7 Proven Tips to Dispute Unauthorized Transactions and Limit Your Liability

Unauthorized transactions on your credit or debit card can happen quickly, but U.S. federal rules under the Consumer Financial Protection Bureau help limit your losses. Notify your bank within two business days to cap liability at $50, as outlined in CFPB §1005.6. Even if you miss that window, your risk tops out at $500. Card issuers must acknowledge disputes within 30 days and resolve them within 90 days, per guidance from Bankrate. For consumoteca.com.co readers with international cards issued in the U.S., these protections apply in 2026. This guide walks through the steps, timelines, and evidence needed to dispute charges effectively and protect your money.

Act Fast: Notify Within 2 Business Days to Cap Liability at $50

Speed is critical when you spot an unauthorized transaction. Under CFPB §1005.6, if you notify your financial institution within two business days after learning of the loss or theft of your access device, your liability is limited to the lesser of $50 or the amount of unauthorized transfers that occur before notice. This rule applies to both credit and debit cards.

Delays beyond this period increase your potential exposure, but acting promptly locks in the lowest cap. Call the number on the back of your card immediately--most banks offer 24/7 fraud lines. Follow up in writing to create a record. This initial step not only minimizes losses but also triggers the issuer's obligation to investigate. By notifying within this tight window, you leverage the strongest protection available under the regulation, ensuring any further unauthorized transfers after notice do not add to your responsibility.

Understand Your Maximum Liability if You Miss the 2-Day Window

If you notify your bank after the two-business-day period, CFPB §1005.6 still protects you, but the limit rises. Your liability shall not exceed the lesser of $500 or the sum of the unauthorized transfers before notice plus amounts from extended discovery periods.

This $500 cap covers scenarios where you learn of the issue later, such as through a statement review. The regulation defines these bounds clearly to encourage prompt reporting while providing a safety net. Assess your situation: if more than two business days have passed but you're within broader dispute windows, proceed anyway to avoid paying anything beyond these limits. Banks cannot hold you responsible for losses exceeding these amounts once properly notified. This structure balances consumer protection with the need for reasonable discovery periods, as specified in the CFPB rule.

Step-by-Step: How to Report and Dispute Unauthorized Charges

Follow this workflow to report and dispute unauthorized charges effectively:

1. Check your statement or alerts immediately: Look for unfamiliar transactions as soon as they post.
2. Contact your issuer right away: Call the fraud department using the number on your card (not from unverified sources). Provide the transaction details, date, amount, and merchant.
3. Send a written dispute: Within the allowed timeframe, submit a formal letter or online form with your account number, a description of the unauthorized charge, and why you believe it's fraudulent. Include any supporting evidence like alert screenshots.
4. Gather and submit evidence: Keep all receipts, transaction records, and communications. The FTC advises retaining these to help resolve inaccurate or unauthorized charges.
5. Monitor the investigation: Expect the issuer to conduct a reasonable review of your information, as required by law per Bankrate.

Issuers must provisionally credit your account during the process if applicable. Track everything in writing to build your case. This process ensures the issuer reviews all information you provide, fulfilling their legal duty for a reasonable investigation.

Key Timelines: Your Rights During the Dispute Process

Understanding timelines ensures you know when to act and follow up. You must report disputes within 120 days from the statement date showing the transaction. Issuers have 30 days to acknowledge receipt and up to 90 days to complete their investigation, according to Bankrate.

During this period, the bank cannot report the disputed amount as delinquent to credit bureaus. If they need more time, they must explain why in writing. Follow up if you don't hear back within these windows--your rights include a timely resolution. For 2026, these federal standards remain the benchmark for U.S. cardholders. Confirm the 120-day window with your issuer, given variations across card networks.

Choose Your Next Move: When to Dispute and What Evidence to Gather

Decide your approach based on timing and proof to minimize liability. If within two business days, prioritize an immediate phone notification for the $50 cap--then formalize in writing. Beyond that, aim for the 120-day window to secure the $500 protection.

Gather strong evidence: transaction details, notification timestamps, receipts, and any police reports for theft. Compare options--phone for speed versus written for records. If the charge is small, quick notification might resolve it fastest; larger amounts warrant detailed proof. The FTC stresses keeping records to support your claim. Always notify promptly to leverage the lowest liability tier. This evidence strengthens your position during the issuer's required reasonable investigation.

FAQ

How soon must I notify my bank of an unauthorized transaction?
Within two business days of learning about it to limit liability to $50 under CFPB §1005.6.

What’s the maximum I can be liable for if I report quickly?
$50, or the amount of unauthorized transfers before notice, whichever is less, per CFPB §1005.6.

How long does a card issuer have to investigate my dispute?
30 days to acknowledge and 90 days to complete the investigation, as noted by Bankrate.

Do I need receipts or records to win a dispute?
Yes, keeping receipts and transaction details helps fix unauthorized charges, according to the FTC.

What happens if I miss the 120-day window for disputing?
You may lose the right to dispute, as this is the timeframe for reporting from the statement date.

Does the bank have to review my evidence in an unauthorized charge dispute?
Yes, the law requires issuers to conduct a reasonable investigation and review all information you provide, per Bankrate.

Next, review your latest statements and set up transaction alerts. If facing a dispute now, call your issuer today and document everything.