Answer:
Reg. E liability limits will apply here. The customer may have liability, based on when they notified you of the loss and when they knew the access device was lost. Under 205.6 the customer can claim an unauthorized withdrawal. To assist you in calculating the liability for the bank and the customer, there is an Excel tool available at http://www.vvm.com/~zavoina/cmpl.html which will also assist you with your timeline requirement on completing the investigation.
First published on BankersOnline.com 5/7/01