a claim, but can't we, at least, limit our exposure to only the activity occurring within the first 60 days from the statement date in which the first unauthorized transaction occurred under Periodic Statement:timely notice not given? Unless, of course, there were some extenuating circumstances that prevented the customer from reporting within the 60 day period, we may look to take the entire amount.