7 Key Tips to Secure a Refund for Unauthorized Transactions in 2026

Unauthorized transactions on debit or credit cards demand quick action to safeguard your funds. US regulations require notifying your bank or card issuer right away--ideally within 10 business days of spotting the issue. You have up to 60 days from the date your statement showing the transaction is sent to report debit or electronic fund transfer (EFT) errors to your bank or credit union, per Consumer Financial Protection Bureau guidelines. For credit cards, dispute in writing within 60 days of the first statement with the error, according to the FTC.

Banks must investigate debit/EFT issues within 10 business days and resolve them within 45 days. Credit card issuers acknowledge disputes in 30 days and resolve within 90 days or two billing cycles. Lock your card immediately, submit a written dispute, and hold onto statements and receipts. These steps apply to US-regulated accounts and guide everyday consumers through fraud recovery via CFPB and FTC processes. Timelines differ by payment type--debit resolves faster than credit--but moving swiftly preserves your rights and limits liability. In 2026, these timelines offer general guidance for US-regulated accounts.

Here are 7 key tips based on CFPB and FTC guidelines:

1. Notify your bank or issuer immediately upon discovery to start the process within the optimal 10 business days.
2. Lock your card right away through your issuer's app or hotline to block further unauthorized use.
3. Check your statements regularly for the transaction and note the statement date to meet the 60-day notification deadline.
4. Gather all evidence including statements, receipts, and transaction details before submitting your dispute.
5. Submit a written dispute for credit cards within 60 days of the first statement showing the error, and do not pay the disputed amount.
6. Follow up on the investigation by tracking progress and providing any additional information requested by your bank or issuer.
7. Understand resolution timelines--expect 10 business days initial investigation for debit/EFT and up to 45-90 days full resolution depending on payment type.

Act Fast: Notification Deadlines You Can't Miss

Timely reporting protects your refund rights and shields you from liability for later losses. For unauthorized debit card or EFT transactions, notify your bank or credit union within 60 days after the statement showing the transaction is sent, per CFPB guidelines. Delaying past this point may make you responsible for the full amount of subsequent unauthorized transactions.

Credit card disputes follow a similar 60-day window from the first statement listing the error, according to FTC rules. Prompt action stays essential. Sources recommend reporting within 10 business days of the transaction date for the best shot at quick resolution. Missing these deadlines can mean permanent loss of funds, as banks and issuers stick closely to these limits under CFPB and FTC rules. These US-focused timelines differ by payment type, with debit and credit processes varying in resolution speed.

Step-by-Step Guide to Reporting and Disputing

Follow this workflow to report unauthorized transactions effectively under CFPB and FTC guidelines:

1. Notify immediately: Contact your bank or card issuer as soon as you spot the unauthorized transaction. For debit or EFT, your bank has 10 business days to investigate, per Consumer Financial Protection Bureau.
2. Lock your card: Temporarily lock the card through your issuer's app or hotline to prevent further use.
3. Gather evidence: Keep all statements, receipts, and transaction details as required for your dispute.
4. Submit a written dispute: For credit cards, send a written notice within 60 days of the statement date, according to the FTC. Do not pay the disputed amount during investigation.
5. Follow up: Track the process and provide any requested information to ensure resolution within regulatory timelines.

Consumers must report within deadlines, lock cards, and submit written disputes while retaining records. Financial institutions handle the investigation per regulatory timelines. This process applies to US-regulated debit, credit, and EFT accounts.

What to Expect from Your Bank or Card Issuer

Banks and card issuers follow defined timelines for handling disputes. For debit or EFT unauthorized transactions, expect an initial investigation within 10 business days, with full resolution in 45 days--though this can extend for foreign transactions, new accounts within 30 days of opening, or point-of-sale debit purchases--per CFPB guidelines.

Credit card issuers must acknowledge written disputes in 30 days unless resolved sooner, then complete resolution within two billing cycles, not exceeding 90 days, according to FTC rules. Do not pay disputed amounts during this period. Resolution timelines vary by payment type, with debit processes often faster than credit under CFPB and FTC oversight. Institutions investigate, acknowledge, and resolve according to these standards for US-regulated accounts.

Debit vs. Credit Card: Which Gives You Better Refund Odds?

Debit and credit cards offer strong protections, but differences in timelines and processes shape your approach. Both require notification within 60 days of the statement, with 10 business days optimal for reporting. Debit resolutions cap at 45 days via CFPB rules, while credit extends to 90 days under FTC guidelines. These metrics guide consumers on the best path based on account type for US-regulated accounts.

FAQ

How soon must I notify my bank of an unauthorized debit transaction?
Notify within 60 days after the statement showing the transaction is sent, per Consumer Financial Protection Bureau guidelines. Aim for 10 business days for optimal handling.

What's the deadline to dispute an unauthorized credit card charge?
Dispute in writing within 60 days of the first statement with the error, according to FTC rules. This can extend in some cases.

How long does a bank have to investigate an unauthorized EFT?
Banks have 10 business days for initial investigation and 45 days for resolution, as outlined by the Consumer Financial Protection Bureau.

Can I extend the 60-day dispute window for credit cards?
Yes, issuers may extend for situations like delayed shipments, per FTC guidance.

What happens if I miss the 60-day notification deadline?
You may lose protection and become liable for the full amount of unauthorized transactions, per CFPB guidelines.

Should I lock my card before reporting fraud?
Yes, lock it immediately through your issuer to stop further activity, then report.

Next, review your latest statements for suspicious activity and set up transaction alerts with your bank. Contact your issuer today if you spot an issue to start the process within deadlines.