Opinion for the Court filed by Circuit Judge ROGERS.
The Truth in Lending Act (“TILA”), 15 U.S.C. § 1601, et seq. (2000), limits the Lability of a cardholder for “unauthorized use of a credit card,” id. § 1643(a)(1), which is defined as use without “actual, implied, or apparent authority” that does not benefit the cardholder, id. § 1602(o). The principal issue on appeal is what creates apparent authority to limit cardholder protection under § 1643. The district court, in granting summary judgment to American Express Travel-Related Services Co. (“AMEX”), ruled that DBI Architects, P.C. (“DBI”) clothed its accounting manager with apparent authority to use its corporate AMEX account by failing to examine monthly billing statements that identified all cardholders and their *888 charges. We hold that, while DBI did not clothe its accounting manager with apparent authority by failing to inspect its monthly billing statements, DBI did clothe its accounting manager with apparent authority by repeatedly paying after notice all charges made by the accounting manager on its corporate AMEX account, thereby misleading AMEX reasonably to believe that the accounting manager had authority to use the account. We remand DBI’s § 1643 claim to the district court to determine precisely how many payments created apparent authority and thus limited DBI’s protection under TILA. Otherwise, we affirm the grant of summary judgment.
I.
DBI is a corporation with its principal place of business in the District of Columbia. It had an AMEX corporate credit card account, which it authorized certain employees to use. On March 14, 2001, DBI appointed Kathy Moore as the Accounting Manager for its District of Columbia and Virginia offices. In that position, Moore was in charge of both approval and payment functions in the cash disbursement system: she controlled accounts receivable, accоunts payable, corporate checking, corporate credit cards, and all other financial aspects of DBI’s business. She had authority to issue DBI corporate checks to pay bills and invoices from vendors, was “entrusted with the duty of affixing authorized signatures and approvals to checks and other documents,” and was responsible for the receipt, review, and payment of DBI’s AMEX invoices. Aff. of Alan L. Storm in Supp. of Pl.’s Mot. for Partial Summ. J.
On or about August 10, 2001, AMEX added Moore as a cardholder on DBFs corporate account at Moore’s request and withоut DBI’s knowledge or approval. On August 22, 2001, AMEX sent DBI an account statement identifying Moore as a corporate cardholder and itemizing her annual membership fee. From August 2001 to May 2002, Moore charged a total of $134,810.40 to DBI’s corporate AMEX card, including $1,555.51 in authorized corporate charges and $133,254.79 in unauthorized charges for clothing, travel, jewelry, and other personal items. During this period, AMEX sent DBI ten monthly billing statements, each listing Moore as a corporate cardholder and itemizing her charges. Between August 2001 and June 2002, Moore paid for these charges with thirteen DBI checks made payable to AMEX. In addition, between July 2001 and March 2002, Moore paid for $162,139.04 in charges on her personal AMEX card with fourteen DBI checks made payable to AMEX. Most of these checks were signed or stamped in the name of Alan L. Storm, the president of DBI; none were signed in Moore’s own name.
On May 31, 2002, DBI notified AMEX of Moore’s fraudulent charges and requested a refund of $133,254.79 for the corporate account and $162,139.04 for the personal account. AMEX denied the request. DBI sued AMEX in the Superior Court for the District of Columbia, alleging, in Count One of the complaint, thаt AMEX had violated TILA, 15 U.S.C. § 1643, by refusing to repay DBI for the $133,254.79 in fraudulent charges made by Moore on DBI’s corporate AMEX card. Count Two of the complaint alleged that AMEX was liable for conversion for using DBI’s corporate funds to credit the $162,139.04 in charges on Moore’s personal AMEX card. Following AMEX’s removal of the case to the United States District Court for the District of Columbia, AMEX moved for summary judgment, and DBI moved for partial summary judgment on the issue of liability. The district court granted AMEX’s motion for summary
*889
judgment, denying DBI recovery except for two months of charges on the corporate aсcount, and DBI appeals. Our review of the grant of summary judgment is
de novo. See Too v. Freeh,
II.
Congress enacted the credit card provisions of the Truth in Lending Act “in large measure to protect credit cardholders from unauthorized use perpetrated by those able to obtain possession of a card from its original owner.”
Towers World Airways Inc. v. PHH Aviation Sys. Inc.,
The protections under § 1643, however, apply only to “unauthorized use,” which Congress defined as “a use of a credit card by a person other than the cardholder who does not have actual, implied, or apparent authority for such use and from which the cardholder receives no benefit.”
Id.
§ 1602(o);
see
Regulation Z, 12 C.F.R. § 226.12(b)(1) n. 22. Because the parties agree that Moore had neither actual nor implied authority to use DBI’s corporate AMEX card, the question is whether Moore’s charges were “authorized” as a result of her apparent authority to use thе card and thus fall outside the protections available to DBI under § 1643.
Cf. Credit Card Serv. Corp. v. FTC,
The Federal Reserve Board’s official staff interpretation of Regulation Z, 12 C.F.R. § 226.12(b)(1), states that “whether [apparent] authority exists must be determined under state or other applicable law.” 12 C.F.R. pt. 226, Supp. I, at 418. The Second Circuit observed in
Towers World Airways,
The district court ruled that Moore did not have apparent authority to become a cardholder on DBFs corporate AMEX account. But distinguishing between the acquisition and use of a credit card, the court ruled that DBI’s negligent failure to examine its monthly billing statements from AMEX created apparent authority for Moore’s use of the corporate card. The court relied on an anаlogy to District of Columbia banking law, under which depositors are required to “exercise reasonable promptness in examining the statement ... to determine whether any payment was not authorized,” D.C.Code § 28:4— 406(c), and embraced the analysis of the Second Circuit in
Minskoff v. American Express Travel Related Services Co.,
The Second Circuit held in
Minskoff
that TILA “clearly precluded] a finding of apparent authority where the transfer of the card was without the cardholder’s consent, as in cases involving theft, loss, or fraud.”
Id.
at 708 (quoting
Towers World Airways,
On appeal, DBI contends that the district court erred in following Minskoff. Because TILA and Regulation Z oblige the card issuer to protect the cardholder from fraud, DBI maintains that the district court erred in imposing on the cardholder a “novel duty ... derived from a rough analogy to D.C. banking law” to inspect monthly billing statements and to notify the card issuer of fraud. Appellant’s Br. at 12; see D.C.Code § 28:4~406(c). AMEX responds that, by continuing to pay without objection all charges on its corporate account, DBI vested Moore with apparent authority to use its corporate credit card. We conclude that both parties are correct. DBI is correct that its failure to inspect its monthly billing statements did not clothe Moore with apparent authority to use its corporate AMEX account. AMEX is correct that DBI clothed Moore with apparent authority to use its corporate AMEX account by repeatedly paying without protest all of Moore’s charges on the account аfter receiving notice of them from AMEX.
Nothing in the law of agency supports the district court’s conclusion that DBI’s mere failure to review its monthly billing statements created apparent authority for Moore to use its corporate AMEX account. DBI’s silence without payment would be insufficient to lead AMEX reasonably to believe that Moore had authority to use DBI’s corporate account, as such silence would be equally consistent with DBI’s never having received the statements.
Cf. Whetstone Candy Co. v. Kraft Foods, Inc.,
Further, the view that mere silence does not confer apparent authority is consistent with the text and purpose of § 1643 and Regulation Z. The plain language of § 1643 does not require a cardholder to inspect monthly billing statements in order to invoke its protections. The text sets no preconditions to its protections, such as an exhaustion requirement, and makes no reference to other remedies, such as those under the Fair Credit Billing Act, 15 U.S.C. § 1666 (2000), which permits — but does not require — a cardholder to seek correction of billing errors by reporting *892 them to the card issuer in writing. 2 Rather, § 1643 placеs the risk of fraud .primarily on the card issuer. Designed to remedy the problem that “if a consumer does not immediately discover and report a card loss, he can be liable for thousands of dollars in unauthorized purchases made by a fast working thief,” S.Rep. No. 91-737, at 5, § 1643 requires the card issuer to demonstrate that it has taken certain measures to protect the cardholder from fraud before it can hold a cardholder liable for any unauthorized charges. 15 U.S.C. § 1643(a)(1), (b). The text of § 1643 thus indicates that Congress intended for the card issuer to protect the cardholder from frаud, not the other way around. Explaining the rationale underlying Congress’s “policy decision that it is preferable for the issuer to bear fraud losses from credit card use,” one commentator has suggested that Congress understood that “[a] system of issuer liability is preferable because it stimulates more efficient precautions against losses,” with cardholder liability incurred “only [to] the degree ... necessary to ensure proper control of his card and prompt notice of loss to the issuer.” See Weistart, supra, at 1509, 1511.
Regulation Z likewise reflects the remedial purpose of § 1643. Filling in the gap between TILA and the Fair Credit Billing Act, the Federal Reserve Board explains in Regulation Z that a cardholder need not contest charges under § 1666 in order to pursue remedies under § 1643.
See Crestar Bank,
Thus, there is no need for a court to look to banking laws to resolve the risk allocation and public policy issues regarding credit card fraud. While the district court duly noted that DBI had paid Moore’s charges in full for ten months,
cf. Min
*893
skoff,
Consequently, AMEX cannot meet its burden to show that it is entitled to judgment as a matter of law,
see
Fed.R.Civ.P. 56(c);
Anderson v. Liberty Lobby, Inc.,
DBFs remaining contentions have no merit. DBI’s reliance on the provision limiting a cardholder’s liability to charges made on an “accepted” credit card, see 15 U.S.C. § 1643(a)(1)(A), is misplaced, for Moore’s charges were not “unauthorized” because DBFs payments created apparent authority for Moore to make them. DBI’s insistence that it derived no benefit from Moore’s purchase of jewelry, shoes, and clothing is irrelevant because the use of a card is “unauthorized” only if the cardholder derives no benefit from it and it lacks actual, implied, or apparent authority. See id. § 1602(o). Because DBI’s payments created аpparent authority, the use was not “unauthorized.”
Accordingly, we hold that DBI is es-topped from avoiding liability to AMEX for the charges Moore incurred on the corporate account after her apparent authority arose. The question remains when Moore’s apparent authority arose. The district court held, consistent with AMEX’s alternative prayer for relief, that DBI could recover payment for the first two months of Moore’s charges following her unauthorized acquisition of the card on DBI’s corporate account. But no relevant statute sеts a time period that is controlling. Both § 1666 and Regulation Z allow the cardholder 60 days from the date of the credit card statement to notify the card issuer of a billing error,
see
15 U.S.C. § 1666(a); 12 C.F.R. § 226.13(b)(1), and District of Columbia banking law, on which the district court may have relied, allows the customer a “reasonable period of time, not exceeding 30 days,” to examine a bank statement and to notify the bank of any fraudulent charges. D.C.Code § 28:4— 406(d)(2);
cf. Minskoff,
III.
The tort of conversion, or the “wrongful possession or disposition of another’s property as if it were one’s own,” Black's Law DICTIONARY 333 (7th ed.1999), has been codified in the District of Columbia:
The law applicable to conversion оf personal property applies to instruments. An instrument is also converted if it is taken by transfer, other than a negotiation, from a person not entitled to enforce the instrument or a bank makes or obtains payment with respect to the instrument for a person not entitled to enforce the instrument or receive payment.
*895 D.C.Code § 28:3~420(a). Under District of Columbia law, a holder in due course of a negotiable instrument, such as a check, takes the instrument free of any claims. Id. § 28:3-306. A holder of an instrument is a holder in due course if the instrument bears no facial evidence of forgery or alteration, and if the holder takes the instrument for value, in good faith, and without notice of the claim or defense. Id. § 28:3-302. 4 Although § 28:3^20(a) provides that “[a]n action for conversion of an instrument may not be brought by ... the issuer ... of the instrument,” and DBI was the issuer of the checks, AMEX did not challenge DBI’s claim on this basis, and we therefore turn to DBI’s contentions.
DBI concedes that the checks at issue bore no facial evidence of forgery or alteration, that AMEX took the checks for value, and that AMEX had no knowledge of the fraud.
See
Pl.’s Mem. of P. & A. in Opp’n to Def.’s Mot. for Summ. J., at 14 & n. 3. DBI’s challenges to AMEX’s good faith are to no avail. First, the district court’s finding that AMEX took the checks in good faith, defined as “honesty in fact and the observance of reasonable commercial standards of fair dealing,” D.C.Code § 28:3 — 103(a)(4), was not invalidated by its enforcement of an erroneous discovery deadline. The finding of good faith was based on the court’s recognition that the automated processing of checks is a commercially reasonable practice in the banking industry,
see id.
§ 28:3-103(a)(7);
Grand Rapids Auto Sales, Inc. v. MBNA Am. Bank,
Second, DBI does not dispute that AMEX processed the checks electronically pursuant to its normal procedures. Nor does it offer any evidentiary support to show that AMEX’s automated procedures “vary unreasonably from general banking usage.” D.C.Code § 28:3-103(a)(7). It thus fails to raise a genuine issue as to whether AMEX’s automated processing of checks was commercially reasonable.
Third, DBI’s contention that AMEX acted in bad faith when it failed to offer DBI the fraud prevention technology that it applies to large corporate accounts is irrelevant to the conversion claim, which relates only to Moore’s personal AMEX account. Similarly, DBFs supplemental memorandum that the district court rejected as untimely refers to technology that prevents fraudulent credit card charges, not fraudulent use of checks to pay for legitimate credit card charges.
*896 DBI’s remaining contentions have no merit. Its view that a direct payee of stolen funds cannot be a holder in due course does not reflect District of Columbia law. Comment 4 to D.C.Code § 28:3-302 states that although typically the holder in due course is not the payee of the instrument, “in a small percentage of cases it is appropriate to allow the payee of an instrument [such as AMEX] to assert rights as a holder in due course.” This occurs when the “conduct of some third party [such as Moore] is the basis of the defense of the issuer of the instrument.” D.C.Code § 28:3-302 cmt. 4. Consequently, AMEX can be a holder in due course of DBI’s corporate checks for payment of charges on Moorе’s personal account. DBI’s suggestion that the holder in due course doctrine “has the effect of abolishing the common law of conversion” preserved in District of Columbia law, Appellant’s Br. at 26, is an overstatement, for the tort is defeated only to the extent there is a defense to the claim.
Accordingly, we affirm in part the grant of summary judgment to AMEX on DBI’s § 1643 claim and we remand in part; we affirm the grant of summary judgment to AMEX on DBFs conversion claim.
Notes
. Under TILA, a cardholder is liable for "unauthorized” charges only if —
(A) the card is an accepted credit card;
(B) the liability is not in excess of $50;
(C) the card issuer gives adequate notice to the cardholder оf the potential liability;
(D) the card issuer has provided the cardholder with a description of a means by which the card issuer may be notified of loss or theft of the card ...;
(E) the unauthorized use occurs before the card issuer has been notified that an unauthorized use of the credit card has occurred or may occur as the result of loss, theft, or otherwise; and
(F)the card issuer has provided a method whereby the user of such card can be identified as the person authorized to use it.
15 U.S.C. § 1643(a)(1). If the charge is authorized — that is, made with "actual, implied, or appаrent authority,” id. § 1602(o) ■— this provision does not apply.
. The Fair Credit Billing Act provides:
If a creditor, within sixty days after having transmitted to an obligor a statement of the obligor's account in connection with an extension of consumer credit, receives ... a written notice ... from the obligor ... indicating] the obligor's belief that the statement contains a billing error ..., the creditor shall [acknowledge receipt of the notice and] either make appropriate corrections in the account of the obligor or [explain why the charge is correct].
15 U.S.C. § 1666(a).
.
See, e.g., Mourning v. Family Publ’ns Serv., Inc.,
. D.C.Code § 28:3-302(a) defines “holder in due course” as a holder of an instrument if:
(1) The instrument whеn issued or negotiated to the holder does not bear such apparent evidence of forgery or alteration or is not otherwise so irregular or incomplete as to call into question its authenticity; and
(2) The holder took the instrument (i) for value, (ii) in good faith, (iii) without notice that the instrument is overdue or has been dishonored or that there is an uncured default with respect to payment of another instrument issued as part of the same series, (iv) without notice that the instrument contains an unauthorized signature or has been altered, (v) without notice of any claim to the instrument described in section 28:3-306, and (vi) without notice that any party has a defense or claim in recoupment described in section 28:3-305(a).
